DSCSA Software for Small Pharmacies: What to Ask Before 2027

If you're shopping for DSCSA software, the sales calls start to blur together fast. Picture your third demo this month. The screens look slick, the rep sounds sure, and everyone promises to make compliance easy. Then you hang up and realize you can't say how this one differs from the last two.
That's not a failure on your part. It's what happens when you compare tools without a fixed set of questions. So let's fix that.
First we'll check whether you need software at all. Then we'll cover what any system has to do by 2027, seven questions to ask every vendor, and why it pays to start before you have to.
Do you need DSCSA software at all?
Not necessarily, and no law makes you hire a vendor. FDA lets you choose the approach that fits your business, as long as it meets the requirements. In its standards guidance from September 2023, FDA names web portals that use the EPCIS data standard as one example.
So your wholesaler's portal can be part of the answer. If a wholesaler or another company stores your DSCSA records for you, the law calls for a written agreement. Keep a copy, because you remain responsible. We cover the details in what your wholesaler portal covers.
The picture changes when you buy from several partners. Think of your main wholesaler, a secondary or two, and drug makers that ship to you directly. Each one may send data its own way. When something goes wrong, having all of it in one place can save real time.
What DSCSA software has to do by November 27, 2027
FDA has extended its small-dispenser exemption until November 27, 2027. When it ends, your pharmacy needs the electronic, package-level systems in section 582(g)(1) of the FD&C Act. Whatever you choose, whether a portal, a connector or your own system, it should cover these.
| By November 27, 2027, you need to | Section |
|---|---|
| Exchange transaction information and statements electronically, in a secure and interoperable way | §582(g)(1)(A) |
| Receive transaction information that includes the product identifier of each package | §582(g)(1)(B) |
| Verify a package's product identifier when something looks wrong | §582(g)(1)(C) |
| Answer FDA or state requests promptly with the right records | §582(g)(1)(D) |
| Help trace a product's history back to the manufacturer | §582(g)(1)(E) |
Two rules already apply today, and software can help with both. Keep transaction records for at least 6 years. And if FDA or a state official asks during a recall or an investigation, respond within 2 business days. Our guide to DSCSA pharmacy requirements in 2026 has the full list.
7 questions to ask any DSCSA software vendor
Use the same seven questions with every vendor, and write the answers in one sheet. It's the simplest way to keep the calls from blurring together. You can also share the 90-second video version with your team.
- Does it connect to all my wholesalers and other partners? That includes secondaries and drug makers that ship to you directly.
- Can it receive transaction data electronically, for every package? By 2027, the data must include each package's product identifier.
- How long does setup take? Ask who does each step, and who helps you test with your wholesaler.
- Can I find any record from the last six years in minutes? Try it in the demo with a real-looking example.
- Does it help me verify a package when a product looks suspect? Ask them to show you, not just tell you.
- Can it help me answer FDA or state requests within two business days? That duty applies today.
- What does it cost, and what's included as rules change? Ask for the total cost, including setup, and not just the monthly fee.
One more tip saves a lot of regret. Ask for a reference from a pharmacy your size, and ask that owner how the first month went. That conversation tells you more than any demo. Lesson 11 of the free training goes deeper on how to choose calmly.
DSCSA Compliance for Small Pharmacies: Free Training (2026 Rules). Short video lessons + a printable checklist → Get free access
How do the questions work in practice?
Example (fictional): Rosa owns one pharmacy with four full-time pharmacy staff. She talks to three vendors in one month and writes every answer in the same sheet.
Vendor A answers all seven questions in writing, and it connects to her wholesaler and her two secondaries. Vendor B is cheaper but can't say how long the wholesaler connection takes. Vendor C gives a monthly price but can't explain what changes if FDA updates its rules.
Rosa doesn't pick on price alone. She books a second call with B to get a setup date in writing, and she asks A for a reference. A week later, she has a clear choice, made calmly and well before her deadline.
Why start before 2027?
It's tempting to wait. But FDA has been clear that the exemption is not a reason to delay. In its August 6, 2026 letter, FDA strongly urges small dispensers to keep working toward full compliance.
History gives a useful hint, too. In October 2024, FDA gave larger trading partners short, conditional exemptions. They covered only companies that had built electronic data connections by November 27, 2024, or had documented their efforts to build them. The 2026 letter for small pharmacies has no such condition, and nobody knows what FDA will do next. Starting early simply keeps your options open.
There are practical reasons, too. Your wholesaler may ask for a location number called a GLN before it sends you electronic data. DSCSA does not require a GLN, as FDA explains in its product tracing FAQ, but your wholesaler may ask for one as a business requirement. Testing also takes time, and it's far easier to fix data problems while nothing depends on them.
For more on the barcode side, see what pharmacies actually need for scanning. And to confirm your own deadline, read who qualifies for the small dispenser exemption.
How Connect RX fits
Connect RX by Maltexi connects your pharmacy to your trading partners for electronic DSCSA data. Ask us the same seven questions you ask every other vendor, and compare the answers side by side.
FAQ
Do I need DSCSA software if I'm exempt until 2027? Not for the electronic requirements yet. But you'll need electronic systems by your deadline, and setup takes time, so starting early helps.
Is my wholesaler's portal enough? It can be part of the answer. FDA lets you choose your technology. If the portal stores your records, keep a written agreement, because you remain responsible. Buying from several partners often makes one central place easier.
Does DSCSA software have to use EPCIS? FDA recommends, but does not require by law, the GS1 EPCIS standard for electronic DSCSA data. Ask each vendor whether its system uses it.
How much does DSCSA software cost? Prices vary by vendor and by how many partners you connect. Ask for the total cost, including setup and changes when rules change.
When should a small pharmacy start? Now is a good time. FDA strongly urges small dispensers to keep working toward full compliance during the exemption.
The short version
You don't have to buy software, but by November 27, 2027 you need systems that exchange DSCSA data electronically, for every package. Compare every option with the same seven questions, ask for a reference from a pharmacy your size, and start testing early. That way, your deadline arrives as a date on the calendar, not a scramble.
Comparing vendors? → See Connect RX · Want the rules first? → Get the free DSCSA training
DSCSA rules can change. Always confirm the latest requirements on FDA.gov. This is educational content, not legal advice.
Sources
- FDA guidance, DSCSA Standards for the Interoperable Exchange of Information for Tracing (Sept 2023).
- FD&C Act §582 (21 U.S.C. 360eee-1), Cornell LII.
- FDA, DSCSA exemptions for small business dispensers until Nov 27, 2027 (Aug 6, 2026).
- FDA, DSCSA exemptions for certain trading partners (Oct 9, 2024).
- FDA, DSCSA Product Tracing Requirements FAQ (current as of Aug 14, 2024).
