TLDR
Compounding pharmacies operate under a quality framework that spans USP Chapter 797 (sterile compounding), USP Chapter 795 (nonsterile compounding), FDA’s 503A and 503B regulatory pathways, and state board of pharmacy regulations. 503B outsourcing facilities are subject to cGMP requirements comparable to pharmaceutical manufacturers. 503A pharmacies must meet USP standards and state requirements. A well-designed quality management system is the mechanism through which compounding pharmacies demonstrate compliance, manage risk, and respond to FDA and state inspections. This guide explains the quality system requirements across all compounding pharmacy settings.
The two regulatory pathways: 503A and 503B
The Drug Quality and Security Act of 2013 created two distinct regulatory categories for compounding pharmacies, and the quality system requirements differ substantially between them.
503A pharmacies
503A pharmacies are traditional compounding pharmacies that prepare medications pursuant to individual patient prescriptions. They are regulated primarily by state boards of pharmacy. FDA has oversight authority over certain aspects, including the use of bulk drug substances and the prohibition on compounding certain drugs that are essentially copies of commercially available products.
503A pharmacies must comply with USP Chapter 797 for sterile compounding and USP Chapter 795 for nonsterile compounding, along with any additional state board requirements. They are not subject to FDA’s full cGMP requirements (21 CFR Parts 210 and 211), but FDA can and does inspect them for violations of federal law.
503B outsourcing facilities
503B outsourcing facilities compound drugs in bulk without patient-specific prescriptions and sell to healthcare facilities, clinics, and hospitals. These facilities are registered with FDA and are subject to cGMP requirements under 21 CFR Parts 210 and 211. This means their quality system obligations are substantially more demanding than those of 503A pharmacies: process validation, equipment qualification, environmental monitoring programs, batch record requirements, CAPA systems, change control, and supplier qualification all apply.
FDA inspects 503B facilities on a regular schedule and issues FDA Form 483 observations and warning letters to facilities that fail to meet cGMP standards. The most commonly cited deficiencies in 503B inspections include inadequate environmental monitoring, process validation failures, data integrity problems, and insufficient CAPA systems.
USP Chapter 797: sterile compounding requirements
USP Chapter 797 establishes the compendial standards for sterile compounding in all settings: pharmacies, hospitals, clinics, and 503B facilities. The 2023 revision significantly updated Chapter 797, with most provisions taking full effect in November 2023. Key quality system-relevant requirements include the following.
Cleanroom design and classification
USP 797 requires sterile compounding to occur in ISO-classified environments, with specific ISO class requirements for different compounding activities. ISO 5 conditions are required at the point of sterile compounding (inside a primary engineering control such as a laminar airflow workbench or biological safety cabinet). The surrounding secondary engineering control must meet ISO 7 classification for most sterile preparations.
The cleanroom design and its classification must be documented. Initial certification, followed by semi-annual recertification by a qualified person, is required. Certification records are quality documents that must be maintained and available for inspection.
Environmental monitoring
503A pharmacies and 503B facilities must conduct environmental monitoring of their sterile compounding areas. Under the 2023 revision of USP 797, environmental monitoring requirements are more structured and prescriptive than in the 2008 version. Viable air sampling, surface sampling, and personnel monitoring must be performed on a documented schedule, with defined action levels and a documented response procedure for exceedances.
Environmental monitoring exceedances must be investigated. If the investigation identifies a systemic cause (contaminated equipment, personnel technique failure, facility problem), a corrective action is required. This investigation and corrective action process is the same structure as the CAPA process used in pharmaceutical manufacturing. Pharmacies that treat EM exceedances as one-time events without investigation are creating compliance risk with both USP and FDA.
Sterility testing and beyond-use dating
Beyond-use dates (BUDs) determine how long a compounded sterile preparation (CSP) can be used after preparation. USP 797 (2023) revised the BUD categories and the conditions under which extended BUDs can be assigned. Pharmacies that assign extended BUDs must meet sterility testing and endotoxin testing requirements, with documented test methods and specifications.
