Compounding Pharmacy Compliance: What to Verify Before You Prescribe

Every compounding pharmacy describes itself as high quality. The useful question is not what they claim but what you can independently confirm — and most of it is confirmable in under twenty minutes using public databases.

This is the verification workflow. For what the underlying standards actually mean, see our quality and compliance reference; this page is about checking a specific pharmacy.

Step 1 — Confirm Licensure Yourself

The Pharmacy's Home-State License

Every state board of pharmacy publishes a license lookup. Search the pharmacy's name, confirm the license is active and unrestricted, and note any disciplinary history — boards typically publish actions against a license alongside it.

Non-Resident Licensure for Your Patients' States

This is the one practices miss. A pharmacy must hold a non-resident pharmacy license in every state it ships into. A pharmacy licensed in Florida cannot lawfully ship to your patient in Ohio without Ohio non-resident licensure.

Check your own state's board lookup for the pharmacy's name, not just the pharmacy's home state. If you practice across state lines or use telehealth, check each one.

Step 2 — Search the FDA's Public Records

Three searches, all free:

• Warning letters. The FDA publishes these in a searchable database. Search the pharmacy name. A warning letter to a compounder typically concerns sterility failures, insanitary conditions, or inadequate testing — all directly relevant to what you are about to prescribe.
• Form 483 observations. Issued at the close of an inspection, these list what the investigator observed. They are less severe than a warning letter but informative.
• Recalls. Compounded product recalls are published and are the clearest signal of a quality failure that reached patients.

A clean record is not proof of quality — many pharmacies are simply not inspected often. A poor record is close to disqualifying.

Step 3 — Request a Certificate of Analysis

Ask for a COA on a lot of something you would actually prescribe. What it should contain:

The two things that matter most: whether an independent laboratory is named, and whether endotoxin testing appears for injectables. Sterility alone is not sufficient — endotoxins are pyrogenic and survive sterilisation.

Step 4 — Ask the Questions With Wrong Answers

The value here is less in the right answer than in how the question is handled.

That last one is worth dwelling on. An unusually long beyond-use date is a quiet red flag — compounded preparations lack the stability testing behind commercial products, and a pharmacy assigning generous dating without data is making an assumption your patient absorbs.

Step 5 — Watch for the Structural Red Flags

• No prescription required. A supplier that will ship without one is not operating as a pharmacy.
• "Research use only" or "not for human consumption" labelling. That language is what permits the sale outside the drug framework. It is not a formality.
• Pricing far below the market. Testing, clean rooms, and cold chain cost money. A large discount usually means one of them was skipped.
• No pharmacist access. You should be able to speak to a pharmacist about a preparation.
• Marketing compounds with no lawful pathway. A pharmacy advertising a compound that is neither on the bulks list, nor a component of an approved drug, nor covered by a USP monograph is telling you how it operates.

The Twenty-Minute Version

If you only do four things: look up the license in your patient's state, search the FDA warning letter database, request a COA and check it names an outside laboratory, and ask what their beyond-use dating is based on.

Those four catch most of what matters.

Frequently Asked Questions

How do I verify a compounding pharmacy's license?

Use your state board of pharmacy's public license lookup — and check your patient's state, not just the pharmacy's home state. Shipping across state lines requires non-resident licensure in the destination state.

Where can I check FDA warning letters?

The FDA publishes warning letters, Form 483 inspection observations, and recalls in free public databases, all searchable by company name.

What should a certificate of analysis include?

Product and lot number, identity, potency against label claim, purity, and for injectables both sterility and bacterial endotoxin results — with the testing laboratory named and a test date matching the lot.

Is in-house testing acceptable?

Internal quality control is normal, but independent third-party verification is the stronger signal. A pharmacy that only tests internally is grading its own work.

What does an unusually long beyond-use date indicate?

Compounded preparations lack the stability testing behind commercial products, so dating should be based on stability data or USP defaults. Generous dating without a stated basis is a quiet red flag.

What is the single fastest check?

Look up the pharmacy's license in your patient's state. It takes a minute, it is a hard legal requirement, and gaps are more common than practices expect.