Tessic Health

What do I need before my telehealth clinic sees its first patient?

Before a telehealth clinic sees its first patient, it needs eight things in place: a legal structure that lets a founder without a medical license own the business (a management company paired with a physician-owned medical practice); providers licensed in every state where patients will be; clinical protocols and intake questions for each treatment; a pharmacy that can fill and ship the prescriptions; a HIPAA program, with business associate agreements (BAAs) signed with every vendor that touches patient data; a way to take payment; a storefront and patient portal; and a plan for ad approvals, which for prescription treatments usually means LegitScript certification. Missing any one of them either stops the launch or creates a compliance problem that surfaces later, in an audit, a rejected ad, or a frozen payment account. On Tessic Health, all eight are part of setup and run under the client's brand, so the founder's list shrinks to the brand, the offer, and the marketing.

Reviewed September 11, 2026 · 8 min read

In short

  • Eight things must be in place: structure, providers, protocols, pharmacy, HIPAA, payments, storefront, and ad approvals.
  • The founder needs no medical license; a clinician-owned practice holds the medical side.
  • Every vendor that touches patient data needs a signed BAA before launch.
  • LegitScript certification gates paid ads for prescription treatments, not the first patient.
  • On Tessic Health, all eight are part of setup under the client's brand.
On this page
  1. The pre-launch checklist
  2. Who handles each item
  3. Brand work only the founder can do
  4. Common gaps that delay launch
  5. What can wait until after the first patient
  6. The one item that decides the rest
  7. Common questions

The pre-launch checklist

In the order they usually have to happen. Each item ends with how it is handled on Tessic Health.

  1. A legal structure a founder can own

    Most states require the medical practice to be owned by licensed clinicians. The standard answer is an MSO (the founder's management company, which owns the brand and the business) paired with a friendly PC (a professional corporation owned by a licensed physician, which employs the providers). Do I need a medical license? covers how the two connect. On Tessic Health: the MSO and friendly-PC structure is drafted for the client's ownership during setup.

  2. Providers licensed where your patients are

    Every treating provider needs a license in each state where a patient is located at the time of the visit, plus credentialing (checking each provider's education, training, work history, and record) before the first visit. Controlled substances add a DEA registration for the prescriber. On Tessic Health: providers are licensed in all 50 states and credentialed under the client's brand.

  3. Clinical protocols and intake

    Written protocols for each treatment: who qualifies, what rules someone out, which labs are needed, how doses change, and when a provider steps in. The intake form has to collect everything the protocol needs, including where the patient is located. Clinicians write and own the protocols. On Tessic Health: physician-led clinical operations cover every included treatment category, with labs where a protocol calls for them.

  4. A pharmacy that can fill and ship

    A pharmacy licensed in every state it ships into, able to handle the medications you plan to offer, with cold-chain shipping for injectables such as GLP-1s and many peptides, and able to fill controlled prescriptions if you offer them. On Tessic Health: a contracted pharmacy network fills at wholesale with 0% markup, with cold-chain fulfillment and controlled-substance coverage.

  5. A HIPAA program

    Written privacy and security policies, a risk analysis, a named privacy and security lead, staff training, and a BAA (business associate agreement, the contract HIPAA requires before a vendor handles patient data) with every vendor that touches patient information, including email and SMS tools. What HIPAA requires of a brand owner has the full list. On Tessic Health: a BAA is signed with every client before any patient data moves, and the platform is HIPAA compliant and SOC 2 Type II audited.

  6. A way to take payment

    A payment processor that accepts telehealth merchants, recurring billing for subscription programs, and a plan for failed payments. Processors review health merchants before approving them, so apply early. On Tessic Health: the subscription and rebill system is included, the client owns the billing relationship, and Grow adds failed-payment recovery (dunning).

  7. A storefront and patient portal

    The site patients buy from, the intake flow, and the portal where they message providers and manage refills, plus the legal pages: terms of service, a privacy policy, telehealth consent, and a notice of privacy practices. On Tessic Health: the branded storefront and patient portal go live under the client's name within days.

  8. A plan for ad approvals

    Google and Meta run ads for prescription treatments only from approved advertisers, and LegitScript certification (a third-party review of the business, its providers, its pharmacy, and its website) is the usual route. It does not have to be finished before the first patient, but paid ads wait on it. On Tessic Health: the LegitScript application is prepared and filed as part of setup. LegitScript sets its own schedule, and certification is never guaranteed.

Start here

Do I need a medical license to start a telehealth company?

No. Licensed clinicians own the medical practice and the founder's company owns the business. Here is exactly who needs which license, and how the two companies fit together.

