Key takeaways
- Med spa compliance has three cost layers: one-time formation and legal setup, recurring compliance subscriptions, and contingent incident and defense costs.
- Typical bands: formation/MSO setup runs ~$5k-$25k+ custom; hourly healthcare counsel ~$300-$700/hr; Bryant Taylor's legal membership starts at $97/mo; Medical Director Co bundles placement plus MSO at $799/mo.
- Consultancy programs (MedSafe, Aesthetic Compliance Experts, Healthcare Compliance Pros) are package-based, and HIPAA/OSHA software (MedTrainer, Compliancy Group, Abyde) is custom-quoted by team size.
- A compliant year-one build for a new med spa in a CPOM state typically lands in the low-to-mid five figures all-in—fixed and knowable, unlike the tail risk it prevents.
- The cheap path costs more: HIPAA penalties can reach $50k+ per violation, board investigations mean hourly defense fees, and gray-market injectables add FDA and criminal exposure.
- Control costs with flat-fee quotes, legal memberships, AmSpa member benefits (including ByrdAdatto consults), and right-sized software—and always confirm fees directly with each provider.
Legal and compliance help looks expensive until you price the alternative. This category runs from $97/mo memberships to five-figure formation projects, and the sticker numbers are hard to compare because law firms, consultancies, and software vendors price in completely different ways. The way to make sense of it is to separate the bill into three cost layers, budget each one, and then stress-test the total against what a single board investigation or HIPAA penalty would cost. The figures below are typical industry ranges drawn from public vendor information and market norms; most legal work is quoted custom, so always confirm fees directly with each provider. For how we evaluate vendors, see our methodology.
The cost layers
- Formation and legal setup (one-time). Entity formation, MSO structuring, medical-director agreements, employment and independent-contractor agreements, consent forms, and good-faith-exam protocols. This is project-based attorney work—the largest single check you will write, and the one that determines whether everything downstream is defensible.
- Ongoing compliance (recurring). Memberships and subscriptions that keep you current: productized legal plans, medical-director placement fees, consultancy program maintenance, and HIPAA/OSHA software. This is the layer most operators underbuy.
- Incident and defense costs (contingent). Board investigations, HIPAA breach response, employment disputes, and demand letters. You cannot schedule these, but you can shrink their probability with layers one and two—and their severity by having counsel on speed dial.
Most operators budget only the first layer, treat the second as optional, and discover the third the hard way. The rest of this guide prices each layer with representative providers, then works through what a compliant first year actually costs a new spa.
Typical price bands
| Need | Representative providers | Typical pricing |
|---|---|---|
| Legal formation / MSO setup | ByrdAdatto, Lengea Law, Cohen Healthcare Law | Typically ~$5k-$25k+ one-time, quoted custom by scope and state |
| Hourly healthcare counsel | Frier Levitt, Jackson LLP, Quarles & Brady, Hinshaw | ~$300-$700/hr depending on seniority and market |
| Productized legal membership | Bryant Taylor Law | From $97/mo |
| Medical-director placement + MSO | Medical Director Co | $799/mo |
| Compliance programs / binders | MedSafe, Aesthetic Compliance Experts, Healthcare Compliance Pros | Package-based; quoted by program scope |
| HIPAA/OSHA software | MedTrainer, Compliancy Group, Abyde | Subscription; custom quotes by team size and modules |
Formation work is the wide band. A single-owner physician practice in a friendly state might land near the bottom; a non-physician-owned, multi-state build with an MSO, fair-market-value analysis, and a full agreement stack lands at the top or beyond. Hourly counsel at ~$300-$700/hr is how boutiques and big firms price advisory and defense work—fine for discrete questions, expensive for open-ended projects, which is why flat-fee quotes matter. Memberships are the newest model: Bryant Taylor Law offers ongoing access to healthcare attorneys from $97/mo, and Medical Director Co bundles a vetted medical director with MSO structuring support at $799/mo—one line item covering what is otherwise two hard procurement problems. Consultancy programs from MedSafe and peers are quoted per package (policies, training, mock audits), and software from MedTrainer, Compliancy Group, and Abyde is quoted per organization—expect team size, locations, and modules to drive the number.
A worked example: a new med spa's first year
Take a nurse-practitioner-founded med spa opening in a CPOM state. Year one might look like this: entity formation and MSO structure with a full agreement stack from an aesthetics firm—call it $10k-$20k one-time at typical market rates. A medical director: either sourced independently and papered by your attorney, or solved via Medical Director Co at $799/mo ($9,588/yr) including the placement and structure support. A HIPAA/OSHA program: software from Abyde or MedTrainer on a custom-quoted subscription, or a consultancy package from MedSafe. Add a legal membership such as Bryant Taylor Law at $97/mo ($1,164/yr) if you want counsel on tap for the questions that come up monthly. Realistically, a compliant year-one build lands somewhere in the low-to-mid five figures all-in—material, but fixed, knowable, and small against the revenue of even a modest injectables practice.
