Compounding Quality Systems: What State Boards, USP Standards, and FDA Oversight Mean for Owners

Compounding quality is not a room, a hood, or a binder. It is the set of decisions that connects a patient-specific need to qualified ingredients, a controlled process, usable documentation, and a response when something does not look right.

Answer first: an owner should run compounding as a quality system with defined scope, trained roles, material controls, documented procedures, release criteria, and a complaint-and-corrective-action path. Start by identifying whether the pharmacy is operating under the conditions applicable to a state-licensed 503A pharmacy or is a registered 503B outsourcing facility. Then map the federal framework, applicable state-board requirements, and current USP standards to the actual services the pharmacy provides. None of those labels alone makes a process safe.

This article is general educational information, not legal or regulatory advice. Compounding conditions, state-board rules, USP standard adoption, patient-specific prescription requirements, and facility obligations are fact-specific. Owners should obtain qualified legal, compliance, and technical advice before changing a compounding service.

Contents

• Start with the correct regulatory scope
• What a quality system actually includes
• Materials, suppliers, and receiving controls
• People, training, and competency
• Process controls and documentation
• Complaints, deviations, and corrective action
• FDA, state boards, and USP: different roles
• Owner checklist
• Frequently asked questions

Key takeaways

• Classify the service before building controls: 503A and 503B are different statutory frameworks with different conditions.
• Do not describe compounded drugs as FDA-approved; FDA does not review them for safety, effectiveness, or quality before marketing.
• Supplier qualification, receiving, storage, and lot traceability are quality controls—not purchasing paperwork.
• A written procedure is useful only if staff are trained, observed, and able to document deviations from it.
• Quality events deserve a structured response even when no patient harm has been reported.

Start with the correct regulatory scope

Human drug compounding can serve an important medical need, such as when a patient cannot use an FDA-approved presentation because of an allergy or a needed dosage form. That value should not obscure the regulatory boundary: compounded drugs are not FDA-approved. FDA does not review their safety, effectiveness, or quality before they are marketed. The owner’s first quality-system task is therefore to avoid substituting marketing confidence for documented process control.

Federal law distinguishes two important pathways. Section 503A applies to certain human drug compounding by a licensed pharmacist in a state-licensed pharmacy or federal facility, or by a licensed physician, when the statutory conditions are met. Section 503B applies to registered outsourcing facilities. FDA explains that outsourcing facilities are subject to current good manufacturing practice requirements; state-licensed 503A pharmacies that meet the conditions may be eligible for exemptions from specified FD&C Act provisions, including CGMP. These are not interchangeable business labels. Whether a given preparation or activity meets the statutory conditions requires a fact-specific review.

Do not assume that a 503A pharmacy can do everything an outsourcing facility may do, or that an outsourcing facility’s FDA registration makes every product or process compliant. FDA’s statutory summaries stress that the conditions are not exhaustive in a short chart. State law, pharmacy-board rules, prescription facts, distribution practices, and the kind of preparation can all matter. A sensible owner keeps a current service-scope memo: what is compounded, for whom, where, under which authority, and who reviews changes before the service expands.

What a quality system actually includes

For a small pharmacy, a quality system need not resemble a large manufacturer’s bureaucracy. It does need to make the critical decisions repeatable. At minimum, an owner should be able to show how the pharmacy defines a preparation, selects materials, controls the work area, trains staff, documents each run or preparation as applicable, releases the finished preparation, handles a complaint, and learns from a deviation. The design should be proportional to risk and the pharmacy’s authorized scope, but it should not depend on one expert remembering every detail.

This framework is an operational recommendation, not a claim that one table satisfies every USP chapter or state regulation. The owner should map each element to the current requirements that apply to the pharmacy, including the state board’s adopted standards and any applicable USP chapters. USP standards can be adopted or referenced differently across jurisdictions. “We follow USP” is not a complete answer unless the pharmacy has identified the relevant current standard, its effective status in the jurisdiction, and the evidence that its processes meet it.

Materials, suppliers, and receiving controls

Quality begins before compounding begins. FDA warns that the quality of bulk drug substances and excipients can affect the quality of compounded drugs and urges compounders to know their suppliers and the testing performed on components. That does not mean a pharmacy can outsource its quality responsibility to a certificate or vendor brochure. It means the pharmacy should have a risk-based, documented way to evaluate sources, receive components, check condition and identity information as applicable, control storage, and quarantine a discrepancy.

Build a receiving record that captures supplier, purchase order, date received, material name, lot or control identifier, expiration or retest information where applicable, quantity, condition, and receiving decision. Maintain the source documents where a later review can retrieve them. For components that require special storage or handling, record the relevant condition and escalation when it was not met. The receiving person should be trained to report an inconsistency, not to rationalize it away because a material is needed for a patient.

Supplier qualification should be revisited, not filed once. Ask whether the supplier and component remain appropriate for the pharmacy’s authorized use, whether complaints or quality notices occurred, whether documents are current, and whether a change in packaging, label, route, or sourcing needs technical review. FDA’s materials guidance specifically highlights high-risk components and urges compounders to understand supplier testing. A pharmacy must still follow the rules and standards that apply to its own practice.

People, training, and competency

Training is not attendance at a webinar. A quality system identifies each role, the procedures that role may perform, the prerequisite training, the observation or competency method, and the retraining trigger. A new technician may be trained on receiving before being permitted to perform a critical compounding step. A pharmacist may be responsible for final professional review but still need current competency in the preparation type and documentation system. A temporary staff member should not inherit a complex task through informal handoff.

