Compounded GLP-1 in 2026: 503A vs 503B Sourcing for Med Spas

For three years, compounded GLP-1 was the engine of the med spa weight-loss boom. Semaglutide and tirzepatide were in shortage, federal law allowed compounding pharmacies to make copies during that shortage, and clinics could stock and dispense them at a fraction of the branded price. That window is closed. The drugs are off the FDA shortage list, the enforcement deadlines have passed, and the agency has signaled it intends to keep them off the list of bulk substances outsourcing facilities can use.

The result, in 2026, is widespread confusion. Operators are still being pitched compounded semaglutide and tirzepatide by suppliers, some legitimate and many not. Patients still ask for the cheaper version. And the legal exposure of getting this wrong — FDA action, state board sanctions, manufacturer litigation, malpractice — has never been higher. This guide draws the lines clearly: what changed, the difference between 503A and 503B pharmacies, the narrow circumstances in which compounding is still permitted, and exactly how to vet a supplier so your weight-loss program stays defensible. For the broader regulatory picture, pair this with our complete GLP-1 compliance guide for 2026.

Why Compounded GLP-1 Sourcing Got Complicated in 2026

To understand the 2026 rules, you have to understand why compounding was ever allowed at scale. Compounded semaglutide and tirzepatide were never approved drugs. They existed in volume for one reason: the brand-name products were on the FDA drug shortage list, and federal law contains a narrow allowance for compounding copies of an approved drug while it is in shortage. That allowance was the legal foundation of an entire industry — telehealth platforms, compounding pharmacies, and thousands of med spas built recurring revenue on it.

The shortage window that built an industry

Between 2022 and 2024, demand for GLP-1 medications outstripped the manufacturers' ability to produce them. Wegovy, Ozempic, Mounjaro, and Zepbound were repeatedly unavailable. While they sat on the shortage list, both 503A pharmacies and 503B outsourcing facilities could compound versions of semaglutide and tirzepatide, and clinics could buy them cheaply. A patient paying $1,000+ per month for the branded drug could often get a compounded version for $200–$400, and many med spas built weight-loss programs entirely around that price gap.

Why 2026 is different

The manufacturers caught up. Eli Lilly and Novo Nordisk invested heavily in production capacity, supply stabilized, and the FDA declared the shortages resolved — tirzepatide in December 2024 and semaglutide in February 2025. The moment a drug comes off the shortage list, the legal basis for compounding a copy of it evaporates. The FDA set phased enforcement deadlines through spring 2025 to let pharmacies wind down, those deadlines passed, and courts declined to block them. By 2026, the question is no longer "can we get it cheaper" — it is "is this even legal," and for most of what is still being marketed, the answer is no.

What the FDA Shortage Delisting Actually Changed

The delisting did not ban compounding outright. It removed the specific legal shelter that made bulk, copy-style compounding permissible. Understanding precisely what changed keeps you from over-reacting (refusing every legitimate compounded prescription) and from under-reacting (continuing to buy office stock that is now unlawful).

The enforcement timeline that matters

After each drug was delisted, the FDA announced dates after which it would no longer exercise enforcement discretion against compounders. For tirzepatide, 503A pharmacies faced a deadline in February 2025 and 503B facilities in March 2025. For semaglutide, 503A pharmacies had until April 22, 2025, and 503B facilities until May 22, 2025. The Outsourcing Facilities Association challenged these determinations in federal court and sought injunctions; the courts denied them, and the deadlines held. The practical takeaway: any compounded GLP-1 office stock a med spa is still buying in 2026 as if it were 2023 is being purchased outside the law.

From shortage exception to the default rule

With the shortage gone, the default rule of federal compounding law reasserts itself: a pharmacy may not compound a drug that is "essentially a copy" of a commercially available, FDA-approved product. Semaglutide and tirzepatide are now commercially available in multiple strengths and formats. So the baseline is that compounding them is prohibited — unless a specific, documented exception applies for an individual patient. That inverts the operating assumption most clinics had for three years. The burden is now on the prescriber to justify each compounded prescription, not on the regulator to justify stopping it.

The 2026 bulk-substances proposal

In 2026 the FDA went a step further, proposing to keep semaglutide, tirzepatide, and liraglutide off the list of bulk drug substances that 503B outsourcing facilities are allowed to compound from. In plain terms, the agency signaled it does not see a clinical need for ongoing bulk compounding of these drugs and intends to close that door for the long term, not just while supply normalizes. The comment period runs into mid-2026. For operators, the direction of travel is unmistakable: do not build a 2026 business model on the assumption that bulk compounded GLP-1 is coming back.

