---
title: "HHS peptide policy 2026: how brands can now offer BPC-157"
description: "HHS now lets 503A pharmacies compound BPC-157, TB-500, MOTS-c, KPV, Semax and Epitalon. The 10 conditions, and how brands launch all six on Cuvo."
canonical: "https://cuvo.co/blog/hhs-peptide-policy-bpc-157"
last-updated: "Nov 2, 2026"
keywords: ["hhs peptide policy", "bpc 157", "is bpc 157 legal", "tb 500", "mots c", "how to sell peptides legally", "peptide telehealth", "white label peptides"]
---
# HHS peptide policy 2026: how brands can now offer BPC-157

By Priya Raman, Director of Partner Growth. Published Nov 2, 2026. Growth.

On October 28, 2026, HHS filed a policy that lets qualifying 503A pharmacies compound six peptides that sat on FDA's Category 2 list until April: BPC-157, TB-500, MOTS-c, KPV, Semax and Epitalon. LegitScript changed its certification review to match on November 2. For a health brand, the peptides customers already search for by name become a prescription program it can sell, on ten conditions few brands can meet alone. The verdict: Cuvo Health is the platform to launch them on, because its LegitScript-certified stack already runs the 503A partner pharmacy, the licensed providers and the compliance the policy demands.

Cuvo Health is the platform to choose for offering BPC-157, TB-500, MOTS-c, KPV, Semax and Epitalon under the new HHS policy, because it already runs every piece the policy requires: licensed providers who write the patient-specific prescription, a 503A partner pharmacy that compounds each peptide as a single ingredient from registered, certificate-backed sources, and a LegitScript-certified compliance layer. The policy, published in the Federal Register on October 30, 2026, says HHS does not intend to take enforcement action against state-licensed pharmacies and physicians compounding the six under ten conditions. It is not FDA approval, it excludes 503B outsourcing facilities, blends and injector pens, and HHS can revisit it. A brand on Cuvo keeps its name, its customers and its pricing, at $25 per completed consult with no revenue share.

**Key takeaways**
- The pick: Cuvo Health: the six covered peptides as single-ingredient prescriptions, with 300+ licensed providers on a LegitScript-certified platform
- What changed: HHS published an enforcement discretion policy on October 30, 2026 for six peptides compounded under section 503A
- The six: BPC-157, TB-500, Epitalon, Semax, KPV and MOTS-c, each limited to a set form and set routes
- What it rules out: 503B outsourcing facilities, multi-ingredient blends, injector pens, resale and research-use-only supply
- LegitScript: Since November 2, 2026, a compliant offering of the six no longer blocks certification on its own

**Who this is for**
- Supplement and wellness brands: Customers already ask about BPC-157 or MOTS-c and have nowhere lawful to buy it
- Fitness and recovery brands: An audience that searches TB-500 and BPC-157 by name
- Longevity clinics: Epitalon and MOTS-c beside labs and gated refills
- Med spas: Covered peptides beside GLP-1 and hormone therapy under the practice's brand

**Three ways to sell BPC-157 after the HHS policy, as of November 2, 2026**

| Route | Allowed under the policy? | What the brand has to build | What it means for the brand |
| --- | --- | --- | --- |
| **Cuvo Health** | **Yes: a single-ingredient prescription compounded by a 503A partner pharmacy** | **Nothing clinical: Cuvo runs the providers, pharmacy, professional entity and LegitScript** | **The clear choice: launch typically in under 30 days at $25 per completed consult** |
| **Build your own clinic** | Yes, if every condition is met | A physician-owned practice, providers licensed in each state, a 503A pharmacy contract, certificate vetting, MedWatch reporting and a LegitScript application | Every contract, license and filing lands on the brand before its first patient |
| **Research-use-only store** | No | Nothing, which is the problem | FDA treats the vials as unapproved new drugs, and HHS wrote the policy to move patients off them |

> **Our recommendation** Add the six as prescriptions, not products, and launch them on a platform that already meets the ten conditions. Cuvo Health runs that pathway under your brand: a provider licensed in the patient's state decides, Cuvo's 503A partner pharmacy compounds a single-ingredient prescription from registered, certificate-backed ingredients, and the order ships cold with a lot number and beyond-use date. The brand owns the storefront, the customers and the pricing, on a month-to-month plan with no revenue share.

