Updated September 2026 · Managed LegitScript certification
LegitScript certification, filed and managed for you
LegitScript healthcare merchant certification is the third-party review that Google, Meta and the major card networks rely on before a telehealth or online pharmacy brand can run paid ads or process healthcare payments at scale. LegitScript certification cost has two parts as of September 2026. The first is the fees LegitScript sets and publishes on legitscript.com: a nonrefundable application fee and an annual certification fee, both charged per root domain, with a paid expedited option. The second is the work of assembling a file that clears review on the first pass. MyOrbitHealth handles that second part. We prepare the file, submit the application for your domain in your name, answer reviewer questions, and manage it through approval, then keep the evidence current after you are certified. Because your providers, prescribing protocols, pharmacy network, privacy program and business records already live inside the platform, the documents LegitScript asks for already exist. Brands on MyOrbitHealth typically see a decision in days once the application is filed, not months. LegitScript makes the decision, not us, and certification is never guaranteed. Managed certification is part of your scoped onboarding, so there is no separate quote for it. This page is general information, not legal advice.
How to get LegitScript certified on MyOrbitHealth
Most brands treat certification as a side project run alongside launch. On MyOrbitHealth it is a workstream we own. Here is what that covers.
We prepare the file
LegitScript wants proof of licensure, prescribing policy, pharmacy relationships, privacy practices, ownership and marketing claims. Our network documentation covers the clinical side: 2,400+ board-certified MD, DO, NP and PA providers across all 50 states, NCQA-standard primary-source credentialing, monthly OIG-LEIE and SAM.gov exclusion screening, DEA registration verified and continuous license monitoring. We assemble that with your entity records, storefront copy and policies into one package.
We file the application
The application is submitted for your root domain, in your name. You remain the applicant and the certified merchant. We complete the questionnaire, attach the supporting evidence, confirm the live storefront matches what the file says, and submit. You pay LegitScript's published fees directly to LegitScript.
We answer LegitScript's questions
Almost every applicant gets follow-up questions. Slow or partial responses are the biggest single cause of delay. Our team fields reviewer questions with the underlying documents already at hand, so a question about a state license or a prescribing protocol gets a same-day answer instead of a week of hunting.
We manage it through approval
We track application status, escalate stalls, and coordinate any site changes LegitScript asks for, such as clarifying refund language, adding a provider disclosure or tightening a product claim. You get one point of contact and a plain-language status.
We maintain it after approval
Certification is monitored, not one-time. LegitScript can revisit a certified merchant when the site changes or a complaint lands. Because credentialing, exclusion screening and license monitoring run continuously inside the platform, the evidence stays current, and we help you keep copy, pricing pages and new products inside the standards.
The pharmacy network is already certified
OrbitRx routes prescriptions through Surescripts to a LegitScript-certified pharmacy network, 503A compounding and retail, with cold chain. That does not certify your brand, but it removes an entire category of reviewer questions about where medication is dispensed and by whom.
Timeline: managed filing vs doing it yourself
LegitScript does not publish a standard review time on its certification page. Its materials for payment partners describe most referred applicants achieving certification in under about a month, with roughly half certified in two weeks or less, and note that the expedited option starts review within two business days. Third-party guides commonly describe weeks to months for unassisted telehealth applicants. The difference is document rounds: a complete file gets fewer questions and shorter gaps between them.
| On MyOrbitHealth, once filed | Typically days. The file is complete at submission because the clinical, pharmacy and privacy evidence already exists inside the platform, and reviewer questions are answered from the same source the same day. |
|---|---|
| Industry typical, on your own | Weeks to months. Telehealth and prescription models get a deeper review than a supplement store, and every slow or partial reply to a reviewer adds a round. |
| Before filing | Your entity, storefront and policies need to exist. On MyOrbitHealth that is part of onboarding, and brands go live in days. We file when the site reflects the final offer, because changing the offer mid-review restarts questions. |
| Footnote | Timelines are typical, not promised. LegitScript decides and sets its own queue. Certification is not guaranteed, and no vendor can promise an approval or a date. |
What LegitScript checks
LegitScript publishes nine healthcare certification standards. As of September 2026 they are licensure and business registration, legal compliance, prior discipline and history, affiliates and partners, patient services, privacy, validity of prescription, transparency, and advertising. In practice, reviewers spend their time on six things.
