Pain Point, Solved 4.9 ★★★★★ Google Rating

Does a Med Spa Need a Medical Director and Good Faith Exam?

You opened to do good work, not to become a compliance lawyer. But the first time a state medical board or a plaintiff’s attorney looks at your med spa, the questions are not about your results.

Trusted 800+ Providers MGMA 2026 Corporate Member HIPAA-Compliant SOC 2 Type II BAA Signed $5M E&O and Cyber

All Pain Points

Ask AI about this page

Yes. A med spa that offers medical treatments, injectables, lasers, or GLP-1 weight-loss programs, needs a licensed physician medical director and a good faith exam by a licensed provider before a patient’s first treatment. Per the American Med Spa Association, the good faith exam establishes the provider-patient relationship by reviewing the patient’s history and confirming they are appropriate for the treatment, and it has to happen before that initial service, not after. The medical director provides clinical direction and a compliant delegation framework, and in states that regulate the corporate practice of medicine, such as Texas and California, a non-physician cannot own the medical practice at all, which forces a management services organization paired with a physician-owned professional entity. None of that is clinical work you outsource; the exam and the medical direction are your licensed provider’s. What you can hand off is the administrative weight around it: scheduling the exam, keeping the delegation and credentialing paperwork current, and building intake so a patient is never treated before the exam is done. The table of contents maps the whole thing; the moves after it are the detail.

What a Compliant Med Spa Actually Has in Place
Key Pain Points and Discussions by Providers
Why This Keeps Happening
The Solution
How We Permanently Fix the Process
The Whole Thing in Four Sentences
Frequently Asked Questions
Where the Claims on This Page Come From

What a Compliant Med Spa Actually Has in Place

The goal is a med spa where every medical treatment sits behind a real medical director, a documented good faith exam, and a legal ownership structure, so a board review finds paperwork instead of gaps. Here is what that takes, piece by piece.

1. Confirm You Are Offering Medical Treatments, Not Just Spa Services

The rules turn on one line: are your services medical? Injectables like neurotoxins and dermal fillers, laser and energy devices, medical-grade peels, IV therapy, and prescription GLP-1 weight-loss programs are medical treatments, and the moment you offer them you are a medical practice with a medical practice’s obligations. A facial or a massage is not. Knowing which side of that line each service falls on tells you exactly which treatments require a medical director and a good faith exam, and it is the first thing a board will sort your menu into.

2. Name a Licensed Physician Medical Director with Real Delegation

A medical director is not a name on a certificate you renew once a year. Per the American Med Spa Association, a licensed physician must serve as medical director and provide a compliant delegation framework: written protocols, standing orders, and clear supervision for the licensed providers actually performing treatments. The medical direction and clinical judgment are theirs and stay theirs. What sinks a med spa is a director who exists on paper but never signs a protocol or reviews a chart, because a delegation framework that is not documented is a delegation framework a board will not credit.

3. Perform the Good Faith Exam Before the First Treatment

This is the one most enforcement actions turn on. A licensed provider, a physician or a properly delegated PA or advanced practice nurse, has to perform a good faith exam before a patient’s initial treatment, reviewing history and confirming the patient is appropriate for the service. It establishes the provider-patient relationship, and it cannot be a formality an aesthetician skips to get to the injection. It does not have to repeat at every visit, but a new exam is due when the treatment plan changes materially or enough time has passed. The exam is your licensed provider’s medical act; the failure a board finds is almost always that it did not happen, or was not documented, before treatment.

4. Get Your Ownership Structure Right for Your State

In corporate-practice-of-medicine states like Texas and California, a non-physician cannot own the medical practice. The legal path is a management services organization that handles the business, marketing, staffing, and administration, paired with a physician-owned professional entity that owns the clinical practice, joined by a management services agreement. Getting this structure drafted correctly by a healthcare attorney is what lets a non-physician entrepreneur run a med spa legally in a CPOM state, and getting it wrong can void the whole arrangement in a board review.

5. Hand the Administrative Load to a Dedicated Team

The clinical acts stay with your licensed providers; the paperwork and coordination around them do not have to. Practices that stay audit-ready hand the administrative load to a dedicated team: remote team members who schedule the good faith exam into every new-patient flow, keep the delegation and credentialing documents current, and make sure intake blocks a first treatment until the exam is on file, live in 1 to 2 weeks. Your provider does the medicine; the compliance paperwork stops living in a drawer. Below is what it sounds like when nobody owns this yet, in operators’ own words.