Why the cheap path costs more
The uncomfortable math of this category is that non-compliance is priced in tail risk. A board investigation means defense counsel at hourly rates, months of distraction, possible practice restrictions, and—if the structure was illegal—the unwinding of your ownership at the worst possible moment. HIPAA penalties scale per violation, and a single category of violation can reach $50,000 or more per occurrence with annual caps in the seven figures; a breach also brings notification costs and reputational damage no subscription ever approaches. Buying counterfeit or misbranded injectables from gray-market suppliers—a corner some operators cut to save on cost of goods—adds FDA exposure and potential criminal liability on top of the civil risk. Against those numbers, the difference between a $10k and a $20k formation project, or a $97/mo membership versus no counsel at all, is not where to economize. The cheap path is only cheap until the first letter arrives.
Ways to control cost
- Ask for flat fees. Most aesthetics-focused firms will quote formation and MSO projects flat; a fixed number beats an open hourly meter for defined work.
- Use memberships for the recurring layer. Plans like Bryant Taylor's from $97/mo turn unpredictable hourly questions into a budgetable line item.
- Leverage AmSpa membership. AmSpa members get benefits that include consult access with ByrdAdatto, the association's legal partner—an inexpensive way to get aesthetics-specific answers early.
- Bundle the medical-director problem. If you need both a doctor and a structure, a packaged model like Medical Director Co's $799/mo can undercut sourcing and papering them separately.
- Right-size the software. Quote MedTrainer, Compliancy Group, and Abyde against your actual headcount and modules—don't pay enterprise pricing for a three-person practice.
Hidden costs
Budget beyond the headline quote: state filing and licensing fees on top of formation work; fair-market-value analyses sometimes required to support MSO management fees; annual reviews as delegation laws and board positions shift (a structure drafted three years ago may be stale); training time—staff hours spent on HIPAA/OSHA modules are real payroll; per-seat and per-location growth in software subscriptions; and consult fees, since many firms (including Lengea Law) charge for initial consultations. None of these are reasons to delay—they are reasons to ask each provider for the all-in number.
Ready to choose? Walk through our buying guide to match provider types to your needs, compare the two leading aesthetics firms in our ByrdAdatto vs Lengea Law comparison, and explore every option on the compliance and legal pillar. All figures here are typical industry ranges—confirm current fees and scope directly with each provider before you engage. And a necessary caveat: this article is general information about market pricing, not legal advice; for advice on your specific situation, consult a licensed healthcare attorney.
Frequently asked questions
How much does it cost to set up a med spa legally?
Formation work is quoted custom, but typical industry ranges run from roughly $5,000 for a simple physician-owned build to $25,000 or more for a non-physician-owned structure with an MSO, fair-market-value support, and a full agreement stack across multiple states. The scope drivers are your state's corporate-practice-of-medicine position, who owns the business, and how many agreements need drafting. Ask aesthetics-focused firms like ByrdAdatto, Lengea Law, or Cohen Healthcare Law for a flat-fee quote, and confirm exactly what the number includes.
What do healthcare lawyers charge per hour?
Typical hourly rates for healthcare counsel run roughly $300 to $700 per hour, depending on seniority, firm size, and market—big-firm partners at groups like Quarles & Brady or Hinshaw sit at the top of that band, boutique associates lower. Hourly billing suits discrete questions and defense work, but for defined projects like formation or MSO structuring, most aesthetics-focused firms will quote a flat fee instead, which is usually the better structure for the buyer. Always confirm rates and estimates in writing.
Are there affordable monthly options for med spa legal help?
Yes—productized memberships are the newest pricing model in this category. Bryant Taylor Law offers a legal membership from $97/mo that gives ongoing access to healthcare attorneys for the questions that come up monthly. Medical Director Co charges $799/mo to bundle a vetted medical-director placement with MSO structuring support, solving two procurement problems in one line item. Memberships work best as the recurring layer on top of a properly done formation, not as a substitute for it.
How much does HIPAA/OSHA compliance software cost for a med spa?
MedTrainer, Compliancy Group, and Abyde all price by custom quote, driven by team size, number of locations, and which modules you need (training, risk assessment, policies, credentialing, incident management). Consultancy alternatives like MedSafe and Aesthetic Compliance Experts price per program package instead. When you request quotes, specify your actual headcount so you aren't priced for capacity you won't use, and ask what happens to the price as you add staff or locations.
What does non-compliance actually cost if I skip this?
The tail risk dwarfs every subscription in this guide. HIPAA civil penalties scale per violation and can reach $50,000 or more per occurrence with seven-figure annual caps, plus breach-notification and reputational costs. A board investigation means hourly defense counsel, months of distraction, possible practice restrictions, and—if your ownership structure was illegal—unwinding it under duress. Counterfeit or misbranded injectables add FDA and potential criminal exposure. This is general information, not legal advice; consult a licensed healthcare attorney about your specific situation.
