A 503B outsourcing facility is a small drug manufacturer. It registers with FDA, follows cGMP, reports its products twice a year, and is inspected on a risk-based schedule. Most launches that go badly do so because the team built a compounding pharmacy and then tried to add manufacturing controls afterwards. This playbook puts the decisions in the order that avoids that: what you will make and for whom, then the regulatory frame, then the building, then the quality system and the software that holds it up, then the people, then the customers.
1. Business model: what, for whom, at what margin
Decide the product set and the customer set before the floor plan. A 503B sells to hospitals, ambulatory surgery centres, clinics and other prescribers for office use, and may also fill patient-specific prescriptions. The economics differ sharply between a narrow sterile line (a handful of syringes and vials at volume) and a broad catalogue; the first needs fewer changeovers, fewer stability studies and a simpler environmental programme. Write down the candidate products, the dosage forms, the sterile versus nonsterile split, and whether any are hazardous under NIOSH's list — each of those is a facility decision. Then model the unit cost including QC testing per batch, because sterility, endotoxin and potency testing on small batches can dominate the margin. If you are undecided between a 503A and a 503B, read 503A vs 503B first; many organisations run both, with the 503A serving patient-specific demand.
2. The regulatory frame: registration, fees, reporting
Registration is with FDA, electronically, and is renewed annually. An outsourcing facility pays an annual establishment fee (with a small-business reduction available on application) and a re-inspection fee if FDA has to return. Twice a year, in June and December, the facility reports every product it compounded in the previous six months, by active ingredient, strength, dosage form and quantity. Adverse events are reported to FDA. The facility must compound under the direct supervision of a licensed pharmacist, and its labels must carry the elements listed in the statute: "This is a compounded drug", the facility name and address, lot or batch number, dosage form and strength, quantity, BUD, storage and handling, and, for office stock, "Not for resale" and the statement that the drug was not compounded for an identified patient.
A practical point: FDA publishes the list of registered outsourcing facilities together with inspection outcomes, Form 483s and warning letters. Hospital purchasing departments read that list. Your regulatory history is part of your sales collateral from the first inspection onward.
3. Product selection under the bulks list
A 503B may compound from a bulk drug substance only if it is on FDA's 503B bulks list or the drug is on FDA's shortage list at the time of compounding. Category 1 substances — nominated with adequate support and still under evaluation — may be used in the interim under FDA's enforcement policy; Category 2 substances may not. Separately, a 503B may not compound what is essentially a copy of an approved drug unless a prescriber documents a clinical difference for the patient, or the approved drug is on the shortage list. Check each candidate product against both lists before any stability work is commissioned, and check again before each batch, because list status changes.
| Question | Where the answer lives | What it decides |
|---|---|---|
| Is the API on the 503B bulks list (Category 1) or the shortage list? | FDA bulks list / drug shortage database | Whether the product can be made at all |
| Is it essentially a copy of an approved drug? | FDA guidance: Compounded Drug Products That Are Essentially Copies (503B) | Whether it can be made without a documented clinical difference |
| Is it hazardous? | NIOSH list of hazardous drugs | Whether a USP <800>-compliant containment suite is needed |
| Sterile or nonsterile? | Your product decision | ISO classification, environmental programme, sterility testing per batch |
| What BUD will you label? | Your stability data (211.166) | Distribution reach and inventory policy |
4. Facility, utilities and qualification
This is the long pole and the largest capital line. For sterile work the design is driven by 21 CFR 211.42 and 211.113 and, in practice, by USP <797> as the floor: ISO 5 primary engineering controls inside ISO 7 buffer rooms with ISO 8 anterooms, pressure cascades, HEPA-filtered HVAC with documented air changes, and a separate negative-pressure suite if hazardous drugs are handled. The facility must be qualified — design, installation, operational and performance qualification — with smoke studies, HEPA integrity tests, and airflow visualisation documented before the first engineering batch. Utilities (water, compressed gases, environmental monitoring instruments) need their own qualification and calibration records. Plan the material and personnel flows on paper before construction: crossing flows are one of the most common 483 observations.
- ✓Cleanroom design reviewed against 211.42 and <797> by someone who has been through a 503B inspection
- ✓Pressure differential, temperature and humidity monitored continuously or each shift, with alarms and records
- ✓Environmental monitoring programme with defined sample sites, frequencies and action limits, written before the first media fill
- ✓Media fills and gloved-fingertip testing scheduled for every compounder before they touch product
- ✓Hazardous drug suite externally vented and negative-pressure if any product is on the NIOSH list
- ✓Cold, frozen, controlled-substance vault and quarantine storage physically separated and access-controlled
5. The quality unit and the document set
cGMP requires a quality unit with the authority to approve or reject components, procedures, and finished product, independent of production. Hire the head of quality early — before the SOPs are written, not after — and give that person the pen. The document set a new 503B needs before its first commercial batch is large; the table lists the core records, the regulation that expects each, and where it lives in Pharmacy Flow.
