LegitScript Certification
LegitScript
Contact Form
Our Certification Services — Real Support, Real Results, Real Healthcare Businesses
We Don’t Sell Cookie-Cutter Packages. We Build What Your Business Actually Needs.
No two healthcare businesses are exactly alike — and no two LegitScript certification applications should be either. Your certification path depends on your business type, your licensing situation, your service states, and dozens of other factors that a one-size-fits-all approach will miss.
At Legit Certifications Consulting, every client engagement starts with a real conversation about your specific business. Then we build a certification strategy around what you actually need.
What is LegitScript Certification?
Consumers have access to more information online than ever before, but that abundance of information can also make it difficult to determine which businesses are credible. When people search for healthcare services, medications, treatment programs, or other health-related products, they want confidence that the companies they encounter operate responsibly and meet recognized standards for safety and transparency. LegitScript certification helps establish that trust by demonstrating that a website and its associated business have been reviewed against rigorous compliance standards.
LegitScript is a widely recognized third-party certification provider for businesses operating in regulated and high-risk industries, particularly within healthcare. Certification may be relevant for organizations offering addiction treatment, mental health services, telehealth and telemedicine, and certain holistic or wellness services. LegitScript also works with businesses across the pharmaceutical supply chain, including pharmacies and other organizations involved in the sale or promotion of regulated healthcare products and services.
For qualifying businesses, earning LegitScript certification can provide more than an added layer of consumer confidence. It can also play an important role in demonstrating compliance to major advertising platforms, payment providers, and other business partners that require additional verification before allowing certain healthcare organizations to advertise or operate through their platforms.
How Can We Help You?
The History Behind LegitScript — Why It Exists in the First Place
To understand LegitScript, you need to understand the problem it was created to solve.
In the early days of the commercial internet, the healthcare and pharmaceutical advertising space was essentially the Wild West. Rogue online pharmacies were selling controlled substances and counterfeit medications without prescriptions. Fraudulent addiction treatment centers were paying patient brokers to funnel vulnerable people into their programs. Predatory health product companies were making outrageous, unsubstantiated claims and targeting desperate patients with misleading marketing.
The major digital platforms — Google in particular — were under significant pressure from regulators, lawmakers, and public health advocates to stop facilitating this activity. But the challenge was enormous: how do you distinguish a legitimate online pharmacy from a rogue one when both claim to be the real thing?
LegitScript was founded in 2007 to answer that question.
Their model was simple in concept but rigorous in execution: build an independent verification and monitoring organization that could credibly distinguish legitimate healthcare businesses from fraudulent ones, and partner with major platforms to make that verification the standard for healthcare advertising access.
Today, LegitScript monitors millions of internet pharmacies and health product merchants. They have working relationships with Google, Meta, Microsoft, TikTok, and hundreds of payment processors. Their certification program has become the de facto standard for healthcare advertising compliance online.
For legitimate healthcare businesses, this is both a challenge and an opportunity. The challenge is navigating a certification process designed to be rigorous. The opportunity is that once you’re certified, you carry the credibility of one of the most trusted names in healthcare compliance.
LegitScript Certification Categories — Which One Do You Need?
This is one of the most common sources of confusion — and one of the most common causes of application problems. LegitScript offers multiple certification categories, each with its own requirements and review process. Applying in the wrong category, or missing a required category, creates problems from the start.
Here’s a clear breakdown:
Healthcare Merchant Certification
Who it’s for:
Telehealth providers, virtual medical clinics, digital health platforms, direct-to-consumer health companies, mental health platforms, and any healthcare business seeking advertising access on Google or Meta.
What it means:
This certification verifies that your healthcare business is properly licensed, ethically operated, and compliant with applicable healthcare laws and advertising regulations.
Key requirements:
- Valid medical licenses for all providers in all service states
- HIPAA compliance documentation
- Website compliance with LegitScript content standards
- Documented patient care protocols
- Transparent business practices
Who should pay close attention:
Telehealth companies, particularly those operating across multiple states or prescribing controlled substances, face the most complex requirements in this category. Multi-state licensing gaps are the number one cause of healthcare merchant certification denials.
Pharmacy Certification
Who it’s for:
Online pharmacies, mail-order pharmacies, compounding pharmacies, and pharmaceutical retailers.
What it means:
LegitScript’s pharmacy certification is the gold standard for online pharmacy verification. It confirms that a pharmacy is properly licensed, staffed by licensed pharmacists, operating under appropriate regulatory oversight, and dispensing medications only on the basis of valid prescriptions.
Key requirements:
- Valid state pharmacy licenses in all states of operation
- NABP e-Profile in good standing
- DEA registration (where applicable)
- Licensed pharmacist oversight documentation
- Prescription verification protocols
- Compliance with applicable state and federal pharmacy laws
Who should pay close attention:
Pharmacy certification is the most rigorous category in the LegitScript program. The documentation requirements are extensive, the verification process is thorough, and the margin for error is small. Most pharmacies that attempt this process without expert guidance end up denied.
Treatment Program Certification
Who it’s for:
Addiction treatment centers, substance use disorder programs, detox facilities, MAT clinics, residential treatment programs, IOPs, PHPs, sober living operators, and digital addiction treatment platforms.
