Pharmaceutical supplier qualification is not a low price plus a PDF licence. For procurement and quality teams, the lasting question is how to prove, before the first order, that a partner is authorised, that the stock has a traceable history, and that the offer itself carries no signs of falsification. This briefing covers authorisation checks, chain of ownership, the European Medicines Agency’s published red flags, questionnaires and audits, and re-qualification — a checklist that outlasts the next guidance update.

This article is an industry briefing for operational awareness. It is not legal or regulatory advice. Confirm the obligations that apply in your market with your national competent authority and qualified counsel before acting.

What pharmaceutical supplier qualification means for buyers

Pharmaceutical supplier qualification is the documented process of confirming, before the first purchase, that a supplier is authorised for the product and activity, that its chain of ownership is traceable, and that its offers show no signs of falsification — then re-checking that conclusion over time.

Commercial factors such as range, service, and price belong in choosing a pharma distributor. Qualification is the gate in front of those factors. In the EU, the expectation comes from section 5.2 of the EU guidelines on good distribution practice (GDP), “Qualification of Suppliers”: source only from holders of a wholesale distribution authorisation (WDA) or a manufacturing authorisation covering the product, approve suppliers before any procurement, control this by procedure, and keep the results “documented and periodically rechecked.” Buyers outside the EU can apply the same logic through their own regulator’s rules.

Verify the authorisation — not the PDF

A scanned licence proves little. Check the source register yourself.

EudraGMDP and national registers

EMA describes EudraGMDP as a publicly accessible EU database of wholesale distribution authorisations and registered importers and distributors of active substances. After inspecting a wholesaler, the authority issues either a GDP certificate or a non-compliance statement, and that is entered in EudraGMDP too.

When you search, match:

• the exact legal entity name and address — not a trading name;
• the site that will actually store or ship your product;
• the authorised activities and product scope;
• the date of the latest GDP certificate, and whether any non-compliance statement exists.

Brokers are not listed in EudraGMDP. EMA points buyers to the national competent authority repositories linked through the Heads of Medicines Agencies. For suppliers outside the EU, use the official register of the supplier’s national regulator. Save a dated screenshot of each check.

Manufacturer, wholesaler, broker, importer

A manufacturer needs a manufacturing authorisation covering the product. A wholesaler needs a WDA. A broker arranges sales without handling the goods and must be registered. Under section 5.2, bringing medicines into the EU from a third country for placing on the market requires a manufacturing authorisation. If the role a partner claims does not match what the register shows, stop there.

Chain of ownership and documentation

An authorised seller can still sell stock with a broken history. Ask who owned the product before the seller and check that invoices and delivery notes name authorised parties at each step, with no unexplained intermediaries.

Then check goods against paperwork: batch and expiry match; packs are labelled for the expected market; release or certificate-of-analysis documents are provided where applicable; and where pack-level unique identifiers apply, their status fits a saleable pack. Any mismatch is a question, not a formality.

Red flags: how to spot a suspicious offer

EMA’s published red-flag list

In December 2024 EMA published two Q&As for wholesale distributors and brokers on suspicious offers, on its GMP/GDP questions-and-answers page. The first repeats the GDP due-diligence points — the supplier’s reputation or reliability, products more likely to be falsified, large offers of products usually available only in limited quantities, and out-of-range prices — and adds signals a buyer may weigh:

• offers of highly demanded products, for example products in short supply;
• offers sent through chat apps or other unconventional channels;
• urgency, or a very short time to reply;
• product photos where the unique identifier shows the pack is decommissioned, or the tamper-evident seal is broken;
• sellers not listed in EudraGMDP or, for brokers, a national repository;
• a supplier who does not yet hold the stock but says it will arrive later;
• flows that make no economic sense, such as a high-price country selling to a low-price one;
• language or geography mismatches, such as packs labelled for your own market offered from another country.

