Get Started

Real Medical Director Oversight for Med Spas

Not a name on a contract. Not a physician you speak to once a quarter. Substantive clinical leadership, documented protocols, provider attestation, and the structure to withstand regulatory scrutiny.

Request a Consultation

Most Medical Director Arrangements Are Built to Check a Box

Across the med spa and aesthetic industry, the dominant model is simple: find a physician willing to put their name on your practice, sign a contract, and call it compliance. They may have no familiarity with the procedures your providers are performing. When something goes wrong — and in a busy aesthetic practice, eventually something will — that arrangement provides minimal protection. It is not compliance. It is documentation of non-compliance.

The Name-Only Medical Director

A physician whose name appears on your website and whose signature is on a contract — but who has no functional relationship with your clinical team, has never reviewed your protocols, doesn’t review charts, and is unreachable when a provider has a clinical question. This satisfies nothing. It creates liability without providing protection.

The Paper Binder That Proves Nothing

A 300-page protocol document handed to a provider on day one is not a compliance system. When a state medical board or plaintiff’s attorney asks whether your providers were trained and acknowledged your protocols before performing services, a paper binder with no attestation trail answers that question the wrong way.

The Arrangement That Was Never Finished

Many compliance arrangements are started and never properly completed. A physician is placed. A contract is signed. But the oversight relationship is never operationalized — no protocol review, no chart audit schedule, no defined availability, no compliance documentation. This is the most common scenario, and the most dangerous.

State medical boards and health departments are increasing enforcement activity in the med spa and aesthetics space. The consequences of a non-compliant arrangement include cease-and-desist orders, civil penalties, license revocations, personal liability for the business owner, and criminal exposure in states that criminalize unlicensed practice of medicine. This enforcement environment is intensifying.

What Substantive Medical Director Oversight Actually Means

MedSpire provides real clinical leadership — not a contract relationship with a physician who’s available for an annual review. Here is what a functioning oversight relationship looks like.

Clinical Protocol Development and Approval

Your medical director collaborates with your practice to establish treatment protocols that define appropriate care procedures and clinical standards. Before any new service goes live, the protocol is reviewed and formally approved. That approval is documented. It does not happen informally.

Provider Attestation — Before Anyone Touches a Patient

Every provider on your clinical team must read and digitally acknowledge required protocols through MedSpire’s compliance platform before performing services. New provider joins? Acknowledgment required before day one. New service added? Updated protocol pushed and re-acknowledged before launch. Every attestation is timestamped and logged.

Defined Availability and Clinical Accessibility

Your medical director operates within defined availability windows and documented response protocols. If they aren’t available, MedSpire provides fallback MD’s to answer. When a provider has a clinical question during a procedure, there is a clear path to reach medical oversight. A physician who is technically on contract but unreachable does not meet this standard. MedSpire structures every placement to withstand scrutiny on this point.

Chart Review and Clinical Documentation Oversight

Medical directors conduct regular chart reviews to ensure clinical records meet professional standards, treatments are documented appropriately, and care delivery is consistent with established protocols. This is not a quarterly rubber stamp. It is a functioning clinical oversight relationship built into your operation from day one.

Request a Consultation

Compliance You Can Prove. Not Just Claim.

When an adverse event occurs, the question is not whether you had a protocol document. The question is whether you can prove your providers read it, understood it, and acknowledged it before they touched a patient.

A paper binder answers that question the wrong way. A provider can receive a 300-page document on day one with no record of ever opening it. That is not a compliance system.

MedSpire’s compliance platform requires digital acknowledgment for every protocol, every provider, every time. New service added? Providers must acknowledge the new protocol before it goes live. Regulation changes? Updated documentation is pushed through the platform and re-acknowledgment is required. The audit trail exists because the system enforces it — not because you remember to collect paper signatures.

When a state medical board asks for proof, you have it. Timestamped. Provider-specific. Complete.

Paper Model vs. MedSpire Platform

Paper / Binder

MedSpire

✕Protocols delivered at launch

✓Protocols in digital compliance platform

✕No proof provider read it

✓Timestamped attestation per provider

✕Paper signature, if collected at all

✓Digital acknowledgment required to proceed

✕New provider gets same static binder

✓New provider completes all acknowledgments before first service

✕Regulation change requires manual update

✓Updated protocols pushed with re-acknowledgment required

✕No audit trail in enforcement scenario

✓Audit-ready log available at any time

✕New service goes live whenever ready

✓New service requires MD protocol approval first

What Every MedSpire Client Receives

In every state, for every practice type. This is the foundation of a functioning compliance relationship — not the minimum required to sign a contract.

