Picking the wrong API supplier rarely fails loudly on day one. It fails six months later, when a regulator asks who actually made the material and nobody can give a straight answer.
By then you have production scheduled, a dossier filed, and a customer waiting. Switching sources at that stage means requalification, stability work, and a variation filing.
The checks that prevent this are mostly document requests and direct questions. A capable supplier answers them without stalling. If the material itself is new to you, start with what an Active Pharmaceutical Ingredient actually is.
Quick answer: Before choosing an API supplier, confirm whether they manufacture or resell, verify the GMP status of the actual production site, check DMF or CEP availability for your market, request the full document pack including COA, stability and impurity data, secure audit rights in a quality agreement, and validate a sample against a real production batch.
Table of Contents
- Manufacturer, Trader, or Distributor
- Regulatory Credentials to Request From an API Supplier
- The Document Pack a Serious Supplier Provides
- Audit Rights and the Quality Agreement
- Capacity, Campaign Scheduling, and Lead Times
- Batch Consistency and Change Control
- Sample Evaluation and Validating It Against Production
- Packaging and Labelling of API Drums
- Commercial Checks Buyers Skip Too Often
- The API Supplier Evaluation Checklist
- Red Flags That Should Stop the Deal
- Expert Tips
- Common Mistakes
- Frequently Asked Questions
Manufacturer, Trader, or Distributor
The first question is the one buyers most often skip: does this company make the API, or buy it from someone who does?
All three models are legitimate. Traders and distributors serve a real purpose for small volumes, difficult geographies, and products where a plant will not deal with a buyer directly.
The risk is not knowing which one you have. Your obligations attach to the manufacturing site, not to whoever issues the invoice, and regulators inspect the site your dossier names.
| Factor | Manufacturer | Trader | Distributor |
|---|---|---|---|
| Owns the production site | Yes | No | No |
| Source transparency | Full — their own plant | Often withheld to protect margin | Usually disclosed; represents named plants |
| Holds the DMF or CEP | Yes | No | No, but can arrange a letter of access |
| Can grant a site audit | Directly | Only by permission, if at all | Usually arranges it with the principal |
| Technical questions | Answered from process knowledge | Forwarded to the source | Handled by trained technical staff |
| Typical minimum order | Higher, campaign quantities | Flexible, small lots possible | Moderate, stock-based |
| Price | Lowest at volume | Marked up, sometimes twice | Marked up, more predictable |
| Batch continuity | Same site every time | Source may change between orders | Tied to the principal represented |
| Best suited to | Regular commercial volumes | Trial quantities, hard-to-find items | Regional and mid-size supply |
Buying through a trader is fine when you know it is a trader and the source plant is named in your filing. To settle it quickly, ask who signs the batch release. If that person works for a different company, you are buying from an intermediary.
Regulatory Credentials to Request From an API Supplier
Credentials belong to sites, not companies. A group may own five plants and hold approvals for two. Tie every document back to the exact site that will make your material.
GMP status of the manufacturing site
Request the current GMP certificate naming the site, the issuing authority, the scope, and the expiry date. Then check that your product type falls inside that scope.
A certificate covering oral solid intermediates does not cover sterile API, and scope mismatches are easy to miss when you skim the front page. Our guide to GMP, WHO-GMP, EU GMP and US FDA explains what each approval level means.
DMF and CEP availability
A Drug Master File lets the manufacturer share confidential process detail with a regulator while keeping it away from you. What you need is a letter of access in your company’s name.
Ask which markets the DMF is filed in and its current status. A filed number and a reviewed number are not the same thing.
For Europe, a Certificate of Suitability (CEP) from the EDQM is often simpler than the DMF route. Ask for the certificate number and revision date, and see Drug Master File explained for importers.
Written confirmation and market paperwork
Active substances imported into the EU generally need a written confirmation from the exporting country’s regulatory authority, unless that country sits on the EU’s listed equivalence arrangement.
Other markets add their own layer — foreign manufacturer registration, a free sale certificate, or a site-linked import licence. Confirm early who obtains each one.
The Document Pack a Serious Supplier Provides
A capable API supplier has this pack ready. Assembling it takes days, not months, and no item should trigger hesitation.
