Telehealth & Peptide Compliance: What Underwriters Actually Check

What does compliance mean to an underwriter, as opposed to a lawyer?

A lawyer asks whether you are meeting your legal obligations. An underwriter asks a narrower question: what is the chance this account creates a loss, a dispute spike, or a regulatory headache for the acquiring bank? Those overlap, but they are not identical, and the distinction explains why some legally sound businesses still get declined. This article is about the underwriter's version. It is educational and is not legal or compliance advice, and it does not replace counsel who knows your jurisdictions.

Licensing: which states, which clinicians?

Telehealth is regulated primarily at state level, so the relevant question is not "are you licensed" but "are your clinicians licensed in every state where you have patients." Underwriters look for named prescribers, verifiable licenses, and a service map that matches. A business shipping to all fifty states with prescriber coverage in twelve is a file that will draw questions.

The prescriber relationship: is the clinical decision genuine?

The core question is whether a licensed professional is genuinely evaluating the patient, or whether the consultation exists to paper over a retail transaction. Underwriters read your intake flow with that in mind: what is asked, what can disqualify a patient, and whether anyone is ever actually turned down. A funnel where nobody is declined tells an underwriter something.

Fulfillment: who dispenses, and are they licensed?

Whoever ships the product needs to be lawfully able to. Expect underwriters to ask for the dispensing pharmacy or facility, its licensure, and how the chain of custody works. For compounded products, the compounder's status matters specifically. Vague answers here are read as risk, because the acquirer inherits the consequences if the chain is not lawful.

Privacy: how is patient data handled?

Health information carries obligations that ordinary e-commerce data does not. Underwriters want to see that you know which rules apply to you and have implemented them, including how data is stored, who can access it, and what happens with third-party vendors. The HHS guidance on HIPAA is the reference point for what applies and to whom.

Billing transparency: the part that actually drives disputes

Every recurring charge must be disclosed before purchase in language a patient will remember. The descriptor should be recognizable on a statement. Cancellation should take about as long as signing up did. The FTC's guidance on negative-option billing sets the expectation for consent and cancellation in subscription models, and underwriters increasingly check against it because regulators do.

Peptides: does the marketing match the classification?

The sixth area, and the one that decides peptide files. State the classification, document it, and make sure every page of the site is consistent with it. Research-use-only product should not carry consumer dosage guidance. Compounded product should not be presented as an approved drug. Verify current status with the FDA, because this is an area where the position on individual compounds changes and last year's understanding may be out of date.