What it means:
This certification verifies that an addiction treatment program is properly licensed, ethically operated, and committed to evidence-based care. It specifically addresses the history of fraudulent and predatory practices in the addiction treatment industry by requiring independent verification of program legitimacy.
Key requirements:
- State addiction treatment facility licenses
- SAMHSA certification (for opioid treatment programs)
- Staff credentialing for all clinical personnel
- 42 CFR Part 2 compliance
- Evidence-based treatment documentation
- Ethical marketing practices verification
Who should pay close attention:
Any addiction treatment provider that has had prior marketing compliance issues, operates in multiple states, or provides opioid treatment services will face heightened scrutiny. This category also carries Google-specific additional requirements beyond LegitScript’s own standards.
Health and Wellness Merchant Certification
Who it’s for:
Nutraceutical companies, dietary supplement retailers, health product e-commerce businesses, and wellness brands.
What it means:
This certification verifies that health and wellness merchants are selling legitimate products, making compliant marketing claims, and operating in accordance with applicable FDA regulations and FTC advertising guidelines.
Key requirements:
- Compliant product labeling
- FDA disclaimer compliance
- FTC-compliant marketing claims
- Transparent business practices
- Website compliance
Who should pay close attention:
Businesses making health claims about their products need to be particularly careful. LegitScript reviews marketing claims closely, and prohibited claims — anything that positions a supplement as treating, curing, or preventing a disease — are a fast path to denial.
Kratom Merchant Certification
Who it’s for:
Kratom retailers, distributors, and manufacturers seeking advertising and payment processing access.
What it means:
LegitScript’s kratom certification program verifies that kratom merchants are selling products responsibly, making compliant claims, and operating in accordance with applicable regulations.
Key requirements:
- Compliant product labeling and marketing
- Age verification protocols
- Transparent product sourcing
- Website compliance with LegitScript kratom standards
CBD Merchant Certification
Who it’s for:
CBD retailers, hemp product companies, and cannabis-adjacent businesses seeking advertising access.
What it means:
CBD certification verifies that CBD merchants are selling compliant products, making lawful claims, and operating within the complex and evolving regulatory framework that governs CBD commerce.
Key requirements:
- Product compliance with applicable federal and state regulations
- Compliant marketing claims (no disease treatment claims)
- Certificate of Analysis documentation for products
- Age verification protocols where required
- Website compliance
The LegitScript Certification Process — What Actually Happens
Understanding what actually happens during the certification process is important for setting realistic expectations — and for understanding where things can go wrong.
Here’s an honest, detailed look at the process from application to approval.
Phase 1: Application Submission
The process begins when you submit your application through LegitScript’s online portal. The application requires:
- Business identification information
- Certification category selection
- Description of your business and services
- License and credential information
- Website URL
- Supporting documentation
LegitScript acknowledges receipt of applications typically within one to three business days.
Where things go wrong at this stage:
Inconsistent business information, incorrect category selection, and incomplete documentation packages are the most common problems at the application stage. These issues either trigger immediate requests for additional information or result in outright denial.
Phase 2: Initial Review
Once your application is received, LegitScript assigns it to a review team. During this phase, reviewers are:
- Verifying that your business information matches public records
- Checking the status of every license you’ve listed
- Reviewing your website for compliance
- Assessing the completeness of your documentation package
- Determining whether any red flags exist in your compliance history
This phase typically takes one to three weeks depending on category complexity and application volume.
Phase 3: Information Requests
It is extremely common — even for well-prepared applications — to receive requests for additional information or documentation during the review process. These requests are not necessarily a sign that something is wrong. They’re often LegitScript’s reviewers seeking clarification or additional evidence to support what’s already in your application.
However, how you respond to these requests matters enormously:
- Responses need to be prompt (within the specified timeframe)
- Responses need to be complete (every question answered, every document requested provided)
- Responses need to be accurate (inconsistencies with your original application create problems)
A well-handled information request typically doesn’t extend your timeline significantly. A poorly handled one can.
Phase 4: Compliance Determination
Based on their review of your application, documentation, website, and responses to any information requests, LegitScript makes one of three determinations:
Approved: Your application meets all requirements and you are certified. You receive your certification notification, your business appears in the LegitScript approved database, and you can begin advertising on participating platforms.
Conditional Approval: Your application is largely compliant but requires specific modifications or additional documentation before certification is finalized. These conditions are clearly stated and typically not difficult to satisfy.
Denied: Your application does not meet LegitScript’s requirements. The denial notice explains the reasons for rejection and may include guidance on what would need to change for a future application to succeed.
Phase 5: Certification Maintenance
LegitScript certification is not a permanent status. Maintaining your certification requires:
Annual Renewal
Certification must be renewed annually. The renewal process involves reconfirming compliance, updating any changed information, and paying the annual certification fee.
Ongoing Compliance
LegitScript monitors certified businesses on an ongoing basis. Significant changes to your business — new services, new states, staffing changes, licensing issues — should be proactively reported to LegitScript. Certified businesses that fall out of compliance can have their certification suspended or revoked.
