The short answer
You need LegitScript certification before you can run telehealth ads on Meta, Google, Microsoft or TikTok, and in practice before some payment processors will approve you. It costs $975 to apply per website, nonrefundable, then $2,150 per year once certified; an extra $2,500 buys expedited review that starts within two business days. The standard path takes four to eight weeks if your paperwork is complete, and eleven weeks plus a rejection if it is not, which is the number a founder posted on r/telehealth on September 13, 2026: "did it myself, took 11 weeks lol." Another replied that it "cost thousands of dollars and took months."
A platform can shorten the website part, because the storefront either has the disclosures reviewers look for or it does not, and it can shorten the partner part, because LegitScript requires your pharmacy and clinical partners to be certified or accredited. It cannot shorten the licensure part, the discipline-history part or the advertising part, which are about your business, not your software. That split is the whole answer to "DIY or platform", and the rest of this post fills it in.
What LegitScript actually checks
LegitScript's healthcare merchant certification, which covers telemedicine providers, med spas and digital health platforms, is built on nine standards. Paraphrased from the certification page:
| Standard | What it means for a telehealth brand | Who can fix it |
|---|---|---|
| Licensure and business registration | Every entity, facility and prescriber licensed where services are offered | You (with counsel) |
| Legal compliance | Prescribing and dispensing rules followed in every state served | You and your medical director |
| Prior discipline and history | Disclose criminal, regulatory or civil violations from the past ten years | You |
| Affiliates and partners | Pharmacies and clinical partners must be LegitScript-certified or accredited | The platform, if its partners already are |
| Patient services | Disclose every state and territory where services are available | The storefront |
| Privacy | HIPAA-compliant privacy policy, SSL, applicable privacy laws | The storefront and your counsel |
| Validity of prescription | Only dispense, or offer to dispense, on a valid prescription | The workflow (intake, provider review, e-prescribing) |
| Transparency | No misleading statements about practitioners, drugs, pharmacies or transactions | Your copy |
| Advertising | Ads comply with law and platform policies | Your marketing |
The documents that go with the application: business, facility and staff licenses; registration numbers; DEA certificate information where relevant; the privacy policy; the affiliate and partner compliance status; and product descriptions plus advertising materials. Reviewers read the website the way a state board would. The pages that fail most often are the ones that describe a drug the brand does not have a valid path to prescribe, or that quietly omit which states the brand serves.
The three timelines
Expedited. Pay the $2,500 surcharge and review starts within two business days. This is what turnkey vendors are selling when they promise fast certification: Karpa's pricing page says its Full Clinic Build-Out includes LegitScript "with expedited approval (review guaranteed in 2 business days)", and Cuvo's Grow tier at $2,000 a month lists expedited LegitScript as an inclusion. The review starting in two days does not mean certification in two days; a clean application still has to be read.
Standard. Four to eight weeks is the range most 2026 guides quote and the range we see in practice when the application is complete on the first pass. The clock is mostly waiting, which is why the founder in the Medvi post-mortem thread (April 2026) described paying "$5K to fast track legit script" as a launch cost rather than a marketing cost.
DIY with a rejection. Eleven weeks, per the September thread, and the pattern behind it is predictable: an application filed before the pharmacy partner was confirmed, a storefront with no states-served disclosure, or copy about compounded GLP-1 that a reviewer reads as offering a copy of an approved drug. Each round trip adds two to four weeks.
The certification is issued to the merchant and the website. Whoever files it, your name is on it, and so is the annual fee.
The compounded-GLP-1 problem
The most upvoted reply in the September 13 thread: "Compounded GLP-1 is the single biggest source of certification friction." It is friction for the same reason it is enforcement bait. FDA has sent three waves of warning letters to telehealth marketers since September 2025 (about 80, then 30 in March 2026, then 25 in June), citing language like "generic Zepbound" and brand names on labels that imply the telehealth company compounds. The Fifth Circuit affirmed FDA's shortage decisions on August 27, 2026, so the legal basis for mass compounding of semaglutide and tirzepatide is gone even before the 503B final order publishes.