The sterility testing and BUD assignment process must be documented in a controlled procedure. Test results must be recorded in a way that links them to the specific lot of CSP they represent. Failures require quarantine of the affected lot, notification to dispensing facilities if the lot has already been distributed, and an investigation to determine whether a systemic sterility risk exists.
Personnel training and competency
USP 797 requires personnel involved in sterile compounding to demonstrate initial competency and ongoing competency through documented gloved fingertip sampling, media fills, and aseptic technique observation. These are formal quality assessments, not informal check-ins. Records must document who performed the assessment, what criteria were used, what the result was, and what remedial action was taken if the person did not meet the competency standard.
USP Chapter 795: nonsterile compounding requirements
USP Chapter 795 governs nonsterile compounding, covering preparations such as topical creams, ointments, oral solutions, and suppositories. The quality requirements are less intensive than those for sterile preparations, but they are substantive.
Key requirements include: documented formulation records for each preparation, in-process checks at defined compounding steps, finished preparation quality checks (appearance, pH, weight variation), beyond-use dating based on documented stability data or USP default BUDs, and training and competency documentation for compounding personnel.
The 2023 revision of USP 795 strengthened requirements for stability assessments and introduced a more structured approach to BUD assignment for nonsterile preparations, requiring evidence of physical, chemical, and microbiological stability when extended BUDs are assigned.
Core quality system elements for compounding pharmacies
Document control
Every compounding pharmacy needs controlled procedures for its compounding operations: master formulation records (MFRs) for each preparation, compounding records (the batch records of individual preparations), environmental monitoring procedures, equipment calibration and maintenance procedures, and personnel training records. These documents must be current, approved, and accessible to the personnel who use them.
For 503B facilities, document control must meet the same standards applied to pharmaceutical manufacturers: version control, change control procedures, approval records, and distribution tracking. For 503A pharmacies, state board requirements vary, but USP standards require controlled formulation and compounding records.
Deviation and complaint management
Compounding errors, preparation failures, patient complaints, and adverse events must be captured in a formal deviation or complaint management system. For 503A pharmacies, state reporting requirements may apply. For 503B facilities, FDA’s mandatory reporting requirements for serious adverse events associated with compounded products apply.
The investigation process for a compounding deviation should identify the root cause, assess whether the affected preparation was distributed and to whom, evaluate the risk to patients, and implement corrective actions to prevent recurrence. A quality system that treats complaints as one-time events rather than signals requiring systemic investigation will accumulate recurring problems that eventually appear in an inspection.
Supplier qualification for raw materials
Compounding pharmacies source active pharmaceutical ingredients (APIs), excipients, and packaging from external suppliers. For 503A pharmacies, FDA regulations require that APIs come from FDA-registered suppliers. For 503B facilities, supplier qualification must meet cGMP standards: documented vendor qualification, incoming acceptance testing or certificates of analysis (CoAs) with verification, and periodic re-qualification.
A documented supplier quality management process, including an approved supplier list and qualification records for each supplier of critical materials, is a basic quality system requirement that pharmacy inspections frequently find missing or incomplete.
Equipment qualification and calibration
Equipment used in compounding must be qualified for its intended use and calibrated on a documented schedule. This includes balances, pH meters, laminar airflow workbenches, biological safety cabinets, autoclaves, and refrigerators/freezers used for ingredient or CSP storage. Calibration records must document the calibration date, the standard used, the results, the acceptable tolerance, and the next calibration due date.
For 503B facilities, equipment must be formally qualified (IQ/OQ/PQ) before use in production. Equipment that has not been qualified and calibrated is a cGMP violation that FDA inspectors will cite as a 483 observation.