Key Pain Points and Discussions by Providers

real reports from practice staff, lightly edited

“I found out the hard way that the good faith exam has to happen before the first treatment, not as a form we backfill later. We had aestheticians injecting new patients and the exam was basically a signature after the fact. One complaint and that gap is the whole case against you.” – med spa owner

“Our medical director signed the agreement and we never heard from him again. No protocols, no chart review, nothing. I did not realize that a director who only exists on paper is almost worse than none, because it looks like we knew the rule and ignored it.” – practice manager, aesthetic clinic

“Nobody told me that in my state I literally cannot own the medical side as a non-physician. I had the whole business in my name. An attorney had to unwind it into an MSO and a physician-owned entity before we were actually legal, and that should have been step one.” – med spa founder

“The exams were happening, but half of them were not documented in a way I could hand to a board. The provider did the work and the note did not capture it. When you cannot prove the good faith exam occurred, it is the same as it never happening.” – medical director, multi-site med spa

“We added GLP-1 and I assumed the injectable protocols covered it. They did not. A prescription weight-loss program is its own medical service with its own exam and oversight requirements, and I was treating patients for weeks before anyone flagged it.” – operator, med spa and wellness group

Our Answer

Here is what we actually do, and what we do not. The good faith exam and the medical direction are your licensed provider’s medical acts; we do not perform exams and we do not act as your medical director. What a dedicated remote team member handles is the administrative weight around them: building intake so a new patient cannot be scheduled for a first treatment until the good faith exam is booked with your provider and on file, keeping the medical director’s delegation protocols, standing orders, and credentialing documents current and organized, and flagging when a patient is due for a new exam because the plan changed. Our team members work your US business hours in your time zone, are trained in US med-spa front-office and documentation workflows, and run inside the scheduling and record systems you already use, with AI drafting the first pass and a US-licensed nurse or pharmacist available for quality review on documentation completeness. This is our med spa compliance coordination paired with an AI-first workflow, in one paragraph.

Why This Keeps Happening

If the rules are known, why do so many med spas fall short of them? Because most owners came up through aesthetics or business, not medicine, and the requirements are counterintuitive until someone spells them out. The American Med Spa Association is clear that a good faith exam by a licensed provider must happen before a patient’s initial treatment to establish the provider-patient relationship, and that a licensed physician must serve as medical director with a real delegation framework. But nothing about a clean-looking treatment room tells an owner that the exam has to precede the first injection or that a paper-only director will not hold up. The gap is knowledge, and it stays hidden until a complaint or an audit exposes it.

The ownership rules are the second blind spot. In states that regulate the corporate practice of medicine, including Texas and California, a non-physician simply cannot own the medical practice, and an owner who set up a single company in their own name is often out of compliance without knowing it. The legal fix is a management services organization for the business paired with a physician-owned professional entity for the clinical practice, drafted by a healthcare attorney. Coordinating the administrative side of that structure, the documents, the credentialing, the intake that respects the split, is exactly what dedicated med spa administrative support is built to carry.

And the cost of getting it wrong is not a warning letter you shrug off. A missing or undocumented good faith exam, a phantom medical director, or an illegal ownership structure can each anchor a state medical-board action, a fine, or a lawsuit, and the treatment being excellent is no defense. As med spas expand into GLP-1 weight-loss programs, each new medical service carries its own exam and direction requirements, and assuming the injectable protocols cover a prescription program is how a spa ends up treating patients for weeks outside compliance. The paperwork is cheap; the enforcement action is not.

⚠️ The quiet one that hurts most: The quiet one that hurts most: the phantom medical director. A director who signed an agreement and then vanished, no protocols, no standing orders, no chart review, feels like a solved problem because the name is on file. It is worse than an obvious gap, because it looks like you knew the rule and treated it as a formality. When a board reviews the arrangement and finds a director who never actually directed, the practice cannot argue it did not know better. Unless someone keeps the delegation framework real and current, the most dangerous compliance failure is the one that looks handled on paper and collapses the moment anyone reads it.