Use deviations and near misses as training data. If a label was corrected before release, a component was held because of an unclear record, or an environmental-monitoring response was late, ask whether the procedure was unclear, the training insufficient, or the workflow poorly designed. The goal is to prevent recurrence, not to create a blame file. A repeated issue is evidence that a system control—not merely an individual reminder—may need revision.

Process controls and documentation

For each type of preparation, the pharmacy needs a current, approved process appropriate to the applicable standard and service scope. It should identify the ingredients and quantities, equipment or conditions, critical steps, calculations or checks, labeling, beyond-use or other dating decisions where applicable, required documentation, and release authority. Never rely on a generic procedure copied from the internet without validating it for the pharmacy’s own facilities, equipment, formulation, and governing requirements.

Documentation should make a preparation understandable to someone who was not there. It should identify what was prepared, when, by whom, from which materials or lots as applicable, which procedure was used, what checks occurred, and the release decision. Do not backfill records from memory after a busy shift. If a record is incomplete, treat that as a deviation and follow the policy for determining what can safely happen next.

Environmental and equipment controls require the same discipline. The exact monitoring, cleaning, calibration, certification, and maintenance requirements depend on the practice and applicable standards. The owner’s role is to ensure the schedule exists, work is actually performed, exceptions are visible, and a missed task creates a documented assessment rather than a quiet reset of the calendar.

Complaints, deviations, and corrective action

A complaint is information, not proof of fault. FDA says adverse-event and other complaint reporting can identify potential quality problems associated with a compounded drug or its components; the agency’s surveillance work includes concerns such as contamination, potency, particulate matter, pH, insanitary conditions, misleading claims, and ineligible bulk substances. A pharmacy should have one intake route for complaints, quality observations, and potential adverse events, with a defined way to protect the product and records while the responsible person assesses the facts.

Use a simple corrective-and-preventive-action structure: describe the event; contain immediate risk; identify the records and materials involved; determine whether other preparations could be affected; document the assessment; choose a corrective action; assign an owner and due date; verify that the action worked. Not every event needs a large investigation. Every event does need a disposition that is proportional, traceable, and reviewed by the appropriate person.

FDA’s oversight materials note that both surveillance and for-cause inspections occur, with for-cause inspections responding to issues such as complaints, quality adverse events, contamination, or facility/process concerns. The lesson for an owner is not to manage for an inspection. It is to make the routine system strong enough that the pharmacy can explain its decisions when a patient, prescriber, state board, or FDA asks.

FDA, state boards, and USP: different roles

State boards generally have day-to-day oversight of state-licensed pharmacies that are not registered outsourcing facilities. FDA may conduct surveillance and for-cause inspections of those pharmacies, while outsourcing facilities are primarily overseen by FDA and inspected on a risk-based schedule. This is a division of oversight, not a reason to ignore one source. A 503A pharmacy owner should monitor the state board, applicable statutes and regulations, and FDA materials; a 503B operator must also meet the federal requirements that apply to its registered operation.

USP standards are another essential layer, but their legal effect is not identical in every state. The pharmacy should verify which chapters apply, whether and how the state has adopted them, the effective version, and any board-issued interpretation. Do not announce that a particular USP revision is mandatory nationwide without that jurisdictional analysis. Where requirements differ, the pharmacy should get authoritative legal and technical guidance before choosing a practice.

Owner’s 60-day quality-system checklist

1. Confirm each compounding service’s regulatory pathway, state authorization, and owner of compliance review.
2. Inventory current procedures, formulations, facilities, equipment, and critical vendors.
3. Map material receipt to lot traceability, storage, use, and final disposition.
4. Review staff roles, current competency evidence, and backup coverage.
5. Test whether a completed preparation record can be reconstructed by an independent reviewer.
6. Review cleaning, maintenance, calibration, certification, and environmental records for missed actions.
7. Run a tabletop complaint or quality-event exercise and check the escalation path.
8. Update the quality-review calendar and document assigned corrective actions.

Frequently asked questions

Are compounded drugs FDA-approved?

No. FDA says compounded drugs are not FDA-approved and are not reviewed by the agency for safety, effectiveness, or quality before they are marketed.

Does a 503A pharmacy have to follow CGMP?

FDA explains that compounders meeting the conditions of section 503A may be eligible for an exemption from CGMP requirements, while outsourcing facilities under 503B are subject to CGMP. That does not answer every state, USP, or operational requirement; confirm the pharmacy’s actual circumstances.

Can a supplier certificate replace pharmacy quality controls?

No. Supplier information can support qualification, but the pharmacy still needs a documented process to receive, assess, store, trace, and investigate materials according to the requirements that apply.

Conclusion

Compounding quality is built in small, repeatable decisions: a clear service boundary, a qualified component, a trained person, a current procedure, a complete record, and an honest response when something varies. An owner who can see those decisions can improve them. An owner who only sees a finished preparation is managing too late. For a separate discussion of research-manufacturing boundaries, see Dispense Times’ guide to clinical research manufacturing for compounding pharmacies.

References

1. U.S. Food and Drug Administration. Human Drug Compounding Laws. Accessed July 19, 2026. FDA.
2. U.S. Food and Drug Administration. Compounding and the FDA: Questions and Answers. Accessed July 19, 2026. FDA.
3. U.S. Food and Drug Administration. FDA to Compounders: Know Your Bulks and Excipients Suppliers. Accessed July 19, 2026. FDA.
4. U.S. Food and Drug Administration. Compounding and the FDA: Questions and Answers. Accessed July 19, 2026. FDA.
5. U.S. Food and Drug Administration. Mitigating Risks of Compounded Drugs Through Surveillance. Accessed July 19, 2026. FDA.