How to Qualify a Pharmaceutical Distributor: A Procurement Checklist for Licensing, Certificate of Analysis, and Chain of Custody

Your distributor is your compliance exposure. Every product they ship carries their licensing, their documentation, and their handling — and when an auditor, a board, or a patient-safety event puts a shipment under scrutiny, the question is not whether your supplier seemed reliable. It is whether you can prove they were qualified.

This is the procurement team’s durable framework for vetting any pharmaceutical distributor, before the first order and at every renewal. It runs in a fixed order: verify licensing, require chain-of-custody documentation, demand quality evidence, check independent certifications, and screen for red flags. A distributor that clears all five is qualified. A gap at step one stops the process. For category-specific applications, see our guides on sourcing peptides in 2026, 503A vs. 503B compounding, and GLP-1 sourcing for clinics.

Why Distributor Qualification Is a Compliance Function

FDA is direct on the principle: prescription drugs should be purchased only from wholesale distributors that hold a valid U.S. license and are authorized by law. Unlicensed or unauthorized trading partners expose buyers to counterfeit, stolen, or diverted product — risk that transfers to the facility that stocked and administered it.

Qualification is therefore not a purchasing formality. It is the control that keeps illegitimate product out of your facility and gives you a defensible record when you need one. The five steps below are that control.

Step 1: Verify Licensing and Authorized Trading Partner Status

This is the foundation, and it is a hard gate. Under the Drug Supply Chain Security Act (DSCSA), trading partners may only transact with one another if each is an authorized trading partner — properly licensed and, for wholesalers and third-party logistics providers, reporting to FDA.

Run two checks:

State wholesale distributor license. Confirm an active, in-good-standing license through the board of pharmacy in the state where the distributor operates. The state license is the binding credential.

FDA reporting status. Look the distributor up using FDA’s licensure verification tool, which directs you to both the state website and FDA’s annual reporting database.

One honest caveat, which FDA itself states: appearing in the reporting database does not mean a facility is FDA-approved or in compliance — the annual report is a self-submission. Treat the database as a screen, not a guarantee, and treat the state license as the credential that counts.

Step 2: Require DSCSA Chain-of-Custody Documentation

A compliant distributor can produce a complete traceability record for every transaction. Per FDA’s product tracing requirements, require:

• Transaction Information and Transaction Statement — the product-tracing documentation passed with each transaction.
• A serialized product identifier on each package — a standardized identifier containing the NDC plus a unique serial number, the lot number, and the expiration date, in human- and machine-readable form. This enables package-level traceability.
• Electronic, interoperable exchange — DSCSA’s end state requires secure, electronic, package-level data exchange, with FDA recommending the GS1 EPCIS standard.

Know where enforcement stands so you can set documentation expectations correctly:

• The one-year stabilization period ended November 27, 2024.
• FDA then issued staggered exemptions with phased 2025 dates (May 27 and November 27, 2025) — a tiered ramp, not a single cutover.
• Small dispensers (a company owning the dispenser with 25 or fewer full-time licensed pharmacists or qualified technicians) are exempt from certain enhanced requirements until November 27, 2026.

Finally, confirm the distributor operates a documented suspect and illegitimate product process. When a product is determined illegitimate, the distributor must notify FDA and immediate trading partners within 24 hours, using Form FDA 3911, and remove it from the chain.

Step 3: Demand a Certificate of Analysis and Quality Evidence

A Certificate of Analysis (COA) is the batch-level document that proves required testing was performed and the product conforms to specification. USP General Chapter <1080> standardizes COA content and format and is the reference template for what a COA should contain.

A COA you can rely on includes:

• Product identification and lot/batch number
• Manufacture and expiration dates
• Identity confirmation (for example, HPLC or IR)
• Assay/potency (strength)
• Purity (related substances and impurities)
• Residual solvents, heavy metals, moisture, and microbial limits where applicable

Critically, you should be able to tie the COA’s lot number to the lot number on the DSCSA transaction record and on the package itself. That linkage is what makes the documentation defensible.

Behind the COA sits the manufacturing standard. The product’s manufacturer should be an FDA-registered establishment operating under current Good Manufacturing Practice (cGMP) — the regulatory basis that a product “has the ingredients and strength it claims to have.”

Compounded products carry a different documentation basis. A 503A pharmacy is exempt from cGMP and overseen at the state level; a 503B outsourcing facility is FDA-registered, inspected, and cGMP-compliant. For compounded items, the relevant quality evidence is the COA for the bulk active ingredient from an FDA-registered manufacturer, plus the pharmacy’s 503A or 503B status — not a finished-drug cGMP COA.

