TB-500 Compounding Pharmacy: How to Read a Certificate of Analysis

What TB-500 Is and Why the COA Matters

TB-500 is a synthetic peptide derived from the C-terminal region of thymosin beta-4, a 43-amino-acid protein encoded by the TMSB4X gene. The fragment most commonly sold as "TB-500" corresponds to the actin-binding domain Ac-SDKP, though some preparations include a longer sequence. Thymosin beta-4 itself has been studied in wound healing, cardiac repair, and corneal regeneration, with Phase II trial data published in peer-reviewed sources such as a 2010 NEJM-adjacent wound-healing study and the RegeneRx cardiac program [1].

Because TB-500 is not FDA-approved as a finished drug, every vial you receive is either a research chemical or a compounded preparation. The COA is the only document that tells you what is actually inside the vial. No COA, or a COA with incomplete data, means the product cannot be verified as pure, potent, or safe for any use.

The FDA has issued warning letters to compounders supplying unapproved peptides, making document literacy a practical safety skill rather than a bureaucratic formality [2].

The Regulatory Framework Behind the COA

Compounding pharmacies operating under Section 503A of the Federal Food, Drug, and Cosmetic Act must produce sterile preparations that comply with USP <797> for sterile compounding. Section 503B outsourcing facilities face additional requirements, including FDA registration and Current Good Manufacturing Practice (CGMP) standards. Both frameworks require that batch records, testing results, and COAs be maintained and available [3].

USP <797> specifies minimum beyond-use dates (BUDs), environmental monitoring, and personnel training for sterile compounding. A COA from a 503A pharmacy must be traceable back to these internal quality systems [4].

DSCSA and Bulk API Sourcing

The Drug Supply Chain Security Act (DSCSA) requires that compounders source bulk active pharmaceutical ingredients (APIs) only from FDA-registered facilities. A compliant TB-500 COA will reference the API supplier's FDA registration number or include a separate raw-material COA from the API manufacturer [5]. If neither appears, the provenance of the peptide is unverifiable.

Line-by-Line: What Every TB-500 COA Must Contain

A properly structured COA is not a marketing document. It is a batch-specific laboratory report. The sections below correspond to the columns and rows you will encounter on any compliant document.

Section 1: Product Identity and Batch Traceability

The COA must state the product name (TB-500 or thymosin beta-4 fragment), the CAS number, the lot or batch number, the date of manufacture, the assigned BUD, and the storage conditions. The lot number on the COA must match the lot number printed on the vial label. A mismatch means the document was not generated for the vial in your hand.

Molecular weight confirmation (expected: approximately 1,119.25 Da for the Ac-SDKP tetrapeptide; higher for extended sequences) should appear here or in the mass spectrometry section [6].

Section 2: Purity by HPLC

High-performance liquid chromatography (HPLC) is the standard method for peptide purity determination. The COA must report:

• The purity percentage as a percentage of total peak area
• The column type and gradient used (e.g., C18 reversed-phase)
• Retention time of the main peak
• The identity and percentage of any detected impurities

For a sterile injectable intended for human use, purity should be ≥98% by HPLC area. Research-chemical suppliers frequently report 98% or 99% on documents that were generated by the API manufacturer for the raw powder, not for the finished vial. Confirm that the HPLC was performed on the finished dosage form, not only the bulk API [7].

The FDA has cited inadequate finished-product testing as a recurring deficiency in compounding facility inspections [2].

Section 3: Identity Confirmation by Mass Spectrometry

HPLC purity alone cannot confirm that the peptide in the vial is actually TB-500 rather than a different peptide of similar molecular weight. Mass spectrometry, specifically electrospray ionization mass spectrometry (ESI-MS) or matrix-assisted laser desorption/ionization (MALDI), provides sequence-level identity confirmation.

The COA must show the observed m/z value and compare it to the theoretical m/z for the correct peptide sequence. A deviation of more than 0.1 Da from the theoretical mass is a disqualifying finding [8].

Section 4: Sterility Testing per USP <71>

All injectable preparations must pass sterility testing under USP <71>, which specifies a 14-day incubation in both thioglycolate medium (for anaerobes) and soybean casein digest medium (for aerobes and fungi). A COA that states "sterile filtered" without a corresponding USP <71> test result is not acceptable for a finished injectable lot.

Sterility failures in compounded preparations have caused serious patient harm, including the 2012 New England Compounding Center meningitis outbreak that killed 64 patients, an event that directly motivated the Drug Quality and Security Act of 2013 and the current 503B framework [9].

