How to Evaluate a Compounding Pharmacy: 503A vs 503B, USP Standards, COAs, and What to Ask

If you are going to take peptides prepared by a compounding pharmacy, the pharmacy itself is the largest single variable in whether what you inject is what the label says. A good pharmacy follows USP standards, sources active pharmaceutical ingredient (API) from registered suppliers, runs sterility and potency testing on every batch, and provides a Certificate of Analysis on request. A bad one calls itself a 'research peptide' vendor, ships unlabeled vials, and points to a website disclaimer when something goes wrong.

The gap between those two extremes is wide, and it widens further if the FDA's July 23-24 PCAC vote opens 503A bulks-list compounding for BPC-157, TB-500, KPV, MOTS-c, Emideltide/DSIP, Semax, and Epitalon. Licensed pharmacies will be able to prepare these substances on prescription. Research-chemical vendors will continue to sell vials labeled 'for research use only,' but that label means almost nothing about the contents. This piece walks through how to tell the categories apart, what regulatory tier matters for which use, and what questions to ask before you spend money.

US compounding pharmacies operate under two federal frameworks defined by Sections 503A and 503B of the Federal Food, Drug, and Cosmetic Act.

503A pharmacies prepare compounded medications on a patient-by-patient basis pursuant to a licensed prescriber's prescription. They are licensed at the state level (by state boards of pharmacy), required to comply with USP standards (more on these below), and limited to small-batch preparation for individual prescriptions. They do not register with the FDA the way drug manufacturers do. They are also not allowed to compound substances that fall outside the FDA's permitted-substances framework, which is exactly the framework the July PCAC vote operates within.

503B outsourcing facilities are the bulk-compounding tier. They register with the FDA, can manufacture batches without patient-specific prescriptions, follow Current Good Manufacturing Practice (CGMP) regulations, and supply hospitals, clinics, and large practices. They are also subject to a separate 503B bulks list (currently being revised to exclude semaglutide, tirzepatide, and liraglutide under an April 30, 2026 proposed rule).

The practical implication for an individual patient: most peptide compounding happens at 503A pharmacies. A 503A operation should be able to tell you the prescription on file (the framework, not your specific prescription), the prescriber, and the state license number. If a pharmacy says they don't need a prescription, they are not operating under 503A and you should walk away.

USP (United States Pharmacopeia) chapters set the technical standards that 503A and 503B pharmacies follow. Two chapters cover most peptide preparation.

USP <795> applies to non-sterile preparations: oral, topical, and most preparations not injected. It covers ingredient quality, weighing and measuring practices, equipment cleanliness, environmental controls, beyond-use dating (how long a preparation is good), and record-keeping. It is the baseline standard for any compounded preparation.

USP <797> applies to sterile preparations: anything injected, including peptide injections. It is significantly more stringent. It defines clean-room standards (ISO Class 5, 7, and 8 air quality), garbing procedures, gowning, hand hygiene, surface sampling, environmental monitoring schedules, and personnel training. Most peptide products are sterile preparations, so USP <797> is the relevant standard for the bulk of peptide compounding.

USP <800> applies to hazardous-drug handling and is not usually relevant for peptides. A pharmacy that also handles oncology compounding will need <800> compliance.

What to look for: a 503A pharmacy with USP <795> and <797> compliance plus state board licensure is the baseline. PCAB (Pharmacy Compounding Accreditation Board) accreditation, while voluntary, is a strong additional signal because the third-party audit covers exactly these standards. Major chain and hospital pharmacies typically have it; smaller independent compounders sometimes do not, though absence is not automatically disqualifying.

The compounded preparation is only as good as the raw active pharmaceutical ingredient (API) the pharmacy starts with. The API supply chain matters more than most patients realize.

