An operational checklist for med spas adding peptide or GLP-1 programs: licensed prescriber, 503A compounding pharmacy, what the 2026 PCAC votes did and didn't change, consent, and patient adherence tracking.
PeptIQ Team
Peptide Research & Education
PeptIQ app
Track your peptide protocols in PeptIQ
Log injections, vial supply, and reminders. Use peptiq.io calculators when you need math on the web.
Most med spas that get peptides wrong do the steps in the wrong order. They pick compounds from what patients are asking for, find a supplier, then try to back-fill the prescriber, the pharmacy and the paperwork. The order that holds up is the reverse:
A licensed prescriber who owns the clinical decisions.
A licensed pharmacy that can legally supply each compound.
A one-sentence regulatory status for every product on the menu.
Consent and intake that match that status.
A way to see what patients do between visits.
This guide walks through each step. It is operational, not legal advice. Your counsel and your state board decide what applies to you.
1. The Prescriber Owns the Program
Peptides that go into a patient are prescription drugs or unapproved substances. Either way, a med spa cannot run the program without a licensed prescriber (physician, NP or PA, depending on state scope-of-practice rules) who evaluates each patient, writes each prescription, and takes responsibility for follow-up. Standing orders and "good faith exams" vary by state; the medical director structure that works for neurotoxins is not automatically enough for injectable peptides that patients self-administer at home for months.
Practical implications:
The prescriber, not the front desk, decides who is a candidate and what the protocol is.
The prescriber needs to see adherence and side-effect data, not just intake forms.
For prescription peptides, the supply chain is a pharmacy, full stop. Two kinds matter:
503A compounding pharmacies compound patient-specific prescriptions. For most peptide programs this is the realistic path, and it is only available for substances the pharmacy can legally compound from.
503B outsourcing facilities produce larger batches under tighter federal oversight, typically for office use.
Our 503A vs 503B sourcing guide covers the differences in detail. The non-negotiable: a "research use only" vendor is not a pharmacy. FDA's 2026 warning letters to peptide sellers say the research-use label does not change the picture when products are marketed for human use, and a clinic that buys from one has no pharmacy, no patient-specific prescription, and no defensible chain of custody. See FDA warning letters to research-use-only sellers.
Ask every pharmacy, per compound: can you legally compound this today, under what authority, and will you put that in writing?
3. Know the Regulatory Status of Every Compound
This is where the menu gets shorter. The status categories in 2026:
FDA-approved peptide drugs. Semaglutide (Wegovy), tirzepatide (Zepbound), bremelanotide (Vyleesi), tesamorelin (Egrifta) and others. Prescribable through normal channels, with labels that define indications and contraindications.
Compounded GLP-1s. FDA has published its concerns about unapproved GLP-1 products, including salt forms of semaglutide that are different active ingredients from the approved drug, and adverse events tied to dosing errors with vial-and-syringe products. If your pharmacy compounds a GLP-1, your intake and instructions need to address those exact failure modes.
Investigational compounds. Retatrutide is the big one. It is not approved, Lilly plans to file in Q1 2027, and FDA has said it cannot be used in compounding under federal law. A med spa offering "retatrutide" is offering an unapproved product from a non-pharmacy source. Read counterfeit retatrutide, Lilly lawsuits and FDA action before any patient asks.
Peptides on FDA's compounding safety-risk list. BPC-157, TB-500 (thymosin beta-4 fragment), KPV, injectable GHK-Cu, Epitalon and Semax appear on FDA's list of bulk substances that may present significant safety risks in compounding, citing immunogenicity concerns and missing human safety data.
The July 2026 PCAC votes. FDA's Pharmacy Compounding Advisory Committee recommended six peptides (BPC-157, KPV, TB-500, MOTS-c, Semax and Epitalon) for the 503A bulks list and recommended against DSIP. FDA staff had advised against all seven. What that does and does not mean:
It is a recommendation to FDA, not approval, and not a final rule.
It does not by itself authorize a pharmacy to compound those peptides tomorrow.
The test for your menu: can a staff member state the regulatory status of each compound in one clean sentence? If the sentence needs "FDA reviewed" or "moving toward approval," rewrite the sentence or drop the compound.
