Frequently Asked
Questions

Certification is voluntary for both 503A and 503B facilities. However, hospital procurement teams, healthcare systems, and purchasing organizations increasingly require independent quality validation from compounding partners as a condition of doing business.

Independent third-party certification validates your operational quality to healthcare partners before they evaluate you — removing a major barrier to new and expanded business relationships. Learn more on our Why ACE Certification page.

ACE certification is pursued by traditional compounding pharmacies (503A), FDA-registered outsourcing facilities (503B), and healthcare organizations seeking objective operational validation. Common motivators include:

Most certifications complete within 60 to 90 days from initial consultation through certification decision, depending on facility readiness and any corrective actions identified during the evaluation process.

See the Audit Process section below for a detailed breakdown of the specific time requirements for 503A vs 503B facilities.

ACE's auditing process is designed to minimize our auditor's time in the client's facility. We understand that having our people in a pharmacy or facility can cause operational disruptions, and therefore perform most document reviews off-site.

The amount of time required depends on the size and complexity of the operation:

ACE will provide a specific document request list tailored to your facility type (503A or 503B) at the start of the engagement. Typical categories include standard operating procedures, environmental monitoring records, personnel training documentation, quality system records, and equipment qualification data.

Prompt and complete document submission directly impacts the overall timeline. Our team is available to help clarify what is needed throughout the process. Contact us to discuss your specific situation.

Following the on-site assessment, ACE delivers a comprehensive findings report. If all standards are met, certification is issued. If deficiencies are identified, the report includes root-cause context and a clear remediation pathway — not just a list of findings.

Once corrective actions are implemented, our auditors can be rescheduled to re-assess the specific areas identified, and if all items are currently compliant, the certification is issued. See the Non-Compliance section below for full details.

503A pharmacies prepare customized medications pursuant to individual patient prescriptions. They primarily operate under state Board of Pharmacy (BoP) oversight while also being subject to the FDA's regulations regarding insanitary conditions.

Most Boards of Pharmacy have adopted, in whole or in part, the guidance provided by the United States Pharmacopeia (USP). The primary USP chapters relevant to pharmacy compounding include:

ACE evaluates sterile and non-sterile workflows, personnel competency, documentation systems, and environmental controls aligned with USP <795>, <797>, and <800> expectations, as well as any additional chapters applicable to your state's Board of Pharmacy rules.

Our Standards & Compliance page details each chapter and regulatory domain evaluated in the 503A assessment.

Yes. Certification identifies operational vulnerabilities before inspections occur and strengthens documentation practices that support consistent regulatory performance. Facilities that have undergone the ACE assessment process enter Board of Pharmacy inspections with greater confidence in their compliance posture.

In particular, the corrective action process — when applicable — forces the kind of root-cause remediation that inspectors look for evidence of in a well-run quality system.

503B outsourcing facilities are FDA-registered organizations authorized to compound sterile medications in bulk for healthcare providers. Unlike 503A pharmacies, they do not require individual patient prescriptions and operate under current Good Manufacturing Practice (cGMP) requirements — the same standards applied to all FDA-registered drug manufacturers.

Learn more about our 503B certification program and what the evaluation covers.

ACE evaluates quality systems, sterile production controls, documentation rigor, change control governance, and operational readiness indicators across cGMP compliance domains.

FDA conducts risk-based inspections of 503B outsourcing facilities, evaluating compliance with manufacturing expectations, sterile practices, and quality system effectiveness. As of recent inspection cycles, the vast majority of inspected 503B facilities have received FDA Form 483 observations — making proactive preparation through independent certification a strategic priority.

ACE's evaluation mirrors the risk domains FDA investigators focus on, so facilities that have completed the ACE process are better prepared for the real thing.

The primary difference lies in the basis of applicable regulations.

503A pharmacies are primarily held to the rules and laws of their home state's Board of Pharmacy (BoP), though they are also subject to the FDA's regulations regarding insanitary conditions. Most Boards of Pharmacy have adopted USP guidance in whole or in part — primarily chapters 795, 797, and 800, but potentially several others (1085, 1112, 1160, 1163, 1176, 1207, 1229) depending on the state's specific rules. Each state also has its own rules not related to USP that impact compounding pharmacies.

503B facilities are FDA-registered and subject to current Good Manufacturing Practices (cGMP) — the same standards all FDA-registered drug manufacturers must follow. cGMP requirements are vastly different from USP guidance, though there is some overlap in specific areas. They are significantly more in-depth and complex, which is why 503B audits require more time and demand auditors with pharmaceutical industry or FDA regulatory experience.

One of the key differences between ACE and other auditing firms is that we do not just provide our assessment and leave. If our auditors identify areas of non-compliance or concern, we provide a corrective action analysis and implementation strategies.

We also offer — via our affiliated consulting resources — advisors to assist in the remediation tasks, if the client wishes. Once the client has corrected the identified issues, our auditors can be rescheduled to re-assess those specific areas and, if all items are currently compliant, issue the certification.

The corrective action report goes beyond a simple findings list. It includes root-cause context for each deficiency — explaining why the issue exists operationally, not just that it exists — along with practical implementation strategies for remediation.

This approach allows your team to address the underlying causes rather than surface symptoms, reducing the likelihood of recurrence and strengthening your overall quality system in the process.

Corrective and Preventive Action (CAPA) programs identify the root causes of operational issues and implement controls to prevent recurrence. A functioning CAPA system is one of the most important indicators of a mature quality organization — and one of the first things FDA investigators look for in a 503B inspection.

ACE evaluates your existing CAPA system as part of the audit and, where gaps are identified, provides guidance on how to build or strengthen it.

The most common root causes of 483 observations in compounding facilities include:

ACE's audit specifically evaluates each of these risk domains, allowing facilities to identify and address vulnerabilities before an FDA investigator does.

Environmental monitoring (EM) evaluates air quality, surface contamination, and microbial burden within sterile compounding environments. A rigorous EM program is essential to ensuring the sterility of compounded products and the safety of patients who receive them.

Failures in environmental monitoring are among the most frequently cited deficiencies in both 503A State Board inspections and 503B FDA inspections. ACE evaluates your EM program design, sampling frequencies, action level thresholds, and response procedures as part of the standard assessment.

An FDA inspection is regulatory enforcement — the objective is to determine whether your facility is in compliance and, if not, to document deficiencies that may result in Warning Letters, injunctions, or other enforcement actions.

ACE's assessment is consultative. Our goal is to find deficiencies before they become regulatory observations and help your facility correct them. Where FDA leaves you with a 483, ACE leaves you with a roadmap.