Skip to content
GLP Loss
← Research
Formats

How to Vet the Pharmacy Behind a Compounded GLP-1

The brand taking your order is usually not the one making the drug. Federal law splits compounders into two categories with different regulators, different rulebooks and different public records.

Hana Brennan9 min read
Two legal categories, one word503A compounding pharmacy503B outsourcing facilityLicensed by a state boardRegisters with the FDAPatient-specific prescriptionMay also supply office stockExempt from CGMP rulesSubject to CGMP rulesState board inspectsFDA inspects on a scheduleNo federal public directoryListed in a public tableRegistration not requiredRegistration is voluntaryNeither category means an agency reviewed the product before sale.Being on the federal list is a registration, never an endorsement.

Whoever takes the order is rarely whoever fills the vial. A telehealth brand runs the intake, the prescribing and the billing; a pharmacy somewhere else does the chemistry. Which pharmacy that is decides the things a buyer will never be able to inspect, and it is a separate question from what ends up in the container. Federal law sorts those pharmacies into two categories with markedly different oversight, and knowing which one you are buying from is the piece of homework worth doing first.

Federal law recognizes two kinds of compounder

The split dates from a disaster. Contaminated drugs prepared by a Massachusetts pharmacy in 2012 caused more than 750 infections and more than 60 deaths across 20 states, and Congress responded with the Drug Quality and Security Act, enacted on November 27, 2013.[1]That statute is why the category question exists at all.

Section 503A of the Federal Food, Drug, and Cosmetic Act sets out the conditions under which a compounded preparation is exempt from three things at once: premarket approval, current good manufacturing practice requirements, and labeling with adequate directions for use. One of those conditions is that the drug be compounded against a valid patient-specific prescription.[1]

The same act created section 503B, a voluntary category known as outsourcing facilities. Unlike compounders operating under 503A, they are subject to those manufacturing requirements, and they may ship either against a patient-specific prescription or against an order that names no individual patient at all, such as hospital office stock.[1]Both routes are lawful. They are simply not the same undertaking.

What inspected means on each side

Day-to-day oversight of a state-licensed pharmacy that has not registered as an outsourcing facility sits mainly with its state board of pharmacy, with the FDA conducting surveillance and for-cause visits.[2]A registered outsourcing facility is overseen primarily by the FDA and inspected on a risk-based schedule, and it also has to report adverse events and tell the agency what it compounds.[1]

The agency puts the standards question plainly: quality standards differ depending on where compounding occurs, and drugs compounded in outsourcing facilities are subject to manufacturing requirements that drugs compounded under 503A conditions are not.[2] None of that establishes that one category produces a better vial than the other on any given day. It establishes who turns up, how often, and against which rulebook.

Registration is not approval

The FDA publishes a weekly table of facilities that have registered under 503B, and the columns are the useful part. Each row shows the date of the last inspection, whether a Form 483 was issued, whether a recall was conducted, and what action followed. Some rows say nothing has happened yet: at the update published on September 8, 2026, the table listed 95 facilities, and 40 of those carried the entry “Not yet inspected.”[3]

Appearing on that list means a facility filed complete registration information, which is a fact about paperwork rather than a judgment about product. And it changes nothing about the underlying status described in the article on approval: compounded drugs are not FDA-approved, and the agency does not verify their safety, effectiveness or quality before they are marketed.[2] A seller citing a 503B relationship has told you something real and something narrow.

What a certification seal actually certifies

Many sites in this category display a LegitScript badge. That program asks whether a merchant is adequately licensed for the services it offers in the jurisdictions it serves, and whether it has disclosed prior criminal, regulatory or civil violations. It also covers whether affiliates and partner pharmacies operate legally, whether prescriptions are valid, and whether marketing claims are accurate rather than misleading.[4] That is a serious list.

Two limits are worth holding onto. A badge on a page is an image file, and an image proves only that somebody pasted it; the certifier runs a public status lookup, and a name either appears there or it does not. Second, certifying the merchant is a different act from certifying the pharmacy behind it, so a certified storefront still leaves the supplier question open.

