FDA-Compliant API Sourcing for Compounding Pharmacies: A Complete Framework

FDA compliance in pharmaceutical API sourcing is not a one-time checkbox — it’s an ongoing operational framework that must be embedded into every purchase decision your pharmacy makes. For compounding pharmacies operating under Section 503A or outsourcing facilities under Section 503B, the standards are different but equally demanding.

This guide outlines the complete framework for FDA-compliant API sourcing, from supplier qualification to record-keeping requirements.

The Regulatory Foundation: 503A vs. 503B

503A Compounding Pharmacies

Traditional compounding pharmacies operating under Section 503A of the FDCA compound medications for specific patients pursuant to a valid prescription from a licensed practitioner. Key sourcing requirements include:

• APIs must be from an FDA-registered facility (or from a supplier who can demonstrate the API originated from an FDA-registered facility)
• APIs must be accompanied by a valid CoA
• USP monograph ingredients must meet USP specifications
• Non-USP ingredients must be demonstrated to meet appropriate pharmaceutical-grade quality standards

503B Outsourcing Facilities

503B outsourcing facilities may compound without patient-specific prescriptions and distribute across state lines, but they are subject to FDA cGMP inspections and must meet Current Good Manufacturing Practice requirements. For API sourcing, this adds:

• Formal supplier qualification programs with documented approval processes
• Reference to Approved Drug Products (Orange Book) or API reference standards
• Incoming material testing or verification of supplier testing
• Change control processes for supplier changes
• Full traceability from API lot to finished product batch

Supplier Qualification: The First Line of Defense

A compliant API sourcing program begins with documented supplier qualification. This is not simply “checking that a supplier has a CoA” — it’s a systematic evaluation of the supplier’s quality management system. A basic supplier qualification dossier should include:

• Supplier questionnaire — covering quality system, testing capabilities, regulatory history
• FDA registration verification — confirmed via the FDA’s online establishment search
• Sample CoA review — evaluating format, completeness, and analytical methods
• Reference checks — from other pharmacy or pharmaceutical customers where possible
• Periodic re-qualification — at minimum annually, or when quality issues arise

CoA Review: What Your Pharmacist-in-Charge Must Verify

Every CoA received for an API must be reviewed and approved by your pharmacist-in-charge (PIC) or designated quality reviewer before the material is released for use. The review should confirm:

• The lot number on the CoA matches the physical package label
• The product name and CAS number match your purchase order specifications
• All test results meet specifications — no results listed as “NT” (not tested) for critical parameters
• The expiration date provides sufficient shelf life for your intended use
• The testing laboratory is identified and credentialed
• The document is signed by an authorized quality control representative

Incoming Material Verification

For 503A pharmacies, the minimum incoming verification requirement is CoA review. For higher-risk APIs or when compounding high-volume preparations, additional steps add another layer of protection:

• Identity verification — simple chemical tests (color reaction, melting point, or IR spectrometry) confirming the substance is what the label claims
• Third-party retesting — sending a sample to an independent laboratory for confirmation of key parameters, particularly useful for new suppliers or unusual API sources
• Organoleptic evaluation — visual, olfactory, and physical assessment compared to a known reference standard

Record-Keeping Requirements

Complete records must be maintained for every API used in compounding, typically for a minimum of 3 years (though state requirements vary). Required records include:

• Original CoA (or certified copy)
• Purchase records showing supplier, lot number, quantity, and date
• Incoming inspection records
• Storage condition logs (particularly for temperature-sensitive materials)
• Compounding records linking API lot numbers to finished preparation batch numbers

Handling Non-Conforming Materials

A complete compliance program must include documented procedures for handling APIs that fail to meet specifications — whether discovered at incoming inspection or during compounding. Your non-conformance procedure should:

• Quarantine the non-conforming material immediately
• Notify the supplier in writing
• Investigate whether any preparations were made using the material before the non-conformance was identified
• Document the disposition (return, destruction, or use with documented justification)
• Evaluate whether the supplier relationship should continue

How MedConnectRx Supports Your Compliance Program

We understand that your FDA compliance program is only as strong as your supplier documentation. That’s why every API we supply comes with a complete documentation package — batch-specific CoA, supplier qualification information, and responsive support when you have questions for an inspection or audit.

We also maintain historical batch records, so if you need documentation for a past order during an inspection, our team can retrieve it promptly. Contact us to learn how we can support your pharmacy’s compliance framework.