Website Monitoring
LegitScript actively monitors the websites of certified businesses. If your website content falls out of compliance after certification, you will be notified and given an opportunity to correct the issue.
Common Reasons LegitScript Applications Are Denied
We’ve analyzed hundreds of denied applications. The same issues come up repeatedly. Understanding them helps you avoid them.
Licensing Problems
Expired licenses, licenses that don’t cover the services being advertised, licenses that don’t cover all service states, or licenses issued to a different entity than the one applying. License verification is where LegitScript reviewers start — and where many applications end.
Website Non-Compliance
Missing Privacy Policy, missing Terms of Service, missing FDA disclaimers, prohibited marketing claims, misleading service descriptions, missing prescription requirement disclosures. LegitScript reviews websites thoroughly, and a non-compliant site is grounds for denial.
Inconsistent Information
Your business name in your application doesn’t exactly match your business name in public records. Your address is slightly different across documents. A license number doesn’t match the database entry. These inconsistencies raise red flags that are hard to recover from once they’re in the record.
Incomplete Documentation
Missing documents, documents that don’t fully substantiate the claims in your application, or documents that are difficult to verify. LegitScript doesn’t take claims at face value — everything needs to be supported.
Prohibited Business Practices
Dispensing medications without valid prescriptions, patient brokering in addiction treatment, unsubstantiated health claims, operating outside the scope of licenses. These aren’t fixable with documentation — they require fundamental changes to how the business operates.
Inadequate Patient Safety Protocols
For healthcare providers and pharmacies, insufficiently documented patient safety measures are a significant problem. LegitScript wants to see not just that you have protocols, but that those protocols are appropriate, documented, and operational.
Prior Compliance History
FDA warning letters, FTC actions, state board sanctions, advertising policy violations. Prior compliance issues aren’t automatically disqualifying, but they need to be addressed honestly and proactively in the application.
The Real Cost of Getting This Wrong
We want to be honest about what a denial actually costs — because we think most businesses underestimate it significantly.
The Obvious Cost: More Time Without Advertising Access
A denial means you have to wait out whatever reapplication period LegitScript requires, fix the issues that caused your denial, rebuild your application, and resubmit. Depending on how complex the issues are, this can add months to your certification timeline.
The Less Obvious Cost: Compounding Revenue Loss
Every week without certification is a week without Google and Meta advertising access. For most healthcare businesses, this means thousands to tens of thousands of dollars in lost patient revenue — every single week. A denial that extends your timeline by three months might cost your business $50,000, $100,000, or more in lost revenue opportunity.
The Hidden Cost: The Denial Record
A denial creates a record with LegitScript. When you reapply, reviewers can see your prior denial history. This isn’t fatal — we’ve helped countless businesses recover from denials successfully — but it adds scrutiny to your reapplication that wouldn’t be there if you’d gotten it right the first time.
The Opportunity Cost: Your Competitors Are Getting Certified
While you’re waiting to reapply, your certified competitors are running Google ads, capturing patients, and growing their businesses. Market share that could be yours is going elsewhere.
This is why we are so emphatic about doing this right the first time. The cost of proper preparation is a fraction of the cost of a denial.
How Legit Certifications Consulting Helps
We’ve built our entire business around one specific skill: getting legitimate healthcare businesses LegitScript certified successfully, efficiently, and on the first submission wherever possible.
Here’s what that actually looks like in practice:
We Start With the Truth
Before we do anything else, we give you an honest assessment of where your business stands. If there are significant compliance issues that need to be resolved before you can be certified, we tell you. We don’t take on clients we can’t help.
We Handle the Complexity
The requirements are complex. The documentation is extensive. The review process requires careful management. That’s our job — not yours. From compliance auditing to application preparation to LegitScript communication, we handle every piece of this process.
We Prevent the Problems That Cause Denials
Because we’ve been through this process hundreds of times, we know where applications go wrong. We build prevention of those problems into every application we prepare. Our 94% first-submission approval rate is the direct result of that preparation.
We Fix What Went Wrong If You’ve Been Denied
Our denial reversal service has a 100% success rate for businesses that qualify for certification. We dig into every denial, identify every issue, resolve every problem, and come back with an application that gets approved.
We Keep You Certified
Getting certified is only the beginning. We provide ongoing compliance monitoring and renewal support so that your certification stays in good standing year after year without you having to think about it constantly.
LegitScript Certification Pricing
Certification includes a nonrefundable application fee and an annual fee per website, with pricing based on business type and compliance history:
Standard Healthcare Certification
Application Fee: $975
Annual Fee: $2,150 per website
Probationary Certification (For businesses with prior compliance issues)
Application Fee: $975
Annual Fee: $3,995 per website (includes additional monitoring)
Each domain requires a separate application and fee. All websites must be disclosed during the application process.
Get LegitScript Certification for Your Company
Your first step is a free consultation with one of our certification specialists. We’ll review your specific situation, identify your certification path, and give you an honest picture of what it takes to get you certified.
No pressure. No commitment. Just real information from people who know this process inside and out.
Schedule Your Free Consultation Today
We’ll be in touch within 24 hours.