Shortage products need particular care: pressure to fill a gap is when checks get skipped, so qualification belongs inside shortage-resilient pharmaceutical sourcing, not outside it. See also how distributors combat counterfeit drugs.

What to do with a substantiated suspicious offer

EMA’s second Q&A is direct: a wholesaler or broker who learns of a substantiated suspicious offer should immediately contact the national competent authority and the marketing authorisation holder — whether the offer was made to them or they learned of offers made to others. In practice: do not buy, record what you received and when, and escalate to your responsible person or quality lead.

Questionnaire, audit, and re-qualification

Supplier questionnaire

A short questionnaire turns qualification into filed evidence:

• Under which authorisation(s) do you operate, and where can we verify them?
• From whom do you source this product, and can you document each prior owner?
• Which sites store or handle the product before it reaches us?
• How do you qualify your own suppliers, and how often do you re-check them?
• How do you handle complaints, recalls, and suspected falsified products — and whom do you notify?
• Have you received a non-compliance statement or significant inspection finding?

When to audit

Audit by risk rather than by habit: new suppliers, products more likely to be falsified, unusual sourcing flows, and suppliers with prior findings come first. A desk review may suffice for a low-risk, long-standing partner; a high-risk one may justify a site visit.

Re-qualification triggers

Qualification is not permanent. Re-check on a schedule, and also when a supplier changes ownership, site, or authorisation; when you add a new product category; after complaints or recalls; and after any red-flag event. EMA’s inspectors’ working group also lists a further Q&A in its work plan for WDA holders on performing authenticity risk assessments; a secondary industry summary gives a Q4 2026 target, and it had not been published at the time of writing.

Evergreen supplier-qualification checklist

1. Confirm the supplier’s role and exact legal entity.
2. Verify the authorisation in the official register — EudraGMDP, a national broker repository, or the supplier’s national regulator; check scope; save a dated record.
3. Check compliance status — GDP certificate date and any non-compliance statement.
4. Trace chain of ownership — prior owners and documents naming authorised parties.
5. Check pack and batch consistency — market labelling, batch and expiry, release documents and identifier status where applicable.
6. Screen offers against EMA’s red flags.
7. Escalate substantiated suspicious offers to the national competent authority and the marketing authorisation holder; do not purchase.
8. Send a questionnaire and audit by risk.
9. Record approval before the first purchase — named approver, date, evidence file.
10. Re-qualify on a schedule and on triggers.

MedLogIl works with pharmacies, hospitals, and healthcare providers on global pharmaceutical and medical-product distribution. For how we support international orders, see our services. When you want to discuss a specific sourcing requirement, you can request a quote.

Teams that keep register checks, ownership records, and re-qualification triggers current treat each guidance update as routine maintenance, not a scramble.

Sources

1. European Medicines Agency — Guidance on good manufacturing practice and good distribution practice: Questions and answers, section “Considerations for wholesale distributors/brokers on suspicious offers – Dec 2024” (Q1 red flags; Q2 contact national competent authority and MAH). Published. EMA Q&A page.
2. European Medicines Agency — Good distribution practice (WDA requirement; EudraGMDP; GDP certificates and non-compliance statements). EMA GDP page.
3. European Commission — EU Guidelines on Good Distribution Practice of medicinal products for human use (2013/C 343/01), section 5.2 Qualification of Suppliers. Text consulted via Commission-hosted document.
4. EudraGMDP database. eudragmdp.ema.europa.eu.
5. Heads of Medicines Agencies (links to national competent authorities). hma.eu.
6. European Medicines Agency — GMDP Inspectors Working Group three-year work plan (lists a forthcoming Q&A for WDA holders on authenticity risk assessments). EMA work plan PDF.
7. Secondary, timing only — GMP Publishing, “EMA: New Plans for the EU GMP Guide” (Mar. 27, 2026; Q4 2026 target for the authenticity risk-assessment Q&A). gmp-publishing.com.