The 9-Step Telehealth Clinic Launch Checklist (Entity, LegitScript, Provider, Pharmacy, Storefront)

To launch a telehealth clinic you need: (1) a legal entity and bank account, (2) LegitScript certification started on Day 0, (3) a compliant domain and intake flow, (4) a contracted provider network, (5) pharmacy access brokered through your clinic, (6) an EMR or system of record, (7) a Shopify storefront, (8) fulfillment automation, and (9) a soft launch checklist. Run steps 1–3 in parallel; steps 4–5 are the long pole.

Most operators underestimate two things: how long the pharmacy credentialing process takes, and how much the system-of-record decision will matter eighteen months from now. This checklist exists to sequence those correctly.

---

Why order matters more than the list itself

There are dozens of checklists online that tell you what you need to launch a telehealth or DTC Rx brand. Almost none of them tell you in what order to do it — and the order is where founders lose 60–90 days.

The most common mistake: spending four weeks on a beautiful Shopify storefront before you have a pharmacy relationship or a LegitScript application in flight. You cannot advertise, cannot process orders, and cannot fulfill — you just have a pretty website pointed at a wall.

The second most common mistake: picking a managed telehealth platform to "go fast," then discovering that your patient data and order history live on their servers and you have no clean exit.

The sequence below is dependency-aware. Each step unlocks the next. Do not skip ahead.

---

Step 1 — Entity formation and business banking

Goal: Legal structure, EIN, and a business bank account. This is table stakes but it is also a prerequisite for everything that follows — LegitScript, payment processing, and pharmacy contracts all require a legal entity.

What you need:

• LLC or C-Corp (most DTC Rx brands use a Delaware C-Corp or Wyoming LLC for flexibility)
• EIN from the IRS (same-day online, free)
• Business checking account — note that many banks flag "telehealth" or "pharmacy" in the application; some founders use Mercury, Relay, or a regional business bank that is less reactive

Time to complete: 3–10 business days for entity + banking, depending on state and bank.

Parallel with: Steps 2 and 3. Do not wait for your bank account to open before starting LegitScript.

---

Step 2 — LegitScript certification (Day 0, non-negotiable)

This is the most important sequencing insight in this document. LegitScript is not something you do when you are ready to launch. It is something you start on Day 0, because the review takes 4–8 weeks and you cannot get approved for Google Ads, Meta Ads, most payment processors (Stripe, PayPal, Square), or the majority of affiliate and DSP networks until you have it.

LegitScript for telehealth operators: what it is, why it's Day 0, and how to prepare your application covers the full process — but here is what you need to know right now:

• LegitScript reviews your domain, your formulary (the drugs you intend to offer), your pharmacy partners, and your provider oversight model
• You will need your domain active and your intake flow at least partially built before they will review it
• Fees are approximately $1,000–$1,500 upfront plus an annual monitoring fee (verify current pricing at legitscript.com — directional estimate only)
• A rejected application resets the clock; get the documentation right on the first submission

Do not launch advertising of any kind until LegitScript clears. Running ads for Rx telehealth without LegitScript certification is not a grey area — it gets your ad accounts banned and can expose you to regulatory attention.

---

Step 3 — Domain, compliant intake flow, and privacy infrastructure

Before you build the patient-facing storefront, you need the compliance infrastructure underneath it.

Checklist for this step:

• Domain registered and HTTPS configured
• Privacy policy and terms of service drafted by counsel (not a template generator)
• HIPAA Business Associate Agreements (BAAs) signed with any vendor that will touch PHI — this includes your EMR, your telehealth video platform, your email marketing tool if it handles patient communications, and your fulfillment layer
• Intake form that captures the minimum data required for clinical evaluation — reviewed by your medical director
• "No PHI on Shopify" rule locked in: Shopify is not HIPAA-compliant and cannot store patient health information; your intake must route PHI to a compliant environment before it ever touches your storefront layer

The Shopify question comes up constantly. Shopify handles your checkout, subscriptions, and order management. It does not handle patient records or prescription data. The Shopify telehealth stack: what's possible, what's not, and how to stay compliant is the full breakdown if you want to go deep.

