Vetting a compounding pharmacy partner means checking four things before you sign anything: state board licensure, FDA registration status (503A vs 503B), sterile compounding accreditation under USP standards, and a documented recall history. Skip any one of these and your medical director inherits liability for a supply chain they never reviewed.
- Vet compounding pharmacy medical director oversight starts with 503A/503B status, USP 797 sterile compliance, and state board standing.
- 503A pharmacies compound for individual patients; 503B outsourcing facilities compound in bulk under stricter FDA oversight.
- A compounding pharmacy’s recall history and Certificate of Analysis on file matter more than its marketing claims.
- Medical directors who never reviewed the compounding source carry the same liability as those who did, but with less defense.
Why this matters
Medspas sourcing compounded tirzepatide, semaglutide, hormone pellets, or peptide blends have leaned harder on compounding pharmacies since 2023, and that trend hasn't slowed heading into 2026. The FDA has issued warning letters to compounders operating outside 503A/503B rules, and state boards increasingly ask medical directors to show proof of due diligence on the pharmacy relationship, not just the injector's training.
A medical director who signs off on a protocol without vetting the compounding source is signing off blind. If a patient has an adverse reaction traced to contamination or mislabeled potency, the first question a state board asks is who verified the pharmacy. "Our supplier said they were licensed" is not an answer that holds up in a hearing.
This is part of what proper medical director services for medspas should cover in 2026: not just good faith exams and chart sign-off, but oversight of where the product actually comes from.
How to vet a compounding pharmacy partner for your medical director program
Run through these steps before any compounding pharmacy touches your medspa's supply chain in 2026:
- Confirm state board licensure in every state you operate. A pharmacy licensed in Texas isn't automatically licensed to ship into Georgia or Ohio. Check the destination state's board, not just the pharmacy's home state.
- Determine 503A vs 503B status. 503A pharmacies compound for a specific patient with a valid prescription; 503B outsourcing facilities compound in bulk without patient-specific prescriptions and register directly with the FDA. Your use case dictates which one you legally need.
- Request the pharmacy's most recent FDA inspection report or Form 483 observations. A clean or resolved 483 history tells you more than any sales pitch.
- Verify USP 795, 797, and 800 compliance for non-sterile, sterile, and hazardous drug compounding respectively. Ask for the accreditation certificate, not a verbal assurance.
- Pull the pharmacy's recall history through the FDA's public recall database going back at least 24 months.
- Get a sample Certificate of Analysis for the specific compound you plan to use, showing potency, sterility, and endotoxin testing results.
- Confirm the pharmacy carries product liability insurance and get the carrier name and coverage limits in writing.
- Loop your medical director into the final review before the first order ships, not after.
| Factor | 503A Pharmacy | 503B Outsourcing Facility |
|---|---|---|
| Prescription requirement | Patient-specific | Not required |
| FDA registration | State board licensed, not FDA-registered | FDA-registered facility |
| Bulk ordering | Limited | Designed for bulk |
| Typical use case | Individualized dosing (hormone pellets, custom blends) | High-volume GLP-1 programs, multi-location groups |
| CGMP compliance | Not mandated | Mandated |
Verdict: for multi-location medspas running volume GLP-1 programs, a 503B outsourcing facility with FDA registration and CGMP compliance is the safer 2026 choice. 503A works for lower-volume, patient-specific compounds like hormone pellets.
503A pharmacies: best for individualized, low-volume compounding
503A pharmacies fill prescriptions tied to a named patient and a specific prescriber. They're the right fit for hormone pellet insertion, custom compounds, or niche peptide blends where volume is low and formulations vary patient to patient. They are not FDA-registered facilities, which means the compliance burden sits more heavily on state board licensure checks you perform yourself. Best for: solo and small medspas with individualized protocols. Skip if you're running standardized bulk injectable programs.
503B outsourcing facilities: best for scaled GLP-1 and injectable programs
503B facilities register with the FDA, follow Current Good Manufacturing Practice rules, and can ship without patient-specific prescriptions. If your medspa or group runs a standardized tirzepatide or semaglutide protocol across multiple locations, a 503B source narrows the documentation gap between what's ordered and what's dispensed. Best for: multi-location groups and franchise medspas. Skip if you need one-off custom compounds, because 503B facilities aren't built for that.
