LegitScript certification: requirements, costs and timeline
LegitScript charges a $975 application fee and a $2,150 annual fee per website, plus $2,500 if you choose expedited processing. Here is what you need, each step, and how long review can take.
Fees are LegitScript's published rates and can change. LegitScript alone decides certification and timing.
Who needs LegitScript certification?
Major card networks and ad platforms, including Visa, Mastercard and Google, recognize LegitScript certification for healthcare merchants. You likely need Healthcare Certification if your business does any of the following.
- Sell or advertise prescription medications online
- Offer telemedicine or online consultations that may result in a prescription
- Process online or card-not-present payments for prescription drugs, as some med spas do
- Manufacture, wholesale or distribute pharmaceuticals
- Connect patients with contracted pharmacies or providers, or run a prescription price-comparison or discount site
With our banks, GLP-1 programs count as telehealth merchants. See GLP-1 and weight loss payment processing for how we underwrite them. Selling peptides? Read Do you need LegitScript to sell peptides?
LegitScript certification requirements
LegitScript reviews every applicant against nine certification standards. They fall into four areas.
Registration and compliance
Proper licensing for the services you offer, in the jurisdictions where you prescribe or dispense and where your patients are located, plus compliance with prescription and telemedicine law.
Internal practices
Disclosure of criminal, regulatory or civil violations and any litigation involving the business, its principals, key staff and practitioners over the past 10 years.
External practices
Compliant patient services, affiliates and partners, privacy protections and valid prescriptions. Partner pharmacies generally must be LegitScript certified or accredited by another recognized body.
Transparency and advertising
Honest, accurate operations and advertising that follows the law and platform policies. Your site must list every state or country where your services are available.
What to gather before you apply
LegitScript's healthcare application checklist asks for these items. Which ones apply depends on your business model.
Licenses and registration
Your active business registration (for US merchants, usually the Secretary of State filing number) and licenses for every jurisdiction you operate in, including pharmacy, wholesaler and manufacturer licenses.
Telehealth and controlled substances
Practitioner license numbers (MD, NP, PA) in LegitScript's telemedicine template, and a copy of your DEA certificate if you prescribe or dispense controlled substances.
Privacy policy
A HIPAA-compliant privacy policy on your website, or the equivalent for the country you serve.
Compounding addendum
If your platform sells compounded medications, each applicable tab of LegitScript's compounding addendum.
Website access
A test patient account login for your portal, plus wireframes or screenshots and a completion date if your site is still being built.
Partner pharmacy proof
Evidence of each partnership and each partner pharmacy's status. Partners must be LegitScript certified or NABP-accredited, or apply within 60 days after you are certified.
LegitScript certification step by step
The application runs through LegitScript's client portal. Here is the order of work from eligibility check to renewal.
- Step 1
Check your eligibility
Confirm that your business sells, prescribes, facilitates or takes card-not-present payments for prescription medications. Certification applies per root domain, so subdomains are covered.
- Step 2
Gather your documents
Collect licenses, registration details, practitioner and DEA information, your privacy policy and partner pharmacy details before you open the application.
- Step 3
Submit and pay the application fee
Complete the application in LegitScript's client portal and pay the $975 application fee. Add expedited processing for $2,500 if you need the review to start within two business days after screening.
- Step 4
Answer the review
LegitScript checks your business against its certification standards and may ask for more information or website changes. Complete, fast answers keep the decision moving.
- Step 5
Get certified and stay compliant
Pay the $2,150 annual fee once you are approved. Report major changes in ownership, partners, websites, services or jurisdictions, and renew each year.
LegitScript costs
Budget for LegitScript's application fee, annual certification, and any optional expedited review before you apply.
LegitScript's published standard healthcare fees in USD. Certification fees are assessed per root domain.
- Application review
- $975
- Nonrefundable. Paid to start the application process.
- Annual standard certification
- $2,150
- Due only after approval to finalize certification; renewed annually.
- Optional expedited processing
- $2,500
- Additional fee per application to start review within two business days of submission. Approval and completion timing are not guaranteed.
For one root domain, standard first-year certification fees total $3,125. Optional expedited processing and any separate assistance or payment-processing charges are excluded. LegitScript lists a $3,995 annual fee for probationary healthcare certification, if applicable.
With Group ISO, the $4,500 assistance package covers the application fee, expedited processing and your first-year annual fee, plus one-on-one consulting through approval. Card-brand high-risk registration fees are separate.
Fees checked in October 2026 and subject to change. Confirm the current amounts and terms on the official healthcare pricing page and the healthcare certification FAQ. CBD and addiction treatment have separate programs and pricing.
How long does LegitScript certification take?
LegitScript doesn't publish a set timeline. Review time depends on how complex your application is, how fast you respond and how many applications are in the queue. Expedited processing starts your review within two business days after screening but does not shorten the review itself. For Group ISO clients, certification typically takes 7–10 days once the website and business meet LegitScript's requirements. These are the delays we see most often.
- Incomplete questionnaire answers or missing documents
- Licenses that don't cover every state or country you serve
- Partner pharmacies or providers that aren't certified or accredited
- Website claims or disclosures that need correcting
- Slow responses to LegitScript's questions