FDA-registered API suppliers are required to follow Drug Master File (DMF) procedures, manufacturing-site inspections, and quality controls. Major peptide API suppliers in the US compounding supply chain include Bachem, PolyPeptide Group, CordenPharma, and a handful of others. These companies sell to 503A and 503B pharmacies at scale and provide Certificates of Analysis with each lot.

Research-chemical-grade peptides are a different supply chain entirely. They come predominantly from Chinese manufacturers, are sold to US distributors that label them 'for research use only,' and skip the FDA registration framework. Quality varies wildly. A 2023 independent test of ten US-marketed research-chemical BPC-157 vials found four contained less than 50% of the labeled peptide content; one contained no detectable BPC-157 at all. The Utah federal indictment of an osteopathic physician in April 2026 for selling 200+ patients misbranded Chinese peptides illustrates the criminal enforcement track that runs alongside the regulatory one.

A good compounding pharmacy will tell you the API supplier on request. A pharmacy that gets defensive about the question or claims the supplier is proprietary is showing you something.

A Certificate of Analysis (COA) is the document that accompanies each batch of API and each compounded preparation. A real COA from a real pharmacy includes specific elements.

Identity confirmation: typically mass spectrometry or high-performance liquid chromatography (HPLC) data confirming the substance is what the label says it is. The COA should reference the specific analytical method used and the result.

Purity: HPLC-determined percent purity. For most pharmaceutical-grade peptides this number should be above 98%. Lower than 95% on a pharmaceutical preparation should prompt questions.

Sterility (for injectable preparations): pass-or-fail sterility testing per USP <71> methods, with the test date and result.

Endotoxin: bacterial endotoxin testing per USP <85> (the Limulus Amebocyte Lysate test) below the acceptable threshold for the route of administration.

Potency: when applicable, quantitative confirmation that the active is present at the labeled concentration.

Lot number and expiry: every batch has a unique lot number and a beyond-use date. The COA should be tied to the lot you actually receive.

The analytical work can be done either in-house or by a third-party lab. Third-party COAs (from independent labs like Eurofins, Janoshik, or similar) are generally a stronger signal than in-house testing, but a 503A pharmacy with USP-compliant in-house QC is also acceptable. What is not acceptable: a website that claims COAs are available 'on request' but never produces one, or a COA that uses generic language and shows the same date across multiple batches. Both are red flags.

Specific things that should end a transaction before money changes hands.

No prescription required. A US peptide vendor that ships injectable preparations without a prescription is not operating as a 503A pharmacy. They are either international, gray-market, or research-chemical. None of those categories carry US pharmaceutical-grade quality control.

'For research use only' labels on products clearly intended for injection. The phrase is a legal disclaimer that allows the seller to skirt FDA drug-product regulation. It does not mean the contents are research-grade; it means the seller is not standing behind them as a drug.

No state license number, NPI, or DEA registration visible on the website or paperwork. Licensed US pharmacies have all three (state pharmacy board license, National Provider Identifier, and DEA registration for controlled-substance handling). A site that won't display them is not licensed.

No physical US address. Some legitimate operations are remote-pharmacy models, but they ship from a physical compounding facility in the US. A 'support address' in Florida and shipping from Hong Kong is a research-chemical operation.

Claims of 99.99% purity with no analytical method specified. Real pharmacies report 98-99% purity on standard HPLC methods. The marketing-extremes language is a tell.

Deep discounts on injectable peptides ($30-50 per vial). Pharmaceutical-grade peptides have a baseline cost from the API supply chain. Anything dramatically below market is using cheaper sources or skipping quality controls.

A short list of questions a good pharmacy will answer in a phone call.

Which USP chapters do you compound under (<795>, <797>, <800>)? Acceptable answer: <797> for any injectable peptide, with <795> for non-sterile preparations. A pharmacy that doesn't immediately know which chapters apply is not running a clinical-grade operation.

Who supplies your API? Acceptable answer: a named, FDA-registered supplier (Bachem, PolyPeptide, CordenPharma, or similar). 'We have multiple suppliers' without naming one is not an answer.