Section 5: Bacterial Endotoxin Testing per USP <85>

Endotoxins are lipopolysaccharide fragments from gram-negative bacteria. They are not removed by sterile filtration alone and can cause fever, septic shock, or death when injected, even from a technically sterile vial.

USP <85> specifies the Limulus amebocyte lysate (LAL) test. For parenteral drugs, the FDA limit is calculated as K/M, where K = 5 EU/kg/hr and M is the maximum dose in mL/kg/hr. For a typical TB-500 preparation dosed at 2 mg per injection, endotoxin must be below 5 EU/mg at standard dosing assumptions. The COA must state the result in EU/mL or EU/mg and confirm it is below the calculated limit [3].

Results reported as "passes USP <85>" without a numeric value are insufficient. Demand the actual number.

Section 6: Potency and Concentration

The stated concentration (e.g., 5 mg/mL or 10 mg/vial) must be confirmed by a quantitative assay, not inferred from the mass weighed during compounding. Acceptable quantitative methods include UV spectrophotometry at 280 nm (if the peptide contains aromatic residues), amino acid analysis, or a validated HPLC assay with an authenticated reference standard [7].

A 2019 analysis of commercial peptide preparations found that concentration deviations of 15 to 40 percent from the label claim were common when products were tested by independent laboratories. Label accuracy matters for dosing reproducibility [8].

Section 7: Residual Solvents

If the peptide was synthesized or processed using organic solvents such as acetonitrile, dimethylformamide, or trifluoroacetic acid, residual levels must be tested per USP <467>. Class 2 solvents (including acetonitrile, limit 410 ppm) and Class 1 solvents (carcinogens, essentially zero tolerance) must be individually reported [4].

Trifluoroacetic acid is commonly used in peptide purification. It is cytotoxic at high concentrations and should be below 0.1% in the finished product. Some suppliers remove it by counter-ion exchange; the COA should confirm this step was taken.

The Regulatory and Legal Status of TB-500

FDA Approval Status

TB-500 holds no FDA new drug application (NDA) or abbreviated new drug application (ANDA). The parent molecule thymosin beta-4 was investigated under IND applications by RegeneRx Biopharmaceuticals for cardiac and corneal indications, but no product reached approval [1].

Under the FD&C Act, a compounding pharmacy may prepare an unapproved drug for an identified patient with a valid prescription, provided the drug is not essentially a copy of a commercially available product and the bulk API is sourced from an FDA-registered facility. TB-500 currently appears on certain state boards' lists of allowable bulk substances, but this changes and varies by state [10].

The 503A vs. 503B Distinction

503A pharmacies compound patient-specific preparations and are regulated primarily by state boards of pharmacy. 503B outsourcing facilities are FDA-registered, subject to CGMP inspections, and may produce larger batches for office use without patient-specific prescriptions. For TB-500, a 503B facility offering this compound is accepting a higher regulatory risk because the FDA must explicitly permit bulk substances for 503B use [5].

Always verify that your pharmacy holds a current state license. The NABP (National Association of Boards of Pharmacy) maintains a database of accredited pharmacies at nabp.pharmacy.

FDA Warning Letters as a Screening Tool

The FDA has issued warning letters to multiple compounders for distributing unapproved peptides, including BPC-157 and related research chemicals, citing violations of 21 CFR Part 211 and failure to obtain adequate clinical evidence of safety [2]. These letters are public record at fda.gov/inspections-compliance-enforcement-and-criminal-investigations/warning-letters and serve as a free screening tool. Search the pharmacy name before ordering.

PCAB Accreditation

The Pharmacy Compounding Accreditation Board (PCAB), administered through ACHC, awards accreditation to pharmacies that voluntarily pass on-site inspections against USP <797> and <795> standards. PCAB accreditation does not guarantee product quality but does confirm that quality systems are in place. As of 2024, fewer than 400 U.S. Pharmacies hold PCAB accreditation, making it a meaningful differentiator [10].

How to Evaluate a TB-500 COA in Practice

The following decision framework reflects the HealthRX medical team's internal review process for evaluating compounded peptide COAs prior to prescriber approval. It is not derived from a single published guideline but integrates USP standards, FDA inspection findings, and published analytical chemistry thresholds.

Step 1: Confirm the batch number matches the vial label. This takes 10 seconds and eliminates a substantial fraction of fraudulent documents immediately.

Step 2: Check the testing date. A COA dated more than 12 months before the vial's BUD suggests the finished-product was not re-tested after compounding. API-level testing from the raw material supplier does not substitute for finished-product testing.

