Key Takeaways

• Standard M&A diligence does not surface the compliance defects that make a California med spa un-transferable in the form the seller presents. CPOM diligence is a separate exercise.
• The four most consequential med-spa defects are: no physician-owned professional corporation; a paper medical director; direct patient billing by an LLC; and a fee-splitting or non-FMV MSA arrangement.
• Med-spa-specific issues that need dedicated diligence: standardized procedures for RN-delegated injectables and laser services under 16 CCR § 1474; good-faith exam workflow; Fictitious Name Permit under B&P § 2415; medical-grade product supply chain; and marketing that overstates provider credentials or outcomes.
• Historical exposure from years of non-compliant operation can attach to the deal in ways that survive a structural fix — allocation between buyer and seller through reps, warranties, indemnification, and (for material exposure) escrow is a substantive negotiation.
• CPOM diligence should be complete before the LOI is signed. Post-LOI is too late to change structure without disruption.

A California med spa acquisition is a category where standard M&A diligence — financials, contracts, employment, tax, litigation, is necessary and not sufficient. Med spa sellers vary widely in how carefully they built and documented their compliance framework. Some spas were structured by experienced California healthcare counsel from day one and hold up cleanly under diligence. Others were assembled from a franchise-system playbook, a formation-service kit, or a well-meaning founder’s understanding of what a “medical spa” is. Non-licensee buyers who work through the compliance side of diligence before the LOI find defects that materially change deal terms or, sometimes, disqualify the target. Buyers who reserve compliance diligence for post-LOI often find the seller unwilling to accommodate the structural changes the findings require, and the buyer has already invested time, money, and momentum in a deal that cannot compliantly close as originally contemplated.

This is a med-spa-specific diligence checklist, structured for a non-licensee buyer to work through before signing the LOI. It complements the general red-flag diagnostic for California treatment businesses and adds the specific items a med spa target should be evaluated against.

How This Checklist Is Structured

Each item is presented in a four-part frame: What to check (the target’s compliance element), How to check (the diligence request or document), What is a red flag (the signal that the item is defective), and What to do about it (the fix path or negotiation lever). This structure is designed to be usable as a diligence document by the buyer and their counsel, not read once and forgotten.

The Med Spa Diligence Checklist

1. Entity structure

What to check. Whether the target has a physician-owned professional corporation (formed under Cal. Corp. Code § 13401.5) that holds the clinical practice. And whether the operating entity the seller identifies as “the business” is (a) that PC, (b) a separate MSO that services the PC, or (c) an LLC or non-physician corporation that has been doing the work of both.

How to check. Ask the seller for the entity chart. Get the Secretary of State filings for every entity the seller identifies. Confirm the exact ownership percentages of any professional corporation.

Red flag. No PC. A PC on paper that has never actually operated the practice. A “PC” that is not registered as a professional corporation with the Secretary of State. An LLC that has been the operating entity and has been billing patients directly.

Fix. Structure the deal as an asset purchase (not stock or membership-interest purchase). The buyer’s physician-partner forms a new PC before closing; clinical assets transfer into that PC; non-clinical assets transfer into the buyer’s MSO. If the target has no PC, the buyer’s structure builds one from scratch, and historical exposure from operating without one is allocated to the seller in the deal documents.

2. Medical director role and compensation

What to check. What the target’s medical director actually does — good-faith exams, chart review, standardized procedure development and approval, physical or immediate availability during procedures, supervision of delegated clinical work, incident management — and how the medical director is compensated.

How to check. Ask for the medical director agreement. Ask for the medical director’s activity records: how many good-faith exams last quarter, how many charts reviewed, when standardized procedures were last signed. Ask for the medical director’s compensation structure and the total paid over the last twelve months.

Red flag. A paper medical director. A flat monthly stipend that does not correlate to services actually rendered. A medical director who is unreachable during procedures. Standardized procedures that were signed on formation and never updated. “The medical director signs off on the protocols” without any activity record.