Most sellers never name the pharmacy

This is the disclosure gap that matters, and the agency has named it directly. Consumers buying compounded drugs through online pharmacies and telehealth platforms may not know the identity of the compounder that produced the drug. That includes whether the compounder meets appropriate quality standards, and whether it is appropriately licensed and regulated.[2]

That description fits this market closely. Of the sellers whose published pricing sits behind the semaglutide board and the tirzepatide board, a small minority say anything about who prepares the medication on the pages where they publish a price. A few name a specific pharmacy. A few more state a category, 503A or 503B, without a name attached. The rest say nothing at all, which is not evidence of a poor pharmacy — it is the absence of the one fact that would let anyone check. What each company does publish is recorded in the individual seller write-ups.

Why the missing name travels further than you think

A study of a nationwide primary-care records database looked at 153,044 patients with documented semaglutide or tirzepatide use between 2021 and 2024. Compounded formulations appeared in the notes for 8.2% of them, against survey estimates that roughly 23% of people taking these drugs obtained them from compounders.[5] The authors read the gap as a sign that many patients are getting these medications outside coordinated care.

A prescriber reviewing a chart cannot weigh a product that is not in it, and cannot look up a pharmacy that has no name. Getting the supplier in writing is not only consumer diligence; it is the thing that makes the purchase legible to everyone else involved in the care.

Six questions, and what a non-answer means

Which pharmacy prepares the medication, by name? Is it a state-licensed pharmacy operating under 503A, or a facility registered with the FDA under 503B? If it is registered, what does its row in the federal table show for its last inspection? If it is state-licensed, which board issues the license, and is that license current and unrestricted?

Two more finish the set. Does the seller’s own certification appear in the certifier’s public lookup rather than only as a badge on the checkout page? And will support put the answers in writing before the first charge, in a chat transcript or an email, rather than describing them over the phone?

A company that answers all six has handed over material that can be verified against public records without taking anything on trust. A company that declines has not proven anything against itself, and it has also not given you a single thing to check. How that difference is weighed on this site, and what it can and cannot support, is set out in the methodology.

Frequently asked

What is the difference between a 503A pharmacy and a 503B outsourcing facility?
Section 503A sets the conditions under which a compounded drug is exempt from premarket approval, current good manufacturing practice requirements and labeling with adequate directions for use, and one of those conditions is a valid patient-specific prescription. Section 503B created a voluntary category, the outsourcing facility, which is subject to manufacturing requirements, is inspected by the FDA on a risk-based schedule, and may also supply orders that name no individual patient.
Does registering as a 503B outsourcing facility mean the FDA approved the drug?
No. Registration means the facility submitted complete registration information to the FDA, which then lists it in a public table. Compounded drugs remain outside the approval system, and the FDA does not verify the safety, effectiveness or quality of a compounded drug before it is marketed. A 503B relationship tells you about oversight of the facility, not about review of the product.
How can I check a compounding pharmacy myself?
If the seller names a registered outsourcing facility, the FDA publishes a weekly table showing each facility's last inspection date, whether a Form 483 was issued, whether a recall was conducted and what action followed. If the seller names a state-licensed pharmacy instead, the licensing state board keeps a public license lookup. Certification programs also run their own public status pages, which is where a badge should be confirmed rather than on the seller's own page.
Why do so few telehealth sellers name their pharmacy?
The FDA has said directly that consumers buying compounded drugs through online pharmacies and telehealth platforms may not know the identity of the compounder that produced the drug, including whether that compounder is appropriately licensed and regulated. Silence is not evidence that a pharmacy is poor, but it removes the single fact that would let a buyer or a prescriber verify anything at all.

Sources

  1. [1] U.S. Food and Drug Administration (2024). Human Drug Compounding Laws — the Drug Quality and Security Act, section 503A conditions and the section 503B outsourcing facility category U.S. Food and Drug Administration. Source
  2. [2] U.S. Food and Drug Administration (2025). Compounding and the FDA: Questions and Answers — approval status, who inspects compounders, applicable quality standards, and buying compounded drugs online U.S. Food and Drug Administration. Source
  3. [3] U.S. Food and Drug Administration (2026). Facilities Registered as Human Drug Compounding Outsourcing Facilities Under Section 503B of the FD&C Act — table updated as of 9/8/2026 U.S. Food and Drug Administration. Source
  4. [4] LegitScript LLC (2026). Healthcare Merchant Certification 101 Guide — certification standards and website certification status lookup LegitScript. Source
  5. [5] Hendrix N, Velásquez EE, Pham H, Bazemore A (2025). Documentation of Compounded GLP-1 Receptor Agonists in a Large Primary Care Dataset. Pharmacoepidemiol Drug Saf. PMID 41024632

More in Formats