The MSO Structure Behind a Multi-Site MedSpa Entity

Similar to a dental support organization, a multi-site medspa typically splits into a professional corporation owned by a licensed physician that holds the clinical practice, and a management services organization, which can have outside investors, that provides the business side under a management services agreement. The physician-owned PC employs or contracts the medical staff and retains authority over clinical protocols; the MSO handles marketing, scheduling, facilities, and other non-clinical functions.

Formation vendors like Bizee and Doola file the entities once this structure is designed; they don't design it, and getting the split wrong, particularly letting the MSO exert too much influence over clinical decisions, is a legal risk that goes well beyond a filing error.

A multi-site medspa structure usually rests on these pieces:

• A professional corporation owned by a licensed physician that holds the clinical practice and retains authority over clinical protocols.
• A management services organization, which can take outside investors, that handles marketing, scheduling, facilities and other non-clinical functions.
• A business associate agreement between the PC and MSO covering patient information, in addition to each entity's own HIPAA compliance program.
• A documented medical director for each location, plus facility licensing confirmed well before opening.

State medical boards set specific rules for which procedures a physician must perform personally versus which can be delegated to a nurse practitioner, physician assistant, or registered nurse under supervision or a standing protocol, and those supervision requirements vary meaningfully from state to state. This isn't an entity question exactly, but it directly affects your staffing model and your management services agreement, since the MSO needs to know which roles it's actually recruiting and scheduling for.

Confirm your state's specific delegation and supervision rules with a healthcare attorney before you build your service menu and staffing plan around procedures your license structure may not actually support the way you assumed.

Beyond the entity filing itself, many states require a separate facility or business license for a medical or aesthetic practice location, sometimes tied to specific equipment like lasers. Confirm your local and state facility licensing requirements for each new location well before opening, since this timeline often runs independently of your entity formation and can be the longer pole in the tent for a new site.

Because the MSO handles scheduling, billing, and marketing that touch patient information, the PC and MSO typically need a business associate agreement between them in addition to each entity's own HIPAA compliance program. This is a common gap in growing medspa groups: the two entities exist and operate correctly day to day, but nobody formalized the data-sharing agreement HIPAA expects to sit underneath that relationship.

Many states require a location performing medical aesthetic procedures to have a designated medical director, a licensed physician responsible for the clinical protocols followed at that specific site, even when that physician isn't there full time. As you add locations, confirm each one has its own properly documented medical director relationship rather than assuming one physician's oversight of your first location automatically extends to a new one across town.

The medical director relationship is usually formalized through the same PC that employs your treating clinicians, so keep this documentation organized alongside your clinical staffing records, not filed separately as an afterthought.

Lasers and several other aesthetic devices are FDA-regulated medical equipment, and manufacturers typically require documented, device-specific operator training before staff can use them, tied to whichever entity purchased and registered the device. Keep a simple record of which staff are trained on which device at which location, since this is exactly the kind of documentation a state inspector or a malpractice claim will ask for.

On the marketing side, the FTC expects any objective claim about results, from a website testimonial to a social post, to be substantiated, and a medical practice carries extra scrutiny here on top of general advertising rules. Review your marketing content against what you can actually back up before an ad runs, not after a regulator or a competitor flags it, and have whoever manages social content for each location work from the same substantiation standard.