Fix. Post-closing, the target’s medical director role is rebuilt (often as the same physician who holds the buyer’s PC). Compensation is tied to services actually performed and documented. Standardized procedures are updated and re-signed. Historical exposure attached to the paper arrangement — including potential B&P § 2264 exposure for the physician who lent their license — is allocated in the deal.

3. Good-faith exam workflow

What to check. Whether every new patient receives a good-faith exam from a physician (or NP or PA within scope) before treatment — and what the workflow actually looks like from patient intake through treatment plan.

How to check. Walk through the intake process. Ask to see the intake forms, the exam documentation, the treatment plan template, and a sample patient chart. Confirm who conducts the exam and on what basis.

Red flag. RN-only intake with a rubber-stamp physician sign-off after treatment. Asynchronous questionnaire-only evaluation before treatment. Treatment plans that appear to come from templates rather than clinical judgment. Charts that document a treatment but not an evaluation.

Fix. The buyer’s post-closing structure adopts a defensible good-faith exam workflow: physician-conducted (or NP/PA-conducted within scope) exam based on history, examination, and clinical judgment; documented in the chart; keyed to the specific treatment plan. This is an operational commitment, not a documentation exercise.

4. Standardized procedures for RN-delegated functions

What to check. Whether the target has a written standardized procedures manual for the functions RNs perform under physician (or NP) delegation — injecting Botox and dermal fillers, administering IV therapy, performing laser and IPL treatment, and any other delegated clinical work. And whether the manual is current, signed, and specific to the target’s practice.

How to check. Ask for the standardized procedures manual. Confirm the last review and signature date. Confirm the manual is specific to the target’s actual services and equipment, not a generic template.

Red flag. No manual. A manual that looks like it came from a formation-service template. A manual that has not been reviewed and re-signed by the current medical director. A manual that references equipment or procedures the target no longer uses.

Fix. Post-closing, the standardized procedures manual is rebuilt to reflect the target’s actual services and current medical director. It is reviewed and signed on a defined cadence (typically annually) as part of ongoing compliance discipline.

5. Fictitious Name Permit

What to check. Whether the target’s medical corporation holds a Fictitious Name Permit from the California Medical Board under B&P § 2415 for the name the practice operates under.

How to check. Ask for the FNP. Confirm the name on the permit matches the name on the website, signage, patient-facing materials, and marketing. Confirm the permit is current.

Red flag. No FNP. An FNP for a different name than the one the practice actually uses. An FNP that has expired or was never renewed. Practice operating under a name not covered by any FNP.

Fix. The buyer’s new PC applies for and receives its own FNP for the brand name the practice will use going forward. This has to be in place before the practice operates under the brand.

6. Fee arrangement and FMV documentation

What to check. How the target’s existing MSA (if any) structures the management fee — flat, cost-plus, or percentage-of-revenue — and whether the fee is supported by fair-market-value documentation. Also, how the medical director is compensated and whether the compensation reflects services rendered or is calibrated to patient volume.

How to check. Ask for the MSA. Ask for the FMV analysis supporting the management fee. Ask for the medical director agreement and any compensation-schedule attachments.

Red flag. Percentage-of-revenue MSA fees without FMV documentation. Medical director compensation calibrated to patient throughput or new-patient counts. Any explicit or implicit fee-sharing between the practice and adjacent referral sources.

Fix. The buyer’s post-closing MSA is drafted with FMV documentation refreshed annually, aligned with Epic Medical Management, LLC v. Paquette, 244 Cal. App. 4th 504 (2015), and B&P § 650(b). Medical director compensation is tied to services actually rendered, documented, and reviewable.

7. Direct patient billing

What to check. What entity name appears on patient billing statements, superbills, receipts, and merchant processing accounts. And whether the practice has been billing patients directly through the LLC or non-physician entity for services requiring a licensed provider.

How to check. Ask for a sample patient billing statement. Confirm the entity name on the practice’s merchant processor. Confirm the entity on patient credit-card statements.

Red flag. The LLC or non-physician entity on billing statements. Merchant processor set up under the LLC. Patient payments flowing to an entity not authorized to render medical services.

