Adding Weight Loss or Hormones to a Med Spa: What Changes (2026)

Injectables and lasers are a retail business with a medical layer. The moment you add semaglutide, testosterone or peptides, you are running a prescribing practice that happens to also do aesthetics — and the things that break first are almost never the ones people plan for. Your payment processor is usually the first.

1. What changes when a med spa starts prescribing?

Six things, and they arrive in a rough order. Your payment processing is usually first and hurts most. Then certification, if you market prescription treatments online. Then the medical record, which has to hold a problem list and a medication list rather than a photo library. Then e-prescribing, which your aesthetics software almost certainly does not have. Then, if any of it is a controlled substance, an identity-proofing process that only the prescriber can complete. Labs, if your programme needs them, are their own project.

What changes	Aesthetics-only today	Once you prescribe
Payment processing	Ordinary retail. Almost any processor takes it.	Mainstream processors prohibit prescription medication sales in their own published rules, and enforce by freezing the account.
Certification	Generally not applicable.	Marketing prescription treatments online commonly triggers a certification requirement before major ad platforms will run your ads.
The record	Photos, injection maps, units, lot numbers, consent.	Adds a problem list, a medication list, allergies, and notes that stand up as medical decision-making.
Sending a script	Not applicable.	Needs real e-prescribing. Most aesthetics platforms have none, and adding it is not a setting.
Controlled substances	Not applicable.	Testosterone is Schedule III. That triggers EPCS: identity proofing and two-factor, done by the prescriber personally.
Labs	Rare.	Hormone and metabolic programmes run on them. How results reach the chart is a question worth asking every vendor.

The rest — scheduling, memberships, messaging, photos — you already have and mostly keep. The six above are the ones that are genuinely different, and five of them are invisible from a feature list.

2. What happens to your payment processing?

This is the one that catches people, and it is worth doing before you write a single prescription. The large mainstream processors list prescription drugs and, in some cases, pharmaceuticals generally, on their own published prohibited or restricted business lists. That is not a rumour and it is not selective enforcement — it is written down on their sites.

Enforcement usually is not a warning. It is a hold on settlement, a request for documentation, and in some cases a closed account with a rolling reserve held for months. A med spa that has processed cleanly for three years can trip it in the week it starts selling a weight-loss programme, because the descriptor and the product changed, not the business.

The practical consequence is that a prescribing practice generally needs a merchant account underwritten for that risk category, in its own name. Underwriting will ask for a good deal more than a retail application: licensing for every state you ship or treat into, the clinical protocol, months of processing history, and often the certification below. Expect it to take longer than opening a retail account, and start it before you need it.

We wrote up the mechanics separately in why Stripe and Square shut down GLP-1 and TRT clinics. If you take one thing from this section: check your processor's own prohibited-business page against what you are about to sell, today, before the first charge.

3. Does LegitScript certification now apply to you?

Often yes, and it is usually discovered through advertising rather than regulation. The major ad platforms require certification before they will run ads for many prescription-adjacent and telemedicine offerings. A med spa that never needed it for filler frequently needs it the moment it markets a weight-loss or hormone programme online.

It also shows up in payments. Underwriting for a prescribing merchant account commonly asks whether you hold it, and the answer can change the limits you are offered. That makes it worth starting early rather than at the point an ad account gets rejected.

Cost, timeline and who actually needs it are their own subject, and we keep a maintained page on it: what LegitScript certification costs.

4. What does your chart have to hold that it does not today?

An aesthetics record and a prescribing record are different documents. The aesthetics one is visual and procedural: before and after photographs, an injection map, units per site, product lot and expiry, and the consent that covers it. That is a genuinely good record for what it describes, and you should keep it — on a recall it is the lot number that answers who received which vial.

A prescribing record has to answer different questions. What conditions does this patient carry. What else are they taking, including the supplements they did not think to mention. What are they allergic to and what happened. Why is this medication appropriate for this person now. What was measured, and what changed.

The record has to hold	Why it matters once you prescribe
A structured medication list	Interaction checking is only as good as the list it runs against, and a list living in free-text notes is not a list.
A structured allergy list	It has to be visible at the moment of prescribing, not buried three screens away in an intake PDF.
A problem list	It is what makes a prescription defensible as a decision rather than a transaction.
Notes that carry reasoning	A photo and a line of prose do not document medical decision-making.
Injection detail, still	Lot and expiry per administration remain the answer to a recall. Do not lose this in the move.

The practical test when you look at software: ask to see one patient who has both a filler appointment and a weight-loss prescription, on one record, without switching modules. Plenty of platforms can do one or the other well.

5. What can and cannot actually be e-prescribed?

Less than people expect, and the exceptions surprise clinics after they have bought. Electronic prescribing works by looking a drug up in a national drug database and sending a structured message. If the product has no entry in that database, there is nothing to send — and that is a property of the whole industry, not of any one platform.