503A vs 503B Pharmacies Explained

Almost every sourcing decision in this space comes down to which kind of pharmacy you are dealing with, and whether the way you intend to use the product matches what that pharmacy is legally allowed to do. The two categories come from sections 503A and 503B of the federal Food, Drug, and Cosmetic Act.

503A: the traditional compounding pharmacy

A 503A is a conventional compounding pharmacy. It is licensed and overseen primarily by its state board of pharmacy, and it compounds medications for an individual patient pursuant to a valid, patient-specific prescription. A 503A does not have to comply with full federal current good manufacturing practice (cGMP) requirements, and it is not routinely inspected by the FDA. Its entire model is one prescription, one patient. A 503A cannot lawfully make large batches of compounded GLP-1 to sell to a clinic as undifferentiated office stock — that is outside its lane.

503B: the registered outsourcing facility

A 503B is an outsourcing facility that registers voluntarily with the FDA. In exchange for accepting full cGMP compliance and FDA inspection, a 503B may compound larger batches without a patient-specific prescription and sell them to clinics and hospitals for office use. This is the lane that historically supplied office stock. The catch in 2026 is that the permission to compound from bulk substances depends on the drug being eligible — and the FDA has proposed to keep semaglutide and tirzepatide off the eligible bulk list, which removes the basis for a 503B to produce them in batch.

Why the distinction matters for your med spa

The distinction determines what a legitimate transaction even looks like. If you are sourcing from a 503A, there must be a valid prescription for a specific, named patient behind every unit — there is no compliant "case of vials for the clinic." If a supplier is offering office stock, it must be a properly registered 503B, and right now there is no lawful bulk lane for these molecules. So in 2026, a supplier offering freely marketed, prescription-optional compounded GLP-1 is, by definition, not operating within either lane. Knowing which section governs the transaction is the single most useful filter you can apply to any pitch that lands in your inbox.

What Compounding Is Still Legally Permitted

This is where most operators get the wrong answer in both directions. The accurate framing is narrow but real: compounding semaglutide or tirzepatide is permitted only when it is genuinely patient-specific and genuinely different from what the approved product can provide. Three lanes survive, all of them through a 503A pharmacy and all of them requiring documentation before the prescription is written.

Patient-specific prescriptions for a documented clinical need

A 503A pharmacy may compound for an individual patient when a prescriber writes a patient-specific prescription supported by a documented clinical need. The key words are individual and documented. There must be a real patient with a real chart entry explaining why the commercially available product will not work for them — not a marketing rationale and not a blanket policy applied to everyone who walks in for weight loss. If the same justification could be copy-pasted onto every patient's chart, it is not patient-specific and it will not survive scrutiny.

Components or strengths not commercially available

A legitimate basis for compounding is a strength or formulation the patient needs that simply does not exist as an approved product. If a patient requires a micro-dose for tolerability that no commercial pen delivers, or a documented allergy to an excipient in the branded product rules it out, those are the kinds of facts that can support a compliant compounded prescription. The standard is that the approved drug cannot meet the patient's documented need — not that the patient prefers a different vial or a lower invoice.

Combination products — with heavy caveats

You will see suppliers market combination products such as semaglutide plus B12, or tirzepatide plus other additives, on the theory that adding an ingredient makes the product something other than a copy. Treat these with real caution. The FDA has been skeptical of combinations whose only apparent purpose is to evade the copy prohibition, and adding B12 to semaglutide does not automatically create a legitimate clinical difference. If a combination is being used as a workaround to keep selling what is essentially compounded semaglutide to the general public, it carries the same legal exposure as the underlying copy — possibly more, because it layers an unstudied combination on top of an impermissible one. Any combination product should rest on a real, documented clinical rationale for the individual patient, reviewed by your medical director.

The Clinical-Difference Exemption (and Its Limits)

The clinical-difference exemption is the hinge the entire "still legal" category turns on, and it is routinely misrepresented by suppliers. It is worth understanding precisely, because the gap between what it actually permits and how it is marketed is exactly where med spas get into trouble.

What counts as a clinical difference

Federal compounding law lets a prescriber determine, for an individual patient, that a compounded version produces a clinically meaningful difference from the approved drug. Legitimate, defensible examples are concrete and patient-specific: a documented allergy or intolerance to an inactive ingredient in the commercial product; a need for a dose strength that does not exist in any approved presentation; or a documented inability to use the available delivery device. In each case the difference is tied to a clinical fact about that patient, recorded in the chart by the prescriber before the prescription is issued.