Most groups have already tried the obvious fixes before they talk to anyone. Each one fails the same way: the work lands back on the practice. The pattern, in one table:

What you tried	What actually happened	Who ended up doing the work
Backfilled the good faith exam as a form after treatment	The exam has to precede the first treatment; a signature after the fact is the gap, not the fix	The front desk, papering over it
Named a medical director and left it there	A paper-only director with no protocols or chart review reads as knowing the rule and ignoring it	Nobody, which is the problem
Ran the whole business in the owner’s name in a CPOM state	A non-physician cannot own the medical practice there; an attorney had to unwind it into an MSO structure	The owner, unknowingly out of compliance
Handed the administrative load to a dedicated team	GFE booked before every first treatment, delegation and credentialing docs current, intake that blocks a premature treatment	Someone whose whole job it is

The Solution

So what does the administrative side of compliance actually look like day to day, when the medicine stays with your provider? The dedicated team member builds intake so a new patient physically cannot be booked for a first treatment until the good faith exam is scheduled with your licensed provider and documented on file. They keep the medical director’s delegation protocols, standing orders, and provider credentialing organized and current, and they flag when a returning patient is due for a fresh exam because the plan changed or time has passed. The exam and the direction are your provider’s; the coordination that makes sure they always happen on time is exactly what dedicated med spa compliance coordination is built to carry.

Then comes the part that gets you through a review clean. Every good faith exam, delegation document, and credentialing record lives in one organized, current place instead of scattered across a drawer and three inboxes, so when a board or an attorney asks, the proof exists and is easy to produce. When you add a new medical service like a GLP-1 weight-loss program, the team member makes sure its own intake and exam requirements are wired in before the first patient, not weeks after. That is administrative support around your provider’s clinical work, which is what an outsourced GLP-1 program support workflow adds to a growing menu.

Behind all of it, AI drafts the first pass and a credentialed human verifies, and the line stays bright: we handle administration, your licensed provider handles medicine. A US-licensed nurse or pharmacist is available for quality review of documentation completeness, not to provide medical direction or perform exams, which remain your provider’s. Every security control that protects the patient records moving through intake and scheduling is documented and auditable, and the whole approach is described on our HIPAA and security page, because moving patient information through a med-spa workflow is only safe when the controls are real and a signed BAA is in place.

Who Actually Does This Work

Fair question: why bring in an outsourced team for compliance coordination instead of just adding front-desk staff? Because they work your US business hours in your time zone, they are trained specifically in US med-spa administrative and documentation rules, and keeping the good faith exam, delegation paperwork, and intake airtight is their whole day, not the thing squeezed between checkouts. To be clear about the line: we do not perform good faith exams, we do not act as your medical director, and we do not provide medical direction. Those are your licensed provider’s acts. We carry the scheduling, the document control, and the intake logic that make sure your provider’s clinical work always happens on time and on file.

We are not a call center. We are a healthcare BPO built on dedicated virtual staff: 500+ credentialed professionals working your hours, HIPAA-aligned with a signed BAA, reachable on your own dedicated US number through our Nextiva phone setup, and running the AI-first-pass plus human-verify workflow you just read about behind every one of them. A typical med spa is live in 1 to 2 weeks, at up to 70% below the cost of hiring locally, and no one on our side goes out without a trained backup already inside your workflow, so a new patient never gets treated before the exam is on file because the one person who tracks it is away. We are an MGMA 2026 Corporate Member, and 800+ providers run back office work with us.

And the security piece your compliance officer will ask about: we are audited to SOC 2 Type II with zero exceptions and certified to ISO/IEC 27001:2022, aligned to HIPAA and GDPR, with zero breaches in eight years. Every workstation runs inside a secure enclave on US-based servers, with screen captures and downloads blocked by policy, so PHI never sits on someone’s home laptop. Every client account carries a $5M E&O and cyber liability policy and a BAA signed before any work starts; the full detail lives in our HIPAA and security posture.

Put the routine and the people together, and a specific list of things simply stops happening.

✓ What stops happening: What stops happening: the new patient treated before a good faith exam ever occurred. The medical director who exists only on paper. The ownership structure that turns out to be illegal in your state. The exams that happened but were never documented in a way you could hand to a board. The new GLP-1 service running for weeks before anyone wired in its own compliance requirements.

2-Week Risk-Free Pilot

Ready to Make Your Med Spa Audit-Ready?

