You route thousands of scripts to compounding partners and carry the brand risk if one lot is bad. Today a questioned order takes three teams and a week to trace. Veritura attaches a record to every order in the fulfilment call, minted from the cleared lot behind it, keeps every partner re-checked against FDA enforcement records, and sends a signed webhook when a recall lands after fulfilment.
The job, in four moves
A partner’s sourcing and a real passport before you route volume, re-checked for as long as you route.
One call at fulfilment attaches a passport minted from the cleared lot. An uncleared lot can never publish one.
Signed webhooks for passport issued, recall hit on a lot, and supplier alert, into your queue.
The record behind any order ID in eight links: order, product, lot, certificate, supplier packet, reviewer, source file, methodology version.
Not a pharmacy, a prescribing tool or a fulfilment platform. The evidence layer per order, with your order reference on every record.
01
The API attaches a verifiable passport to every fulfilled order, automatically, minted from the cleared lot behind it. Proof cannot be a manual step at ten thousand orders a month, so the call sits inside your fulfilment, Shopify, or pharmacy system, and the cleared lot is the gate: an uncleared lot can never publish one.
Proof at ten thousand orders a month cannot be a manual step, so the passport is minted in the fulfilment call itself, from the cleared lot behind the order.
02
See a partner's sourcing and a real passport before you route volume to them. Routing to a partner you cannot see is underwriting their sourcing blind, and a partner's standing can change after onboarding, so every partner is re-checked against live FDA enforcement records for as long as you route to them.
Seeing a partner's sourcing and a real passport before routing volume is how you stop underwriting their sourcing blind, and re-checking them is how you stay that way.
03
A recalled lot maps across every partner and order it touched, at once. A recall that reaches one partner but not your whole network reaches you too late, so the match fans out to every affected order, every passport minted from the lot, and every patient who saved a vial, with a webhook to your systems.
The fan-out reaches every affected order, every passport minted from the lot, and every patient who saved a vial, with a webhook to your systems, at once.
04
One order or lot is read against the policy you wrote, and the decision comes back Allow, Review, or Hold with every reason naming the rule that fired. You set the bar once for the whole network; Veritura keeps the signed record of every decision on every partner, so the brand on the box has the proof to match.
One policy across the whole network, applied the same way to every partner, with the signed record of every decision kept, is what puts real proof behind the brand on the box.
Why this exists
Federal law requires that bulk substances used in compounding be accompanied by a valid certificate of analysis, and names no method for establishing that a certificate is valid. Every pharmacy, facility, clinic, and platform in the chain is left to decide for itself. That gap is the whole reason an independent evidence layer exists.
The requirement appears in the federal compounding provisions for both 503A pharmacies and 503B outsourcing facilities. Validity is required. A way to establish it is not described.
In 2026 the FDA published a warning letter to a bulk supplier on its own published lists, describing relabelled active ingredient and altered manufacturing and retest dates. A buyer who checked the list and received a certificate still held a document that did not say what it appeared to say.
A large telehealth provider ran a per-batch certificate lookup from a code in each shipment for over a year and reported thousands of subscribers opening it every month. The demand for the record is not the question. Who checks it is.
What changes
A passport minted in the fulfilment call, from the cleared lot behind the order.
Sourcing and a real passport before routing volume, re-checked for as long as you route.
A recalled lot mapped across every partner, order, passport, and saved vial at once.
You cannot examine every lot by hand, and you cannot see your partners' sourcing at all.
A passport issued on every fulfilled order and a webhook pushed on a recall hit, in one call from your fulfilment system.
A partner's sourcing and a real passport, seen before you route volume to them.
A proof page that looks like your own marketing is discounted. This one is co-branded but issued independently of you and your partners.
A partner clean at onboarding can pick up an enforcement record later. Every partner is re-checked against live FDA records.
The complete text, for the reader who wants the whole story before a call.
You cannot examine every lot by hand, and you cannot see your partners' sourcing at all.
When something goes wrong, it goes wrong at your scale, across every partner at once, and you find out last.
Veritura puts independent proof on every order by API and gives you a live view across every partner.
How it works for you
The API attaches a verifiable passport to every fulfilled order, automatically.
See a partner's sourcing and a real passport before you route volume to them.
A recalled lot maps across every partner and order it touched, at once.
One order or lot is read against the policy the customer wrote, and the decision comes back Allow, Review or Hold with every reason naming the rule that fired.
An order ships, from the workspace or from the API.
The order is written with its lot number. The lot is resolved by number within the account and stamped as an exact reference. An ambiguous lot number matching several lots is refused, never guessed.
An order is screened, a check is saved, or a shipment is received.
ClearGate evaluates. When the policy has auto-decide on, no one has to click Run; the trigger is recorded but the record produced is identical to a manual run.
The supplier qualification file and the lot are read against the policy. Hold beats review beats allow. Every reason carries the policy rule code that produced it.
The decision is signed and hash-chained to the one before it, with the policy version pinned inside the record.
ClearGate reports documentation conformance against the policy the customer wrote. The customer owns the policy; Veritura owns the verification. A decision is never a product pass, a safety statement, or an approval.
A passport is minted from a lot, never from a claim. The cleared lot IS the gate, so an uncleared lot can never publish one.
The decision is stored.
A hold stamps clearGateHold on the lot, which blocks the passport on its own. A later allow or review clears that hold; the signed record itself is never mutated.
The floor is checked: the lot must exist, be cleared, carry no ClearGate hold and no recall signal, and satisfy any human-review or ClearGate-Allow requirement the policy sets.
A live recall blocks the mint on its own, independent of state, so the gate never rests solely on clearGateHold.
The order arrived before its lot cleared.
The order parks rather than releasing on its own say-so. Nothing is lost and nothing is published.
