How to verify a pharmaceutical exporter in India before you place a first order.

Sourcing teams compare quotes first and verify later. With pharmaceuticals from India that order is backwards. The cheapest quote from a counterparty you have not verified is not a saving, it is an exposure: a container held at your port for a missing certificate, a dossier your regulator rejects, or a deposit wired to a trading shell that cannot name a single manufacturing site. The good news is that nearly everything a serious exporter claims can be checked against a public source before you commit. This is the order in which to check it.

Why verifying the exporter beats comparing the quote.

Most procurement starts with the price sheet. With medicine from India, the price sheet is the last thing that should move you, because the cost of choosing an unverified counterparty is not measured in a few percent on unit price. It is measured in a shipment stuck in customs, a registration file rejected by your own regulator, or a deposit that buys nothing because the company behind the quote does not control a compliant manufacturing site.

This guide is destination-agnostic on purpose. Whether you import into the United Kingdom, Germany, the Gulf or West Africa, the verification logic is identical: establish what kind of company you are dealing with, then check each claim it makes against an independent register. Single-market mechanics, MOHAP in the UAE, NAFDAC in Nigeria, MHRA Specials in the United Kingdom, live on our country pages. This is the workflow that sits underneath all of them.

Manufacturer or merchant exporter: know which one you are talking to.

The first question settles how you verify everything after it. Two kinds of company export medicine from India, and they are not the same counterparty.

A manufacturer holds the CDSCO manufacturing licence, typically under Form 25 or Form 28, and owns the GMP-certified site where the product is made. A merchant exporter, or trading house, does not manufacture. It sources finished product from licensed manufacturers and handles export logistics, documentation and registration support, operating on an Importer-Exporter Code issued by the Directorate General of Foreign Trade. Neither is inferior, and for a buyer who needs ten molecules from six different sites, a capable merchant exporter is often the more practical counterparty.

The consequence is easy to miss: when you deal with a merchant exporter, you must verify the underlying manufacturer behind each line, the WHO-GMP and CDSCO licence of the actual site, not only the trading company's export paperwork. M Care is a merchant exporter, and we say so plainly. We source from WHO-GMP and EU-GMP sites and put the manufacturer's certificates on the table rather than asking you to take the trading entity on trust.

Verify the quality claim: WHO-GMP, EU-GMP and WHO-PQ you can actually check.

Turn "we are GMP certified" into a fact you can hold. Ask for the WHO-GMP certificate itself and read what it names. WHO-GMP in India is issued under the WHO certification scheme by the State Licensing Authority or CDSCO, and a valid certificate names the specific manufacturing site and the exact dosage form. A claim with no certificate, or one that names a company but no site, is the first soft red flag.

Two claims you never have to take on trust. If an exporter cites EU-GMP, the site and its inspection outcome are searchable in the EudraGMDP database published by the European Medicines Agency and national competent authorities. If it cites WHO prequalification, the product and site appear on the public WHO-PQ list. Cross-check the site name across the certificate and the register: when they agree, you are looking at a real site rather than a borrowed certificate.

Is WHO-GMP enough? For many generic lines into many markets, yes. For higher-value, specialist or hospital-tender lines, buyers increasingly prefer a site also inspected by a stringent regulator such as EU-GMP, US FDA or MHRA, or holding WHO-PQ on the specific molecule. Match the standard to the line and the destination, and verify whichever standard is claimed.

Verify the dossier and the batch papers: CoPP, CTD Module 3 and the CoA.

Quality moves from the site to the product through three documents that must agree with each other. The Certificate of Pharmaceutical Product (CoPP) is the WHO-format certificate attesting that the product is authorised and the site complies with GMP; in India it is issued by CDSCO, and most importing regulators treat it as the gating document for registration. The dossier should be structured to the ICH Common Technical Document, with Module 3 (quality) ready, because that is the module your regulator reads most closely. The Certificate of Analysis (CoA) reports batch-specific results against the registered specification.

The verification is not collecting the three documents, it is checking they are consistent: the same manufacturing site and the same product appear on the WHO-GMP certificate, the CoPP and the CoA. An exporter who cannot produce a CoPP for the molecule you want is not ready to register it in your market, whatever the price sheet says. For the documentation mechanics in depth, our WHO-GMP and CDSCO documentation guide and the CTD Module 3 explainer go further than this overview.