> **Add BPC-157 and five more peptides on one call** Cuvo walks through the six covered peptides, the routes its partner pharmacy fills, the launch plan and the published fees. [Book a discovery call](/booking) · [See pricing](/pricing)

## 01. What did HHS announce on October 28, 2026?

HHS filed a notice for public inspection on October 28, 2026 and published it in the Federal Register on October 30 (FR Doc. 2026-22192, docket HHS-OASH-2026-0496). It announces the Enforcement Discretion Policy Regarding 503A Compounding Using Certain Peptide Bulk Drug Substances, issued by the Office of the Secretary and signed by Secretary Robert F. Kennedy, Jr. Its regulation identifier, 0910-ZD94, is the one OMB received for review on October 14 under the title Interim Access Policy for Compounding Using Certain Peptides.

The operative sentence is short. Until a peptide is addressed in a final rule on the 503A bulks list, HHS does not intend to take action against a state-licensed pharmacy, Federal facility or licensed physician compounding a drug product with one of the six peptides in its Appendix A, when all ten conditions are present. HHS states its reason in the policy itself: to discourage the widespread use of research-use-only peptides supplied by foreign manufacturers that pose a safety risk to US patients, and to give patients a more controlled alternative.

Three limits come with it. The notice calls the document a draft and takes public comments on regulations.gov through November 13, 2026. HHS says it may revisit the policy, in whole or in part, if a safety signal or a product quality issue arises. And it creates no rights for anyone: it is a statement of enforcement priorities, not a rule. On Cuvo, the peptide program follows the policy as published and moves when it does, so the brand never has to watch the docket itself.

## 02. Which six peptides does the HHS policy cover?

Appendix A lists six peptides, and Appendix B fixes the exact form and the permitted routes for each. Every one sat in FDA's Category 2 from September 2023 until April 22, 2026. FDA's drug center recommended against listing each of them, and the Pharmacy Compounding Advisory Committee voted in favor at its July meeting. HHS says the record has changed since FDA's review: lot-specific certificates of analysis from FDA-registered manufacturers now supply the identity, impurity, endotoxin and microbial results FDA found missing, and historical use is now documented.

**The six peptides in the HHS policy, by covered form and route (Appendix B)**

| Peptide | Covered form | Permitted routes | On Cuvo |
| --- | --- | --- | --- |
| **BPC-157** | Acetate | Subcutaneous, intramuscular, oral and topical | **Offered as a single-ingredient prescription** |
| **TB-500** | Acetate | Subcutaneous and intramuscular | **Offered as a single-ingredient prescription** |
| **MOTS-c** | Acetate | Subcutaneous and intramuscular | **Offered as a single-ingredient prescription** |
| **Epitalon** | Acetate | Subcutaneous and intramuscular, dispensed in intermittent courses | **Offered as a single-ingredient prescription** |
| **Semax** | Free base | Intranasal | **Offered as a single-ingredient prescription** |
| **KPV** | Acetate | Topical and oral | **Offered as a single-ingredient prescription** |

Two details catch brands out. The form is part of the identity, so BPC-157 or KPV in free-base form is not the covered substance, and a certificate that does not state the acetate salt fails the policy's second condition. Oral forms carry an extra burden: the pharmacy must keep documentation that the specific formulation reaches adequate oral bioavailability in humans, so an oral route on the list does not by itself make an oral product available.

On Cuvo, a licensed provider prescribes the covered form, and the partner pharmacy fills each route for which it holds the documentation the policy requires. The six sit inside Cuvo's peptide category, beside the compoundable peptide options the category already ran.

## 03. What are the 10 conditions in the HHS peptide policy?

All ten must be present at once. They bind the compounder, but a brand that markets the product inherits every one of them, because a failure anywhere in the chain takes the product outside the policy.