Read the guide

Who handles each item

ItemBuild it yourselfOn Tessic Health
Legal structureHealth-care counsel, one to three monthsDrafted for the client's ownership during setup
Licensed providersRecruit, license, and credential providers state by stateLicensed in all 50 states, credentialed under the client's brand
Protocols and intakeHire a clinical lead to write themPhysician-led clinical operations for every included category
PharmacyNegotiate contracts and cold-chain shippingWholesale at 0% markup, cold-chain, controlled-substance coverage
HIPAA programPolicies, risk analysis, vendor BAAs, and trainingBAA with every client; HIPAA compliant; SOC 2 Type II
PaymentsFind a processor that accepts telehealth and build recurring billingSubscription and rebill included; the client owns the billing relationship
Storefront and portalBuild or license, then secureBranded storefront and patient portal, live within days
Ad approvalsAssemble and file the LegitScript applicationApplication prepared and filed as part of setup

Timelines for the solo path are in how long a launch takes.

Brand work only the founder can do

A platform can run the clinic. These decisions belong to the brand, and a launch waits on any that are still open:

  • A name you can own: a trademark search and filing, plus the matching domain and social handles.
  • Brand assets: logo, colors, type, product photography, and the voice for support replies.
  • The offer: which treatment to launch with, the monthly price, what it includes, and cancellation terms. How to launch a GLP-1 clinic walks through one example.
  • A marketing plan for the first ninety days, including channels that do not depend on ad approval.
  • A claims review of every headline, page, and ad before it goes live. See what you can legally say in weight loss marketing.
  • A budget for the first year. What it costs to start lays out every fee.

Common gaps that delay launch

These tend to surface late, usually when someone outside the company says no:

  • The medical practice was never formed, so providers have nothing to be credentialed into and pharmacies have no one to contract with.
  • A vendor handling patient data has no BAA. It is often the email, SMS, or analytics tool the marketing team picked.
  • The intake form skips a question the protocol depends on, or never asks which state the patient is in.
  • The payment processor declines the account, or approves it and then freezes it after the first refunds.
  • Ads and landing pages were built before claims review and fail platform policy.
  • There is no written refund or cancellation policy, which processors, ad platforms, and state auto-renewal laws all expect.
  • State telehealth consent rules were missed. Many states require informed consent before a telehealth visit, some with specific wording.

What can wait until after the first patient

Not everything has to be finished on day one. These can follow once the clinic is running:

  • Paid ads, if email, organic social, and partners can bring the first patients while LegitScript reviews the application.
  • A native mobile app. The storefront and portal work on phones; on Tessic Health, a branded iOS and Android app is a $4,999-a-year add-on when the brand wants one.
  • Automation beyond the basics, such as email, SMS, and iMessage sequences, care workflows, and CRM syncs. On Tessic Health these come with the Grow program.
  • A second treatment category. Launching one well is faster than launching four at once, and on Tessic Health every category is already included.
  • Enterprise controls such as SSO and an uptime SLA, which the Scale program adds for brands that need them.

The one item that decides the rest

Every other item depends on the first one. Providers are credentialed into the medical practice, pharmacies contract with it, and the HIPAA program is built around it. If the structure is wrong, or owned by a vendor, everything built on top of it is too. Start with Do I need a medical license?, then read who owns the patients before signing with any platform.

COMMON QUESTIONS

What founders ask next.

Do I need malpractice insurance to launch a telehealth clinic?
The providers who treat patients, and the medical practice they work through, need professional liability (malpractice) coverage, and credentialing checks for it. The founder's management company does not practice medicine, but it should carry its own business insurance, such as general liability and cyber coverage. Ask any platform how clinical coverage is held for the practice your brand runs on.
Does my company need an NPI number?
No. An NPI (National Provider Identifier) is the ID number health providers use on prescriptions, claims, and pharmacy records. Each treating provider has one, and the medical practice has its own as an organization. The founder's management company does not provide medical services, so it does not need one. NPIs are issued free through the federal NPPES system.
Who has to be the HIPAA privacy and security officer?
HIPAA requires a covered entity to name a privacy official and a security official, and business associates must name a security official too. One person can hold both roles in a small company. The medical practice names its own; the brand's company should name someone responsible for the patient data it touches, including in marketing tools. See what HIPAA requires of a brand owner.
Do I need LegitScript certification before the first patient?
No. LegitScript certification is what Google, Meta, and some payment processors check before they allow prescription telehealth ads or payments. A clinic can treat its first patients through channels that need no ad approval while the review runs. On Tessic Health, the application is prepared and filed as part of setup; LegitScript sets its own schedule and never guarantees approval. See getting approved for Meta and Google ads.
What legal pages does a telehealth website need?
At minimum: terms of service, a website privacy policy, a telehealth informed-consent form, and the practice's notice of privacy practices under HIPAA. Subscription programs also need clear billing, refund, and cancellation terms. Each page names the right entity: the medical practice for clinical services and the brand's company for the business side.
Can I launch with one treatment and add more later?
Yes, and it is usually the faster path: one offer, one set of claims to review, and one protocol to launch. On Tessic Health, every treatment category is included on every plan, so adding weight care, hormone therapy, or peptides later needs no new program. See how long a launch takes.

KEEP READING

The next questions on the list.

All guides

SOURCES

Reviewed September 11, 2026. Tessic Health guides are general information for founders, not legal advice. Laws, agency guidance, and ad platform policies change; confirm the specifics for your business with health-care counsel. Tessic Health claims restate what tessichealth.com publishes on its pricing, platform, and security pages.