TL;DR
Qualify a steroid API supplier by scoring the named API and manufacturing site across US documentation, GMP, containment, cleaning validation, route-specific impurity controls, stability, and change control. Approve only after the evidence file clears critical stops and the supplier's documents, remote review, and, when needed, on-site audit all agree.
Use this 100-point review to qualify steroid API supplier candidates for US sourcing. Reject the supplier for your program if it cannot identify the original manufacturer, show molecule-specific containment and cleaning controls, or support the required US import or filing path.
A GMP certificate starts the review. It does not finish it. FDA Q7 says dedicated production areas should be considered for certain steroids with high pharmacological activity or toxicity unless validated cleaning or inactivation procedures are maintained. FDA Q7
How to Qualify Steroid API Supplier Candidates
Score each row at full weight only when the supplier provides all listed evidence. Award half weight when the evidence is incomplete but a dated corrective plan is acceptable. Award zero when evidence is missing.
| Criterion | Certificate Review | Document Review | Audit Evidence |
|---|---|---|---|
| 20% Identity and US path | Site address and activity scope | API form, maker, site, FDA status, DMF/LOA | Remote records; on-site batch trace |
| 15% Quality system | GMP certificate and inspection date | Deviations, CAPAs, OOS, change control | Remote sample; on-site records |
| 20% Containment | No scoring value | Exposure rationale, segregation, HVAC, equipment map | Remote tour; on-site walkthrough |
| 15% Cleaning | No scoring value | Residue limits, recovery, hold times, methods | Remote records; on-site verification |
| 15% Chemistry and analytics | Product scope only | Route risks, impurities, solvents, methods | Data review; laboratory walkthrough |
| 10% Stability and packaging | Retest date only | Stability plan, market pack, storage conditions | Stability records; storage inspection |
| 5% Supply and quality agreement | No scoring value | Change notices, contacts, continuity plan | Quality-system interview |
Our approval rule is simple: approve at 80 points or more with no critical stop. Hold a 60 to 79 score until the supplier closes the gaps. Do not approve below 60.
A critical stop applies when the supplier cannot name the original manufacturer and production site. It also applies when shared equipment has no justified cleaning-validation package, or when the supplier lacks the US documentation your program requires.
Start with the Exact Steroid and Intended Use
Write the requirement before you contact suppliers. Name the API, chemical form, grade or agreed specification, intended dosage form, target market, annual volume, and development stage.
“Testosterone” is not a sufficient requirement. Testosterone base and testosterone enanthate are different materials. A certificate, DMF, specification, or stability package for one form does not qualify the other.
Record these six items in your supplier file:
- Exact API name, salt, ester, or other chemical form.
- Original manufacturer and complete production-site address.
- Intended use, such as development, commercial finished-dose manufacture, or compounding.
- Required specification and critical quality attributes.
- US import, IND, NDA, or ANDA documentation needs.
- Expected order pattern and required supply continuity.
This step prevents the most common sourcing error: qualifying a company’s broad steroid portfolio instead of the actual material you plan to buy.
Read GMP and US Documentation Correctly
A GMP certificate supports the quality-system review only when its issuing body, site address, activity scope, and date match the proposed manufacturing site. It does not prove that every API in a company catalog uses the same equipment, cleaning process, or regulatory file.
For a US import program, request evidence that the foreign establishment follows FDA registration and drug-listing requirements for the commercial API. FDA states that foreign API manufacturers, repackers, relabelers, and salvagers importing into the United States must register, and commercially distributed APIs must be listed. FDA import rules
For a filing-supported program, request the Type II DMF holder, DMF subject, covered manufacturing site, and a Letter of Authorization pathway. FDA explains that a DMF is neither approved nor disapproved. FDA reviews its technical content when an application references it. FDA DMF guidance
Use the following document sequence:
- GMP certificate and dated inspection evidence for the proposed site.
- Original manufacturer declaration and batch traceability chain.
- Current API specification and representative batch CoAs.
- FDA registration and API-listing evidence for US imports.
- Type II DMF and Letter of Authorization details when the program needs filing support.
- A quality agreement that assigns change, deviation, complaint, and recall responsibilities.
For a deeper filing workflow, read our guide to US filing-ready API evidence.
Test Containment and Cross-Contamination Controls
Steroid API qualification becomes stricter when the molecule’s potency, toxicity, dusting behavior, or shared equipment creates cross-contamination risk. FDA Q7 specifically directs manufacturers to consider dedicated production areas for certain steroids unless validated cleaning or inactivation procedures are established and maintained. FDA containment guidance
Ask the supplier for these specific records:
- A substance-specific occupational exposure rationale.
- A room and equipment map showing where the steroid is weighed, milled, dried, and packed.
- Material, personnel, waste, and cleaning flows through the area.
- HVAC and pressure-control summaries for exposed-product operations.
- Campaign rules when the site makes more than one potent compound.