Step 4: Check Third-Party Certifications

Independent accreditation is the trust signal that corroborates a distributor’s own claims:

NABP Drug Distributor Accreditation (formerly VAWD). A three-year accreditation from the National Association of Boards of Pharmacy verifying that a facility operates legitimately, is licensed in good standing in the U.S., and securely stores, handles, and ships prescription drugs and devices. Some states require it for licensing.

LegitScript Certification. LegitScript independently verifies a healthcare merchant across nine standards, including medication sourcing and advertising accuracy. It is relied upon by Google, Meta, Microsoft, TikTok, and LinkedIn to approve healthcare advertisers — a strong signal for any online procurement platform.

FDA and DEA registration. FDA establishment registration for the manufacturer; DEA registration (Form 225) for any distributor handling controlled substances, verifiable through the DEA’s registration validation tool.

Step 5: Screen for Red Flags

The final step is a deliberate look for the signals of gray-market, diverted, or counterfeit product. Any one of these halts qualification:

• Prices that are implausibly low — the economics of diverted product.
• No licensing transparency — a distributor that cannot or will not produce its state license, FDA reporting status, or accreditation.
• “Research use only” or “not for human consumption” labeling on a product marketed for therapeutic use — an industry-recognized hallmark of unapproved, untested material that sidesteps oversight.
• No prescription required for prescription-only products.
• Missing or inconsistent lot, serial, or COA data, or gaps in the DSCSA transaction trail.
• Unverified foreign sourcing or transactions in foreign currency without a valid U.S. license.

The Qualification Workflow

Run this sequence on every new distributor and at each renewal:

• 1. License check — active, in-good-standing state wholesale distributor license.
• 2. FDA reporting check — present in FDA’s reporting database (a screen, not a guarantee).
• 3. DEA check — verify registration if controlled substances are involved.
• 4. Accreditation check — NABP Drug Distributor Accreditation, plus LegitScript for an online seller.
• 5. Chain-of-custody test — require a sample Transaction Information and Transaction Statement, and confirm serialized product identifiers and electronic data exchange.
• 6. Quality evidence — require a COA per lot and confirm FDA-registered, cGMP manufacturing; for compounded items, confirm 503A/503B status and bulk-API COA.
• 7. Suspect-product process — confirm a documented verification and 24-hour FDA notification procedure.
• 8. Red-flag screen — run the gray-market checklist; any failure stops the process.

How USA MedPremium Clears Every Check

USA MedPremium operates one platform built to the standard healthcare itself is held to — the supply chain that never compromises.

• Licensed and authorized. A verifiable authorized trading partner under DSCSA, with full chain-of-custody documentation on every product we distribute.
• Certified. LegitScript and FDA certified, with a zero-tolerance compliance posture.
• Documentation on demand. Transaction records, serialized traceability, and quality evidence available for audit — not a verbal assurance.
• Fulfillment you can measure. 99.5% on-time shipment rate, and 99.9% for time-sensitive medications.
• Transparent economics. 14–35% bulk discounts across volume tiers (100+, 250+, and 500+ units), with free registration to compare every tier before you commit.
• Real accountability. Named account representatives and 24/7 support — one point of contact who can produce compliance records when you need them.

The result is a procurement relationship trusted by 500+ healthcare organizations and 5,000+ verified buyers across 73+ facility types.

Source With Confidence

A qualified distributor is the difference between a defensible supply chain and an inherited liability. Run the five steps on every supplier — and require the documentation that proves each one.

Register a free business account to access the full pricing matrix, or contact our procurement team for a 15-minute supplier-qualification and compliance review tailored to your facility. Fortify your supply chain before your next audit — not after.

Explore the catalog directly:

• Pharmacy category
• Rx prescriptions category
• Needles and syringes

Related reading:

• Sourcing Peptides in 2026: Why Supply Chain Integrity Is a Procurement Decision
• 503A vs. 503B Compounding: What Every Clinic Buyer Must Verify
• Sourcing GLP-1s for Weight-Loss and Aesthetics Clinics in 2026

Authoritative Sources

• FDA — Check Licensure of Wholesale Drug Distributors and Third-Party Logistics Providers
• FDA — DSCSA Product Tracing Requirements (FAQ)
• FDA — Notify FDA of Illegitimate Products (Form FDA 3911)
• FDA — Current Good Manufacturing Practice (cGMP) Regulations
• FDA — Drug Establishment Registration and Listing
• NABP — Drug Distributor Accreditation (formerly VAWD)
• LegitScript — Healthcare Certification
• DEA — Controlled Substance Registration (Form 225)
• USP — General Chapter <1080> Certificate of Analysis (Bulk Pharmaceutical Excipients)