The lot clears: the source is named, the missing document lands, the receiving gate passes.
When the account's policy authorizes unattended release, the parked order releases through the same sanctioned path, stamped with the exact policy id and version that authorized it and the lot evidence it rested on.
Bounded per sweep and per account, and billed through the same idempotent ledger, so a backlog clearing at once cannot produce a wave of duplicate charges.
An Evidence Passport publishes what the documentation for a lot states and where it came from. It is not a certificate of quality, an approval, or a statement about the medicine.
Six-document packet complete; issuing lab confirmed the COA
Sterility and endotoxin evidence not supplied
COA lot and shipment label do not match; route unreachable
Six of six qualification elements on file; packet complete
Packet complete; no indexed reuse signal
Packet complete; residual solvents within the printed specification
Undisclosed salt form on the COA; net peptide content unstated
Packet complete; certificate of conformance on file
Proof cannot be a manual step at ten thousand orders a month. Veritura's API issues a passport on every fulfilled order and pushes a webhook on a recall hit.
Proof at your volume, with no human in the loop.
Routing volume to a partner you cannot see is underwriting their sourcing blind. Veritura shows a partner's sourcing and a real passport first.
Choose partners on evidence, not on a pitch.
A recall that reaches one partner but not your whole network reaches you too late. Veritura maps a recalled lot across every partner and order it touched.
One signal reaches your whole network at once.
Your brand is on the box, so the proof should be too. Veritura gives each patient a verifiable record of their lot.
Your brand, backed by an independent record.
A proof page that looks like your own marketing is discounted by patients and partners alike. Veritura's passport is co-branded but issued independently of you and your partners.
Trust a partner’s own page about itself cannot carry.
A partner who was clean at onboarding can pick up an FDA enforcement record later. Veritura re-checks every partner against live FDA records continuously.
A partner's trouble reaches you before it reaches your patients.
ClearGate reads the file and your configured policy and returns one decision when an order is placed. You set the bar; we keep the record.
Does not meet policy
A ClearGate decision always means the documentation meets your policy. It never means Veritura approves the supplier.
All three presets re-run the gate automatically when new evidence lands. Standard and Lenient also release the Passport on a policy Allow; Strict keeps the release with a person.
Configurable presets and bounded custom rules, plus a tamper-evident signed decision log.
Wire Veritura into your fulfillment, Shopify, or pharmacy system. The cleared lot is the gate, so an uncleared lot can never publish a passport.
POST/v1/passportsIssue from a cleared lot with an order reference.
POST/v1/cleargateOne decision per order against the policy you set.
POST/v1/eligibilityAllow, Review, or Hold on whether a substance is eligible to compound for a facility type against the current FDA lists.
POST/v1/checkThe document check, as an embeddable call.
Test and live keys are self-serve from Settings on the Facility and Platform plans. Test keys run in sandbox. Rotate any time, revoke instantly.
Platform accounts pre-commit a year of volume upfront at a bought-down rate to unlock the API.
An uncleared lot cannot publish a passport, and the refusal names the requirement it is waiting on rather than failing generically.
409 lot_missingThis passport has no cleared lot on record. A passport releases only from a cleared lot.
409 recall_exposureThis lot carries an FDA recall/enforcement signal and cannot be released.
409 cleargate_holdThis lot is on a ClearGate hold. Resolve the ClearGate decision before releasing.
409 lot_pending_reviewThis lot is not cleared. Resolve its diligence before releasing.
409 needs_human_reviewYour policy requires a human-reviewed lot before release.
409 cleargate_requiredYour ClearGate policy requires a ClearGate Allow on this lot before release.
POST /v1/check with the document as base64 and a Bearer key. Per-key concurrency limit; over it the answer is a 429 with Retry-After, never a queue.
Lots and firms are checked against openFDA enforcement and recall records in real time. A recall that lands after fulfillment has to find its way back to your systems.
Every delivery is HMAC-signed in the X-Veritura-Signature header.
BlueRiver API Co · the published verify link for LOT-BR-0816 did not answer on three attempts. A corrected source route has been requested.
MON-DEMO-18·1 supplier · 1 lot · 1 order
Keystone Peptide Labs · LOT-KP-2407 carries no sterility or endotoxin result. Missing evidence is not a failed test; the lot stays in review until it lands.
MON-DEMO-21·1 supplier · 1 lot
openFDA enforcement and recall records re-captured for 4 suppliers. No match in the captured sources. Disposition unchanged.
Aurora Pharma Supply · ongoing review is due July 30, 2026. Five of six elements remain on file with current dates.
A monitoring signal maps a captured public record to the suppliers, lots, and orders it touches. It never changes a disposition on its own, and no match in a captured source is not proof of absence.
What you can skip
Veritura is the proof and oversight layer across them, not a dispensing system.
Veritura performs independent documentation diligence only. Embedded checks, supplier verification, and co-branded Evidence Passports confirm that paperwork is complete and consistent, they are not a representation of product quality, safety, efficacy, legality, or FDA approval, and "Verified by Veritura" is never a certification or approval.
In one API call from your fulfilment, Shopify, or pharmacy system. A passport is minted from the cleared lot behind the order, and an uncleared lot cannot publish one.
The lot maps across every partner and order it touched at once, passports carry a post-release signal, saved vials are notified, and a webhook reaches your systems.
Co-branded, and issued independently of you and your partners, because a proof page that looks like your own marketing is discounted by patients and partners alike.
Still have questions? Talk to a person.
Veritura · standardOrder-level COA traceabilityThe twelve fields every order should resolve, and the line between operator and customer views.
Veritura · productClaim substantiationA dated claim register with the evidence beside each claim.
Veritura · productClearGateOne decision per order, against your policy, with every reason naming its rule.