What does not count

The exemption does not cover cost, convenience, or preference. "It is cheaper for the patient," "the patient likes vials better than pens," "we can offer a lower monthly price," and "compounded is just as good" are not clinical differences — they are business and marketing rationales, and regulators read them exactly that way. Nor does a generic, boilerplate justification applied to every patient qualify; the whole point of patient-specific is that it cannot be templated. If your charts would show the identical clinical-difference statement on fifty consecutive weight-loss patients, you do not have an exemption, you have a paper trail that documents the violation. When in doubt, the safer reading is that the exemption is narrow and the approved product is the default. For how this fits your broader protocol design, see our weight-loss injection compliance guide and the tirzepatide protocol overview.

Red Flags: Salt Forms, Mass Marketing, and Telehealth Pill Mills

Most of the compounded GLP-1 still being sold to med spas in 2026 carries one or more clear warning signs. Train yourself and your staff to recognize them, because by the time a supplier's pitch reaches you, the red flags are usually visible on the surface.

Untested and unapproved salt forms

The FDA has specifically flagged compounded products made with salt forms of semaglutide — semaglutide sodium and semaglutide acetate — rather than the base form used in the approved drugs. These salt forms have not been shown to be safe and effective, and the agency has warned about them directly. A supplier offering "semaglutide sodium" or "semaglutide acetate" is offering a product the FDA considers a different, unapproved substance. That is not a technicality; it is a safety and legal exposure your medical director should refuse outright. Always confirm the active ingredient is the base form with a certificate of analysis.

Mass marketing and subscription GLP-1

If compounded GLP-1 is being marketed to the public — advertised online, sold on a subscription, available to anyone who fills out a short intake form — it is almost certainly outside the patient-specific lane. Legitimate 503A compounding is the quiet endpoint of an individualized prescribing decision, not a product with a landing page and a checkout cart. Volume-oriented, consumer-facing marketing of compounded semaglutide or tirzepatide is the single most reliable signal that a supply chain is operating unlawfully.

Telehealth pill mills and rubber-stamp prescribing

The same logic applies to telehealth operations that generate "patient-specific" prescriptions at industrial scale. A prescription is only meaningful if it follows a real clinical evaluation. Platforms that approve nearly everyone, conduct no genuine examination, and exist to manufacture the paperwork of patient specificity are not curing the legal problem — they are documenting it. If your med spa is the dispensing endpoint of that chain, you inherit the exposure. Real prescribing, including a proper good-faith exam, is non-negotiable; our oral GLP-1 guide covers how evaluation standards apply across formats.

The Legal Landscape: Manufacturer Litigation and FDA Enforcement

This is not a quiet regulatory backwater. The manufacturers and the FDA are both actively pursuing the compounded GLP-1 market, and the volume of legal activity is the clearest evidence of where the risk sits.

Manufacturer litigation at scale

Novo Nordisk and Eli Lilly have moved aggressively. By mid-2025, Novo Nordisk had filed well over a hundred lawsuits across dozens of states against telehealth companies and compounding pharmacies marketing compounded semaglutide, and it has continued to send cease-and-desist letters and pursue patent and false-advertising claims against high-profile sellers into 2026. Eli Lilly has likewise sued pharmacies over compounded tirzepatide, alleging false claims about safety, efficacy, and "personalization." The litigation reaches up and down the distribution chain, and a med spa dispensing impermissible product is not insulated simply because it did not manufacture it.

FDA enforcement posture

On the federal side, once the enforcement deadlines passed, impermissible compounded copies became subject to treatment as unapproved, misbranded, or adulterated drugs. The FDA has issued warnings about safety risks — including hundreds of adverse event reports tied to dosing errors with compounded products and the unapproved salt-form issue — and its 2026 proposal to keep these molecules off the 503B bulk list shows it intends to make the restriction durable. The combined message from regulators and manufacturers is consistent: the era of freely available compounded GLP-1 is being deliberately closed, and the parties closing it are willing to litigate. For a state-by-state read on how this interacts with local rules, our body-composition protocol guide and the main compliance pillar are good companions.

How to Vet a Compounding Pharmacy Supplier

If you intend to offer compounded GLP-1 in one of the legitimate lanes, the supplier you choose is the most important compliance decision you will make. A rigorous vetting process protects you whether you source patient-specific preparations or any other compounded medication. Build it into a written procedure and apply it every time.