| Record | cGMP reference | In Pharmacy Flow |
|---|---|---|
| Master and batch production records | 21 CFR 211.186, 211.188 | Formulation versions; batches with component lots and quantities consumed, finished lot, BUD, QC tests, release signature |
| Laboratory release records | 211.165, 211.194 | QC tests per lot with result, spec and status; release blocked until all Pass |
| Stability programme | 211.166 | Formulation BUD, capped at earliest component expiry per lot |
| Deviation and OOS investigations | 211.192 | Deviations with category, severity, linked lot and CAPA |
| Change control | 211.100, 211.160 | Change control records with approval signatures |
| Controlled documents and SOPs | 211.100, 211.180 | Document control with versions and signature-required approval |
| Environmental monitoring | 211.42, 211.113 | Readings per room and metric with action limits and derived status |
| Distribution records | 211.150, 211.196 | Serialized units, cartons and pallets with carrier scan history; trace per lot |
| Recall procedure | 21 CFR 7 | Recall records with class, per-unit disposition and effectiveness reconciliation |
| Electronic signatures and audit trail | 21 CFR Part 11 | Re-authenticated signatures; append-only approvals, events and audit log |
6. Systems: what has to be electronic from day one
Paper batch records work until the first investigation, when nobody can find the lot that went into the batch that went into the syringe on the ward. The point of running the operation on a system like Pharmacy Flow is not convenience but enforcement: the finished lot cannot be released until every QC test is recorded as Pass and a release signature is on record; the BUD cannot be later than the earliest component expiry; an order cannot ship without a pack-verify scan; a technician cannot release a lot because the release function checks a permission that role does not hold. Every unit carries a GS1 DataMatrix serial and every carton an SSCC, so a recall is a query on a lot that returns every shipment and unit. Those controls exist on day one of a new facility because they live in the database, not in a culture that has not formed yet. The Part 11 explainer covers what the signature and audit trail must look like, and security and compliance covers the data controls.
Building a 503B? Show us your product list
We will map your candidate products, facilities and customers onto the platform and tell you plainly what it does and does not cover.
7. People and training
A 503B needs a licensed pharmacist in direct supervision of compounding, a head of quality independent of production, compounders qualified by media fill and gloved-fingertip testing on a schedule, and someone who owns environmental monitoring and trending. Training records are a 211.25 requirement and an early inspection request. Keep role separation real: in Pharmacy Flow the Technician role cannot release lots or sign QMS records, Pharmacist and QA can release, and QA alone holds formulation approval and QMS sign-off. Setting that up on day one means separation of duties is enforced rather than remembered.
8. Customers and go-to-market
Hospitals and surgery centres buy from 503Bs to replace products they cannot get, to move compounding out of their own pharmacy, or to secure supply of a specific presentation. Their vendor qualification will ask for your FDA registration, inspection history, a sample batch record, your stability data and your recall procedure. Make ordering easy: a partner portal where a buyer can place standing orders, see shipment status and view and print invoices, and an ordering API for health-system integrations that is idempotent and key-authenticated. Both exist in the platform; see partners and the ordering API. For sourcing, the public supplier directory and RFQ marketplace cover APIs, excipients and components. Policy interest in domestic manufacturing is a tailwind, but the buying decision is made on your inspection record and your fill rate.
9. The first FDA inspection
FDA inspects outsourcing facilities on a risk-based schedule and often within the first year or two of registration. Published 483 observations for 503Bs cluster in a few areas: inadequate environmental monitoring or trending, sterility assurance (media fills, aseptic technique, smoke studies), cleaning and disinfection records, BUDs not supported by stability data, incomplete batch records, and investigations that did not extend to other potentially affected lots. Prepare by running a mock inspection against 21 CFR 211 with someone who has done real ones, and by being able to produce, for any lot, the complete record on demand: components and their certificates of analysis, the batch record, the QC results, the release signature, the environmental data for the session, the distribution list and — if it comes to it — the recall population. If those come out of one system in minutes, the inspection goes differently.
Related reading: USP <800> checklist if any product is hazardous, sterile compounding software for the environmental programme, serialization and DSCSA for identifiers and trace, and the platform overview.
Frequently asked questions
How long does it take to launch a 503B?+
It depends on the facility. A sterile suite from bare shell — design, construction, HVAC balancing, qualification, media fills — is the long pole, and quality documentation runs in parallel. Registration itself is quick once the facility exists. We do not quote a number because it varies by scope, contractor and state; your architect and validation partner will give you one for your building.
Do I need a pharmacy licence to run a 503B?+
Federally, an outsourcing facility need not be a licensed pharmacy, but compounding must be by or under the direct supervision of a licensed pharmacist. Many states nevertheless require a state permit or registration for a 503B operating in or shipping into the state. Check each state you will sell into.
Can a 503B fill patient-specific prescriptions?+
Yes. A 503B may compound with or without a patient-specific prescription. Office stock — compounded without a prescription for a healthcare facility or prescriber — is what distinguishes it from a 503A.
What is the hardest part of launching a 503B?+
Sterility assurance and the environmental programme, followed by the quality document set. Both must exist and be working before the first commercial batch, and both are heavily represented in published 483s. Systems are the fastest piece to stand up, which is why they should be in place before the first engineering batch rather than after.
Which products can a 503B make?+
Products compounded from bulk substances on the 503B bulks list (Category 1 while under evaluation) or drugs on FDA's shortage list, that are not essentially copies of approved drugs, not on the withdrawn or difficult-to-compound lists. Check each candidate before investing in stability studies.
Does Pharmacy Flow replace a validation partner or regulatory counsel?+
No. It gives you the enforced batch, release, quality and distribution records and the change history and test evidence to support your computer system validation. Facility qualification, SOP authorship, stability protocols and regulatory strategy are your team's and your advisors' work.