Drug Master Files in API Sourcing: How to Read a Supplier's DMF Status

When you qualify an active pharmaceutical ingredient supplier for a regulated market, one document does more work than almost any other in the early screen: the Drug Master File (DMF). A held US Type II DMF tells you a supplier is organized to serve the US market and has documented its process to the FDA. But a DMF is widely misread — it is not an FDA approval, and treating it as one is a common and costly sourcing mistake.

This guide covers what a DMF actually proves, the difference between DMF types, how the Letter of Authorization works in practice, and — most importantly — how to weigh DMF status against a supplier's live compliance record when building a shortlist.

What a DMF proves — and what it doesn't

A Drug Master File is a confidential submission to a regulatory authority (most commonly the FDA in the US) containing detailed chemistry, manufacturing, and controls (CMC) information about a facility, process, or article used in drug manufacturing. For API sourcing, it describes the drug substance, its intermediates, and the materials and controls behind them — in enough detail for the agency to assess quality without exposing that proprietary detail to the supplier's customers.

The single most important thing to understand is what a DMF is not:

A DMF is not an FDA approval. The FDA does not approve or reject a DMF on its own. It reviews the file only in the context of a referencing drug application — an NDA or ANDA. A DMF "on record" means the supplier has documented its process to the agency, not that the site is currently in good manufacturing standing.
A DMF is not proof of current GMP compliance. A file can sit on record while a site accumulates inspection findings. DMF status and GMP standing are separate signals, and they must be read together.
A DMF is not held by you. It is held by the supplier. You gain the benefit of it through a Letter of Authorization (below), not by receiving the file itself.

Read correctly, a DMF is a strong organizational signal — a supplier that maintains a US Type II DMF is set up to support customers' US filings — paired with a caution: it says nothing, by itself, about the site's day-to-day quality record.

DMF types — and why Type II is the one that matters for APIs

The FDA recognizes several DMF types. For active-ingredient sourcing, only one is central:

DMF type	Covers	Relevance to API sourcing
Type II	Drug substance (API), intermediates, and materials used in their preparation	The one that matters — held by API manufacturers to support customer filings
Type III	Packaging materials	Relevant to drug-product, not API, sourcing
Type IV	Excipients, colorants, flavors	Relevant to formulation, not the active
Type V	Other FDA-accepted reference information	Situational

Type I, which covered manufacturing sites and facilities, was discontinued in 2000. So when a supplier says "we hold a DMF" for an active ingredient, the question to ask is: is it a US Type II DMF, and what is its status? A Type II filing is the one that signals a supplier is organized to serve the regulated US market.

The Letter of Authorization: how a DMF is actually used

A DMF is never submitted alongside a drug application directly. Instead, the holder issues a Letter of Authorization (LoA) permitting a specific applicant to reference the confidential DMF in their own NDA or ANDA. When that application is reviewed, the FDA examines the referenced DMF as supporting evidence for the active ingredient's quality — without disclosing the proprietary detail to the applicant.

For a sourcing team, this makes the LoA a concrete checkpoint, not an abstraction:

Will the supplier grant an LoA for your specific filing and market? A supplier that holds a DMF but is reluctant to authorize it for your application is a practical dead end.
Is the DMF in a reviewable state? A DMF that has never been referenced has not been reviewed by the FDA in any application. First-time referencing can surface deficiencies that delay your filing.
Does the LoA cover the right entity and site? Corporate structures and multiple manufacturing sites mean the authorized site must be the one that will actually make your material.

Where DMF status fits in the qualification sequence

DMF status is an early screen, not the whole qualification. A sound sequence:

Confirm the regulatory foundation. Does the supplier hold a US Type II DMF for the API, and will they grant an LoA? Confirm current GMP certification for the specific site that will produce your material.
Screen the live compliance record. Check the site for Form 483 observations, Warning Letters, and recalls. A DMF on record alongside an open Warning Letter at the same site is a contradiction you need to resolve before proceeding.
Assess technical capability. Synthetic route, impurity profiling, particle-size and polymorph control, stability data, and scale-up experience.
Plan for supply continuity. Capacity headroom, geographic exposure, and whether a second qualified source is warranted for a critical API.
Audit and document. Commission or conduct a quality audit, and record the qualification rationale to support your filing and future re-qualification.

The full version of this sequence is in our API supplier qualification checklist; DMF status is step one of that process, not a substitute for it.

The practical problem: DMF status and compliance live in different places

The reason DMF screening is harder than it should be is fragmentation. The DMF list, the site's inspection classifications, Warning Letters, and recall records all live in separate FDA systems, and none of them share a clean company key. A supplier's corporate name rarely matches its site name; subsidiaries and acquisitions muddy the history; and a shortlist of ten candidate API sources means dozens of manual cross-checks — repeated every time the shortlist changes.

This is exactly the matching problem that makes a definitional check ("do they have a DMF?") quietly expensive in practice. The answer is only useful once it sits next to the compliance record for the same site.

How to screen DMF holders efficiently

PharmaTek links FDA Type II DMF signals to company profiles across a directory of 22,000+ pharmaceutical companies and manufacturers, alongside each site's Form 483, Warning Letter, and recall history. That lets you screen a whole shortlist of API sources at once — pairing the DMF filing signal with the inspection record it should always be read against — and re-check it as records change, rather than re-running four database searches by hand.

The point is not to replace primary FDA sources in a contracting decision — always confirm against them — but to turn the screening stage from a research project into a filter, so the diligence effort goes where it belongs: the RFI, the LoA negotiation, and the quality audit.

A note on interpretation: a DMF reflects what a supplier has filed, not the current state of the site. Always confirm DMF status, LoA availability, and GMP standing against primary FDA sources and the supplier directly before a sourcing decision.

Frequently asked questions

What is a Drug Master File (DMF)? A DMF is a confidential submission to a regulatory authority containing detailed manufacturing, facility, and process information for an active ingredient, packaging, or excipient. It is held by the supplier, who authorizes customers to reference it in their own drug applications.

Does a DMF mean the supplier is FDA-approved? No. The FDA does not approve a DMF on its own — it reviews it only when a referencing NDA or ANDA is filed. A DMF shows the process is documented to the agency, not that the site is currently GMP-compliant. Always check the compliance record too.

What is a Type II DMF? A Type II DMF covers a drug substance (API), its intermediates, or materials used in their preparation. It is the DMF type most relevant to API sourcing, signaling a supplier is set up to support US drug applications.

What is a Letter of Authorization (LoA)? An LoA is the document a DMF holder issues to permit a specific applicant to reference the confidential DMF in their NDA or ANDA, so the FDA can review it as supporting evidence without disclosing it to the customer.

Why does DMF status matter when sourcing an API? A held US Type II DMF indicates a supplier is organized to serve the regulated US market and has documented its process to the FDA — making it a key early qualification signal. It is most useful when read alongside the site's inspection and recall history.

Want to screen API suppliers by DMF signal and compliance history together? Explore the supplier directory or book a demo to build a shortlist with regulatory records built in.