How to vet a compounding pharmacy: the checks a prescriber can run

What can you verify yourself, and what do you have to ask for?

Diligence splits cleanly in two, and most published checklists blur the halves. One set of facts sits in public records you can read today without the supplier's cooperation or permission. The other set exists only inside the pharmacy, and reaches you because someone chose to send it.

Start with the half a supplier cannot control. It is free, it is fast, and a mismatch there tells you something no sales call will.

One asymmetry governs the whole exercise. FDA publishes a register of facilities that have registered under section 503B, and maintains no comparable public list for state-licensed compounding pharmacies. Diligence on a 503A therefore runs through the state board and the accreditor, because there is no federal shortcut to take instead.

Step 1: Is the facility on FDA's own register?

FDA publishes a table of the facilities that have registered under section 503B, rebuilt weekly against a data-lock date. Check it on the day you are deciding, rather than trusting a screenshot, a badge, or a supplier's PDF — a registration that lapses does so quietly.

Read the whole row, not the name. Alongside the registration dates, the table carries a Last Inspection column, a Form 483 Issued? column, a Recall Conducted? column and an Action Based on Last Inspection column, all published by FDA for a prescriber to consult directly, along with whether the facility intends to compound sterile drugs from bulk substances.

Then note what the register does not settle. Section 353b is an exemption from specified federal requirements: it preempts no state licensing scheme, and it regulates the facility rather than the facility's customer. A facility on this table has cleared the federal half of the question and nothing else, which is step 2.

Reading the table row by row has its own traps — what each column does and does not establish, and why an empty inspection column is not the good news it looks like. That is set out at how to read FDA's registered-outsourcing-facilities list.

Step 2: Which agency licenses that facility in your state?

This is the step the vertical skips, and the one that changes answers. In every state whose receiving side we have read from primary sources, an outsourcing facility must also hold that state's own credential before it may ship compounded office stock in. Federal registration on its own is never the whole credential; a facility that satisfies section 353b in full and holds nothing in your state is federally clean and state-exposed.

Where you look decides what you find. In North Carolina, Texas and Louisiana the credential does not come from the board of pharmacy at all, so a prescriber who searches the board's register finds nothing and concludes, wrongly, that nothing was required.

Ask for the licence number, the issuing agency, and the expiry — then verify it with that agency rather than with the supplier. The full procedure, including what to do when a portal returns nothing and why the name on the licence so often differs from the name on the invoice, is at how to verify a compounding pharmacy's state licence. Each state's rule text and citations are set out in the state-by-state office-use guide. What this credential is, and why it substitutes neither for a federal registration nor for accreditation, is defined at non-resident pharmacy licence.

Step 3: What does the published enforcement record show?

FDA publishes compounding-specific inspections, recalls and other actions on one page, and warning letters in a searchable database. Search both, and search the legal entity as well as the trading name: enforcement correspondence is addressed to the corporate entity, which is often not the brand on the invoice.

Read the document rather than the count. A warning letter states the observations FDA made and the response it found inadequate, and that detail is the useful part — a bare number tells you nothing about whether the finding touches the preparation you are buying.

Two limits belong on this step. Absence of a record is not evidence of a clean history; it is evidence of what FDA has published. And a state-licensed pharmacy is inspected by its state board, whose reports are a public-records question that differs from state to state — availability is not something any supplier page, including this one, should promise you.

What the published letters actually contain, and the single finding that runs through nearly all of them, is at what FDA's compounding warning letters actually say.

Step 4: Which chapter, in which version, adopted by whom?

USP writes the compounding chapters. It does not enforce them, inspect anyone, or certify anyone. A chapter becomes binding on a pharmacy when some other body adopts it: a state board of pharmacy by rule, in a named and dated version, or a private accreditor by contract.

So a supplier that says only "compliant with USP," naming no chapter and no state, has described nothing you can check. The checkable version of that sentence names both — meets USP <797> as adopted by my state board, in the version dated [date]. What each chapter covers is set out in the glossary: <795> for non-sterile preparations, <797> for sterile preparations and beyond-use dating, and <800> for the handling of hazardous drugs, which protects personnel and the environment rather than the quality of the preparation.

Why does the version date decide the answer?

Adoption is staggered, and enforcement lags adoption. Ohio's Board has delayed enforcement of its USP chapter rule until February 28, 2027, and its guidance is explicit about the consequence: "Only licensees that have fully adopted the newest versions may utilize the new beyond-use dates in USP 797 & USP 795." Two suppliers answering to different boards can therefore both be fully compliant while working to different editions of the same chapter.

That gives you a question with a right answer: which version are you dating to, and — if your state is running a transition — can you demonstrate full compliance with the version whose dating you are using?

Step 5: Does the accreditation cover what you are actually buying?

Accreditation is per-scope, not global. PCAB is operated by ACHC, and its non-sterile accreditation references <795>, its sterile accreditation references <797>, and the hazardous-drug standards incorporate <800>. "PCAB accredited," with no scope named, therefore names nothing: a pharmacy can hold one and not the others, and the one it holds may not be the one covering your preparation. Ask which, not whether, and ask to see the certificate's own dates.

Accreditation is also not a substitute for licensure, and the accreditor says so in its own words: shipping across state lines may require a licence in the receiving state that depends on a nonresident inspection, and "This is not the same as accreditation." So it is checked as well as step 2, never instead of it.

