There's no single "medspa compliance checklist" because compliance for a medspa isn't one obligation, it's five or six separate ones that happen to live in the same building: who's legally responsible for the treatment, how that oversight gets documented, what insurance covers if something goes wrong, how patient records and consent get handled, and where the line sits between what you're licensed to do and what you're not. The seven guides below each answer one piece of that. None of them is legal or medical advice, and every one of them says so, because the actual answer to most of these questions is "confirm it for your state with an attorney or your state medical board."
Why this exists as one page
Most of what gets written about medspa compliance treats it as a single topic with a single checklist. It isn't. A solo NP-owned med spa in Texas and a five-location MD-owned practice in California are answering genuinely different questions with genuinely different cost structures, even though both would type "medspa compliance requirements" into the same search bar. We'd rather split it into the real questions than pretend one article covers all of them.
These seven guides came out of building software recommendations for medspa owners and running into the same compliance questions over and over, in slightly different forms, from businesses at different stages. This page exists so the next person doesn't have to already know a specific guide exists to find it.
The seven guides
Medical Director Sign-Off Workflow
How to structure delegation agreements, chart-review cadence, and backup reviewers so oversight is real without a single person's calendar becoming the bottleneck for every client visit.
CostNP-Run vs. MD-Run Medspa: The Real Compliance Cost Difference
An NP-owned practice pays a supervising physician a recurring fee. An MD-owned one doesn't carry that line item, because the physician already owns it. What that actually nets out to, state by state.
LiabilityExpired-Product Liability When Your Charting Software Doesn't Track Lot Numbers
If a recall notice lands, the question is whether you can prove who received the affected lot in under an hour, not whether you technically kept a record somewhere.
LicensingWhat's the Actual Legal Difference Between a Wellness Spa and a Medical Spa?
Two businesses doing the same-sounding facial can be regulated by entirely different boards. The line isn't the word on the sign, it's whether the procedure is legally the practice of medicine.
ConsentHow to Build a HIPAA-Compliant Consent Workflow for a First-Time Botox Client
The intake form most front desks email the night before an appointment is usually doing the job of a wellness waiver, not a medical consent. Those are two different documents with two different legal jobs.
Software'HIPAA-Compliant Charting' Isn't One Thing
Every platform that touches a needle puts "HIPAA compliant" on its pricing page. What's actually behind that claim on Boulevard, Mangomint, Vagaro, and GlossGenius turns out to be four different products.
InsuranceWhat Insurance Do You Actually Need to Run Injectables Out of a Converted Retail Space?
General liability, malpractice, product liability, and the NP/PA vs. MD coverage difference, for a space that used to be a boutique and now has a fridge full of neurotoxin where the register was.
None of the guides on this page are legal or medical advice. Scope-of-practice rules, supervision requirements, and insurance obligations vary by state and change over time. Confirm your specific setup with your state medical board and a healthcare attorney or compliance consultant.