Book A Strategy Call Request Information

How We Permanently Fix the Process

A person alone is not the fix, and neither is a bot alone. The fix is a documented compliance-coordination workflow: intake that blocks a first treatment until the good faith exam is booked and on file, a current record of the medical director’s delegation protocols and standing orders, provider credentialing kept up to date, and a rule for when each returning patient is due for a fresh exam, all written down and worked the same way every time. Before we coordinate a single appointment for a new med spa, we map your service menu against which treatments are medical, so we can see exactly where an exam and delegation are required, and we build the intake against that, not against a generic template.

From there the workflow becomes a living playbook rather than knowledge in one manager’s head. It records how the good faith exam is scheduled with your provider, where the delegation and credentialing documents live, how intake enforces the exam-before-treatment rule, and what triggers a new exam or a new service’s requirements. It is written down, kept current as you add treatments and as your state updates its rules, and owned by the team. When your coordinator is out, a trained backup works the same playbook the same way, so a patient never slips through untreated-exam because one person was away.

That is the difference between hoping this month’s audit never comes and being ready for it, and it is what dedicated med spa administrative support actually buys you. A front-desk person leaving used to mean the exam tracking and the delegation paperwork quietly fell behind. Under this model the intake keeps enforcing the rule, the playbook stays, the backup steps in, and your compliance stops depending on any one person remembering the requirements.

The Whole Thing in Four Sentences

Yes, a med spa offering medical treatments needs a licensed physician medical director and a good faith exam by a licensed provider before a patient’s first treatment, and in corporate-practice-of-medicine states a non-physician cannot own the medical practice, which forces an MSO paired with a physician-owned entity. Per the American Med Spa Association, the exam establishes the provider-patient relationship and the director must provide a real delegation framework, not a paper title. Those clinical and legal acts are your provider’s and your attorney’s. What you can hand off is the administrative weight: exam scheduling, delegation and credentialing document control, and intake that blocks a premature treatment. A multi-site aesthetic group runs exactly this administrative model with us today, names withheld, no patient data shown.

If you want to check us out before talking to anyone: our security posture is independently auditable, we sign a BAA, we are an MGMA 2026 Corporate Member, and 800+ providers run back office work with us.

Ready to make your med spa audit-ready? Try us risk free: two weeks, your real intake and compliance paperwork, a dedicated team member coordinating exam scheduling and document control around your provider’s clinical work, and if it does not earn the handoff, you walk away. From here down is the sales part, and it is short: here is exactly what it costs.

Transparent Weekly Pricing

One Flat Weekly Rate. 45 Hours of Coverage.

No hourly meters, no setup fees, no long-term contracts. Your dedicated team member covers your desk 45 hours every week, and a trained backup steps in at no charge whenever they are out.

Single

$399/ week

One dedicated remote team member coordinating good-faith-exam scheduling, delegation paperwork, and new-patient intake for a single-location med spa

Make Your Med Spa Audit-Ready This Month

You have seen the whole method. The pilot proves it on your own intake and compliance documents, with a tracker your team can watch every day.

Book a 2-Week Risk-Free Pilot

Request Information or call directly: (800) 489-5877

Want Us to Make Your Med Spa Audit-Ready?

Tell us your situation and we will map your intake, delegation documents, and exam scheduling. A real person replies in 15-30 minutes.

Frequently Asked Questions

Does my med spa legally need a medical director?

If you offer medical treatments, yes. Per the American Med Spa Association, a licensed physician must serve as medical director and provide a compliant delegation framework, meaning written protocols, standing orders, and real supervision for the licensed providers performing treatments. Injectables, lasers and energy devices, medical-grade peels, IV therapy, and prescription GLP-1 programs are medical treatments. A facial or a massage is not. A director in name only, with no protocols or chart review, is what most enforcement actions find, so the role has to be real, not a renewed certificate.

What is a good faith exam and when does it have to happen?

A good faith exam is an encounter in which a licensed provider, a physician or a properly delegated PA or advanced practice nurse, reviews a patient’s history and confirms they are appropriate for a treatment, establishing the provider-patient relationship. Per the American Med Spa Association, it must happen before the patient’s first treatment, not as a form backfilled afterward. It does not repeat at every visit, but a new exam is due when the treatment plan changes materially or enough time has passed, generally at least annually.

Can an aesthetician perform the good faith exam?

No. The good faith exam is a medical act that must be performed by a licensed provider: a physician, or a PA or advanced practice nurse who has been properly delegated the authority by their supervising or collaborating physician. An aesthetician injecting or treating a new patient before a licensed provider has performed and documented the exam is the exact gap that anchors many state medical-board actions.