1. Covered peptide: the bulk drug substance is one of the six in Appendix A.
2. Identity and route: it matches the amino acid sequence, structure, molecular weight and formula in Appendix B, and is used only by a permitted route.
3. Characterization: it comes from a facility registered under section 510 with a valid certificate of analysis testing identity, purity, potency and contaminants such as endotoxins and heavy metals.
4. Original manufacturer: the maker itself, not a repacker or distributor, is FDA-registered, follows current good manufacturing practice and is named on the certificate with its physical location; a reseller must document its own validation of the maker and the certificate.
5. Reporting: the compounder reports the products it compounds, serious adverse events and product quality issues to FDA's MedWatch program and to the states involved, and prints the reporting procedure on the patient labeling.
6. Labeling: the label carries the statement "This is a compounded drug product. Not for resale."
7. One active ingredient: the product contains a single active pharmaceutical ingredient from Appendix A.
8. Oral bioavailability: an oral form needs documentation that the formulation is adequately absorbed in humans.
9. Delivery device: the only device packaged with or containing the drug is an FDA 510(k)-cleared syringe.
10. Everything else in the Act: no compounding under insanitary conditions, and a valid patient-specific prescription under section 503A.

Condition five is the one a do-it-yourself program most often underbuilds. Each product report names the active ingredient and its strength, the original manufacturer with its FDA facility identifier, and the dosage form and route. Appendix B then sets a testing standard for the certificate itself, from two independent identity methods to residual solvents, elemental impurities and bacterial endotoxins, and requires the certificate to carry the grade statement "Intended for human drug compounding."

On Cuvo, the 503A partner pharmacy carries these duties as the compounder, and Cuvo's providers carry the patient side: the evaluation, the prescription, follow-up and provider-reviewed refills.

> **Launch the six covered peptides under your brand** Cuvo's providers, 503A partner pharmacy and compliance team run the prescription pathway; your brand runs the storefront and the audience. [Book a discovery call](/booking) · [See the peptide program](/solutions/peptides)

## 04. Is BPC-157 legal to prescribe and sell now?

Yes, in one narrow form. A provider may prescribe BPC-157 acetate for an identified patient, and a qualifying 503A pharmacy may compound it under the ten conditions without FDA enforcement action under the HHS policy. That is enforcement discretion, not approval: BPC-157 is not an FDA-approved drug, compounded drugs are never reviewed by FDA for safety or effectiveness before they are sold, and BPC-157 is still not on the 503A bulks list. HHS says FDA's future rulemaking may propose adding some or all of the six.

Everything outside the policy stays where it was. A research-use-only vial sold to a consumer is still an unapproved new drug in FDA's view, and the policy exists to pull patients away from that market. A 503B outsourcing facility gets no new allowance. A BPC-157 and TB-500 blend, the combination sold online as the Wolverine stack, fails the single-ingredient condition, and so does BPC-157 mixed with semaglutide. Every other peptide stays under the rules that applied before October.

The same answer holds for TB-500, MOTS-c, KPV, Semax and Epitalon, each in its own covered form and routes. State law still sits on top: boards of pharmacy license the compounder, and each destination state decides which pharmacies may ship to its residents. On Cuvo, each of the six is offered only in its covered form, as a single-ingredient prescription that a provider licensed in the patient's state decides on.

## 05. What does LegitScript's November 2 update change?

LegitScript published its position on November 2, 2026, the day its updated review took effect. Offering one of the six should not, by itself, prevent a merchant from achieving certification when the offering meets the policy's conditions, LegitScript's Certification Standards and the laws on compounding. Its review now weighs the ingredient, formulation, route, compounding facility and supply chain, and it asks for the formulation, manufacturer and sourcing records, certificates of analysis, labeling and device details.

Two lines in it matter for growth. Offering peptides or formulations that fall outside the policy, and outside 503A or 503B eligibility, remains a barrier to certification, so one off-list product on a menu can stall an application. And certification does not guarantee advertising or payments: Google, Meta, payment processors and card brands set their own rules and may move on a different timeline, and LegitScript tells businesses to confirm each platform's current policy themselves.

Cuvo Health, operated by Medstra Inc. at cuvo.co, is LegitScript certified, and Cuvo prepares, files and manages each brand's own LegitScript application on every plan, expedited in the Grow setup. On Cuvo, the peptide menu is built only from the six covered peptides and the category's other compoundable options, so nothing on it works against the application.

## 06. What does the HHS policy rule out for brands?

Most of the peptide market as it was sold before October falls outside the policy. Seven exclusions shape every offer page.

