Your progress
0 of 20 complete
Click any item to mark it complete. Progress is saved in your browser.
State Licensing Verification
Confirm the pharmacy holds valid licenses in every relevant state
Critical
-
Active pharmacy license in your state503A pharmacies must hold a license in every state where prescriptions originate. Search your state board's license lookup portal. License should show "active" with no restrictions or disciplinary actions. Use NABP's state board directory →Veridian verifies
-
No active disciplinary actions or consent decreesCheck state board disciplinary records. Even a minor consent decree from years ago is a red flag. Ask the pharmacy directly for their disciplinary history — their answer (and willingness to share) is informative.Veridian verifies
-
DEA registration (if dispensing controlled substances)If your clinic uses compounded controlled substances (ketamine, some peptides), confirm the pharmacy holds a valid DEA registration. Search at the DEA Diversion Control Division website.
Accreditation Status
Third-party verification of quality and standards compliance
Required
-
NABP e-Profile or accreditation verificationThe National Association of Boards of Pharmacy (NABP) maintains a database of licensed pharmacies and disciplinary actions. Search at nabp.pharmacy. An NABP-accredited pharmacy (PCAB or equivalent) is a strong trust signal.Veridian verifies
-
PCAB accreditation (for 503A) — strongly recommendedThe Pharmacy Compounding Accreditation Board (PCAB) is the gold standard for 503A quality verification. Not legally required, but PCAB-accredited pharmacies have undergone independent quality audits. Check at pcab.org.
-
FDA registration confirmation (for 503B facilities)503B outsourcing facilities must register with FDA. Search the current list at FDA's registered outsourcing facilities page. An absence from this list means they are NOT a legitimate 503B.Veridian verifies
HIPAA Business Associate Agreement
Legally required for any pharmacy handling patient PHI
Critical
-
Signed BAA is in place before any patient data is sharedA compounding pharmacy that receives patient prescriptions is handling Protected Health Information (PHI). A signed BAA is legally required under HIPAA before transmitting any PHI. See our BAA guide →Veridian verifies
-
BAA covers specific types of PHI being shared (names, Rx info, health conditions)A generic BAA may not adequately cover compounding-specific data flows. Confirm the agreement explicitly covers prescription data, patient identifiers, and any clinical notes transmitted to the pharmacy.
-
BAA includes breach notification requirementsThe BAA must obligate the pharmacy to notify you within 60 days of discovering a breach affecting your patients' PHI. Confirm this clause is present and enforceable.
Quality & Manufacturing Standards
Beyond certification: actual practices on the compounding floor
Required
-
Certificate of Analysis (CoA) available for each batchA CoA documents third-party testing results for potency, sterility, and endotoxin levels for each compounded batch. Any reputable pharmacy will provide this on request. If they hesitate or can't provide it — stop.Veridian verifies
-
USP 797 compliant sterile compounding (for injectables)Any injectable compound (GLP-1 vials, peptides, IV preparations) must be compounded in a USP 797-compliant clean room with documented environmental monitoring. Ask for their last environmental testing records.
-
Beyond-Use Dating (BUD) documented and appropriateBUD is the date after which a compounded medication should not be used. BUDs must be based on stability testing or USP/FDA-approved standards — not arbitrary dates. Ask for BUD methodology documentation.
-
No active FDA warning letters (for 503B)Search the FDA Warning Letters database by pharmacy name. A warning letter indicates significant compliance failures. One warning letter resolved years ago may be acceptable; active or multiple warnings are not.Veridian verifies
Insurance & Liability Coverage
Protecting your clinic when something goes wrong downstream
Required
-
Pharmacy carries professional liability (E&O) insuranceRequest a Certificate of Insurance showing active professional liability (errors and omissions) coverage. Minimum $1M per occurrence is standard. No certificate = significant risk.Veridian verifies
-
Product liability coverage for compounded medicationsProfessional liability may not cover patient harm from the medication itself. Confirm the pharmacy has product liability coverage that explicitly covers compounded medications — this is not universal.
-
Your clinic's malpractice insurer approves compounded sourcingSome malpractice carriers have restrictions on prescribing compounded medications or require prior notification. Verify your coverage before starting. Don't discover gaps after an incident.
Ongoing Relationship Monitoring
Compliance isn't a one-time check — it requires continuous oversight
Best Practice
-
Annual license re-verification scheduledPharmacy licenses can be suspended or restricted without notice to you. Set a calendar reminder to re-verify state licenses annually at minimum. License status can change mid-year.
-
Process for receiving pharmacy quality notificationsAsk whether the pharmacy has a formal process for notifying partner clinics of recalls, quality holds, or regulatory actions. A quality-focused pharmacy has this. One that doesn't is a yellow flag.
-
Written agreement or supplier contract in placeBeyond the BAA, a written supplier agreement defining terms, quality standards, recalls, and dispute resolution protects both parties. Even a simple letter agreement is better than nothing.
-
Patient consent forms updated to reference compounded medicationsPatients should be informed they're receiving a compounded medication (not an FDA-approved drug), what that means, and what the alternatives are. Informed consent protects your clinic and respects patients.
Using Veridian? We handle most of this automatically.
Every pharmacy in Veridian's network has been pre-verified for items marked "Veridian verifies" above — state licensing, accreditation, FDA registration status, CoA availability, professional liability, and BAA readiness. You still need to verify items without that tag for your specific practice situation.
Disclaimer: This checklist is for educational purposes only and does not constitute legal or compliance advice. Requirements vary by state, pharmacy type, and clinical context. Some items on this list may be required by law; others are best practices. Consult a healthcare attorney to understand your specific obligations. Last updated: April 2026.
Veridian's licensed pharmacy network is continuously monitored for compliance
Skip the research. Every pharmacy in our network has already been checked against this list — so you can source with confidence from day one.
Apply for Access →