Licensed providers and pharmacies
Every clinician who treats a patient must hold an active license in that patient's state, and every pharmacy that dispenses must be licensed where it ships. Reviewers check the roster against your stated service area. Our network is credentialed to NCQA standards with continuous license monitoring, and the pharmacy network is itself LegitScript-certified.
Prescribing standards
A prescription must come from a valid patient-provider relationship with a real clinical evaluation, not a checkout button. Reviewers read your intake flow and your marketing to confirm nothing promises medication before a provider decides. Orbit Intake and OrbitRx put the provider decision between the questionnaire and the pharmacy, with EPCS and two-factor identity proofing for controlled substances.
Transparent policies
Refund, cancellation, shipping and subscription terms must be visible and accurate. If you sell subscriptions through the branded storefront, renewal terms and how to cancel need to be plain. Reviewers compare policy pages against checkout.
Privacy
HIPAA compliance and a privacy notice that matches what the site actually does with data. Every MyOrbitHealth contract includes a BAA, the platform holds a SOC 2 Type II report available under NDA and is HITRUST-aligned. We supply the privacy evidence; you confirm your marketing stack respects it.
Marketing claims
Efficacy claims, before and after language, guarantees and off-label suggestions are where telehealth applications most often stumble. Reviewers read the storefront, landing pages and often social profiles. We review copy against the standards before filing and flag anything likely to draw a question.
Ownership disclosure
Who owns the business, who the medical director is, and whether any owner, officer or affiliate has relevant regulatory or criminal history. Hidden or inconsistent ownership is a common cause of denial. We help you present the structure, including MSO and professional entity arrangements, clearly and consistently.
What LegitScript certification costs
Two separate lines. LegitScript's fees, which you pay to LegitScript, and the work of getting through review, which is included in your MyOrbitHealth onboarding.
| LegitScript application fee | Set and published by LegitScript. As of September 2026, legitscript.com lists a $975 nonrefundable application fee per website for healthcare merchant certification. Confirm the current schedule on legitscript.com before budgeting; LegitScript revises it. |
|---|---|
| LegitScript annual certification fee | Also set by LegitScript, due once approved. As of September 2026, legitscript.com lists $2,150 per website per year for standard certification and $3,995 per year for probationary certification, which carries more intensive monitoring. Certification applies to the root domain, so subdomains are covered; each separate root domain needs its own. |
| Expedited processing | Optional. As of September 2026, legitscript.com lists $2,500 per application to have review started within two business days. It changes when review starts, not what reviewers ask for. On an incomplete file it does not help. |
| MyOrbitHealth managed certification | Part of your scoped onboarding. There is no separate LegitScript quote and no per-application charge from us. MyOrbitHealth runs on a flat platform fee scoped at onboarding, 0% medication markup and no revenue share, month-to-month after onboarding. |
| Ad spend after approval | Yours. Certification unlocks the ad platforms; it does not fund them. You are the merchant of record, you own the patient relationships and the data, and your media budget stays in your own accounts. |
Why Google, Meta and payment processors require it
None of these companies want to police healthcare licensing themselves. LegitScript is the reviewer they have agreed to trust. General information, not legal advice; platform policies change and should be read directly.
Google Ads
Google's healthcare and medicines policy requires online pharmacies and telemedicine providers that facilitate prescribing to be LegitScript-certified before their ads serve to US users. Without it, campaigns are disapproved at the policy level.
Meta
Meta's drugs and pharmaceuticals ad standard, as of September 2026, requires online pharmacies and telehealth providers to be actively certified with LegitScript, and then to request authorization from Meta before running prescription drug ads. Two gates, and certification is the first.
Other platforms
LegitScript lists Microsoft Bing, TikTok, LinkedIn and Netflix among the ad platforms that recognize its healthcare certification as of September 2026. One certification covers the set, which is why it is worth filing before the media plan, not after.
Card networks and processors
Visa and Mastercard recognize LegitScript certification for pharmacy and drug merchant category codes, and many acquirers ask for it before underwriting a telehealth or online pharmacy merchant account. Since you are the merchant of record on MyOrbitHealth, your certification supports your own processing relationship.