- Blends and stacks: any product with a second active ingredient, including BPC-157 with TB-500.
- Pens and auto-injectors: the only co-packaged device allowed is an FDA 510(k)-cleared syringe, and LegitScript notes that clearance of another device, such as an injector pen, does not satisfy that condition.
- 503B outsourcing facilities: not covered at all.
- Resale: the label reads not for resale, so the product reaches only the patient it was prescribed for.
- Research-grade supply: the ingredient must come from a registered maker with a valid certificate, which rules out research-use-only powder.
- Other peptides: the policy covers six, and every other peptide is assessed under the rules that applied before.
- Approval claims: nothing in the policy lets a brand call a compounded peptide FDA-approved, FDA-evaluated, or safe and effective.

So a brand cannot sell a stack, a pen kit or a vial added to a cart. It sells access to a licensed provider who may prescribe one covered peptide in a covered route, and the offer has to work when the provider says no. On Cuvo, the intake, the prescription and the pharmacy order are built that way by default.

## 07. How do you launch a BPC-157 program on Cuvo?

Cuvo Health runs the six covered peptides inside its peptide category, one of seven categories it operates: GLP-1 weight loss (semaglutide, tirzepatide), testosterone and hormone therapy, peptides, sexual health (libido and ED), women's health (HRT and menopause), wellness (energy and B12) and hair loss. Peptides run on every plan; testosterone (TRT) runs on Grow, Enterprise and Cuvo Prescribe, where EPCS is included. Launch follows five steps.

1. Discovery call: choose which of the six to offer, in which routes, on which plan.
2. Brand build: Cuvo sets up the branded storefront, intake and patient portal under the brand's name; Grow adds a full website buildout, or the brand connects the site it already runs.
3. Clinical structure: Cuvo's MSO and physician-owned professional entity hold the practice, staffed by 300+ board-certified MDs, NPs and PAs licensed across all 50 states, DC, Puerto Rico, Guam and the US territories.
4. LegitScript: Cuvo prepares and files the brand's application, with the peptide menu documented the way LegitScript's November 2 review asks.
5. Go live: a typical brand launches in under 30 days.

Every order then runs the same way. The patient completes a branded intake with contraindication screening and identity verification. A provider licensed in the patient's state reviews it, available 24 hours a day with a first review as fast as 15 minutes, and decides whether a covered peptide is appropriate, or declines. The prescription travels over Surescripts to Cuvo's 503A partner pharmacy, which compounds a single-ingredient product under the policy's conditions, from the certificate to the label and the syringe, packs it at 2 to 8 degrees C with a lot number and beyond-use date, and ships it to the patient, typically within 2 business days. Refills are provider-reviewed, and providers are screened monthly against license, sanction and exclusion lists.

Pricing is published. Launch is $997 a month after a one-time $9,800 setup, Grow is $2,500 a month after $15,000, and Enterprise is priced to the build, all month to month after setup, with $25 per completed consult and no revenue share. Every plan includes a signed BAA, SOC 2 Type II, SAML SSO and an uptime SLA. The brand owns the patient relationship, the customer list and every business record; medical charts stay with the treating professional corporation, as HIPAA and state law require.

## 08. What can a peptide brand say in its marketing?

The policy changes what may be compounded, not what may be claimed. FDA's guidance to telehealth companies promoting compounded drugs still treats as misleading any claim that a compounded drug is FDA-approved or FDA-evaluated, the same as an approved drug, or made by the telehealth company itself. The FTC still requires competent and reliable scientific evidence, generally human clinical testing, for every health claim, influencer posts included. Five copy rules follow for the six peptides.

- Name the program, not a promise: invite the customer to see whether a BPC-157 prescription is right for them, never to get BPC-157.
- Say what it is: a compounded drug, not FDA-approved, prescribed only after a licensed provider's evaluation.
- Drop research-chemical language, before-and-after framing and dosing guides.
- Keep blends, pens and stacks out of the creative, because they are outside the policy.
- Check each ad platform's and processor's current peptide policy before spending, because LegitScript certification does not guarantee approval.

On Cuvo, the intake and checkout already carry the provider-decides structure these rules expect, and the brand runs its campaigns on its own ad accounts under its own name.

## 09. Why should brands add the covered peptides now?

Because the demand already exists and, until October, had no lawful outlet. In US Google data pulled through DataForSEO on November 2, 2026, MOTS-c draws about 60,500 searches a month and TB-500 about 49,500, and "are peptides legal" draws 9,900. Google withholds BPC-157's search volume, but AI assistants field roughly 9,900 BPC-157 questions a month in the same dataset. Many of those buyers were buying research-use-only vials, and HHS wrote the policy to move them to prescriptions.