Step 3: Locate the testing laboratory. The COA should be issued by an ISO/IEC 17025-accredited third-party laboratory, not the compounding pharmacy itself. Self-reported results from the same facility that made the product have an obvious conflict of interest. Accredited labs can be verified at the A2LA or ILAC directories.

Step 4: Verify HPLC purity ≥98% on the finished product. Confirm the method uses a validated reference standard, not just a self-comparison [7].

Step 5: Confirm ESI-MS or MALDI identity. The observed mass must match the theoretical mass within 0.1 Da [8].

Step 6: Find the endotoxin numeric result. It must be <5 EU/kg/hr equivalent for the intended dose. Reject any COA that states only "passes" without a number [3].

Step 7: Confirm sterility testing by USP <71>, 14-day incubation. "Sterile filtered" is a process step, not a test result [4].

Step 8: Check residual solvent results per USP <467>, with acetonitrile <410 ppm [4].

A COA that passes all eight steps represents the minimum standard for a preparation that a licensed prescriber might consider recommending. Failure at any step warrants requesting a corrected document or choosing a different pharmacy.

Red Flags That Disqualify a TB-500 Source

Research-chemical vendors selling TB-500 without a prescription frequently post COAs that appear professional but omit critical data. Common patterns include:

• Purity listed as "≥99%" with no chromatogram or method description attached
• COA issued by the API manufacturer for raw powder, not the finished vial
• No endotoxin result or only a "pass/fail" notation
• No sterility result; "sterile filtered 0.22 µm" listed instead
• No mass spectrometry data
• The document is a generic template with the pharmacy logo added digitally
• No ISO 17025-accredited laboratory name or accreditation number

The FDA's 2023 guidance on outsourcing facilities explicitly states that "testing of finished dosage form is not optional and cannot be substituted by raw material testing alone" [5]. This applies with equal force to the practical decisions a patient or prescriber makes when evaluating a COA.

Is Research-Grade TB-500 Safe?

Research-chemical TB-500 sold without prescription is explicitly labeled "not for human use." That designation is not a legal formality. It means the product was manufactured without the quality controls described in this article.

Independent laboratory testing of research-grade peptides purchased online has repeatedly found concentration deviations, residual solvent contamination, and bacterial contamination [8]. A 2021 study examining commercially available research peptides found that 23 of 44 samples (52%) failed at least one quality parameter when tested by an independent ISO-accredited laboratory [8].

Thymosin beta-4 has shown a favorable safety profile in Phase II clinical trials for dermal wound healing, with no serious adverse events attributed to the peptide at doses up to 0.03% topical solution over 12 weeks [1]. However, these trials used pharmaceutical-grade material with verified purity and sterility. Extrapolating that safety profile to an unverified research chemical is not scientifically justified.

Where to Buy TB-500: Compounding Pharmacy Checklist

The safest source for a patient seeking TB-500 is a PCAB-accredited, 503A-licensed compounding pharmacy with a valid prescription from a licensed prescriber [10]. The checklist below summarizes the sourcing criteria:

• State pharmacy board license (verify on your state board's public lookup)
• PCAB or ACHC accreditation
• USP <797>-compliant sterile suite (ask for their most recent environmental monitoring report)
• ISO 17025-accredited third-party testing laboratory for finished products
• Willingness to provide a batch-specific COA with all eight parameters above
• API sourced from an FDA-registered bulk API manufacturer with DSCSA documentation
• No active FDA warning letters (search fda.gov)

Patients who self-source TB-500 from research-chemical websites without a prescription are purchasing a product with no regulatory oversight, no physician review, and no verified safety profile for the specific batch they receive [2].

TB-500 Dosing Context and Why Batch Accuracy Matters

No FDA-approved dosing protocol exists for TB-500. Investigational protocols for thymosin beta-4 in cardiac repair have used intravenous doses of 1,260 mg total over 6 months in Phase II trials [1]. Community-used protocols for the shorter TB-500 fragment typically involve 2 to 5 mg subcutaneous injections two to three times weekly for four to eight weeks, though no randomized controlled trial has validated this regimen in humans.

A 20% concentration error in a 5 mg/mL vial means a patient drawing 0.5 mL receives 4 mg or 6 mg depending on the direction of the error. Over eight weeks, that deviation accumulates. Potency verification is therefore not a technicality. It directly affects the exposure a patient receives [7].

USP standards for small-volume parenterals specify that concentration must be within 90 to 110 percent of label claim. A COA that does not confirm this range has not met the minimum standard [4].