After approval: what keeps you certified
Certification is a standing status, not a certificate on the wall. Here is what we keep current and what stays with you.
Continuous provider compliance
License monitoring, monthly OIG-LEIE and SAM.gov exclusion screening and DEA verification run continuously inside the Provider Network. Malpractice coverage is handled inside the network. If a provider's status changes, they stop seeing your patients before it becomes a reviewer question.
Site and offer changes
New products, new states, new pricing or subscription terms can all draw a re-review. We check each change against the standards before it ships to the storefront, and we keep the policy pages aligned with what checkout actually does.
Annual renewal
LegitScript's annual fee comes due on your certification anniversary and you pay it to LegitScript. We prepare any updated evidence the renewal asks for from the same records used in the original filing.
Complaints and monitoring
LegitScript monitors certified merchants and investigates complaints. When a question arrives, we respond with the operational record from OrbitOS: the encounter, the prescribing decision and the pharmacy handoff for every patient.
What stays yours
The certification, the domain, the patients, the records and the data. You can export everything at any time, there is no exit fee, and the agreement is month-to-month after onboarding. If you ever leave, your certification leaves with you.
Frequently asked questions
- How much does LegitScript certification cost?
- LegitScript sets and publishes its own fees. As of September 2026, legitscript.com lists a $975 nonrefundable application fee and a $2,150 annual certification fee per website for standard healthcare merchant certification, $3,995 per year for probationary certification, and an optional $2,500 expedited processing fee. Those fees go to LegitScript and can change, so confirm them on legitscript.com. MyOrbitHealth's managed filing is part of your scoped onboarding, quoted per program, with no separate LegitScript line item.
- How long does LegitScript certification take?
- LegitScript does not publish a fixed review time. Its partner materials describe most referred applicants certified in under about a month, and third-party guides describe weeks to months for unassisted telehealth applicants, with most of the time spent in rounds of reviewer questions. On MyOrbitHealth, brands typically see a decision in days once the application is filed, because the clinical, pharmacy and privacy evidence is complete at submission. Typical is not guaranteed. LegitScript decides, and its queue is its own.
- Can I advertise without LegitScript certification?
- Not on Google or Meta for telehealth that leads to a prescription or for online pharmacy services targeting the US. Both require certification before those ads serve, and Meta adds its own authorization step after. Organic search, email, SMS, affiliate and referral programs, PR and content are not gated, and many brands build those channels during review. Once certified, paid search and paid social open up.
- What is the difference between LegitScript healthcare merchant certification and its other programs?
- Healthcare merchant certification is the program for businesses that sell or facilitate healthcare products and services online, including telehealth that facilitates prescribing, online pharmacies, compounding and supplements. LegitScript runs separate programs for other categories, such as addiction treatment and CBD. A telehealth brand prescribing medication applies under healthcare merchant certification, and if your offer spans categories the reviewer will say so.
- What happens if my application is denied?
- LegitScript tells you why. Common reasons in telehealth are licensing gaps in advertised states, a flow that implies medication before a clinical decision, unsupported efficacy claims, inconsistent ownership information and thin privacy documentation. Most denials are fixable. We identify the gap, correct the site or the file, and refile. The application fee is nonrefundable, which is one more reason to file a complete application the first time.
- Does MyOrbitHealth's LegitScript-certified pharmacy network cover my brand?
- No. Certification attaches to a root domain and a merchant. The pharmacies in the OrbitRx network hold their own certification, which is why reviewers rarely question where your prescriptions are filled, but your brand's domain needs its own healthcare merchant certification in your name. That is the application we prepare, file and manage for you.
Go deeper: LegitScript certification for telehealth: the full guide, HIPAA for non-clinician founders, The real timeline from signing to first shipped prescription, and How to start a telehealth business without a medical license.
This page is general information, not legal or medical advice.
Get certified before your first ad
Tell us your offer and your states. We will scope onboarding, build the LegitScript file from the platform's existing evidence, and file it in your name. Managed certification is included, there is no separate quote, and LegitScript makes the final call. General information, not legal advice.