A LegitScript reviewer reads your storefront against the legal-compliance and transparency standards. A page that offers "compounded semaglutide $99/month" in September 2026 is asking the reviewer to certify a claim FDA is sending letters about. Brands launching now should build the storefront around branded drugs the manufacturer ships (the Wegovy pill from $149, Foundayo from $149, Zepbound vials from $299) and, where a 503A pharmacy compounds patient-specific prescriptions with documented clinical need, describe that exactly as it is, without a price on a landing page. The post-crackdown marketing post has the language patterns FDA cited.
Why certification is a launch step, not a marketing step
Google and Microsoft require LegitScript telemedicine certification for telehealth advertisers, and GLP-1 and weight-loss terms need certification plus account-level authorization. Meta requires LegitScript or dispensing-license verification for pharmacy and telehealth advertisers, requires prior written authorization for branded GLP-1 ads, and prohibits compounded GLP-1 ads in most contexts. TikTok requires it too. An agency owner on r/FacebookAds in March 2026 listed the entry ticket for the category as "HIPAA for CRM Compliance, Compliant Ad Copy and Ads, Legit script For Landing Pages." A brand that files for certification after building the ad account has scheduled a two-month gap between launch and traffic; the ad policy post covers the platform rules in detail.
Payments are the second gate. Stripe's restricted-businesses page (updated May 13, 2026) lists telemedicine and online pharmacies as requiring approval, and the processors that specialize in the category treat certification as evidence in underwriting. Nobody will tell you it is mandatory for a merchant account; several will tell you your application went faster with it.
What a platform can shorten, and what stays on you
A platform can do three things. It can ship a storefront that already carries the disclosures reviewers look for: the states served, who the providers are and how they are licensed, the privacy policy, the terms, how prescriptions are issued, transparent pricing without medical claims. It can bring pharmacy and provider partners that are already certified or accredited, which standard four requires and which a founder assembling a stack has to arrange one relationship at a time. And it can run the prescription workflow so that "only on a valid prescription" is true by construction: intake, provider review, e-prescribing, in that order, with nothing dispensed outside it. Turbopills ships those pieces as one system; ask us in the demo which of the nine standards the storefront covers by default for your program and which are yours, because the honest answer to the second question is at least three: licensure, discipline history and advertising are about your business.
What stays on you: the legal structure and licenses in every state you list, the medical director, the ten-year disclosure, the ad copy, and the annual fee. A vendor promising that certification is "included" is usually promising the expedited filing and a storefront that passes, which is valuable, and is not the same as promising your business passes.
A filing checklist that avoids the eleven-week version
- Confirm the pharmacy partner and its certification status before you file; standard four fails otherwise.
- Put a states-served list on the site and make the intake enforce it.
- Remove any drug the brand cannot lawfully prescribe from the storefront, including prices for compounded copies of approved drugs.
- Publish the privacy policy, the terms, and a page naming the clinical entity and the medical director.
- Have licenses, registration numbers and the DEA certificate (if any) in one folder before opening the application.
- Decide on expedited review before filing, not after a rejection.
- File the domain you will advertise; each website is a separate fee.
FAQ
How much does LegitScript certification cost for a telehealth brand? $975 per website to apply, nonrefundable, plus $2,150 per website per year once certified. Expedited review costs an additional $2,500 and starts within two business days. A probationary certification, where offered, carries a $3,995 annual fee.
How long does LegitScript certification take? Two business days to begin review on the expedited path, four to eight weeks for a complete standard application, and eleven weeks or more when an application is filed before partners and disclosures are in place, which founders report as the common DIY outcome.
Do I need LegitScript certification to advertise GLP-1 programs? Yes on Google, Microsoft, Meta and TikTok. Google and Microsoft require the telemedicine certification, with additional authorization for weight-loss terms; Meta requires certification or license verification, plus written authorization for branded GLP-1 ads, and mostly prohibits compounded GLP-1 ads.
Can a platform get LegitScript certification for me? A platform can file on the expedited path, supply certified pharmacy and provider partners, and provide a storefront that passes review. The certification is still issued to your business and website, and licensure, discipline history and advertising compliance remain yours.
Does LegitScript certify brands that sell compounded semaglutide? Certification depends on legal compliance and transparency. After the Fifth Circuit's August 27, 2026 decisions and FDA's warning-letter waves, storefront copy offering compounded copies of semaglutide or tirzepatide is the most common reason applications stall. Patient-specific 503A compounding with documented clinical need is a different question to put to counsel and to your pharmacy.