Verify the legal right to export: IEC, DGFT and the trading entity.

A company can hold every quality document and still not be the entity you should wire money to. Any Indian exporter, including a merchant exporter that does not manufacture, must hold a valid Importer-Exporter Code (IEC) issued by the Directorate General of Foreign Trade, and IEC validity is checkable on the DGFT portal. Confirm the IEC, and confirm that the registered company name on it matches the name on the invoice and, critically, the name on the bank account you are asked to pay.

This is where a verification step most often fails quietly. A deposit requested to an account whose holder name does not match the registered exporting company is the single clearest sign to stop. A legitimate exporter has no difficulty showing an IEC, a GST registration and a company name that line up across the paperwork, the invoice and the banking details.

Verify freedom to sell in your country, not just freedom to ship from India.

One risk sits outside every quality document, and it is the one buyers discover too late. Patents and data exclusivity are territorial under the WTO TRIPS framework. A molecule that is freely manufactured and exported from India can still be under patent protection in your destination market. Freedom to ship from India is not freedom to sell where you are.

Before you commit, confirm the patent and data-exclusivity status of the molecule in your own country, and settle in writing who holds the import licence and the product registration. A careful exporter raises destination patent status with you rather than leaving you to find it at customs. If a supplier waves the question away with "it ships from India, so it is fine", treat that as a verification step they just failed.

Verify the cold chain before the first temperature-sensitive line ships.

GMP governs how a medicine is made. It does not govern how it travels. Good Distribution Practice (GDP), set out in the WHO GDP guidelines (WHO TRS 957, Annex 5) and the EU GDP guidelines, governs storage and transport after manufacture. For any product with a 2 to 8 degree or controlled-room-temperature requirement, ask for validated cold-chain evidence: qualified shippers, mapped lanes and data loggers on the consignment, not an assurance that GMP covers it.

The depth on shipment sits in our GDP compliance checklist. The verification point here is narrow: require the GDP evidence and the logger data before the first cold-chain line moves, not after a temperature excursion turns a shipment into a write-off.

Red flags that should end the conversation.

Each of these is a verification test a counterparty has already failed. Any one is a reason to slow down; two together is a reason to walk away.

• A catalogue and a country count instead of a named site. Reach is not capability. An exporter who cannot name and evidence the manufacturing site behind a line is selling a list.
• A GMP claim with no certificate. If the certificate cannot be produced, or names no site, the claim is unverified by definition.
• Reluctance to put commercial terms in writing. Price, Incoterms, lead time and specification belong in a document, not a chat thread.
• A deposit to a mismatched account. The bank account holder name not matching the registered company is the clearest stop signal there is.
• "We can get anything" with no dossier. Broad sourcing promises with no CoPP or CTD evidence behind the specific molecule are noise.
• No single named, accountable contact. If enquiries vanish into a generic inbox with no person and no honest timeline, the supply relationship will behave the same way.

Before you wire a deposit: the buyer's verification checklist.

Run this end to end before any money moves. Every item is something you can confirm from a document or a public register, not something you have to take on trust.

1. Confirm the entity type: manufacturer or merchant exporter, and if the latter, identify the manufacturer behind each line.
2. Obtain a site-specific WHO-GMP certificate, and cross-check any EU-GMP claim in EudraGMDP and any WHO-PQ claim on the WHO list.
3. Confirm a CoPP, a CTD with Module 3, and a batch CoA that all name the same site and product.
4. Verify the Importer-Exporter Code on the DGFT portal, and that the company name matches the invoice and bank account.
5. Confirm the molecule's patent and exclusivity status in your destination, and who holds the import licence and registration.
6. For temperature-sensitive lines, require validated GDP cold-chain evidence and logger data.
7. Get price, Incoterms, lead time and specification in writing, with one named, accountable contact.

M Care Exports is a merchant exporter built to pass this checklist rather than dodge it. We have shipped Indian WHO-GMP medicines since 2002 to 49 markets, we source from WHO-GMP and EU-GMP sites, and on any line we offer we will show the site-specific certificate, the CoPP and the dossier position before the conversation turns to price. Send your molecule list and we will return a verification-aware read: which lines are ready now, which need a dossier or registration step first, and the document set that travels with each.