Request a Consultation

Licensed Physician Oversight

A board-certified physician providing substantive medical director oversight. Active supervision, documented availability, defined response protocols, and meaningful engagement with your clinical team — not a name on a contract.

Digital Compliance Platform with Attestation

Every provider acknowledges every required protocol digitally before performing services. Every acknowledgment is timestamped and logged. Compliance you can prove in an enforcement scenario — not just claim in a meeting.

Clinical Protocols and Compliance Documentation

Comprehensive clinical protocols, consent forms, HIPAA policies, and state-specific compliance documentation. Reviewed by your medical director. Updated as regulations change. Accessible through your compliance platform.

Regulatory Monitoring and Updates

Compliance is not a one-time setup. Regulations change, state boards issue new guidance, and enforcement priorities shift. MedSpire monitors the regulatory environment for the states you operate in and updates your compliance framework accordingly.

Good Faith Exam Network

Secure systems for conducting Good Faith Exams — synchronous and asynchronous — where required by state regulation. MedSpire supports GFE requirements across the states we serve.

Structural Continuity if Physicians Change

Because MedSpire’s compliance infrastructure is anchored institutionally — not to any individual physician — a change in your oversight physician does not require rebuilding your compliance relationship from scratch.

If You’re in a CPOM State, the Requirements Go Further.

So Does Our Structure

Corporate Practice of Medicine doctrine prohibits non-physicians from owning or controlling the entity that delivers medical services. In CPOM states, medical director oversight alone is not enough — you need a properly formed Professional Corporation, a physician owner of record, and a legally defensible Management Services Agreement between the PC and your MSO. This is a full legal structure. Most providers don’t build it correctly. MedSpire does.

States Where Getting This Right Is Non-Negotiable

MedSpire operates across major markets nationwide with particular depth in the states with the strictest CPOM enforcement environments. If your clinic operates in any of these states, the structure underneath your medical director relationship matters as much as the physician in it.

CALIFORNIA

One of the strictest CPOM enforcement environments in the country. Cal. Bus. & Prof. Code §2400 prohibits corporate practice. NP independent practice under AB 890 does not eliminate the CPOM structure requirement. Name-only medical director arrangements do not satisfy the supervision standard and expose both the operator and physician to regulatory action.

TEXAS

Texas Occupations Code §165.001 and Medical Board rules require a meaningful supervisory relationship — not just a signed contract. The delegating physician must be actively engaged, documented, and accessible. Revenue from medical services must flow through a physician-owned entity structured to satisfy CPOM requirements.

NEW YORK

New York conducted a statewide med spa inspection sweep that found violations in the 2 out of 5 clinics inspected. CPOM enforcement in New York is no longer theoretical. Practices operating without a properly structured oversight relationship are actively being found and cited.

WASHINGTON

Active regulatory and legislative attention to MSO-PC arrangements. Operator structure and the delineation between clinical and business functions require careful documentation. MedSpire’s legal architecture has been reviewed for Washington-specific compliance requirements.

+MORE

Expanding Nationwide

MedSpire is operating across major markets nationwide with new states added weekly. CPOM doctrine varies significantly by state — from strict statutory prohibition to common-law interpretation. Contact us to confirm coverage and structure requirements in your specific state.

In CPOM States, MedSpire’s Structure Is Built Differently

When a medical director carries both the clinical oversight role and the PC ownership role in their own personal professional corporation, your entire compliance infrastructure is tied to one person. MedSpire separates these layers — and the difference matters.

Decoupled Clinical and Structural Layers

MedSpire maintains a separate institutional entity — owned by our CMO, Dr. Michael Meighen — that anchors your MSO-PC structure. Your day-to-day medical director oversight runs through a distinct arrangement. If the clinical relationship changes for any reason — the physician retires, moves states, or the relationship ends — your legal compliance infrastructure remains intact. You are not starting over.

