The due-diligence file: what to have on record before you sign with a compounding pharmacy

As of 26 September 2026, the file to keep before signing with a compounding pharmacy or sourcing platform holds five records: who fills your orders and where that pharmacy is licensed, the security claim and its document, who answers for an order, your price terms, and the shipping and delay terms. Each entry carries its source and the date read.

The file is the record of why you chose a supplier, not a verdict on it. A quote gives you a price on a day, not who fills the order, whose license covers your state or who answers when a shipment is late.

One consultancy makes the same case. Restore Health Consulting wrote on 18 May 2026 that"structured supplier due diligence is no longer optional"Source 9, and its list of things to confirm includes supplier licensure, the FDA registration status of outsourcing facilities, and certificates of analysis with batch documentation.Source 9What a file adds is each supplier's own words, with a date.

This piece builds the file from Clinic Partner Guide'sCompounded Sourcing Platform IndexSource 1, which compares 12 sourcing platforms on 7 criteria read from each platform's own public pages, scored 31 August 2026.Source 2

Five of the index's 7 criteria map onto this file: multi-state coverage, security posture, direct accountability, pricing transparency and turnaround.Source 2Of the 84 criterion cells (7 criteria, 12 platforms, scored 31 August 2026), 12 are not stated.Source 2We first reported this inour open-data analysisSource 11on 19 September 2026; it holds on the 26 September 2026 re-read.Source 2All 12 gaps sit in three of the file's five items:

Shipping and delay terms (turnaround, 10% weight): not stated for 6 of 12 platforms (scored 31 August 2026) — AutoPilotRx, Ironsail Pharma / ImpetusOne, Peptide Association Pharmacy Directory, Find My Chemist, Find My Compounder and the APC / A4PC Pharmacy Locator.Source 2

Price terms (pricing transparency, 20% weight): not stated for 5 of 12 platforms — VitaRelay, Ironsail Pharma / ImpetusOne, CLR RX, Find My Compounder and the APC / A4PC Pharmacy Locator.Source 2

Security claim (security posture, 10% weight): not stated for 1 of 12 platforms, Ironsail Pharma / ImpetusOne ("Nothing published on the public site.").Source 2

4 of the 6 turnaround gaps are directories, which take no order, so our record marks turnaround not applicable or not published.Source 2

Criteria evidenced, the share of criteria weight a platform published enough on to be scored, runs from 60% to 100% across the 12, with a mean of 85.8% (our calculation).Source 2Under ourmethodologySource 4, an unaddressed criterion "is excluded from its weighted average rather than scored zero", so read the evidence share beside any score.Source 4

Clear answers do exist. Our record notes that AutoPilotRx states "30 plus vetted 503A pharmacies with state licensing shown per pharmacy", and that CompoundingFinder states "licensed U.S. compounding pharmacies with licensing verified before options are presented".Source 2Neither replaces checking the license yourself.

What each publishes, not a verdict on service.In the methodology's words, a low transparency score "is a statement about its disclosure and not about its service".Source 4

To start your own file, download the index asCSVSource 3orJSONSource 2, free under CC BY 4.0; each row carries a reason sentence for every criterion and the date the pages were read.

Security posture checks, in the index's definition, "Secure script handling, credential checks, provider-only access."Source 211 of the 12 records publish something on it, scored 31 August 2026.Source 2Among them: a security page or section (Fizy Health, VitaRelay), a Trust section (CLR RX), a licensing check before options are shown (CompoundingFinder), and accreditation status with a "How We Verify" standard (Peptide Association Pharmacy Directory).Source 2

A claim on a page is a sentence, not a record. For the file, get the document it refers to, and note who issued it, which company it names, when it was issued and when it expires. Where the issuer offers a public lookup, check there and date the check.

Accreditation can also be searched: the Peptide Association Pharmacy Directory states 397 listed pharmacies, 303 of them PCAB accredited, as our record shows.Source 2That is its count, not one Clinic Partner Guide has verified.

What each publishes, not a verdict on service.

This file covers commercial and operational records only. Clinic Partner Guide does not assess clinical quality, formulations or outcomes. Those questions belong with your prescribers, your pharmacist and your own counsel.

The record is also a snapshot: "Scores are a snapshot of published information on the date shown."Source 4Re-read the supplier's own page on the day you sign, and date the copy you keep.

Regulatory context, for clinics whose orders include compounded GLP-1s: FDA's shortage listings for tirzepatide (December 2024) and semaglutide (February 2025) have ended, and FDA has since acted against marketing of compounded GLP-1s; what a 503A pharmacy may compound is patient-specific and varies by state. Source: fda.gov, "FDA clarifies policies for compounders as national GLP-1 supply begins to stabilize", read 2026-09-26.Source 10