Can I own a med spa if I am not a physician?

It depends on your state. In states that regulate the corporate practice of medicine, such as Texas and California, a non-physician cannot own the medical practice. The legal path is a management services organization that owns the business side, paired with a physician-owned professional entity that owns the clinical practice, joined by a management services agreement drafted by a healthcare attorney. In states without corporate-practice restrictions the rules differ, so confirm your own state before you structure ownership.

Does Staffingly provide the medical director or perform the exams?

No. We provide administrative support only. The good faith exam and the medical direction are medical acts performed by your own licensed providers. What we do is coordinate the administration around them: scheduling the exam into your new-patient flow, keeping the delegation and credentialing documents current, and building intake so a first treatment cannot be booked until the exam is on file. The clinical judgment and the medical direction always stay with your licensed provider.

Do GLP-1 weight-loss programs have their own compliance requirements?

Yes. A prescription GLP-1 weight-loss program is its own medical service, and assuming your injectable protocols cover it is a common and costly mistake. It carries its own good faith exam, delegation, and documentation expectations, and those need to be wired into intake before the first patient is treated, not weeks later. When you add the service, the administrative requirements should be set up alongside the clinical protocols your provider defines.

What happens if a board finds our good faith exams were not documented?

Treat it as if the exam never happened. If a provider performed the exam but the note does not capture it in a way you can produce, a board reviewing the file sees a gap, and the treatment being appropriate is no defense. Keeping every good faith exam, delegation protocol, and credentialing record organized and current in one place is what turns a review into a paperwork exercise instead of a finding.

Do we have to change our scheduling or record system to get this help?

No. Our team members work inside the scheduling and record systems you already use, so there is no migration and no new platform for your staff to learn. They coordinate exam scheduling and document control where your information already lives, which is why a typical med spa is live in 1 to 2 weeks rather than months, with the clinical work staying entirely with your licensed providers.

How does one flat weekly rate cover 45 hours every week?

Your dedicated specialist works a 9-hour day, Monday to Friday, which is 45 hours of coverage each week. The ninth hour is part of the flat weekly rate, not billed as overtime. Over a year that is 2,340 hours of coverage, against the standard US full-time work year of 2,080 hours (40 hours x 52 weeks, the same basis the U.S. Office of Personnel Management uses to compute hourly rates of pay). That is how $399 per week works out to $8.87 per hour.

Written By

Dan Nandan

Founder and CEO, Staffingly, Inc. · Piscataway, NJ

Dan Nandan is the Founder and CEO of Staffingly, Inc., based in Piscataway, New Jersey. He has spent 25+ years in IT consulting and healthcare BPO, was among the first in the US to build an RPO/BPO delivery network in India, and has been featured in Computerworld. He runs the operations and the dedicated virtual teams behind the workflows on this page; the team-voice answers above come from the remote specialists who work them every day.

Connect on LinkedIn

This page is general educational information for healthcare operations teams. It is not legal, medical, billing, coding, or compliance advice, and it does not create any professional or advisory relationship. Payer rules, codes, forms, and regulations change and vary by plan and region, so confirm every requirement with the applicable payer or authority before acting. Staffingly, Inc. makes no warranty as to accuracy or completeness and accepts no liability for decisions made based on this content.

Where the Claims on This Page Come From

Sources & References

American Med Spa Association, What Is Required of a Medical Spa’s Good Faith Exams. Industry-body guidance that a licensed provider must perform a good faith exam before initial treatment to establish the provider-patient relationship. americanmedspa.org
American Med Spa Association, Laws for Opening a Med Spa. Overview of medical director, delegation, and corporate-practice-of-medicine requirements for med spa ownership. americanmedspa.org
Quarles, Med Spa Compliance Series: Good Faith Examination. Healthcare legal analysis of the good faith exam requirement and documentation. quarles.com
Dike Law Group, Good Faith Exams and Compliance in a Medical Spa. Legal guidance on good faith exams, telehealth exams, and med spa compliance structure. dklawg.com
Medical Director Co., Texas CPOM Laws and the MSO Model for Med Spa Ownership. Explanation of corporate-practice-of-medicine restrictions and the MSO plus physician-owned entity structure. medicaldirectorco.com