The standards that apply are decided by the tier a compound sits in, not by how the website looks. An approved drug moves through a secured, traceable supply chain. A compounded preparation of an approved molecule moves through a licensed pharmacy with no federal product review. A research chemical moves through no drug system at all.
Three tiers, three supply systems
| Compound category | Regulatory status | Legal supply route and oversight |
|---|---|---|
| Approved peptide medicines such as semaglutide, tirzepatide, tesamorelin, setmelanotide | FDA-approved products with published labels | Manufacturer to licensed wholesaler to licensed pharmacy, with transaction records required under the Drug Supply Chain Security Act |
| Compounded preparations of approved molecules | Not FDA-approved; lawful when prepared under section 503A or 503B | Prescriber to 503A pharmacy for an identified patient, or to a 503B outsourcing facility registered with the FDA and inspected against current good manufacturing practice |
| Unapproved research peptides such as BPC-157, TB-500, ipamorelin, epitalon | No approved product; many appear on the FDA compounding safety-risk page | Direct-to-consumer vendor, no prescriber, no dispensing pharmacist, no federal traceability obligation |
What the 503A and 503B distinction changes in practice
Both are compounding, and neither produces an FDA-approved product, but the manufacturing floor underneath them is not the same. A 503A pharmacy prepares medication for an individual patient on receipt of a valid prescription and is regulated primarily by its state board of pharmacy. A 503B outsourcing facility registers with the FDA, may prepare batches without patient-specific prescriptions, and is subject to federal inspection against current good manufacturing practice.
For a sterile injectable, that difference is the whole question. Batch release testing, environmental monitoring, and documented beyond-use dating are routine expectations at a 503B facility and vary widely at 503A pharmacies. Neither arrangement makes the preparation approved. One of them produces a paper trail an outside party can examine.
Where the traceability requirements stop
The Drug Supply Chain Security Act built an electronic, interoperable system for tracing prescription drug packages through the distribution chain, with serialization and transaction records at each handoff. It is the reason a pharmacist can establish where a box of an approved product came from and whether it was ever reported stolen or counterfeit.
That system covers approved products moving through licensed trading partners. It does not follow a vial of unapproved peptide bought from an overseas vendor, because nothing in that transaction is a prescription drug in the legal sense. When such a product turns out to be mislabeled, underfilled, or contaminated, there is no lot to recall and no entity required to notify anyone.
Published analytical work shows why that gap matters. A profiling study of the most frequently falsified polypeptide drugs on one national market documented wide variation in active content along with small molecule contaminants and residual solvents. A separate investigation of somatropin products bought online found the overwhelming majority of vendors dispensed with no prescription. A market surveillance study that test-purchased semaglutide from online sellers without a prescription and analyzed the results reported the same categories of failure.
The same standard applies to a provider’s own website. Among cash-pay services, Hims and Hers, Ro, Henry Meds, and HealthRX each publish differently, and the line worth drawing is whether a site names its dispensing pharmacy and prescriber model or only a price. HealthRX keeps its peptide therapy information on a page describing a clinician-reviewed, pharmacy-prepared process, the sort of detail a reader can hold against a state license register. A vendor showing a vial and a checkout button, with no pharmacy named anywhere, has answered by leaving it out.
A research vendor is not a pharmacy, and the label says so
Vials sold for research use only occupy a deliberate legal position. The seller is not claiming the contents are a drug for human use, which keeps the product outside the prescription drug framework. No pharmacist verifies the order, no state license is at risk, no sterility or potency standard is imposed, and there is no adverse event pathway.
The consequence sits with the buyer. Reconstitution, storage, and sterility all become tasks performed outside any regulated environment, on material whose contents nobody independent has verified. The FDA compounding safety page repeats the same finding for several of these substances: it has not identified any human exposure data by any route, so the agency cannot say whether they would cause harm in people.
Verifying the prescriber and the pharmacy are two separate checks
Prescriber verification is the simpler one. Clinicians are licensed by state, and every state board publishes a searchable register showing license status, expiration, and disciplinary history. A telehealth service should be able to name the clinician who will review the intake and the state the license sits in. Vagueness there is itself the answer.
Pharmacy verification is separate. The relevant questions are which pharmacy will prepare the medication, whether it operates under 503A or 503B, and which state licenses it. Sites accredited through the national verification programs referenced on the FDA’s BeSafeRx pages have already been checked against these criteria. A cash price is only interpretable next to what the provider behind it discloses about its dispensing partners, because a lower number attached to an unnamed pharmacy is not a comparable figure.
Fulfillment is where a good process becomes visible
Peptide preparations are temperature sensitive. A shipment that arrives warm, with the coolant spent and no temperature indicator included, cannot be assessed after the fact. A compliant delivery carries a patient-specific label with the preparing pharmacy named, the beyond-use date printed, the lot identified, and a way to reach a pharmacist about the specific lot.
Case reports have documented what happens when that information is absent or misread. Poison control centers have received calls involving administration errors with compounded semaglutide, including confusion between units and volume. A pharmacovigilance analysis of adverse event reports involving compounded GLP-1 products found a signal pattern consistent with those handling and preparation problems rather than with the molecule itself.
Frequently asked questions
Is a 503B facility better than a 503A pharmacy?
It is inspected differently, which is not the same as better for every case. A 503B facility works to federal manufacturing standards and suits batch preparation. A 503A pharmacy suits genuinely individualized preparations. Neither produces an FDA-approved product, and the right question is which model the service actually uses.
Can a compounding pharmacy legally prepare BPC-157?
Not as a routine matter. Substances without an approved product must clear a nomination process to appear on the relevant bulks list. BPC-157 was placed in category 2 over safety concerns and the nomination was later withdrawn, so it has no path onto the list at present.
Does an overseas pharmacy shipping to the US follow the same rules?
No. Importation of unapproved drugs for personal use is not authorized as a general matter, and shipments arriving that way sit outside the domestic traceability system entirely. The FDA’s guidance on buying medicines online exists because that route is where counterfeits most often enter.
What paperwork should arrive with a compounded injectable?
A patient-specific prescription label naming the preparing pharmacy, the beyond-use date, the lot or batch reference, and contact details for a pharmacist. Storage instructions should be included. If the shipment carries no pharmacy name, the product did not come through a compounding pharmacy at all.