FAQ

What is the difference between a pharmaceutical manufacturer and a merchant exporter in India?

A manufacturer holds the CDSCO manufacturing licence (typically under Forms 25 or 28) and owns the GMP-certified site where the medicine is made. A merchant exporter, or trading house, does not manufacture; it sources finished product from licensed manufacturers and handles export logistics, documentation and registration support, and it operates on an Importer-Exporter Code from the DGFT. Neither is inferior. The practical consequence for a buyer is that when you deal with a merchant exporter you must verify the underlying manufacturer's WHO-GMP and CDSCO licence, not just the trading company's export paperwork.

How do I verify that an Indian pharmaceutical exporter is actually WHO-GMP certified?

Ask for the WHO-GMP certificate itself, and check that it names the specific manufacturing site and the exact dosage form, not the company in general. WHO-GMP in India is issued under the WHO certification scheme by the State Licensing Authority or CDSCO. A claim with no certificate, or a certificate that does not name a site, is the first thing to question. If the exporter also claims EU-GMP, you can cross-check that independently in the EudraGMDP database published by the European Medicines Agency, and any WHO prequalification claim can be confirmed against the public WHO Prequalification list.

What documents should I ask an Indian pharma exporter for before placing an order?

At minimum: a site-specific WHO-GMP certificate; the Certificate of Pharmaceutical Product (CoPP) in WHO format for the product; the dossier structured to the ICH Common Technical Document with Module 3 ready; and a batch-specific Certificate of Analysis. Confirm these agree with each other, meaning the same site and the same product appear across all of them. On the export side, the company should hold a valid Importer-Exporter Code from the DGFT. For temperature-sensitive lines, also require validated cold-chain evidence under Good Distribution Practice.

What is a CoPP and why do importing-country regulators ask for it?

A Certificate of Pharmaceutical Product (CoPP) is a certificate in the format set by the WHO certification scheme that attests the product is authorised and that the manufacturing site complies with GMP. In India it is issued by CDSCO. Most importing-country regulators treat the CoPP as a gating document for registration because it links the product, the manufacturing site and GMP status in one authoritative certificate. An exporter who cannot produce a CoPP for the molecule you want is not ready to register it in your market.

Can a generic medicine that is legal to export from India still be patented in my country?

Yes. Patents and data exclusivity are territorial under the WTO TRIPS framework, so a molecule that is freely manufactured and exported from India can still be under patent protection in your destination market. Freedom to ship from India is not the same as freedom to sell where you are. Before you commit, confirm the patent and exclusivity status in your own country, and make sure it is clear who is responsible for the import licence and product registration. A careful exporter raises destination patent status with you rather than leaving it for you to discover.

How can I check that an exporter's claimed manufacturing site is real?

Cross-reference the documents against independent public sources. The site named on the WHO-GMP certificate should match the site on the CoPP and on the batch Certificate of Analysis. If EU-GMP is claimed, the site and its inspection status are searchable in EMA's EudraGMDP database. If WHO prequalification is claimed, the site and product appear on the WHO-PQ list. When the site name is consistent across the exporter's own documents and confirmable in at least one public register, you are dealing with a real site rather than a borrowed certificate.

Is WHO-GMP enough, or do I need EU-GMP or US-FDA as well?

WHO-GMP is the recognised baseline and is sufficient for many generic lines into many markets. For higher-value, specialist or hospital-tender lines, buyers increasingly prefer a site that has also been inspected by a stringent regulatory authority such as EU-GMP, US-FDA or MHRA, or that holds WHO prequalification on the specific molecule. What matters is matching the standard to the line and the destination, and being able to verify whichever standard is claimed against the relevant public register rather than taking it on trust.

What are the clearest red flags that an Indian pharma exporter is not safe to deal with?

The strongest signals are a product catalogue and a country count offered in place of a named, certified manufacturing site; a GMP claim with no certificate; reluctance to put commercial terms in writing; a deposit requested to an account whose name does not match the registered company; broad promises to source anything with no dossier evidence; and no single named, accountable contact. Treat each one as a verification step the counterparty failed, and do not send a deposit until the basic documents and the entity itself check out.