503A vs 503B Pharmacies for Compounded GLP-1s: What the Designations Mean, Which Is Safer, and How to Verify Yours in Five Minutes

The question sophisticated patients ask

On sales calls, the patients who ask about 503A and 503B are the ones who have done research, and their question is a proxy for a larger one: who actually makes this, and who checks their work? The telehealth brand does not make the medication. A pharmacy does, and there are two legal categories of pharmacy that can, created by different laws for different purposes. Understanding them tells you what is and is not being guaranteed.

503A: the traditional compounding pharmacy

Section 503A of the Federal Food, Drug, and Cosmetic Act describes the pharmacy most people picture: a licensed pharmacist compounding a drug for a specific patient on receipt of a valid prescription, or in limited anticipatory quantities based on a history of such prescriptions. In exchange for being patient-specific, a 503A pharmacy is exempt from three requirements that apply to drug manufacturers: current good manufacturing practice (CGMP), premarket approval of the drug (the new-drug application), and labeling with adequate directions for use.

Oversight is primarily by the state board of pharmacy, which licenses and inspects the pharmacy, with the FDA holding authority over the bulk ingredients used and stepping in for serious violations. Quality standards come from the United States Pharmacopeia: USP <797> for sterile preparations (which includes every injectable GLP-1), USP <795> for non-sterile ones, and USP <800> for hazardous drugs. To ship across state lines, a 503A pharmacy needs a nonresident pharmacy license or registration in the destination state, and several states impose additional requirements on out-of-state sterile compounders, which is the usual reason a telehealth provider excludes a state.

503B: the outsourcing facility

Section 503B was created by the Drug Quality and Security Act of 2013, after a 2012 fungal meningitis outbreak traced to contaminated steroid injections from a Massachusetts compounder killed more than 60 people. An outsourcing facility registers with the FDA, must comply with CGMP, is inspected by the FDA on a risk-based schedule, must report adverse events to the FDA, and must label products with specific information. In exchange, it may compound without patient-specific prescriptions — for office use, or in batches — and may distribute to healthcare facilities and providers.

The 503B model is the closer of the two to manufacturing. Batch production under CGMP with FDA inspection is a stronger quality system than patient-by-patient compounding under state inspection, on paper. It is not FDA approval of the product, and the FDA has issued warning letters to 503B facilities for CGMP failures, so registration is a floor rather than a guarantee.

What neither designation means

This is the point the marketing tends to blur. Neither a 503A pharmacy nor a 503B facility produces an FDA-approved drug. The FDA does not review any compounded tirzepatide or semaglutide for safety, effectiveness or quality before it is sold. A provider that says its medication is "FDA-approved" is wrong. A provider that says its medication comes "from an FDA-registered 503B facility" is making an accurate statement about the facility that some readers will hear as a statement about the drug. The accurate phrasings are "compounded by a state-licensed 503A pharmacy" and "compounded by an FDA-registered 503B outsourcing facility," and both should be followed by "not FDA-approved."

Why the end of the shortage changed the map

While tirzepatide and semaglutide were on the FDA's shortage list, both 503A pharmacies and 503B facilities could compound copies of the approved products, and the 503B facilities' batch model made them the natural suppliers for large telehealth programs. The FDA removed tirzepatide from the list on December 19, 2024, with compounding of copies to end by February 18, 2025 (503A) and March 19, 2025 (503B), and removed semaglutide on February 21, 2025, with deadlines of April 22 and May 22.

What remains permitted is compounding for an individual patient when the prescriber documents a clinical need for a formulation that differs from the approved product. That exception fits the 503A patient-specific model and fits the 503B batch model poorly, because a batch is by definition not made for an individual patient. Many 503B facilities stopped producing compounded GLP-1s in 2025, and telehealth providers that had relied on them moved to 503A pharmacies, or to networks of them. The practical consequence for a patient in 2026 is that the pharmacy behind a telehealth brand may have changed, may vary by state, and may be a 503A pharmacy whose license you can and should check.

Which is "safer"?

The honest answer is that the designation is a weaker signal than the pharmacy's own record. A 503B facility with clean FDA inspections is an excellent source. A 503B facility with a recent warning letter for sterility failures is not. A 503A pharmacy accredited by the Pharmacy Compounding Accreditation Board (PCAB) with a clean state inspection history and full USP <797> compliance is an excellent source. A 503A pharmacy on the FDA's compounding warning-letter list is not. What a patient can check, in about five minutes, is the license, the FDA registration if applicable, and the enforcement history.

The five-minute verification

1. Get the name. Ask the provider for the dispensing pharmacy's name, city and state, and whether it is 503A or 503B. A provider that will not say is telling you something.
2. Check the state license. Open your state board of pharmacy's license lookup (the NABP directory links every board). Search the pharmacy name. Confirm an active license and, for an out-of-state pharmacy, an active nonresident license or registration.
3. Check FDA registration for a 503B facility on the FDA's registered outsourcing facilities list, and note any listed inspection outcomes.
4. Check enforcement. Search the pharmacy name on the FDA's human drug compounding warning-letter page and on the state board's disciplinary actions page.
5. Read the label on arrival. Drug name and salt form — it should be tirzepatide or semaglutide, not a sodium or acetate salt; concentration in mg/mL; total volume; beyond-use date; storage instructions; pharmacy name and address; your name; the prescriber. If the concentration is missing, do not inject until you have it in writing.

Formulations and additives

Compounded GLP-1 vials typically contain the peptide, a preservative (benzyl alcohol or phenol), a buffer, and sometimes an additive: vitamin B12 as cyanocobalamin or methylcobalamin, or L-carnitine. The additives are one basis on which a pharmacy compounds a formulation that "differs" from the approved product, and they are marketed for energy or nausea without trial support for either. The B12 vs L-carnitine guide explains what is known. Whatever the formulation, the concentration on the label determines your dose volume; a new pharmacy means a new concentration and a recalculation with the dose calculator.

What we record

Every provider page on this site has a pharmacy-type field and, where verified, a pharmacy name. Where a provider has not published its pharmacy on the pages we checked — NexLife is one; several others are — the field says pending, and we have asked. The pharmacies guide is the reference version of this article, and the service areas page tracks which states each provider reports shipping to, which is the downstream consequence of the licensing rules above.

Sources

1. Federal Food, Drug, and Cosmetic Act sections 503A and 503B (21 U.S.C. 353a, 353b)
2. Drug Quality and Security Act, Public Law 113-54 (2013)
3. U.S. FDA, Registered Outsourcing Facilities list
4. U.S. FDA, FDA clarifies policies for compounders as national GLP-1 supply begins to stabilize (Dec 2024, updated Feb 2025)
5. U.S. FDA, FDA's concerns with unapproved GLP-1 drugs used for weight loss
6. USP General Chapter <797>

Citations are to primary sources (peer-reviewed trials, FDA labeling and announcements, and provider pricing pages). See our sources policy and corrections log.