4. Consent and Intake That Match the Status
Consent for a labeled drug and consent for a compounded, unapproved peptide are different documents. At minimum, intake should capture:
Which category the product falls in, in plain language, and that compounded products are not FDA-approved.
Known contraindications from the label where one exists (for GLP-1s, for example, personal or family history of medullary thyroid carcinoma).
What the patient is expected to log and report: doses, injection sites, side effects, and when to call.
Consent to share tracking data with the clinic if you use a patient app.
PeptIQ's own intake waiver describes the app as "a tracking and education tool, not a medical provider," and patient data appears to clinic staff only with patient consent. Whatever tool you use, the consent language has to say what the tool is and is not.
5. Track What Happens Between Visits
A peptide program's weak point is the ten weeks between the first visit and the follow-up. Patients self-inject at home, change schedules, run out of product, and quietly stop. The clinic finds out at the next appointment, or never.
What to put in place before the first patient:
A protocol template per program, with phases for titration and washouts, so every patient on "GLP-1 program A" is measured against the same schedule.
Patient-side logging of doses, injection sites, vials and side effects, in something the patient will actually open. Paper logs do not come back.
An adherence number per patient. The PeptIQ provider console charts scheduled versus logged doses over eight weeks, shows a 14-day adherence rate against the assigned protocol, and flags anyone under a line you set (the default is 40%). Staff can send a nudge email from the roster or rely on a weekly digest.
Vial and refill visibility, so a patient who is about to run out is a call this week, not a no-show next month.
Labs next to protocol context. Patients can keep lab draws beside their protocol in the PeptIQ app; the clinic decides what to order and when.
Bring the stack interaction checklist into intake if patients arrive already using other peptides. It exists so the prescriber hears the whole list.
What a Med Spa Peptide Launch Looks Like
A realistic first 90 days, assuming the prescriber and pharmacy are in place:
Menu: one or two programs built on approved or legally compoundable compounds. Resist the "KLOW and Wolverine" menu until your pharmacy will put its authority in writing.
Documents: regulatory status sheet per compound, consent per category, patient instructions that address dosing errors.
Tracking: protocol templates published, staff roles set, first patients invited to the app with the clinic logo on the invite.
Review cadence: a weekly look at the adherence roster and the low-vial list; monthly review of side-effect logs with the prescriber.
Revenue view: active protocols carry cost and sell price, so the forecast shows projected margin from plans that are live. It is a planning view, not a ledger.
See the provider console
PeptIQ.io for providers is a provider console plus the PeptIQ patient app: protocol templates with phases, patient dose and vial logging, an adherence roster with nudges, staff roles across locations, vial flags, Provider AI, and a revenue forecast from active protocols. It is not an EHR and it does not sell peptides.
A: Only through a licensed prescriber and a licensed pharmacy, for compounds the pharmacy can legally supply, under your state's scope-of-practice and medical-director rules. Research-use-only vendors are not a legal supply chain.
Q: Did the July 2026 PCAC votes make BPC-157 and TB-500 legal to compound?
A: No. The committee recommended them for the 503A bulks list and FDA has not finished rulemaking. Interim "Category 1" treatment is contested. Ask your pharmacy what authority it is relying on, in writing.
Q: Can a med spa offer retatrutide?
A: Retatrutide is investigational, not approved, and FDA has said it cannot be used in compounding under federal law. Any "retatrutide" supply is outside the legal system.
Q: What should peptide consent forms include?
A: The product's regulatory status in plain language, label contraindications where a label exists, what the patient must log and report, and consent to share tracking data with the clinic.
Q: How do med spas track peptide patient adherence?
A: With a protocol template per program and patient-side logging of doses, sites and vials. The PeptIQ provider console turns those logs into an adherence rate per patient and flags who slipped below the clinic's line.
Q: Does PeptIQ sell or source peptides?
A: No. It is education and tracking software. There is no marketplace in the product, and clinical decisions stay with your prescribers.
This article is educational content from PeptIQ for clinic operators. It is not medical, legal, or regulatory advice. Prescribing, compounding, and consent decisions belong with licensed clinicians, pharmacists, and your counsel. PeptIQ does not sell, source, or dispense peptides.
