Prescriber credentialing: what pharmacies verify

What is a pharmacy actually verifying?

That it is allowed to sell to you — a question about the supplier's licence, not about your credibility.

This reframing matters because it predicts what will be asked for and what will not. Several states place the duty squarely on the supplier. Arizona requires a nonresident outsourcing facility to "maintain a copy of the current permit or license of each person in Arizona that buys, receives, or disposes of" the drug, and the parallel nonresident-pharmacy rule requires that copy to be producible within two business days. Louisiana binds distributors to "sell or distribute legend drugs or legend devices only to a person who is authorized, by law or regulation, to procure or possess legend drugs or legend devices."

Arizona also enumerates who may lawfully receive: a permitted pharmacy, drug manufacturer or full-service wholesaler, "or a medical practitioner currently licensed under A.R.S. Title 32." The verification exists to place you inside that list.

Which credential decides it?

The licence issued by the state where the product will be received.

That is the document the rules name. It is also the reason credentialing is a per-state question rather than a per-person one: your authority is granted by a state, and it is the destination state's grant that the supplier's own regulator will ask about.

Notice too what the rules key on. North Carolina authorises supply to "practitioners authorized by law to prescribe drugs." Ohio's carve-out refers to "a licensed health professional authorized to prescribe drugs." Neither names a profession or a title — both name an authority. Whether your licence carries that authority for the preparation in question is decided by your own practice act, which these compounding rules do not purport to settle.

Does your NPI decide anything here?

Not in anything we read, and this is worth stating plainly because the query assumes otherwise.

Across the states whose rules we have read in full, we found no provision making the National Provider Identifier the credential a supplier must verify or retain before supplying a prescriber. The identifier the rules name is the state licence or permit. Florida goes further and specifies where it appears: a health care clinic establishment must designate a qualifying practitioner responsible for purchase, recordkeeping, storage and handling, "whose name and licence number appear on all distribution documents."

A supplier may still ask for an NPI, and there are ordinary administrative reasons to. What the scoped finding tells you is where to look when an account is held up: it will be the state credential, not the NPI, that the file is waiting on.

When does your DEA registration come into it?

When the preparation is a controlled substance, and not otherwise.

The distinction is cleaner than it is usually made to sound. A DEA registration is a controlled-substance authority; a compounded preparation that is not a controlled substance does not engage it. Where controlled substances are involved, the federal registration is generally the operative credential and several states have consciously stopped duplicating it.

The most useful piece of information here is a repeal. Colorado once imposed an office-use-specific duty on the supplier to verify each practitioner's licence and DEA registration; that duty was deleted with former Rule 21.00.20(g), effective 30 November 2021. It was the only express verify-the-DEA-number duty in the states we read, and it is no longer in force.

Does your state add its own controlled-substance registration?

Among the states we read, several have removed theirs — and stale guidance has not caught up.

Texas is the clearest case. Health and Safety Code § 481.061 is now captioned "FEDERAL REGISTRATION REQUIRED," and the subsections creating the separate state registration were repealed effective 1 September 2016. DEA registration alone is the regime, yet content still circulates telling Texas clinics to obtain a state number. Florida bakes the DEA number into its statutory definition of "practitioner." In California and Arizona we found no separate practitioner controlled-substance licence, though both attach a monitoring-programme duty: California mandates enrolment in its prescription drug monitoring programme on receipt of the DEA registration, and Arizona requires programme registration of every DEA-registered practitioner.

Louisiana and New Jersey run the other way, and are covered next, because their requirement is per location rather than per person.

Is the credential per prescriber or per site?

Per site in several states, and this is where multi-location practices are caught out.

Louisiana provides that a practitioner's controlled-substance licence "shall be valid in any location in Louisiana; however, the procurement and possession of controlled substances shall require a separate CDS license for each such location where controlled substances are possessed." New Jersey's registration exemption for a prescriber's office applies only where no controlled substances are "administered, delivered, or otherwise dispensed" and none are "contained in such office" — an exemption that ends the moment stock is on the premises. Texas requires a wholesale distribution licence "for each place of business."

The pattern is that authority to prescribe travels with the person and authority to hold attaches to the address. A supplier verifying you for stock supply is verifying the second thing, which is why the site on the application has to be the site the product is going to.

What does a supplier verify about the practice itself?

Whether the entity receiving the product needs its own credential, separate from any prescriber's.

Florida requires a health care clinic establishment permit where a business entity at one general physical location purchases prescription drugs, with an express carve-out: the requirement "does not apply to the purchase of a prescription drug by a licensed practitioner under his or her license." Ohio's guidance treats a prescriber practice holding dangerous drugs as needing a terminal distributor licence, while naming possession of compounded preparations supplied by an Ohio-licensed outsourcing facility as a lower-risk activity that does not itself trigger licensure — with the caveat, in the Board's own words, that "preparation of such medications in advance of administration requires licensure."

Whether the answer for your state is "the prescriber's licence is enough" or "the entity needs its own permit" is one of the sharpest differences between the states we have read.

Does verification stop once the account is open?

No — the rules that require a copy require a current copy.

Arizona's requirement is for the current permit or licence, producible on short notice, which makes it an ongoing obligation rather than a one-time collection. Florida requires notification within ten days when the qualifying practitioner is hired or changed, and provides that an establishment cannot purchase drugs while non-compliant. Texas's office-use audit trail must be queryable by practitioner, among other fields, which presupposes the practitioner record is maintained rather than captured once.

Practically, that means a licence renewal, a change of qualifying practitioner or a new location is a supplier notification, not just an internal update. The supplier's file has to stay true, and its regulator is the one who will find out if it does not.

What about incentives and the relationship itself?

At least one state polices the commercial relationship directly, and it is worth knowing before anyone proposes anything.

Arizona provides that its board "shall deny or revoke a pharmacy permit if a medical practitioner receives compensation, either directly or indirectly, from a pharmacy as a result of the practitioner's prescription orders." The sanction falls on the pharmacy's permit, but the arrangement is bilateral, and a proposal of that shape is a signal about the supplier making it.

Where does this sit in the rest of the process?

If you want the enumerated list of what is typically requested, it is at what documents a compounding pharmacy needs from your clinic. The sequence these checks sit inside is at opening an account with a compounding pharmacy, and the wider workflow at how clinics order compounded medications. Whether your state permits the transaction you are being credentialed for is a separate question, answered with rule text at office-use compounding by state.

To have your licences, your sites and your intended pathway checked before you commit to a supplier, you can apply for an account.