What the statute requires, and what it leaves to you

A qualification file is a record of what was checked, by whom, against what, and in what order. It is not a folder of certificates. An inspector reading it is not asking whether the material was good, but whether anyone was in a position to know.

For a pharmacy compounding under section 503A, 21 U.S.C. 353a(b)(1)(A) sets three conditions on a bulk drug substance. The first is compendial and has three limbs: it complies with an applicable United States Pharmacopoeia or National Formulary monograph if one exists, together with the United States Pharmacopoeia chapter on pharmacy compounding; if no monograph exists, it is a drug substance that is a component of a drug approved by the Secretary; and if neither, it appears on the list the Secretary develops by regulation. The second is that it is manufactured by an establishment registered under section 510. The third is that it is accompanied by a valid certificate of analysis. For an outsourcing facility, 21 U.S.C. 353b(a)(2) sets a further condition ahead of those: the bulk drug substance appears on the list the Secretary establishes for substances for which there is a clinical need, or the drug compounded from it is on the drug shortage list at the time of compounding, distribution and dispensing. Its monograph condition is also worded more broadly, reaching another compendium or pharmacopeia recognized by the Secretary, and it carries no cross reference to the compounding chapter.

The term is defined, and the definition has moved. 21 CFR 207.1 states that bulk drug substance, as referenced in sections 503A(b)(1)(A) and 503B(a)(2), means the same as active pharmaceutical ingredient. Section 503B cites that address and adds the words or any successor regulation. Section 503A cites it without them. Either way, 207.1 is the provision that carries the definition today.

Read them for what they do not say. None requires that the establishment has been inspected, that the certificate is correct, or that the seller is anyone in particular.

Registration is a fact about an establishment, not an endorsement of it

The registration condition is the one most often misread, and the regulation anticipates the misreading. 21 CFR 207.77 states that registration of an establishment or listing of a drug does not denote approval of the establishment or the drug, nor that a product may be legally marketed. It goes further: a representation creating an impression of official approval on that basis is misleading and constitutes misbranding.

So the check is a lookup, not a call. FDA publishes the Drug Establishments Current Registration Site, a publication of currently registered establishments which manufacture, prepare, propagate, compound or process drugs distributed in the United States. Record the firm name exactly as registered, the registered address, and the establishment identifier. A seller's letterhead name and the registered name of the plant that made the lot are often different strings, and a file holding only the first has recorded the wrong party.

FDA's Inspection Classification Database gives the final classification of an inspection, and its own note is worth reading first: it is not a comprehensive listing of all conducted inspections, and state inspections, pre-approval inspections and inspections awaiting a final enforcement action are excluded. A null result is evidence about the database, not the establishment.

A third record is the List of Drug Master Files, the weakest of them. FDA states that drug master files are neither approved nor disapproved. A Type II number points to a holder and a subject, and does not replace the registration lookup.

The identity test you cannot delegate

A certificate of analysis is the manufacturer's claim about a lot, and it can stand in for a great deal of testing. 21 CFR 211.84(d)(1) requires at least one test to verify the identity of each component, and specific identity tests where they exist. 211.84(d)(2) then sets the trade: a report of analysis may be accepted from the supplier in lieu of testing for purity, strength and quality, provided that at least one specific identity test is conducted on such component by the manufacturer, and provided that the manufacturer establishes the reliability of the supplier's analyses through appropriate validation of the supplier's test results at appropriate intervals. Two conditions, both continuing, neither satisfied by filing the certificate.

One point of scope, routinely misstated. Part 211 is manufacturing practice for finished pharmaceuticals, and 21 U.S.C. 353a(a) provides that section 501(a)(2)(B) does not apply to a drug compounded under 503A. It does bind an outsourcing facility, since 21 U.S.C. 353b(a) exempts a compounded drug from only sections 502(f)(1), 505 and 582. For a 503A pharmacy, 211.84 is not a rule. It is the reasoning a board inspector applies anyway.