One more phrase to retire on sight. There is no such thing as a USP-certified compounding pharmacy, because USP does not certify compounders. "USP Verified" is a real programme, and it covers dietary supplements, dietary ingredients, APIs and excipients — manufacturers, not compounders.

What each scope references, what the accreditor publishes about its own standards, and the three things we could not establish about it are at PCAB accreditation.

Step 6: What should the per-batch paperwork show?

Ask about a preparation and a shipment, not about the pharmacy in general: the lot number, the assigned beyond-use date, and the compounding record behind them.

Those records exist because rules impose them — Illinois requires office-use records for five years including the lot number and the beyond-use date, North Carolina requires records retrievable within three years, and several states require the beyond-use date on the container label itself. Be careful about whose duty is whose, though: those obligations run to the pharmacy, not to you. A request for the underlying record is a commercial courtesy, and a supplier who declines is not thereby breaking a rule. The same applies to a certificate of analysis for a lot: many pharmacies will provide one, and no rule we have read compels them to hand it to a prescriber.

Each of those documents — what it is, which rule makes the pharmacy keep it, and what to ask for by name — is set out at what per-batch documentation to ask for.

Is a beyond-use date the same as an expiration date?

No, and the difference is the kind of evidence behind it. Ohio's rule defines the beyond-use date as the point after which a compounded preparation "must not be used or administration must not begin." A preparation from a state-licensed pharmacy carries a beyond-use date assigned under the USP chapter that state adopted. A product from a facility registered under section 503B is made under current good manufacturing practice, where 21 C.F.R. § 211.137 ties the date to stability testing. That is a difference in the kind of evidence, not a claim that either one lasts longer. The term itself, and the rule text that defines it, is at beyond-use date.

Which answers are honest, and which cannot be checked?

The test is not whether an answer sounds confident. It is whether you could disprove it without the supplier's help.

The last row is the one that generalises. A supplier who answers a legal question with a summary rather than a citation has produced something you cannot check, which is usually the reason the summary exists.

What should end the conversation?

Some signals are worth treating as disqualifying rather than as a topic for negotiation.

A supplier who takes an office-stock order without verifying your credentials. Several state rules put that duty on the supplier by name — a non-resident pharmacy in Arizona must hold a copy of each purchaser's current licence, and Texas conditions office-use distribution on a written agreement with the practitioner. A supplier who never asks for your NPI or your state licence is skipping a step someone imposed on them, and it is worth wondering what else is skipped.

"Research use only" labelling anywhere near a prescription product. That framing belongs to the research-chemical market and cannot coexist with supply against a valid prescription; a site that carries both is describing two incompatible businesses, and you cannot tell from the outside which one filled your order.

An office-stock offer that never mentions a destination-state credential. Read it as a page written before anyone checked step 2. The safe construction is registration with FDA as an outsourcing facility under section 503B plus the destination state's own credential, and a supplier confident about both usually says both.

A trust badge reading "FDA-approved pharmacy," "FDA-registered pharmacy," or any variant. It is wrong in both directions: FDA does not approve, license or register pharmacies — states license them — and FDA registration is the outsourcing-facility election under section 503B. The accurate phrasing names the section and the entity type, and a supplier who cannot phrase it accurately has told you how carefully the rest of the site was written.

A citation to a rule that no longer exists. Two are circulating widely: California's compounding regulation repealed on 1 October 2025, whose section number now governs personnel training, and Florida's office-use label legend, repealed on 9 April 2025. A supplier quoting either is quoting a rule that was law when their page was written and is not law now.

Questions to ask, verbatim

Copy these into an email. Each one has an answer that is either checkable or evasive, and there is not much in between.

1. "Are you a pharmacy licensed by a state board of pharmacy, or a facility registered with FDA as an outsourcing facility under section 503B?"
2. "Which credential do you hold in my state, which agency issued it, and what is the licence or registration number?"
3. "For this preparation, is it compounded against a patient-specific prescription, or supplied as non-patient-specific office stock?"
4. "Which USP chapter governs this preparation, which version of it are you working to, and which state's adoption makes that version binding on you?"
5. "If your state is running a transition period, can you demonstrate full compliance with the newer version whose beyond-use dating you are using?"
6. "Which accreditations do you hold, what scope does each cover, and what are the dates on the certificate?"
7. "What will the container label show for lot number and beyond-use date, and can you send me a specimen label before I place an order?"
8. "Will you provide a certificate of analysis for the lot I receive, and what does it report?"
9. "What was your most recent inspection, who conducted it, and what was the outcome?"
10. "What will you verify about my practice before my first shipment, and what documents will you ask me to send?"

Question 10 is the one that inverts the exercise, and it is worth asking first. A supplier with a real credentialing process will describe it without being pressed. What that process usually asks for is set out in how to place an office-use order; why the answer differs by pathway is in 503A vs 503B.

Where does USPeptideRx fit in this?

We are a procurement layer, not a pharmacy. USPeptideRx verifies a clinic's credentials once, then routes orders to licensed compounding pharmacies and to facilities registered with FDA as outsourcing facilities under section 503B, according to which pathway the preparation and the clinic's state actually allow. The checks on this page are the ones we run before a supplier joins that routing — which is why the page names none of them, ranks none of them, and describes the method instead.

If you would rather have that mapping done once than repeat it per supplier, you can apply for an account.