503A vs 503B Compounding Pharmacies, and What's Legal for Compounded GLP-1s in 2026

Status checked October 18, 2026. This area changes month to month; check the FDA links before you act.

503A vs 503B at a glance

FDA's own summary: state boards have "primary responsibility for the day-to-day oversight" of 503A pharmacies, outsourcing facilities are "primarily overseen by FDA," and "compounded drugs are not FDA-approved" (FDA). FDA's registry listed 98 outsourcing facilities in its September 30, 2026 update (FDA registry). There is no FDA list of 503A pharmacies, because states license them.

Which one a telehealth brand uses

Usually a 503A. The DTC telehealth model already produces what 503A requires: a licensed clinician writes a prescription for each patient, and the pharmacy compounds or dispenses it and ships it to that patient. That fits hormones, dermatology formulas and other compounded lines where no approved product is being copied.

Brands used 503B facilities during the GLP-1 shortage for scale and batch production. With semaglutide and tirzepatide off the shortage list and not on the 503B bulks list, that route is closed for those two drugs (FDA).

How pharmacy fulfilment fits in your stack

A typical brand owns the customer, the funnel and the trademark. An independent medical group prescribes (see our guide to friendly PC and MSO structures). A licensed pharmacy compounds or dispenses and ships, often in packaging styled for the brand. The platform in the middle handles intake, the medical record and routing prescriptions to the pharmacy.

One line in that setup now draws FDA letters: branding that makes the telehealth company look like the compounder. FDA's March 2026 letters targeted "advertising drug products branded with the telehealth firm's name or trademark without qualification" (FDA). Say clearly who compounds the product.

Checking a pharmacy partner

No one publishes a ranking of "best 503A pharmacies." Check these instead:

• the pharmacy's license in its home state, and a non-resident license in every state you'll ship to (some states, such as California, also require a separate sterile compounding license, Cal. Bus. & Prof. Code §4127.2);
• FDA's warning letter database for the pharmacy's name;
• for a 503B: its row in FDA's registry, including last inspection, Form 483 and recalls;
• optional accreditation such as ACHC's PCAB program;
• for GLP-1s: whether the active ingredient comes from a supplier on FDA's import "green list" (Import Alert 66-80) and is the base form, not a salt;
• its LegitScript or NABP status. LegitScript expects your fulfilment partners to be certified or accredited (our LegitScript guide).

Single-pharmacy dependence is an operational risk too. Build in a second pharmacy before you scale.

Compounded GLP-1s: the timeline

What's still allowed, and what isn't

Still possible (subject to state law and every 503A condition):

• A 503A pharmacy compounding semaglutide or tirzepatide for an identified patient, on a valid prescription, where the product is not essentially a copy. FDA treats a product as a copy if it has the same active ingredient in the same, similar or easily substitutable strength and can be used by the same route as the approved drug. It isn't a copy when the prescriber determines and documents that a change makes a significant difference for that patient (FDA). A price saving or patient preference alone doesn't count.
• FDA says it doesn't currently intend to act if a 503A pharmacy fills four or fewer prescriptions of a given copy in a month. That's an enforcement policy, not a right, and it doesn't support a DTC brand at any scale.
• Prescribing FDA-approved Wegovy, Zepbound and similar products through telehealth. That's not compounding.

Not allowed, or very high risk:

• 503B batch compounding of semaglutide or tirzepatide.
• "Personalized" copies at volume. FDA says semaglutide with B12 can be a copy when each strength is within 10% of the commercial product. In the Empower letter, FDA called prescriber notes "repeated verbatim across many records" a sign the differences were "pretextual" (FDA). A templated intake checkbox that every patient ticks is the pattern to avoid.
• Salt forms (semaglutide sodium or acetate), retatrutide and cagrilintide, and anything labelled "research use only" (FDA).

Marketing claims FDA keeps citing

FDA reaches telehealth websites through the rule that a compounded drug is misbranded if its advertising is "false or misleading in any particular" (FD&C Act §502(bb)). Its June 2026 guidance lists five problem areas (FDA):

The FTC covers the rest: pricing, testimonials and reviews. In its 2025 case against the telehealth company NextMed, it challenged advertised prices that left out the drug, labs and consults; fake testimonials; and payments to change negative reviews (Alston & Bird summary). Before-and-after photos carry risk under both FTC and FDA rules.

LegitScript applies the same lines when it certifies a brand, so the claims you write also decide whether you can advertise (our LegitScript guide).

What this means if you're launching now

• Don't build a brand whose whole offer is a cheaper copy of Wegovy or Zepbound. That model is what the 2025–2026 enforcement targets.
• Weight-loss brands can still work with FDA-approved medications, genuinely individualized prescribing, or a wider care program, as long as the claims are strictly accurate.
• Many profitable verticals don't involve copying an approved drug at all. Hormone therapy, dermatology formulas and hair loss are common examples. They still need careful claims and a real clinical process.
• Your pharmacy partner's compliance becomes your risk. Check its warning letters and inspection history before you sign, and keep a second pharmacy ready.

---