---

Step 4 — Medical director and provider network

This is the first long-pole item. Your entire operation is gated on having licensed providers who can evaluate patients and sign off on orders. Nothing ships without a licensed provider approving it — that is not just a compliance requirement, it is the foundation of how you operate.

What you need:

• A medical director: typically an MD or DO licensed in the states you intend to serve, who takes clinical oversight responsibility for your protocol
• Prescribing providers: NPs, PAs, or MDs who conduct asynchronous or synchronous evaluations depending on your state laws and formulary
• Provider agreements that are clear on liability, supervision (where applicable), and protocol compliance

How to find providers:

• Locum tenens agencies (Barton Associates, Weatherby Healthcare, others) have telehealth-experienced rosters
• Medical director marketplaces exist but vary in quality — verify credentials independently
• Budget $200–$400/hour for medical director time at market rates (directional estimate); prescribing providers on a per-encounter model typically run $15–$40 per completed encounter depending on complexity

One thing most guides skip: Your medical director is also the person who gets your pharmacy credentialing done. Which brings us to Step 5.

---

Step 5 — Pharmacy access and formulary

This is the second long-pole item, and the one operators most consistently misunderstand.

Compounding pharmacies — Empower Pharmacy, Hallandale Health, Olympia Pharmacy, and others — do not onboard brands directly. They credential prescribing providers. Your medical director submits their DEA registration, state license, and malpractice documentation to the pharmacy, and the pharmacy decides whether to work with your clinic.

What this means in practice:

• You do not call the pharmacy procurement line on Day 1
• Your relationship with the pharmacy runs through your clinical leadership
• Credentialing typically takes 4–12 weeks depending on the pharmacy's queue and the completeness of your provider documentation
• Some pharmacies will not work with new clinics at all until you can demonstrate patient volume; warm introductions through your medical director or through a connected operator can accelerate this

On formulary: Build a multi-category formulary from the start. TRT and men's health, HRT and menopause, hair loss, ED, tretinoin and topical skin, low-dose naltrexone (LDN), peptides, and oral non-GLP-1 weight management are all durable categories with established protocols. Do not anchor your business on GLP-1 compounding — the FDA's enforcement posture on compounded semaglutide and tirzepatide has created real business risk for operators who concentrated there. Category breadth is the durable position.

A quick note on compounded drugs and FDA status: compounded medications are not FDA-approved. They are legally dispensed through licensed compounding pharmacies under specific conditions. Your patients and your protocols need to reflect this accurately. Your pharmacy and your legal counsel should review your protocol language.

---

Step 6 — System of record decision (before you pick any platform)

This is the decision incumbents want you to make last, because by the time you notice it matters, you are already locked in.

The system of record is the authoritative database for your patient records, order history, provider approvals, and clinical notes. Whoever owns this database holds the leverage in your relationship.

The managed platform model: Companies like Bask Health, OpenLoop, SteadyMD, Wheel, and MD Integrations bundle provider networks, EMRs, and fulfillment into a single platform. They go fast. The trade-off is that your patient data and your operational history often live in their environment. If you leave — or if they raise prices, change terms, or go through a corporate event — you are negotiating for your own data.

The owned-stack model: You contract providers directly, use a HIPAA-compliant EMR that you own (or that you have a clear data portability agreement with), and use a fulfillment layer like neolife that connects your Shopify store to your pharmacy while keeping you as the system of record. You move slower at first. You retain leverage permanently.

Neither model is wrong for every operator. But you must make this decision intentionally before you sign any vendor contract, because it determines what every other vendor relationship looks like. Build vs. buy: when to own your telehealth stack and when to rent it is the full analysis.

---

Step 7 — Shopify storefront build

Now you build the patient-facing experience. With your entity, LegitScript application, compliance infrastructure, providers, and pharmacy access in progress, you know what you are building for.