Fix. Post-closing, all patient billing runs through the PC. Merchant processing and payment infrastructure reconfigure to the new structure. Historical direct-billing exposure — including B&P § 17200 exposure and potential consumer-protection exposure — is allocated to the seller in the deal documents.

8. Product supply chain and controlled-substance compliance

What to check. Where the target sources its injectable products (Botox and other neurotoxins, dermal fillers, medical-grade skincare), IV therapy medications, and any controlled substances. And whether the sourcing is through prescription-authorized channels tied to the physician-of-record’s DEA registration where applicable.

How to check. Ask for the supplier list. Ask for prescription documentation for any legend drugs held by the practice. Ask for DEA registration and controlled-substance inventory records if the practice offers ketamine, testosterone, or other controlled substances.

Red flag. Sourcing through unauthorized channels (“gray market” injectable suppliers). Prescription drugs held without corresponding prescription documentation. Controlled substances held without DEA registration or with expired registration. Inventory records that do not reconcile.

Fix. Post-closing, the supply chain is rebuilt through authorized channels tied to the new PC’s physician-of-record and DEA registration (if applicable). Historical exposure from unauthorized sourcing is allocated to the seller.

9. Marketing and consumer-facing representations

What to check. The target’s website, social media, brochures, and paid marketing. Whether the representations about providers, credentials, outcomes, and services match the actual practice.

How to check. Full site audit. Review social media, review-site presence, and paid-search copy. Compare the “our team” page to the current clinical roster. Review before-and-after content and outcome claims.

Red flag. Photos of physicians who are not on the current staff. Statements about “our board-certified physicians” when there is only a part-time medical director. Outcome claims that overstate typical results. Testimonial content without appropriate disclosures. In-network claims that are not accurate.

Fix. Post-closing marketing is rebuilt from the buyer’s actual clinical structure. Historical marketing exposure — content that has been on the site for months or years — is allocated to the seller and, where material, addressed through take-downs and corrective disclosures on the transition.

10. Historical regulatory, payor, and consumer issues

What to check. Whether the target, or any physician associated with the target, has been the subject of a Medical Board complaint, a Board of Registered Nursing complaint, a payor audit or recoupment demand, a consumer complaint to the AG or the Department of Consumer Affairs, or a lawsuit. And whether any matters are pending.

How to check. Direct diligence request. Cross-check against the Medical Board’s disciplinary search and the BRN’s licensure verification. For material findings, ask for the underlying documentation.

Red flag. The seller says “no” without supporting documentation. A matter identified as “already resolved” without settlement or closing documentation. A physician on the target’s roster with any Medical Board disciplinary history.

Fix. Reps and warranties, disclosures, indemnification, and — for material historical exposure — escrow or holdback provisions. Some historical findings do not disqualify the deal; others do.

11. Franchise-system or template MSA review

What to check. Whether the target’s MSA came from a franchise system, an out-of-state formation service, or a template provider — and whether it has ever been reviewed by California-specific healthcare counsel.

How to check. Ask when the MSA was drafted, by whom, and when it was last reviewed. Ask specifically whether the MSA has been reviewed against SB 351 (effective January 1, 2026) and the arrangements the California AG identified as impermissible in the June 2026 Carbon Health settlement.

Red flag. The MSA came from a franchise system. It has never been reviewed by California counsel. It contains assignable option agreements over the PC’s shares. It contains non-compete or non-disparagement clauses in provider agreements. It gives the MSO authority over clinical staffing and compensation.

Fix. The buyer’s post-closing MSA is drafted (or the existing MSA rewritten) with California-specific counsel review, calibrated to Epic / B&P § 650(b), SB 351, and the Carbon Health benchmarks.

12. Physician non-competes and provider employment terms

What to check. Whether the target’s physician and nurse-injector employment agreements contain non-compete or non-disparagement clauses — and whether the practice has relied on those clauses to retain providers.

How to check. Ask for the standard-form employment agreements. Ask for any agreements with the medical director and clinical staff.