Change control
Changes to formulations, procedures, equipment, or facilities must go through a formal change control process. A change to a master formulation record, for example, may require re-evaluation of BUD assignments, re-validation of the compounding process, and retraining of personnel. A facility renovation that affects cleanroom air handling requires a re-certification of the affected ISO-classified areas before sterile compounding resumes.
For 503B facilities, the process change notification requirements may apply depending on the nature of the change and whether it could affect product quality or safety for the healthcare facilities purchasing the compounded product.
What FDA finds during compounding pharmacy inspections
FDA’s inspection program for 503B outsourcing facilities is active, and published warning letters and 483 observation data reveal consistent patterns. The most common quality system deficiencies include: environmental monitoring programs with inadequate sampling frequency, missing action levels, or failure to investigate exceedances; sterility testing failures without adequate investigation and product recall assessment; CAPA systems that do not address systemic root causes; master formulation records with incomplete or missing information; and inadequate training and competency documentation for compounding personnel.
For 503A pharmacies, state board inspections focus on similar areas, with particular emphasis on proper segregation of compounding areas, beyond-use dating practices, and the use of only FDA-registered API sources. Pharmacies that receive patient complaints about preparation quality or efficacy and do not investigate them systematically create regulatory exposure.
Building a quality system that works for compounding
A compounding pharmacy quality system does not need to be as complex as a pharmaceutical manufacturer’s, but it needs to be formal, documented, and consistently applied. The core elements are the same: controlled procedures, batch records with complete traceability, environmental monitoring with documented investigation of exceedances, supplier qualification, personnel training records, and a CAPA process that drives systemic improvement.
For 503B facilities operating at commercial scale, an eQMS platform designed for regulated pharmaceutical manufacturing provides the infrastructure needed to meet cGMP requirements without building a paper-based system that becomes unmanageable as volume grows. Cloudtheapp’s configurable platform includes applications for document control, batch records, deviation and CAPA management, environmental monitoring trending, supplier qualification, and change control, all validated to meet FDA’s data integrity requirements. Request a demo to see how Cloudtheapp can be configured for 503B outsourcing facility operations.
Frequently asked questions
Does USP 797 apply to hospital pharmacy cleanrooms?
Yes. USP Chapter 797 applies to all settings where sterile preparations are compounded, including hospital pharmacies, clinic pharmacies, and standalone compounding pharmacies. The standard does not distinguish between institutional and retail pharmacy settings for the purposes of its quality requirements. State boards of pharmacy enforce USP 797 compliance in most jurisdictions.
Are 503A pharmacies subject to FDA inspections?
Yes, though less frequently than 503B facilities. FDA has authority to inspect 503A pharmacies to determine whether they are operating within the exemptions from new drug approval requirements. FDA may also inspect a 503A pharmacy in response to a complaint, an adverse event report, or a drug shortage situation. State boards of pharmacy conduct the primary routine inspections of 503A pharmacies.
What is the difference between a master formulation record and a compounding record?
A master formulation record (MFR) is the equivalent of a master batch record in pharmaceutical manufacturing. It documents the formula, compounding procedure, equipment, and quality checks for a specific preparation. A compounding record (CR) is the specific record of each batch prepared from that MFR, documenting the actual ingredients used (with lot numbers), the personnel who compounded it, the in-process checks performed, and the results. Both are required quality records under USP 797, USP 795, and cGMP for 503B facilities.
Conclusion
Compounding pharmacy quality systems range from the foundational requirements of USP 795 for a small 503A nonsterile pharmacy to the full cGMP quality management infrastructure required of a 503B outsourcing facility competing with pharmaceutical manufacturers for hospital formulary contracts. In every case, the quality system is what FDA, state boards of pharmacy, and hospital customers evaluate when assessing whether a pharmacy’s products are safe, effective, and reliably prepared. Pharmacies that build formal, documented quality systems, rather than relying on informal practices and individual expertise, are better positioned to grow, to win institutional customers, and to pass inspections without consequential findings.
]]>