What Shopify handles well in telehealth:

• Product pages and subscription billing (Recharge or Shopify Subscriptions)
• Checkout and payment processing (once LegitScript clears)
• Customer-facing order management and portal
• Email and SMS flows for order confirmation, refill reminders, and win-back (via Klaviyo or Postscript)
• Upsells and cross-sells across your formulary

What Shopify does not handle:

• Intake forms and clinical questionnaires with PHI
• Provider approval workflows
• Prescription routing to the pharmacy
• EMR or patient health record

Your Shopify store is the commercial layer. Your fulfillment rail (Step 8) connects it to your clinical and pharmacy layer.

---

Step 8 — Fulfillment automation

This is where most operators underestimate complexity. When a patient completes checkout, the following needs to happen:

1. Order data flows to your provider queue for clinical review
2. Provider approves, modifies, or declines the order
3. Approved order routes to the correct pharmacy with the correct prescription details
4. Pharmacy confirms receipt and provides tracking
5. Patient gets status updates
6. If declined or out of stock, the operator has a resolution workflow

If you are doing this manually — copying order data into a spreadsheet and emailing a PDF to the pharmacy — you will hit a ceiling at approximately 20–30 orders per day and you will introduce errors that create compliance risk.

Automation options:

• Build a custom integration between Shopify and your pharmacy's API (typically 8–16 weeks of engineering, ongoing maintenance)
• Use a fulfillment rail that is already integrated: neolife connects Shopify directly to LifeFile-compatible pharmacies, routes provider approval into the flow, and gets orders out in under 60 seconds from approval

The provider approval step is not optional and it is not a checkbox. Every order requires a licensed provider to review and sign off before anything is dispensed. Your automation architecture needs to make this step fast and auditable, not bypass it.

---

Step 9 — Soft launch and go-live checklist

Before you flip the switch:

Compliance:

• LegitScript certification confirmed (do not launch ads without this)
• All BAAs signed and on file
• Provider agreements executed
• Pharmacy credentialing complete for your medical director
• Protocol documentation reviewed by counsel and medical director
• State-by-state prescribing scope confirmed (not all providers can prescribe all drugs in all states)

Technical:

• End-to-end order test completed (real product, real provider, real pharmacy confirmation)
• PHI confirmed not touching Shopify
• Subscription billing tested including failed payment recovery
• Tracking and status update emails confirmed

Operational:

• Patient support queue and SLA defined
• Provider queue coverage confirmed (who approves orders on weekends?)
• Refill and reorder flow confirmed with pharmacy

Go to market:

• Google and Meta ad accounts LegitScript-approved
• First campaign brief complete
• Referral or affiliate program logic defined (if applicable)

---

How long does this actually take?

Track	Realistic timeline
Entity + banking	1–2 weeks
LegitScript	4–8 weeks (start Day 0)
Compliance infrastructure	2–4 weeks
Medical director hire	4–8 weeks
Pharmacy credentialing	4–12 weeks
Storefront build	3–6 weeks
Fulfillment integration	2–6 weeks (depending on approach)
Total (parallel tracks)	3–5 months

The operators who move fastest are the ones who start LegitScript and medical director search on Day 1, build the storefront during the wait, and have their fulfillment integration ready to test as soon as pharmacy credentialing closes. The operators who move slowest are the ones who work sequentially on a list that needs to run in parallel.

---

Key takeaways

• Start LegitScript on Day 0. It is a 4–8 week review that gates your ads, your payment processor, and your ability to operate. There is no workaround.
• Pharmacy access flows through your providers, not a procurement call. Your medical director's credentials are what get you to the pharmacy, not your brand deck.
• The system-of-record decision happens before you sign any vendor. Own your patient data, or plan for the leverage conversation later.
• Nothing ships without a licensed provider approving it. Build that into your architecture on day one.
• Do not concentrate on GLP-1. Category breadth — TRT, HRT, hair, ED, skin, LDN, peptides — is the durable business. GLP-1 compounding is a cautionary example of what happens when operators build on regulatory risk they do not control.
• Operators who own their stack retain leverage. Operators who rent a platform negotiate for their own data when pricing changes.

---

If you want a fulfillment rail that connects your Shopify store to your pharmacy, keeps you as the system of record, and gets provider-approved orders out in under 60 seconds — that is what neolife is built for. Talk to us before you pick your stack.