First, separate the documents
Clinics often use “protocol,” “SOP,” and “standing order” as if they mean the same thing. They may work together, but each document has a different job. The exact legal effect of a standing order, delegation document, or supervisory agreement depends on the applicable state and provider roles.
Treatment protocol or SOP
Describes the clinic’s approved standard for screening, preparation, treatment workflow, documentation, aftercare, and escalation.
Standing order
Documents defined authorization from an appropriately qualified prescriber or supervising provider, when permitted and properly structured.
Patient consent
Supports a documented discussion of the procedure, expected benefits, material risks, alternatives, questions, and patient authorization.
Treatment record
Captures what occurred during an individual encounter, including product or device details, treatment information, response, and follow-up.
A polished document does not expand a professional license, create prescriptive authority, or replace required supervision, delegation, training, legal review, or clinical judgment.
The nine-part protocol framework
The framework below is intentionally high level. Clinical decisions, dosing, device settings, treatment parameters, and emergency instructions must come from qualified clinical leadership, applicable law, current evidence, manufacturer information, and the clinic’s actual resources.
Define the purpose and scope
Name the treatment, intended setting, approved use within the clinic, and what the document does and does not cover. Avoid combining unrelated treatments simply to reduce the number of documents.
Identify provider roles and oversight
Document who evaluates the patient, who may order or prescribe, who may perform the service, and who provides final clinical approval. Verify these roles against the clinic’s state, licenses, and supervisory structure.
Structure patient screening
Organize the history, eligibility considerations, contraindication review, allergies, relevant medications, baseline documentation, and escalation triggers that the approving provider requires.
Specify products, medications, and devices
Use the clinic’s actual products, formulations, concentrations, equipment models, supplies, and storage processes. Reference current prescribing information and manufacturer instructions rather than copying assumptions from another clinic.
Map the clinic workflow
Cover the sequence from consultation and preparation through treatment, documentation, aftercare, follow-up, and referral. Include responsibility handoffs so the process is usable by the team.
Address infection prevention and workplace safety
Connect the treatment protocol to applicable cleaning, sharps, exposure-control, PPE, waste-handling, and incident-reporting policies. Do not try to replace the clinic’s complete OSHA program with one treatment document.
Prepare supporting patient and clinic forms
Coordinate the consent, intake or eligibility form, treatment record, pre- and post-care instructions, room checklist, and adverse-event documentation so the same terms and workflow appear throughout the package.
Build the emergency and escalation pathway
Define recognition, immediate team roles, emergency resources, communication, transfer or referral, documentation, reporting, and follow-up according to the clinic’s approved plan and capabilities.
Add approval and version control
Include the document owner, effective date, version, review date, approving provider, and a process for changes when products, devices, staffing, laws, or clinical guidance change.

What should be customized for the clinic?
A generic template becomes useful only after it reflects the clinic that will rely on it. At minimum, the customization process should collect:
- Clinic name, locations, and branding
- Primary and additional operating states
- Treating provider roles and licenses
- Medical director or supervising provider
- Selected treatments and service boundaries
- Products, medications, and formulations
- Device brands, models, and approved settings
- Clinic techniques and workflow preferences
- Available emergency medications and equipment
- Documentation, follow-up, and escalation process
Common mistakes to avoid
Copying another clinic
Its staffing, products, equipment, state requirements, and oversight structure may not match yours.
Treating a template as approval
The purchasing clinic’s qualified medical director or supervising provider must complete the appropriate clinical review and approval.
Leaving forms inconsistent
The protocol, consent, treatment record, and aftercare documents should use matching terminology and instructions.
Publishing without ownership
A protocol needs an identified owner, effective date, review schedule, and controlled revision process.
Overlooking staff readiness
Written documents do not replace competency validation, training, emergency drills, or access to required resources.
Making broad compliance claims
No template can guarantee compliance without reviewing the clinic’s complete facts and current federal, state, and local requirements.
Final review and implementation
Before use, the clinic should compare the draft with current prescribing information, manufacturer instructions, applicable laws and board guidance, facility policies, professional licensing requirements, and its actual clinical workflow. The approving provider should resolve unanswered clinical questions, document approval, communicate the final version, and ensure affected team members are trained.
MyClinicProtocols helps organize the preparation work. Packages are customized and quality-checked for completeness, consistency, and professional presentation. Final clinical and legal approval remains with the purchasing clinic’s appropriately qualified professionals.
Selected authoritative resources
Frequently asked questions
Who should approve a med spa treatment protocol?
The clinic should identify the appropriately qualified medical director, supervising provider, prescriber, or other authorized professional based on the treatment, state, ownership structure, and provider roles.
Is a purchased protocol automatically compliant?
No. A template or customized draft still requires review against the clinic’s current circumstances, applicable law, board requirements, manufacturer information, and professional judgment.
Can one protocol cover several treatments?
Closely related services may share certain policies, but each treatment should be clear enough that the team can identify its specific screening, products, workflow, documentation, and emergency considerations.
How often should protocols be reviewed?
Use a defined periodic review schedule and conduct an earlier review whenever relevant laws, guidance, products, equipment, staffing, clinical leadership, or workflows change.
Turn your clinic details into an organized draft.
Choose one treatment or several. Tell us about your state, providers, medications, devices, techniques, and workflow, then review the customized package before final delivery.
Build My Protocol