- Certificate of Analysis — batch-specific, with real results, analyst and QC signatures, and manufacturing and retest dates. See our Certificate of Analysis guide.
- Material Safety Data Sheet — handling, exposure, and transport classification.
- Specification sheet — every test and acceptance criterion the material is released against.
- Method of analysis — the procedures behind those tests, so your QC lab can reproduce them.
- Stability data — accelerated and long-term, supporting the stated retest period. See stability studies in pharmaceuticals.
- Residual solvent data — process solvents against ICH Q3C class limits.
- Elemental impurity data — a risk assessment or test data covering ICH Q3D elements.
- TSE/BSE statement — freedom from animal-derived material, or its origin and controls.
- Nitrosamine risk assessment — a written evaluation for that specific process, with test data where the assessment calls for it.
Two requests separate a strong supplier from an adequate one: three consecutive batch COAs, and the impurity profile with named and quantified related substances. Three COAs show variation; one shows a good day.
Audit Rights and the Quality Agreement
Everything above is a snapshot. A quality agreement keeps the relationship honest over time.
It should name the site, fix the agreed specification, and set out who does what when a result falls outside limits. It should also cover retained samples, complaints, recall cooperation, subcontracting limits, and change notification.
Write the audit right into that agreement rather than assuming goodwill — on-site, remote, and for-cause. An audit before the first commercial order is standard practice for regulated markets, and many buyers share a third-party audit to control cost.
Where travel is impractical, a detailed questionnaire plus a video walkthrough of production and QC is a workable interim step, and a weaker one.
Capacity, Campaign Scheduling, and Lead Times
APIs are usually made in campaigns. A plant runs one product for a set period, cleans down, then switches to another. This is why lead times feel unpredictable to new buyers.
Ask for annual capacity for your API, typical campaign size, campaigns per year, how far ahead the schedule is fixed, and what share is already committed. A plant with capacity on paper and no free slot for eight months cannot serve you.
Ask whether the equipment train is dedicated or shared, since shared trains bring cleaning validation and scheduling constraints.
Total lead time is production plus QC release plus documentation plus transit plus your own incoming testing. A rolling forecast buys a place in the campaign plan; spot buying leaves you at the back of the queue.
Batch Consistency and Change Control
Consistency is the quiet quality attribute. Material that passes specification every time but drifts within it can still upset a formulation.
Compare three or more batches on what matters to your process — particle size distribution, bulk and tapped density, moisture, residual solvents, and individual impurity levels rather than only the total.
Your supplier will change something eventually: a raw material vendor, a solvent, a step in the route, or a test method. The agreement must require written notice before any change affecting quality, with time for you to assess impact and file a variation.
Ask specifically about source changes for key starting materials — the change most likely to shift an impurity profile, and the one most often communicated late.
Sample Evaluation and Validating It Against Production
Samples are useful and easy to misread. A sample can be hand-picked, laboratory-made, or drawn from an unusually good batch.
Request it from a commercial production batch, not a pilot or R&D lot, and ask for the batch number and that batch’s full COA alongside it.
Test it in your own lab against your own specification. Your results should sit close to the COA values for that batch; a large gap means either a method difference or a document that does not describe the material in the drum.
Then ask whether the batch is still available to buy. Purchasing it links what you tested to what you formulate. Most buyers qualify a new source on three production batches, so build that timeline in from the start.
Packaging and Labelling of API Drums
Packaging protects material through months of transit and storage, and it is the first physical evidence of how organised a supplier is.
Standard API packing uses a double low-density polyethylene liner, sealed or tied separately, inside an HDPE or fibre drum. Light-sensitive products add a black or aluminium-laminate liner. Ask about liner grade, nitrogen flushing for oxygen-sensitive material, and desiccant for hygroscopic products.
The drum label should carry product name, grade or pharmacopoeial reference, batch number, manufacturing and retest dates, net and gross weight, storage conditions, and the manufacturer’s name and site address.
Check the label names the same site as your dossier, since mismatched labelling causes customs problems that are painful to fix after arrival. Tamper-evident seals with recorded numbers belong on the drums and the packing list — see pharmaceutical packaging standards.
