A medspa has five separate compliance obligations: who is legally responsible for each treatment, how medical director oversight gets documented, what insurance covers if something goes wrong, how patient records and consent are handled, and where the line sits between what you're licensed to do and what you're not. The seven guides below each answer one piece. None of them is legal or medical advice; the answer to most of these questions is "confirm it for your state with an attorney or your state medical board."
Why is there no single medspa compliance checklist?
Medspa compliance requirements differ by ownership model, state, and size. A solo NP-owned med spa in Texas and a five-location MD-owned practice in California answer different questions with different cost structures, even though both owners would type "medspa compliance requirements" into the same search bar. Grove splits medspa compliance into seven guides, one per decision, so each guide answers one question completely.
These seven guides came out of building software recommendations for medspa owners and running into the same compliance questions over and over, in slightly different forms, from businesses at different stages. This page exists so the next person doesn't have to already know a specific guide exists to find it.
Which medspa compliance questions do the seven guides answer?
Grove's seven medspa compliance guides cover the medical director sign-off workflow, the compliance cost difference between NP-run and MD-run medspas, expired-product liability when charting software doesn't track lot numbers, the legal line between a wellness spa and a medical spa, HIPAA consent for a first-time Botox client, what HIPAA-compliant charting means on Boulevard, Mangomint, Vagaro, and GlossGenius, and insurance for injectables in a converted retail space.
Medical Director Sign-Off Workflow
How to structure delegation agreements, chart-review cadence, and backup reviewers so oversight is real without a single person's calendar becoming the bottleneck for every client visit.
CostNP-Run vs. MD-Run Medspa: The Real Compliance Cost Difference
An NP-owned practice pays a supervising physician a recurring fee. An MD-owned one doesn't carry that line item, because the physician already owns it. What that nets out to, state by state.
LiabilityExpired-Product Liability When Your Charting Software Doesn't Track Lot Numbers
If a recall notice lands, the question is whether you can prove who received the affected lot in under an hour, not whether you technically kept a record somewhere.
LicensingWhat's the Actual Legal Difference Between a Wellness Spa and a Medical Spa?
Two businesses doing the same-sounding facial can be regulated by entirely different boards. The line isn't the word on the sign, it's whether the procedure is legally the practice of medicine.
ConsentHow to Build a HIPAA-Compliant Consent Workflow for a First-Time Botox Client
The intake form most front desks email the night before an appointment is usually doing the job of a wellness waiver, not a medical consent. Those are two different documents with two different legal jobs.
Software'HIPAA-Compliant Charting' Isn't One Thing
Every platform that touches a needle puts "HIPAA compliant" on its pricing page. What's behind that claim on Boulevard, Mangomint, Vagaro, and GlossGenius turns out to be four different products.
InsuranceWhat Insurance Do You Actually Need to Run Injectables Out of a Converted Retail Space?
General liability, malpractice, product liability, and the NP/PA vs. MD coverage difference, for a space that used to be a boutique and now has a fridge full of neurotoxin where the register was.
None of the guides on this page are legal or medical advice. Scope-of-practice rules, supervision requirements, and insurance obligations vary by state and change over time. Confirm your specific setup with your state medical board and a healthcare attorney or compliance consultant.