Do you have PCAB accreditation? Acceptable answer: yes, plus a current accreditation number, or no, plus an explanation of which alternative standards they meet (often state board inspection plus USP compliance).

Can I see a Certificate of Analysis for the batch I would receive? Acceptable answer: yes, with the actual document or a representative example. If they say it costs extra to get the COA or that COAs are 'not typically released,' that is a red flag.

Who is the prescribing physician on the protocol? Acceptable answer: a named US-licensed prescriber, often a partner medical group that the pharmacy works with. Telehealth-platform-affiliated pharmacies typically have the prescribing relationship pre-wired.

What is your beyond-use date for this preparation? Acceptable answer: a specific number of days (typically 14-90 days for sterile peptides depending on storage). 'Indefinite if refrigerated' is not a real answer.

A pharmacy that answers all six clearly is operating at the standard you want. A pharmacy that dodges any of them is showing you something.

Telehealth platforms like Hims & Hers, LifeMD, and Henry Meds operate as combined prescriber-and-pharmacy ecosystems. They handle the prescriber relationship in-house (online consultation with a licensed physician, prescription generated electronically) and either own the compounding pharmacy or partner with a specific 503A facility.

The Hims & Hers model after the March 2026 Novo Nordisk pact is now branded GLP-1 supply through Novo direct (Wegovy injections, Wegovy pills, Ozempic injections), with compounded GLP-1s available through their own pharmacy network when 'clinically necessary' as determined by the prescribing physician. Hims acquired a California peptide manufacturing facility in 2025 and added in-house lab testing capability, positioning for the post-PCAC peptide expansion.

The practical implication: if you use a telehealth platform, you are generally getting a 503A-compounded product (when not getting branded supply), prepared at the platform's owned or partnered pharmacy. The relevant evaluation question is which pharmacy actually compounds and ships your prescription. Reputable platforms disclose this on request. A platform that won't tell you which pharmacy fills your order is one to avoid.

Branded supply (Wegovy direct from Novo, Zepbound from Lilly via LillyDirect) bypasses the compounding question entirely. It costs more, but the FDA-approved manufacturer's quality control replaces the pharmacy's. For GLP-1s in particular, branded supply at $149-499/month (NovoCare and LillyDirect self-pay) is often the cleaner path.

If PCAC recommends BPC-157, KPV, TB-500, MOTS-c, Emideltide/DSIP, Semax, and Epitalon for the 503A bulks list and the FDA accepts, the practical changes:

Legitimate 503A pharmacies can compound prescription preparations of these substances using FDA-registered API suppliers. The current ambiguity (substances came off Category 2 in April 2026 but aren't yet on the bulks list) ends.

The larger compounding chains and the telehealth platforms (Hims, LifeMD, Henry Meds) will roll out the affected peptides as covered product lines on a relatively quick timeline, typically 30 to 90 days after the FDA accepts the recommendations.

Research-chemical vendors lose their pricing advantage but won't disappear. Some patients will continue to buy from gray-market sources for cost or convenience reasons even when licensed supply is available. The legal status of those purchases gets stricter once a legal supply path exists.

Prices in the licensed channel will likely settle at substantial premiums to the research-chemical market (often 3-10x) reflecting USP-compliant preparation, third-party COAs, prescriber consultation costs, and the licensed pharmacy overhead.

If PCAC votes 'no' on some or all substances, the regulatory limbo continues. Substances stay off Category 2, off the 503A bulks list, and unapproved as drugs. Compounding pharmacies that prepare them face enforcement risk. Patients continue routing through gray-market supply.

Mixed outcomes are most likely. The committee may approve substances with stronger historical-use claims (BPC-157, Emideltide/DSIP) while declining substances with thinner evidence (Epitalon, KPV). The evaluation framework in this piece holds in either direction: a good pharmacy is a good pharmacy regardless of which specific substances are on the bulks list.