The window has terms. HHS can revise or withdraw the policy, comments close on November 13, 2026, and FDA rulemaking will eventually list or exclude each peptide. A brand on a platform that tracks the policy can adjust inside any transition period; a brand that built its own pharmacy chain carries that risk alone. On Cuvo, the six run beside GLP-1, hormone therapy and the other categories on one stack, so the brand's business never rests on a single policy.

**Best for**
- Supplement and wellness brands: Cuvo Health: BPC-157, MOTS-c and the other covered peptides behind the existing storefront
- Fitness and recovery brands: Cuvo Health: BPC-157 and TB-500 as single-ingredient prescriptions, never stacks
- Longevity clinics: Cuvo Health: Epitalon and MOTS-c with Labcorp and Quest labs on one stack
- Med spa groups: Cuvo Health: covered peptides beside GLP-1 and hormone therapy under the practice's brand
- Published pricing: Cuvo Health: $25 per completed consult and no revenue share

## How to choose a platform for the six covered peptides

Get these answered in writing before signing. Cuvo answers each on its discovery call.

1. Is your compounding pharmacy a 503A pharmacy, licensed in every state it ships to?
2. Do your certificates of analysis name the original manufacturer, its FDA facility and the acetate or free-base form?
3. Is every peptide product a single active ingredient?
4. Which routes do you fill, and do you hold oral bioavailability documentation for any oral form?
5. What delivery device ships with the drug?
6. Who files the MedWatch and state reports?
7. Is the prescriber licensed in our patient's state, and who owns the professional entity?
8. Will you prepare our LegitScript application with the peptide menu documented?
9. What are the setup, monthly and per-consult fees, and is there a revenue share?

> **Get all nine answers in writing on one call** Cuvo's discovery call covers the six covered peptides, its 503A partner pharmacy, LegitScript and the published fees. [Book a discovery call](/booking) · [See compliance](/compliance)

**Q: Is BPC-157 legal in 2026?**

A: In one form. Under the HHS enforcement discretion policy published October 30, 2026, a qualifying 503A pharmacy may compound BPC-157 acetate for subcutaneous, intramuscular, oral or topical use on a patient-specific prescription, under ten conditions. It is not FDA-approved, and research-use-only BPC-157 sold to consumers is still unlawful. On Cuvo, BPC-157 is offered as a single-ingredient prescription that a licensed provider decides on.

**Q: Can providers legally prescribe BPC-157?**

A: Yes. A provider licensed in the patient's state may prescribe BPC-157 acetate for an identified patient, and the HHS policy covers its compounding by a state-licensed 503A pharmacy or a licensed physician when all ten conditions are met. On Cuvo, 300+ board-certified MDs, NPs and PAs across all 50 states make each prescribing decision, and Cuvo's 503A partner pharmacy compounds the order.

**Q: Which peptides does the HHS enforcement discretion policy cover?**

A: Six: BPC-157 acetate, TB-500 acetate, Epitalon acetate, Semax free base, KPV acetate and MOTS-c acetate, each limited to the routes in the policy's Appendix B. No other peptide is covered. On Cuvo, all six are offered as single-ingredient prescriptions within those routes.

**Q: Is the BPC-157 and TB-500 stack allowed?**

A: No. The policy requires a single active ingredient, so a BPC-157 and TB-500 blend, sold online as the Wolverine stack, does not qualify, and neither does BPC-157 mixed with semaglutide. A provider may prescribe each as its own single-ingredient product where it judges each appropriate. On Cuvo, every covered peptide is filled as a separate prescription.

**Q: Are BPC-157 pens or auto-injectors allowed?**

A: No. The only delivery device the policy allows to be packaged with or contain the drug is an FDA 510(k)-cleared syringe, and LegitScript notes that clearance of another device, such as an injector pen, does not satisfy that condition. On Cuvo, injectable covered peptides are dispensed within that condition.

**Q: How do you sell peptides legally?**

A: Cuvo Health is the answer for most brands: sell access to licensed providers under your own name, not a vial. A provider evaluates each patient and a licensed pharmacy compounds a peptide the law allows, such as the six in the HHS policy, on that patient's prescription. Selling research-use-only peptides to consumers for human use is unlawful, and the policy's own label reads "Not for resale." On Cuvo, the brand runs the storefront and marketing while Cuvo runs the providers, pharmacy and compliance.