ICH Q7 puts numbers on the second half, with one caveat on scope. The guide governs the manufacture of active ingredients, so section 7.3 addresses the materials an API manufacturer receives rather than the API a pharmacy receives. It is read here as the reasoning a supplier is held to, not as a rule binding the buyer. Section 7.30 allows a supplier's Certificate of Analysis in place of other testing, provided the manufacturer has a system in place to evaluate suppliers, and holds the identity test back: at least one test to verify the identity of each batch, subject to the exception at 7.32. Under 7.31, full analyses should be conducted on at least 3 batches before in-house testing is reduced, and thereafter at appropriate intervals, compared with the Certificates of Analysis.

For a compounding pharmacy the operative text is USP <797> 9.3.1. An active pharmaceutical ingredient complies with the USP-NF monograph if one exists, carries a certificate of analysis showing that test results meet expected quality, and, in the United States, must be manufactured by an FDA-registered facility. Outside the United States it must comply with the laws and regulations of the applicable regulatory jurisdiction. The alternative path, where a designated person selects an acceptable and reliable source and establishes identity, strength, purity and quality by reasonable means, is written for components other than active ingredients. It does not open a route around the registered-facility requirement for an API.

The same section closes one door outright, and it is a label check rather than a laboratory one. A component labeled not for pharmaceutical use, not for injectable use, not for human use, or carrying an equivalent statement, must not be used to compound a sterile preparation.

A manufacturer and a distributor are two different files

ICH Q7 section 17 applies to any party other than the original manufacturer who may trade, take possession of, repack, relabel, distribute or store an active ingredient, and states that all of them should comply with the guide. Read it before accepting a distributor's certificate as the whole record.

Section 17.20 lists what such a party retains and makes available, and that list is a qualification checklist in itself: the identity and address of the original manufacturer, purchase orders, bills of lading, receipt documents, the manufacturer's batch number, transportation and distribution records, all authentic Certificates of Analysis including the original manufacturer's, and the retest or expiry date. Section 17.61 puts it the other way round: the supplying party provides the original manufacturer's name and the batch numbers.

Under 17.62 the agent also provides that identity to a regulatory authority on request, so it is not a secret a buyer can be asked to accept as withheld. Under 17.50, stability studies should be conducted where the material has been repacked into a different type of container than the original manufacturer used. A repacked lot carrying the original retest date in a container that manufacturer never used is a gap visible from the paperwork.

Two federal definitions disagree about whether an active ingredient is a drug

The licensing question is whether the party shipping the material needs a wholesale distributor license, and two federal definitions answer it differently. 21 CFR part 205 sets the federal guidelines for state licensing of wholesale prescription drug distributors. 205.3(e) is the definition that matters: prescription drug means any human drug required by federal law or regulation to be dispensed only by prescription, including finished dosage forms and active ingredients subject to section 503(b). Active ingredients are named. 205.4 requires every wholesale distributor engaging in interstate wholesale distribution to be licensed by the state licensing authority. Part 205 is a floor and states build above it. The distributor must hold a license from its own state under 205.4, and nearly every state separately licenses a nonresident distributor shipping into it, so a buyer verifies two things: the shipper's home-state license, and the nonresident license its own state issued to that shipper.

The Drug Supply Chain Security Act runs the other way. Its definition of product, at 21 U.S.C. 360eee(13), reaches a prescription drug in a finished dosage form, and excludes drugs compounded in compliance with section 503A or 503B. Neither the bulk substance nor the preparation made from it is a product under that Act.

So no transaction information, transaction history or transaction statement arrives with a bulk substance, and none leaves with the preparation compounded from it. The electronic traceability a pharmacy takes for granted on a finished prescription drug does not exist here. The qualification file is the traceability.

The API supplier qualification checklist, in the order the file is built

Depth is scaled to risk, and the risk concentrates in sterility and endotoxin where the material will be compounded into an injectable preparation, in identity for anything with close structural analogs, and in traceability of origin wherever the seller is not the maker.