Licensing and accreditation

Start with identity and status. Confirm exactly what kind of pharmacy you are dealing with and verify it independently. For a 503A, check the state board of pharmacy license — in your state and in the pharmacy's home state if it ships across state lines — and confirm it is active and in good standing. For a 503B, confirm current FDA outsourcing-facility registration and review the facility's FDA inspection history, including any recent Form 483 observations or warning letters. Voluntary accreditation (for example, PCAB accreditation) is a useful additional signal but does not substitute for confirming the underlying license and registration.

Sourcing, testing, and documentation

Then interrogate the product itself. Ask where the active pharmaceutical ingredient is sourced and whether the API supplier is FDA-registered. Confirm the ingredient is the base form of semaglutide or tirzepatide and not an unapproved salt. Request a certificate of analysis for each lot, plus third-party potency and sterility testing results, and beyond-use dating. A legitimate pharmacy produces this documentation readily; a supplier that treats basic quality questions as an inconvenience is telling you something important.

The questions to ask before you sign

Put your due diligence in writing and require written answers: What is your license type and number, and in which states are you licensed? Will you dispense only against valid patient-specific prescriptions? What is the source and form of your API? Can you provide certificates of analysis and third-party testing for every lot? Are you marketing this product to the public, or only filling individual prescriptions? Do you carry product liability coverage? Keep every answer in a supplier file, and re-verify periodically rather than once. If a supplier resists documentation, pushes volume over patient specificity, or markets aggressively to consumers, walk away — there are no good outcomes at the end of that relationship.

Documentation Your Med Spa Needs for Compounded Sourcing

Even when your sourcing is clean, undocumented compliance is indistinguishable from non-compliance when a regulator or plaintiff's attorney comes looking. Two documentation layers protect a compounded GLP-1 program: per-patient records and a supplier file.

Per-patient documentation

For every patient receiving a compounded preparation, the chart should contain the good-faith exam and medical evaluation supporting the prescription, the specific clinical-difference rationale if you are relying on that exemption, the patient-specific prescription itself, a compounding-specific informed consent acknowledging that the product is not FDA-approved and explaining the known risks, and the product's lot number for traceability. The clinical-difference statement must be individualized — written for that patient, not pasted from a template. If your medical director cannot defend each statement as a genuine clinical determination, the documentation is working against you, not for you.

Supplier-file documentation

Maintain a standing file for each pharmacy you use: license and registration verifications with dates, inspection history for 503B facilities, certificates of analysis and testing results by lot, your written due-diligence questionnaire and the pharmacy's answers, and a log of your periodic re-verifications. This file is what lets you demonstrate that you exercised reasonable diligence rather than buying from whoever sent the cheapest quote. The Weight Loss Protocol Kit includes the sourcing-documentation SOPs, supplier-vetting checklist, and compounding-consent template that operationalize all of this — and pairs with our maintenance and off-ramping protocols for the full patient lifecycle.

When to Switch Patients to Branded Product

For most med spas in 2026, the cleanest answer to the compounded question is to move the bulk of the weight-loss program onto FDA-approved branded product and reserve compounding for the genuine, documented exceptions. Knowing when to make that switch is both a clinical and a business decision.

Clinical and compliance triggers

Switch a patient to branded product whenever the clinical-difference rationale no longer holds — for example, when an approved strength that fits their needs becomes available, or when their reason for compounding was never truly individualized to begin with. Switch immediately if your current supply runs through an unapproved salt form, a mass-marketed channel, or a telehealth mill, because no documentation rescues an unlawful source. As a rule, if you cannot articulate a specific, chart-documented reason this individual patient cannot use the approved drug, the approved drug is the correct and defensible choice.

The business case for branded

The price gap that drove compounding has narrowed. Manufacturers have introduced direct-pay and cash options that put branded products within closer reach, and the cost of an enforcement action, a manufacturer lawsuit, or a malpractice claim dwarfs the per-patient margin on compounded vials. A weight-loss program built on legitimate, approved product with compounding reserved for documented exceptions is more durable, more insurable, and more attractive to the medical directors and malpractice carriers whose confidence you depend on. Source legitimately or do not offer it — that posture protects the operator more reliably than any margin compounded GLP-1 ever delivered.

The compounded GLP-1 boom was a product of a temporary shortage, and the shortage is over. Operators who treat 2026 as a continuation of 2023 are exposed on every front at once. Operators who rebuild their sourcing around the actual rules — approved product as the default, narrow documented compounding through a verified 503A, and a real supplier file behind every preparation — keep the revenue and shed the risk.