One Dedicated PC Per Client MSO — No Shared Blast Radius

Some providers run a single Professional Corporation that contracts with 20, 30, or more clinics simultaneously. When something affects that PC — a licensing issue, regulatory action, or ownership change — it does not affect one clinic. It affects every clinic in the stack at the same time. MedSpire creates a dedicated, individual PC for each client MSO. The blast radius is one.

A Management Services Agreement Drafted by Specialized Healthcare Counsel

The MSA governing your structure was drafted by one of the country’s leading healthcare law firms, specializing in MSO-PC compliance and CPOM doctrine. This is not a generic template. It is built to withstand regulatory scrutiny, preserve physician clinical independence, satisfy state-specific CPOM requirements, and protect both parties contractually.

Request a Consultation

The Foundations MedSpire Is Built On

A ByrdAdatto Designed Management Services Agreement

The MSA governing the MedSpire MSO-PC structure was designed by ByrdAdatto, one of the most respected healthcare law firms in the country for MSO-PC compliance and CPOM doctrine. This is not a generic template. It is built to withstand regulatory scrutiny, preserve physician clinical independence, satisfy state-specific CPOM requirements, and protect both parties contractually.

Specialist-Level Clinical Expertise

Dr. Michael Meighen, CMO. Double board-certified, fellowship-trained, with 20+ years in functional and regenerative medicine. Deep clinical depth in peptide and hormone therapy protocols — the categories under the most regulatory pressure today.

Multidisciplinary Review Board

Clinical oversight isn’t one physician’s judgment. Every MedSpire protocol is vetted by a review board of MDs, DOs, and DNPs working across the specialties your clinic touches — so the standards in your practice reflect peer review, not a single perspective.

Institutional Malpractice Coverage

Malpractice coverage for the Professional Corporation is available through a named institutional carrier. You know it exists. You don’t have to chase it.

Why We Built MedSpire

Paula Kokko, Founder and CEO of MedSpire Health

Before MedSpire, I watched the industry I love become more and more exposed.

I spent years in dermatology and aesthetic medicine, working alongside operators doing serious clinical work with thin compliance scaffolding — a name on a contract, a binder on a shelf, a physician they saw twice a year. Most didn’t know they were exposed. The ones who did know often couldn’t find an alternative that wasn’t just another version of the same thing.

Then I started watching enforcement actions landing on clinics.

When enforcement actually arrives, the name-on-a-contract model doesn’t hold. A cease-and-desist lands. A license is called into question. In the worst cases, the entire practice shuts down while the owner tries to reconstruct what compliance was supposed to look like. By then, it’s too late to answer the questions being asked.

I built MedSpire because this category needed something structurally different — not another matching service, not another binder, not another physician willing to sign a name. A medical director relationship that actually functions. A legal structure that stays intact even when clinical personnel change. A compliance platform that produces evidence, not assurances.

The practices we work with don’t want to find out, mid-enforcement, what they thought they had. Neither did I.

— Paula Kokko

Built for Operators Who Understand the Stakes

Med Spa Aesthetic and Wellness Operators

Clinics offering injectables, laser treatments, body contouring, advanced skincare — the procedures where substantive medical oversight is not optional. Owners who have outgrown the “find a physician to sign a contract” phase and want compliance infrastructure that holds under enforcement.

NP, PA & RN-Led Practices

Advanced-practice-led practices face a specific structural challenge: the clinicians doing the work are not the physicians whose name satisfies state supervision requirements. MedSpire designs the oversight and ownership structure so the practice’s compliance posture holds in CPOM states — without compromising the advanced practice provider’s clinical authority.

Multi-State & Multi-Location Operators

CPOM doctrine varies materially by state — a structure that satisfies Texas may not survive California. Operators scaling across multiple jurisdictions need state-specific legal architecture under a consistent operational framework. MedSpire builds each state’s compliance structure individually while maintaining one contracting relationship.

Practices Preparing for Acquisition

Acquirers inspect medical-director arrangements during legal due diligence, and paper-thin arrangements materially discount valuations, or kill deals entirely. Practices that engage MedSpire ahead of a transaction present acquirers with audit-ready structure, documented oversight, and a transferable compliance framework.

Your Practice Deserves Compliance That Actually Holds

Request a consultation. Sadie will follow up within one business day.