Commercial Checks Buyers Skip Too Often
Quality due diligence tends to be thorough. Commercial due diligence tends to be a phone call. Both deserve the same care.
Payment terms. Know what advance is expected, whether a letter of credit is acceptable, and what happens to your money if material fails incoming testing.
Incoterms. Agree the term precisely and know where risk transfers. EXW and CIF place very different burdens on you for insurance, clearance, and transit damage.
Minimum order quantity. MOQ usually reflects campaign economics, not stubbornness. Ask whether a trial quantity can be carved out of a scheduled campaign.
Price validity. Get the validity period in writing, plus what drives revision — starting material cost, energy, or currency.
Remaining shelf life. Confirm the minimum months remaining at dispatch. Material arriving with three months left against a two-year retest period is an avoidable loss.
Document flow. Ask which documents travel with the shipment and which follow, since missing paperwork at the port costs demurrage. Cross-check against pharmaceutical export documentation.
The API Supplier Evaluation Checklist
Work through this in order. Anything unanswered after two rounds of correspondence is itself an answer.
- Establish the business model — manufacturer, trader, or distributor, in writing.
- Get the full site address and check it matches the GMP certificate.
- Verify GMP status and scope, with issuing authority and expiry date.
- Ask about inspection history — which regulators, and when.
- Confirm DMF or CEP availability, markets filed, status, letter of access.
- Request the full document pack listed earlier.
- Review three consecutive batch COAs for drift within specification.
- Examine the impurity profile — named impurities, individual limits.
- Secure audit rights in writing: on-site, remote, for-cause.
- Sign a quality agreement before the first commercial order.
- Assess capacity and campaign slots, including committed share.
- Test a production-batch sample against that batch’s COA.
- Confirm packaging and labelling — liner, drum, seals, label content.
- Settle commercial terms: payment, Incoterms, MOQ, validity, shelf life.
- Define change notification obligations in writing.
- Identify a second source, even if you never activate it.
Red Flags That Should Stop the Deal
Some warning signs are ambiguous. These are not.
Reluctance to disclose the manufacturing site
A legitimate supplier names the site. Answers like “our partner facility in Asia” mean either an intermediary protecting a margin or a source they would rather you did not examine. You cannot file a dossier against an unnamed site, or audit one.
COAs that look copied or lack analyst signatures
Watch for identical values repeated across different batch numbers, results reported as “complies” where a number belongs, missing analyst and QA signatures, or a batch number that does not match the drum label. A COA is a batch-specific quality record; if it reads like a template with the dates changed, treat it as one.
Prices far below market
API pricing follows the cost of key starting materials, the number of synthetic steps, yield, and energy, and those costs do not halve between compliant plants.
A quote well under every other offer usually means an unapproved site, a lower grade than you asked for, material near its retest date, or a specification that quietly drops an expensive test.
No stability data
Without stability data there is no basis for the retest period on the label. A supplier who states a retest date but cannot support it with study data is asserting, not demonstrating. Ask for conditions, time points, and parameters tested.
Unwillingness to allow audits
Refusing a customer audit at a site supplying regulated markets is close to disqualifying. Scheduling delays are normal; a flat refusal is not.
Watch the softer versions: an audit that keeps slipping, access limited to the meeting room, or refusal to show QC records. See also how to verify a reliable pharmaceutical manufacturer.
Expert Tips
- Ask for the impurity profile before the price. How a supplier handles a technical question first tells you more than any quotation. Manufacturers answer it; intermediaries steer back to commercial terms.
- Cross-check the GMP certificate with the issuing authority. Many regulators publish searchable databases of inspected sites, which catches expired or altered documents.
- Buy the batch you sampled. If it is still available, purchase it and remove any question about whether your qualification data matches the material you receive.
- Ask what they will not supply. A supplier who says “we do not make sterile grade” is describing real capability. One who says yes to everything is describing nothing.
- Put remaining shelf life in the contract as a number of months. It is the easiest term to fix and the most expensive to leave vague.
- Keep a second qualified source alive with a small annual order. Reactivating a dormant source takes months.
