503A vs 503B: what "compounded" actually means

That's not a great system.

The 503A and 503B designations aren't marketing categories. They're legal classifications that come from the Federal Food, Drug, and Cosmetic Act — specifically from two sections added or amended by the Drug Quality and Security Act of 2013, which Congress passed after a fungal meningitis outbreak killed 64 people and was traced back to a compounding pharmacy operating without adequate oversight. The numbers describe the legal framework under which a pharmacy operates. Understanding the difference between them tells you something real about what you're getting and who is responsible for what.

Start with 503A. A 503A pharmacy is a state-licensed compounding pharmacy. It compounds medications one at a time, for an identified patient, based on a valid prescription from a licensed prescriber. That's the core of it. The prescription requirement is not a formality — it's the legal anchor that makes the compound lawful. A 503A pharmacy can't just make large batches of peptide vials and sell them off a shelf. It compounds in response to a specific prescription for a specific person, and it operates under state pharmacy board oversight rather than direct FDA manufacturing oversight.

This matters practically. Because 503A pharmacies compound patient by patient, they can customize. Different concentrations, different delivery vehicles, different combinations — when clinically appropriate and legally permissible — are all possible because each batch is tied to a prescription order. The trade-off is that batch sizes are smaller and the oversight model is different from what you'd see at a large pharmaceutical manufacturer.

503B is a different legal category. A 503B "outsourcing facility" registers with the FDA at the federal level and can compound in larger batches without patient-specific prescriptions. This allows them to supply hospitals, clinics, and medical practices with pre-made stock. In exchange for that commercial flexibility, 503B facilities are subject to FDA current Good Manufacturing Practice (cGMP) requirements — the same manufacturing standards that apply to conventional pharmaceutical manufacturers. FDA inspects them. They must report adverse events. The documentation burden is higher.

Neither of these is FDA-approved in the way that a drug like a brand-name GLP-1 receptor agonist is FDA-approved. When a drug gets FDA approval, it goes through a review process in which the agency evaluates safety and efficacy data, inspects manufacturing, and ultimately authorizes the finished product for sale. Compounded medications — whether they come from a 503A pharmacy or a 503B outsourcing facility — are not approved through that process. The FDA has not reviewed the individual batches of compounded semaglutide or sermorelin or BPC-157 that you might receive. That's not a criticism of compounding; it's a description of what the regulatory category means. The responsibility for quality and safety in a compounded product rests primarily with the pharmacy that made it, not with an FDA approval stamp.

This is why the pharmacy's own quality systems — third-party lab testing, certificates of analysis, sterility testing, endotoxin testing — matter so much. In a world without FDA pre-approval, those are the actual evidence of quality. More on that separately.

Now, what can legally be compounded? This is where it gets more specific. For a 503A pharmacy to compound using a bulk drug substance — a raw active pharmaceutical ingredient rather than an approved finished drug — that substance generally needs to appear on what's called the 503A bulk drug substances list (sometimes called the 503A bulks list), or be used to make a copy of an approved drug that meets certain criteria, or fall under specific exemptions. The FDA maintains this list and has been working through a nomination and evaluation process for years. Not all peptides are on the list. The status of individual compounds changes.

BPC-157 is a useful example because it illustrates exactly how fluid this can be. BPC-157 was evaluated by the FDA for potential inclusion on the 503B list of bulk drug substances — the list that governs what outsourcing facilities can compound. In 2023, the FDA placed BPC-157 in Category 2 of that 503B evaluation, meaning there is not enough publicly available information to determine whether it's safe and effective for use in compounding by outsourcing facilities. That Category 2 placement effectively means 503B outsourcing facilities should not be compounding it. The question of what 503A pharmacies can do with BPC-157 under a valid prescription involves a separate and still-evolving regulatory analysis. The landscape is genuinely shifting. Your prescribing provider can tell you the current status.

The reason most peptide compounding happens at 503A pharmacies rather than 503B outsourcing facilities comes down to the nature of the products and the nature of the business. Peptides are often prescribed in patient-specific contexts — a dose dialed in by a provider based on your labs, your goals, your history. That kind of customization is what 503A was designed for. The patient-specific prescription model fits peptide prescribing better than the batch-manufacturing model of 503B.

This does not mean 503A is less legitimate than 503B. It means they're different legal frameworks designed for different use cases. A hospital might stock 503B-compounded medications for surgical use. An individual patient getting a prescription from a functional medicine provider is almost certainly working through a 503A pharmacy. Both can produce high-quality products. Neither gets a free pass on quality — the pharmacy's own testing and documentation is the evidence you should be asking for.

Some people assume that the difference between 503A and 503B maps cleanly onto "less safe" versus "more safe." It doesn't. A 503A pharmacy with rigorous third-party testing and meticulous quality control can produce a safer product than a 503B facility that technically meets cGMP on paper but cuts corners in practice. The regulatory designation describes the framework. It doesn't guarantee the outcome.

What the designation does tell you is who is responsible for what. At a 503A pharmacy, your state pharmacy board is the primary oversight authority. At a 503B outsourcing facility, the FDA has direct inspection authority. Both frameworks have accountability mechanisms. Neither eliminates risk. Both require you, as the end user, to care about whether the pharmacy you're working with actually uses the oversight mechanisms available to it — or just hides behind the category label.

The practical question isn't "is this pharmacy 503A or 503B?" The practical question is: does this pharmacy produce certificates of analysis from third-party labs for every batch? Do those COAs cover identity, potency, purity, sterility, and endotoxin? Does the pharmacy have a valid state license and is it in good standing? Is there a real prescribing provider involved who has actually reviewed your case?

The regulatory category is a description of how the pharmacy operates. It is not, by itself, a stamp of trustworthiness. That stamp has to come from the actual evidence — and that evidence is in the documentation.