Red flag. Non-compete clauses in employment agreements. Non-disparagement clauses restricting providers from public comment on clinical or business practices. SB 351 (effective January 1, 2026) voids these clauses in employment agreements with PE and hedge fund-affiliated MSOs and PCs, but even for non-PE targets, California law (B&P § 16600) generally voids employee non-competes. Reliance on these clauses is unenforceable.

Fix. Post-closing, employment agreements are drafted without non-competes (except in the narrow sale-of-business circumstances permitted under B&P § 16601). Provider retention is planned around compensation, culture, and equity participation, not restrictive covenants.

After the Diligence: Allocating Findings in the Deal

Not every finding disqualifies a deal. Some are administrative fixes the buyer’s counsel can address in the transition. Others are structural findings that change the deal materially. The general rules:

• Findings that would change the price, structure, or timing should be surfaced pre-LOI. Post-LOI is too late to re-open these questions without disrupting the deal.
• Historical exposure is allocated between buyer and seller through reps, warranties, indemnification, disclosure schedules, and (for material exposure) escrow or holdback. The buyer’s post-closing structure should be clean; the seller’s pre-closing history should stay with the seller.
• Some findings do disqualify the deal. A target that will not accommodate the structural changes CPOM diligence identifies, or a target whose historical exposure is disproportionate to the acquisition price, is often not the right deal.

When to Bring Counsel Into the Diligence

Before the LOI is signed. Pre-LOI CPOM diligence is where the deal is either built for compliance from the beginning or set up to inherit the seller’s defects.

Bay Legal, PC represents non-licensee buyers of California med spas from target identification through post-closing integration. For guidance on your specific situation, call (650) 668-8000 or schedule a consultation at baylegal.com/contact.

Frequently Asked Questions

How is med spa diligence different from other treatment-business diligence?

Med spas have specific compliance layers that other treatment businesses do not: the Medical Board’s public focus on injectables and laser treatments, the standardized procedures framework under 16 CCR § 1474 for RN-delegated functions, the good-faith exam expectations for cosmetic treatments, and the Fictitious Name Permit under B&P § 2415. These are additional items on the diligence checklist, not substitutes for the general CPOM diligence.

Do I really need to diligence the standardized procedures manual? It seems like documentation.

Yes. Standardized procedures are the operational document that authorizes RNs to perform delegated clinical functions. A missing, outdated, or generic manual means the RN-delegated work has been happening without a compliant authorization framework. That is both a Medical Board and BRN exposure and a going-forward operational problem the buyer will inherit. It is not just documentation.

What is the biggest single defect I am likely to find in a California med spa?

Paper medical director arrangements are one of the most common and one of the most consequential. The medical director is the anchor of the practice’s clinical authority, and a paper arrangement means the practice has been operating without genuine clinical oversight. The historical exposure attaches both to the practice and to the physician who lent their license.

What if the seller has already sold the LLC to another buyer and I am buying from that intermediate buyer?

Historical exposure can travel through multiple ownership changes depending on the transaction structure. Asset purchases with proper allocation and reps and warranties limit the buyer’s assumption of predecessor exposure; stock or membership-interest purchases can extend the exposure through the ownership chain. A target that has already been through multiple owners is worth extra diligence attention on the historical exposure question.

When should I walk away from a med spa target?

When the seller will not accommodate the structural changes CPOM diligence identifies; when the historical exposure is disproportionate to the acquisition price; when the physician-of-record is unwilling to be the shareholder of the buyer’s new PC; when the marketing exposure is so extensive that the marketing rebuild costs approach a meaningful fraction of the deal value; or when the diligence pattern suggests the seller has been operating in bad faith rather than out of a compliance misunderstanding. Walking away from a bad target is a legitimate outcome of diligence.

Talk to a California Med Spa Acquisition Attorney

Bay Legal, PC represents non-licensee buyers of California med spas. For guidance on your specific situation, call (650) 668-8000 or schedule a consultation at baylegal.com/contact.