• Whether a USP-NF monograph exists for the substance, or which limb of 21 U.S.C. 353a(b)(1)(A)(i) applies instead.
• The establishment, by registered name, registered address and establishment identifier, taken from the registration site rather than from the seller.
• The seller's relationship to that establishment. If they differ, ICH Q7 section 17 governs and the file needs the original manufacturer's identity and batch numbers.
• The shipping distributor's home-state license, and, where your own state separately licenses nonresident distributors, the nonresident license it issued to that shipper — both verified against the issuing state board rather than a copy the seller supplied.
• The lot certificate read against the specification: a named method for each attribute, and the acceptance limit printed beside the measured figure.
• An identity test performed by you, on the container in front of you, by a method independent of the assay that produced the purity figure.
• The receipt examination required by USP <797> 9.3.2: packaging, labeling, condition, any temperature-sensing indicator, and prompt segregation of anything of unacceptable quality.
• The date of receipt on any package lacking a vendor expiration date, with a conservative expiration date not exceeding 1 year after receipt, per USP <797> 9.3.2.
• The periodic full analysis compared against the certificates, per 21 CFR 211.84(d)(2) and ICH Q7 7.31.
• A written quality agreement allocating who does what. FDA's guidance Contract Manufacturing Arrangements for Drugs: Quality Agreements, docket FDA-2013-D-0558, is the closest published federal model.
• A review cycle with a named owner, an interval, and the triggers that force an early review: a change of manufacturing site or synthetic route, a failed lot, or a recall.

What this means for a buyer

Almost every item above is verifiable from outside the transaction. The registration is in a published file. The inspection classification is in a public database with its limits printed on it. The monograph is in the compendium. The license is with the board that issued it. A buyer who treats those four as questions for the seller has turned four independent checks into one.

What a seller alone can give is narrow: the establishment that made the lot, the batch number it carries, the authentic certificate that traveled with it, and a straight answer about what changed. A seller who will not name the manufacturer of a lot is declining ICH Q7 17.61 and 17.62.

GradeBio keeps this file on the incoming side, which is the same work read from the other direction. Either way the test of it is not whether the material was good. It is whether a question raised long after the lot was used can still be answered from the record.

Sources

1. Federal Food, Drug, and Cosmetic Act section 503A 21 U.S.C. 353a(a) and 353a(b)(1)(A)(i) to (iii)
2. Federal Food, Drug, and Cosmetic Act section 503B 21 U.S.C. 353b(a) and 353b(a)(2)(B) to (D)
3. FDA, requirements for foreign and domestic establishment registration and listing 21 CFR 207.1, definitions of active pharmaceutical ingredient and bulk drug substance
4. FDA, legal status conferred by registration and listing 21 CFR 207.77
5. FDA, Drug Establishments Current Registration Site DECRS, FDA drug approvals and databases
6. FDA, Inspection Classification Database FDA inspections, compliance, enforcement and criminal investigations
7. FDA, drug master files FDA, Drug Master Files (DMFs); List of Drug Master Files (DMFs)
8. FDA, current good manufacturing practice for finished pharmaceuticals 21 CFR 211.84(b), (d)(1), (d)(2), (d)(3) and (d)(6)
9. ICH Q7, Good Manufacturing Practice Guide for Active Pharmaceutical Ingredients sections 7.11, 7.12, 7.30, 7.31, 7.33, and section 17 including 17.10, 17.11, 17.20, 17.41, 17.50 17.61 and 17.62
10. United States Pharmacopeia, Pharmaceutical Compounding: Sterile Preparations USP <797>, sections 9.3 9.3.1 and 9.3.2
11. FDA, guidelines for state licensing of wholesale prescription drug distributors 21 CFR 205.3(e) 205.3(f) and 205.4
12. Drug Supply Chain Security Act definitions 21 U.S.C. 360eee(13), definition of product
13. FDA guidance for industry Contract Manufacturing Arrangements for Drugs: Quality Agreements, docket FDA-2013-D-0558, final guidance
14. FDA, bulk drug substances used in compounding under section 503A FDA human drug compounding 503A bulks list