- The equipment list for each product-contact step.
A remote audit should show the actual transfer and containment process. Ask to see closed charging, dust collection, dispensing controls, and how the site separates potent-material waste from normal operations.
An on-site audit should verify that the walkthrough matches the drawings and procedures. Inspect equipment labels, cleaning status, room access, batch segregation, and the path used by materials and operators.
Review Cleaning Validation Before You Approve Shared Equipment
Cleaning validation is documented proof that equipment is consistently cleaned to an acceptable level. It matters most when the same equipment can carry residues from one API into another.
FDA Q7 says cleaning validation should focus on process steps with the greatest contamination or carryover risk. It also says the representative worst case should consider solubility, cleaning difficulty, potency, toxicity, and stability. FDA cleaning validation
Request a redacted cleaning-validation package containing:
- The worst-case product selection rationale.
- Residue acceptance limits.
- Dirty and clean hold times.
- Equipment surfaces and hard-to-clean locations.
- Swab, rinse, or extraction sampling locations.
- Recovery-study results.
- Analytical method sensitivity and detection limits.
- Routine cleaning-verification records after validation.
A visual inspection cannot replace residue testing for a potent steroid. FDA Q7 requires analytical methods sensitive enough to detect the established residue limit and requires the method’s recovery level to be established. FDA Q7 methods
Assess Route Chemistry, Impurities, Solvents, and Stability
Route chemistry is the sequence of starting materials, reactions, isolations, and purification steps used to make the API. Review it because route changes can alter isomers, reaction by-products, degradants, and residual solvents.
Ask for a non-confidential route summary that identifies critical starting materials, key purification steps, expected related substances, and the control strategy. ICH Q11 connects drug-substance development to the manufacturing process, control of materials, critical steps, and process validation approach. ICH Q11
Review these data against the current specification:
- Identity method and reference-standard approach.
- Assay method and calculation basis.
- Related-substances method and representative chromatograms.
- Impurity trends across recent representative batches.
- Residual-solvent controls for solvents used in the route.
- Water content and relevant physical attributes.
- Stability data that support storage conditions and retest date.
ICH Q3C provides the framework for controlling residual solvents in pharmaceuticals. ICH Q3C FDA Q7 also expects an impurity profile for each API and requires ongoing stability monitoring. Normally, the first three commercial batches enter the stability program. FDA impurity and stability controls
Review mutagenic-impurity risk when the route, reagents, or intermediates warrant it. ICH M7 covers the assessment and control of DNA-reactive mutagenic impurities. ICH M7
For batch-release review, use our steroid API CoA checklist. A CoA supports the batch decision, while supplier qualification assesses the broader site, quality, and regulatory system.
Choose the Right Audit Level
Use a remote audit when the supplier provides a coherent document package but you need to test how the system works. Review one redacted batch record, one deviation investigation, one CAPA, one cleaning record, and the current change-control procedure.
Require an on-site audit when the API will use shared potent-compound equipment, when the material supports a US filing, when the supplier has unresolved contamination or data gaps, or when a site change affects the qualification decision. The audit should follow one batch from raw-material receipt through release.
FDA recommends quality agreements to define manufacturing activities and CGMP responsibilities between parties. FDA quality agreements Your agreement should name the owners of deviations, OOS investigations, change notifications, batch documentation, audit access, complaints, and recall actions.
When the supplier moves from pilot to commercial scale, reopen the scorecard. A new equipment train, site, route, specification, analytical method, or starting-material source can change the original qualification decision. Our guide to steroid API commercial scale-up shows the evidence to request before that transition.
FAQs
How Do I Qualify a Distributor Instead of the Original Manufacturer?
Qualify both parties. The distributor must preserve the original manufacturer’s identity, batch traceability, authentic CoA, storage records, and transport history. The original manufacturing site still needs the GMP, containment, cleaning, and chemistry review.
Does USP Grade Qualify a Steroid API Supplier?
No. USP or another compendial designation addresses the material against a monograph or specification. Supplier qualification also requires the manufacturing site, batch controls, traceability, regulatory path, and change-management system.
How Often Should a Steroid API Supplier Be Requalified?
Our rule is an annual document review plus immediate requalification after a site, route, equipment, cleaning process, specification, analytical method, or major quality-system change. FDA Q7 calls for regular product-quality reviews, normally conducted annually. FDA annual review guidance
Can a Supplier CoA Replace Incoming Identity Testing?
No. A supplier CoA supports your review after you establish supplier reliability. Your incoming-control procedure should still define identity testing, sampling, acceptance criteria, and the intervals for checking the supplier’s analytical reliability.
At Aarise Pharma, we help B2B buyers organize steroid API requirements around the exact molecule, documentation route, batch evidence, and supply plan. Start with our US steroid raw material catalog, then bring us the API form, target market, and qualification requirements for a product-specific review.