Common Mistakes
- Assuming the seller is the maker. Your dossier names a site you never verified, and a source change surfaces only at inspection.
- Accepting one COA as qualification evidence. You approve on the best batch and meet real variation in production.
- Skipping the quality agreement. When a deviation occurs, responsibilities are undefined and resolution becomes a commercial argument.
- Ignoring the scope line on a GMP certificate. The site is certified, but not for your product type, so the approval will not support your filing.
- Choosing on landed price alone. A worse impurity profile costs more in rejected batches and extra testing than the discount saved.
- Building no second source. One shutdown or inspection finding halts your line with no qualified alternative.
Frequently Asked Questions
How do I know if an API supplier is a manufacturer or a trader?
Ask three questions: the full manufacturing site address, whose name appears on the GMP certificate, and who signs the batch release. A manufacturer answers all three immediately and consistently. A trader’s answers point elsewhere or turn vague. Check too whether they hold the DMF or CEP themselves and can grant a site audit without asking someone else. Neither model is wrong, but you must know which one you have.
What documents should I request before placing a first API order?
Ask for the site GMP certificate, DMF or CEP details, a batch-specific Certificate of Analysis, the MSDS, the specification sheet, the method of analysis, stability data supporting the retest period, residual solvent and elemental impurity data, a TSE/BSE statement, and a nitrosamine risk assessment. Request three consecutive batch COAs rather than one, so you can see variation within specification. A capable supplier sends this pack within a week.
Can I audit an API supplier without visiting the site?
Yes, though it is a weaker substitute. A remote audit usually combines a detailed quality questionnaire, review of SOPs, batch records and validation summaries, and a live video walkthrough of production and QC areas. Many buyers share third-party audits to spread the cost. Remote audits suit low-risk repeat products or an interim step, but a new supplier of a critical API normally warrants an on-site audit before first commercial supply.
How many batches should I evaluate before approving a new API supplier?
Most buyers qualify a new source on three consecutive production batches. One batch shows the material can meet specification once; three show consistency across particle size, density, moisture and individual impurities. Test each batch in your own laboratory against your own specification, then compare with the supplier’s COA for that batch. Build this into your timeline early, because campaign scheduling can stretch three batches across months.
What is a reasonable lead time for an API order?
It depends on whether your product is in stock, in an upcoming campaign, or needs a campaign scheduled. Total lead time covers production, QC release, documentation, transit and your own incoming testing, not just manufacturing. Ask how far ahead the schedule is fixed and how much capacity is uncommitted. Buyers with a rolling forecast get a planned slot; spot buyers wait for a gap. Confirm it in writing on the proforma invoice.
Why is a quality agreement necessary if I already have a purchase contract?
A purchase contract covers commercial terms. A quality agreement covers technical responsibilities: the agreed specification, the named manufacturing site, out-of-specification handling, retained samples, complaint and recall cooperation, subcontracting limits, and change notification. Regulators in most markets expect this document to exist between a buyer and an API supplier. Without it, obligations are assumed rather than defined, and any deviation turns into a negotiation.
What should I do if a supplier’s price is much lower than everyone else’s?
Treat it as a question rather than an opportunity. Compare the full specification line by line, since a lower price often reflects a missing test, a lower grade, or a wider impurity limit. Check whether the quote covers material near its retest date, and confirm the manufacturing site matches the one named in other offers. A shorter synthetic route or in-house key starting material is a genuine explanation.
Should I use more than one API supplier for the same product?
For any product you sell commercially, yes. A single source leaves you exposed to plant shutdowns, inspection findings, raw material shortages and export restrictions. Qualify a second source and keep it current with a small annual order, because a dormant qualification takes months to reactivate. Adding a source usually requires a regulatory variation, so start well before you need the capacity.
Final Thoughts
Suppliers worth working with make evaluation easy. They send documents quickly, name their site, welcome an audit, and answer technical questions without deflecting.
The checks here take a few weeks. Reversing a bad sourcing decision takes a year and a variation filing.
Discuss Your API Sourcing Requirements
If you are evaluating sources for a specific molecule and want straight answers on site details, documentation, and lead times, speak with our pharmaceutical experts. You can also review our product range.