Private Label Peptides GuidesPrivate Label Peptides

How Research Peptide Suppliers Verify a Buyer

By · Published

No federal rule was found that sets a buyer verification procedure for research peptide suppliers. 21 CFR 312.160 requires due diligence on the consignee only for a drug shipped under that section and does not say how to do it, so verification is a set of options that each business chooses and writes down. This guide is for owners, procurement staff and compliance staff at research-supply businesses who are building their own checks, and it is written from the verifier’s side only. It is not legal advice.

Is there a federal rule for verifying a research buyer?

Not one that was found for research peptides. Three FDA texts bear on the question, and none is a verification procedure.

21 CFR 312.160 covers drugs shipped under that section for tests in vitro or in animals used only for laboratory research. It says a person shipping a drug under paragraph (a) “shall use due diligence to assure that the consignee is regularly engaged in conducting such tests and that the shipment of the new drug will actually be used for tests in vitro or in animals used only for laboratory research.” It also requires shipment records, and says records of shipments under paragraph (a)(1)(i) “are to be maintained for a period of 2 years after the shipment.” It does not prescribe how to do the due diligence. This guide does not say whether it applies to a given product.

21 CFR 201.125 is an exemption in the drug labeling rules. It exempts a drug subject to 201.100 or 201.105 from section 502(f)(1) of the Federal Food, Drug, and Cosmetic Act “if shipped or sold to, or in the possession of, persons regularly and lawfully engaged in … research not involving clinical use, or in chemical analysis, or physical testing, and is to be used only for such … research, analysis, or testing.” Note what it turns on: who receives the product and what the product is used for. It names drugs subject to 201.100 or 201.105 and does not mention research peptides, and this guide does not say whether it applies to a given product. It does not say how a supplier should check a buyer.

21 CFR 201.128 defines “intended uses” as the term is used in the FDA sections it lists (21 CFR 201.5, 201.115, 201.117, 201.119, 201.120, 201.122 and 1100.5). It refers to “the objective intent of the persons legally responsible for the labeling of an article (or their representatives),” and says intent “may be shown by such persons’ expressions, the design or composition of the article, or by the circumstances surrounding the distribution of the article.” Who a business sells to and what it knows about the use are circumstances of distribution. That is a reason to keep a clear record of the buyer. It does not turn any particular check into a requirement.

What can a verifier check about a business?

The table lists options. Each one answers a narrow question, and none proves what a buyer will do after delivery.

Check What it can establish What it does not establish
Legal entity record from the issuing government registry The business exists under that name, in that place, with that status That the business does research
Match between the entity name, the account name, the billing name and the ship-to name The people on the order are the people on the record Anything about the intended use
Named responsible contact at an organization email domain the organization controls There is a person at the organization who answers for the order That the person is authorized to buy
Written purchasing authority or a purchase order from the organization The organization, not an individual, is buying The research use
Institutional or business documents showing a research or analytical function, such as a facility description or a department page The organization states a research or analytical function That this order serves it
Signed research-use attestation The signer has stated the intended use in writing That the statement is accurate
Phone or video call to a number found independently of the application The contact is reachable and the account details are consistent Anything beyond the call

Two habits keep these checks meaningful: source each fact from the issuing record or from a channel the verifier chose, not only from documents the applicant supplied, and note the date, because a business record can change after the check.

What should a research-use attestation say, and what can it do?

An attestation is a short signed statement. A verifier may ask for these elements:

  • The legal name of the organization and the name and title of the signer.
  • A statement that the product is bought for laboratory research or analysis only.
  • A statement that it is not for human or veterinary use and will not be resold or passed on for such use.
  • A short description of the research or analytical function it supports, in the buyer’s own words, with no product claims.
  • An agreement to tell the supplier of any change in the organization, the ship-to address or the intended use.
  • A signature and date.