Why compounding pharmacy vetting requirements vary
Not every medspa needs the same depth of vetting. The factors that actually change the checklist:
- Compound type. Sterile injectables such as GLP-1s and B12 demand USP 797 proof; non-sterile topicals need less scrutiny.
- Order volume. A single-location medspa ordering monthly has different risk exposure than a rollup ordering weekly across a dozen sites.
- State board posture. Some state boards have issued specific guidance on compounded GLP-1 sourcing since 2023; others haven't addressed it directly.
- Multi-state operations. A pharmacy licensed to ship into one state may not be licensed for the state where your patient actually receives the injection.
- Product category risk. Hormone pellets and peptide therapy carry different liability profiles than filler dissolving agents, which changes how deep the review needs to go.
- Existing chart review workflow. Practices with chart review for tirzepatide clinics already built in can fold pharmacy documentation into that same audit trail instead of running a separate process.
“If your medical director can’t name your compounding pharmacy’s FDA registration status from memory, the oversight is on paper only.”
Get oversight that covers your supply chain
Medical director support, chart review, and good faith exams for aesthetic practices.
Is compounding pharmacy vetting legally required?
Vetting isn't spelled out as a standalone statute in most states, but medical director oversight duties, which most states do require for aesthetic practices dispensing prescription compounds, implicitly cover the supply chain. A medical director who never reviewed the pharmacy source has a weaker defense if a state board investigates an adverse event in 2026.
Who is liable if a compounded drug causes patient harm?
Liability typically spreads across the pharmacy, the prescribing provider, and the medical director, depending on what documentation exists showing due diligence was performed before the product reached the patient. A medical director who verified the collaborating physician's license but skipped the pharmacy review still carries exposure. The two checks aren't interchangeable.
How often should a compounding pharmacy be re-vetted?
Annual re-verification is the minimum standard for 2026. Recall status, FDA inspection history, and insurance coverage can all change within a 12-month window without any notice from the pharmacy itself. Put the renewal date on the same calendar you use for agreement renewals so it never slips.
One last thing
Most medspas vet the injector's certification and skip the pharmacy entirely. It's the single biggest blind spot in aesthetic compliance programs right now. The FDA's public warning letter and recall databases update regularly, and a five-minute search on your current compounding partner before renewing any contract in 2026 costs nothing and can save a license.
FAQ
How do I vet a compounding pharmacy for my medical director program?
Vet compounding pharmacy medical director partnerships by confirming state board licensure in every state you ship to, 503A or 503B FDA status, USP 797 sterile accreditation, recall history, and a Certificate of Analysis. Loop your medical director in before the first order ships.
What is the difference between a 503A and 503B compounding pharmacy?
A 503A pharmacy compounds for a named patient under a specific prescription and is not an FDA-registered facility. A 503B outsourcing facility registers with the FDA, follows CGMP rules, and can compound in bulk without patient-specific prescriptions.
Does my medical director need to approve my compounding pharmacy?
Yes. Medical director oversight duties generally extend to the supply chain behind any compounded product dispensed under their license, even though few states spell this out as a standalone rule.
How do I check a compounding pharmacy’s FDA status?
Search the FDA’s public list of registered 503B outsourcing facilities, then verify the pharmacy’s state board license number directly with the issuing state board. Do both, since one does not substitute for the other.
What is USP 797 and why does it matter for compounding pharmacies?
USP 797 is the sterile compounding standard covering contamination control for injectable drugs. Any pharmacy shipping sterile injectables such as GLP-1s or B12 should have current USP 797 accreditation on file.
How often should I re-check my compounding pharmacy’s credentials?
Re-verify licensure, FDA status, insurance, and recall history at least annually in 2026. Pharmacy status can change without the pharmacy notifying its clients.
Can a medical director be held liable for a bad batch from a compounding pharmacy?
Yes, particularly when there is no documented record of due diligence on the pharmacy before the product was used on patients. Liability generally spreads across the pharmacy, the prescriber, and the medical director based on what each party verified in advance.
Should medspas use a 503A or 503B pharmacy for tirzepatide?
Multi-location medspas running standardized tirzepatide protocols generally do better with a 503B outsourcing facility because of its FDA registration and CGMP compliance. Solo practices with individualized dosing often stay with a 503A pharmacy.
Related guides
- How to set up standing orders for weight loss injectable programs
- How to vet a collaborating physician staffing agency before signing
- How to prepare a compliance checklist before launching a medspa