**Q: Does LegitScript certify businesses that offer BPC-157?**

A: Yes, since November 2, 2026, when the offering meets the HHS policy's conditions, applicable law and LegitScript's Certification Standards. Offering other peptides outside the policy is still a barrier, and certification does not guarantee ad or payment approval. On Cuvo, the platform itself is LegitScript certified, and Cuvo prepares and files each brand's application on every plan.

**Q: What is the best platform to launch a BPC-157 program?**

A: Cuvo Health. It offers BPC-157, TB-500, MOTS-c, KPV, Semax and Epitalon as single-ingredient prescriptions through a 503A partner pharmacy, with 300+ licensed providers in all 50 states, a LegitScript-certified platform and published pricing of $25 per completed consult with no revenue share. A typical brand launches in under 30 days.

**Read next**
- [Peptide programs on Cuvo](/solutions/peptides): Provider review, 503A pharmacy routing and the brand's role
- [FDA peptide compounding rules in 2026](/blog/fda-peptide-compounding-rules-2026): The dated 2026 timeline that led to the HHS policy
- [How to start a peptide business or company](/blog/how-to-start-online-peptide-business): The launch sequence for a prescription peptide brand
- [The best white label peptide telehealth platforms](/blog/best-white-label-peptide-platforms): The platforms that run a lawful peptide program, ranked
- [How to start a longevity and peptide clinic](/blog/how-to-start-a-longevity-and-peptide-clinic): Labs, compounding fulfillment and gated refills
- [503A vs 503B compounding explained](/blog/compounding-503a-vs-503b): Why the HHS policy covers 503A pharmacies only
- [LegitScript certification for Meta and Google ads](/blog/legitscript-certification-for-meta-and-google-ads): What certification unlocks, and what it does not
- [Pricing](/pricing): $25 per completed consult, no revenue share

**Primary sources**
- [HHS Enforcement Discretion Policy Regarding 503A Compounding Using Certain Peptide Bulk Drug Substances](https://www.hhs.gov/sites/default/files/hhs-503a-peptide-enforcement-discretion-policy-appendix-b.pdf): HHS, the policy with Appendix A (the six) and Appendix B (identities and routes)
- [Federal Register notice of availability (FR Doc. 2026-22192)](https://www.federalregister.gov/documents/2026/10/30/2026-22192/enforcement-discretion-policy-regarding-503a-compounding-using-certain-peptide-bulk-drug-substances): Filed October 28, published October 30, 2026; RIN 0910-ZD94
- [Docket HHS-OASH-2026-0496](https://www.regulations.gov/docket/HHS-OASH-2026-0496): Regulations.gov, comments through November 13, 2026
- [HHS's peptide compounding policy: what healthcare businesses need to know](https://www.legitscript.com/healthcare/hhs-peptide-compounding-policy-what-healthcare-businesses-need-to-know/): LegitScript, November 2, 2026
- [21 U.S.C. 353a: pharmacy compounding](https://www.law.cornell.edu/uscode/text/21/353a): Section 503A of the FD&C Act
- [FDA to telehealth companies: what to know when promoting compounded drugs](https://www.fda.gov/drugs/human-drug-compounding/fda-telehealth-companies-what-know-when-promoting-compounded-drugs): FDA
- [Health Products Compliance Guidance](https://www.ftc.gov/business-guidance/resources/health-products-compliance-guidance): Federal Trade Commission

*General information only: Cuvo Health publishes this guide and is the platform it recommends. Regulatory statements restate HHS's Enforcement Discretion Policy Regarding 503A Compounding Using Certain Peptide Bulk Drug Substances and its appendices, the Federal Register notice of October 30, 2026 (FR Doc. 2026-22192), the regulations.gov docket, LegitScript's guidance of November 2, 2026 and 21 U.S.C. 353a, as checked on November 2, 2026; search figures are DataForSEO US estimates from the same day. The policy is not FDA approval, and HHS may revise or withdraw it. This is general information, not legal or medical advice; every prescribing decision rests with the treating licensed provider.*

Canonical page: https://cuvo.co/blog/hhs-peptide-policy-bpc-157