On what the attestation can do, one FDA text is useful as an analogy and no more. It is guidance for in vitro diagnostic (IVD) products labeled for research use only, written for IVD manufacturers, and it is non-binding. Its section IV.C.1 says “User certification programs, where users certify that they will not use RUO/IUO products in a manner inconsistent with the labeling, would be viewed as one factor to consider when assessing these circumstances,” and adds that “the existence of a certification program alone would not relieve manufacturers from their responsibilities to ensure that their labeling and distribution practices for RUO/IUO products are consistent with the product’s RUO/IUO label.” Read as an analogy, it supports treating the attestation as one record among several.

Which order and shipping patterns call for a second look?

A red flag is a reason to pause and ask questions. It is not proof of anything. A verifier can write its own list and decide in advance what each flag triggers. Items to consider:

  • The organization on the application cannot be matched to a registry record, or the names on the account, payment and ship-to differ without a documented reason.
  • The contact will not take a call or provide a named responsible person, or the only contact route is a consumer email account or a messaging app.
  • The ship-to address is a residence, a shared mailbox or a forwarding service and does not match an address on the organization’s record.
  • The stated research function does not match what is ordered, or the description changes between conversations.
  • The order is large or recurring compared with the research function the buyer described, or the pattern changes sharply from earlier orders.
  • The buyer asks to leave documents, labels or lot paperwork out of the shipment, or to change the wording the supplier uses about research use only.
  • The buyer asks for product wording that points to use on a person, or names an audience that is not a research organization.
  • The payment comes from a party that is not the buyer on record.
  • A declined buyer re-applies under a different name or address.

A flag answered in writing and consistent with the other records can be closed; one that is not can be escalated.

What records should a verifier keep?

Keep one file per buyer, and keep it the same way for every buyer so the review does not depend on who happened to handle it. Options for the file:

  1. The application and the date it arrived.
  2. The registry record or other source checked, with the date and the name of the person who checked it.
  3. The business or institutional documents received.
  4. The signed attestation and any later versions.
  5. Notes from calls, with date and participants.
  6. Ship-to and billing details, and any change to them with the reason.
  7. Any red flag raised, the question asked, the answer and who closed it.
  8. The decision to approve, pause or decline, with the name of the approver and the date.
  9. A review date for the next check, since an account that was verified once can change.

The business sets its own retention period unless a rule that applies to the product sets one; 21 CFR 312.160, for example, requires records of shipments under its paragraph (a)(1)(i) to be kept for a period of 2 years after the shipment.

When should a verifier decline or pause an order?

Write the rules before the first hard case arrives, so the decision does not depend on how good a sale looks. Options:

  • Decline when the organization cannot be matched to a record after a reasonable effort, or when the buyer will not provide an attestation.
  • Pause when a red flag is open, and release only when the answer is on file.
  • Decline when a buyer states an intended use that is not laboratory research or analysis, or asks for wording that points to such a use.
  • Name who can approve an exception, and write the exception down with the reason.
  • Keep a list of declined applicants and the reason, so a repeat application is recognized.
  • Tell the buyer plainly that the order is declined or paused, and record the reason in the buyer file.

Treat the attestation, the checks and the decisions as a connected record. Under 21 CFR 201.128, intent “may be shown by such persons’ expressions, the design or composition of the article, or by the circumstances surrounding the distribution of the article,” so the record should show what the business knew when it shipped and what it did when something did not fit.

Last reviewed: 2026-11-13

References

Frequently asked questions

Does a signed research-use attestation settle whether a sale is appropriate?

No. FDA's guidance on in vitro diagnostic products labeled for research use only, used here only as an analogy, calls user certification "one factor to consider" and says a certification program alone does not relieve a manufacturer of its responsibilities. The attestation is one record among several.

What should a buyer file contain?

Options include the business identity checks, the documents received, the signed attestation, the stated research use, the ship-to details, the date of each check, the name of the person who reviewed it and the decision. The business sets its own retention period unless a rule that applies to the product sets one; 21 CFR 312.160 requires records of shipments under its paragraph (a)(1)(i) to be kept for 2 years after the shipment.

Who decides when to decline an order?

The business decides, using written rules that name who can approve, pause or decline. No cited text sets those rules; they are an internal control.