Product	Transmits electronically?	What that means for you
Semaglutide, tirzepatide (branded)	Yes	Ordinary e-prescribing. Not controlled substances, so no EPCS is required for them.
Testosterone	Yes, with EPCS	Schedule III. Requires identity proofing and two-factor before the prescriber can send it.
Oestradiol, progesterone	Yes	Ordinary e-prescribing.
BPC-157, ipamorelin, CJC-1295, TB-500	No	These have no drug-database entry, so no platform can transmit them. They move on paper or by fax, and any vendor claiming otherwise is worth a second question.
Compounded formulations	Sometimes	Depends on the pharmacy and on how the compound is expressed. Ask specifically rather than assuming.

That fourth row is the one to take into a demo. It is a fact about the drug database rather than about software, so a vendor who tells you they can e-prescribe BPC-157 is either mistaken or describing a fax.

6. What does adding testosterone specifically require?

The distinction that decides everything: semaglutide and tirzepatide are not controlled substances. Testosterone is Schedule III. A weight-loss programme alone does not pull you into the controlled-substance regime. Adding hormones does.

What that adds is EPCS, and the important thing to understand before you buy software is that the software is the smaller half. A vendor can be certified for electronic prescribing of controlled substances, but the prescriber still has to complete identity proofing personally — proving they are who they say they are to a third-party identity service — and enrol a second authentication factor. No vendor can do that for them, and no vendor should offer to.

Plan for it as a personal, multi-step process for each prescriber that runs on its own timeline, and start it early. We go through the sequence in EPCS for testosterone, and the wider platform question in choosing an EHR for a TRT clinic.

7. What should you ask before you switch software?

Take these to any vendor, including us. Each one is answerable in a live demo in under two minutes, and each separates a platform built for this from one that has the words on a feature page.

#	Ask them to show you	What a good answer looks like
1	One patient with a filler appointment and a hormone prescription on the same record.	One chart, no module switch, both histories visible together.
2	Where the allergy list appears at the moment of prescribing.	On screen, at signing — not in an intake PDF.
3	A prescription for a peptide with no drug-database entry.	They explain it cannot transmit and show the paper route. If they claim it sends, stop.
4	The lot and expiry recorded on an injection, then every patient who received that lot.	A query, not a spreadsheet. This is your recall answer.
5	A charge for a treatment and a charge for medication on one checkout.	They can tell you which rail each settles on and why.
6	What happens when a monthly programme card declines.	Retries, notification, and a queue somebody works — not silence.
7	How a lab result gets from the laboratory into this chart, today.	A straight answer. “Upload the PDF” is an honest answer; a vague one is not.
8	What the export looks like the day you leave.	They can describe the format without checking. Ask before you sign, not after.

Question 7 deserves a note, because it is the one most often answered loosely across this category, by us included at times. A PDF filed to the chart and a discrete result that trends over time are different things, and both are legitimate — what matters is that a vendor tells you plainly which one they do. If you want the fuller version of question 8, switching EHR without losing patient data covers it.

8. Frequently asked questions

Can a med spa prescribe weight-loss medication?
Where it is permitted, prescribing is done by a licensed prescriber operating within their scope, and the arrangements that make that possible — medical direction, ownership structure, supervision and good-faith-exam requirements — are set by state law and differ substantially between states. This is the question to take to a healthcare attorney in your state before anything else on this page.

Do I need different software, or can I add prescribing to what I have?
Ask your current vendor two questions: can it send a prescription electronically, and can it hold a structured medication and allergy list. Many aesthetics platforms answer no to both, and neither is a feature that gets switched on — e-prescribing requires network certification the vendor either has or does not.

Will my payment processor really shut me down?
Check their published prohibited-business list rather than taking anyone’s word, including ours. The large mainstream processors name prescription drugs there. Enforcement typically arrives as a settlement hold rather than a warning, which is why this is worth resolving before the first medication charge rather than after.

Is testosterone treated differently from semaglutide?
Yes, and it is the most-confused point in this transition. Semaglutide and tirzepatide are not controlled substances. Testosterone is Schedule III, which brings EPCS: identity proofing and a second authentication factor, completed by the prescriber personally. A clinic can run a weight-loss programme without ever touching that; adding hormones means dealing with it.

Why can’t peptides be sent electronically?
Because products like BPC-157, ipamorelin, CJC-1295 and TB-500 have no entry in the national drug database that electronic prescribing depends on. With no entry there is no structured message to send. It is a property of the industry rather than of any platform, so every vendor faces it equally and those scripts move on paper or by fax.

Is this guide independent?
No. Aminova publishes it and sells software in this category, which is stated at the top as well. The checklist is written to be run against any vendor, and question 3 and question 7 are the two we would most want a buyer to put to us.

Your med spa is adding weight loss or hormones. Here is what actually changes.