How to Vet a Med Spa SOP Vendor: Checking Testimonials and Why “All 50 States” Templates Fall Short

October 12, 2026 · Cindi Vokey, BSN, RN

Nurses, nurse practitioners and med spa owners are seeing more ads for downloadable SOP kits described as “inspection-ready,” “board-ready” or valid “in all 50 states.” Many feature five-star testimonials from medical directors and injectors. Before you buy, it’s worth spending 20 minutes checking two things: whether the people praising the product are real, and whether a one-size-fits-all document can do what your state requires.

Why it matters: since October 21, 2024, the FTC’s Rule on the Use of Consumer Reviews and Testimonials has prohibited reviews and testimonials that misrepresent that the reviewer exists or that they actually used the product (FTC). Fake testimonials are a red flag about the seller, and about the product they are selling to licensed professionals.

How to Check a Vendor’s Testimonials

A testimonial from “Dr. Jane Smith, Medical Director, Glow Aesthetics” makes three checkable claims: a person, a license and a business. Check all three.

1. Look Up the License

Nurses (RN, LPN, APRN): search the free Nursys QuickConfirm tool, which shows license and discipline status from participating boards of nursing at no charge (Nursys FAQ).
Physicians and PAs: use the license lookup on the state medical board’s website for the state named in the testimonial.
Any licensed provider: search the free NPI Registry, the federal directory of National Provider Identifier records, which lists the provider’s name, specialty and practice address.

Search partial names and nearby cities. One missing record isn’t proof of anything, since names are common and people move. Several named “licensed” reviewers with no matching record in the state given is a pattern worth noting.

2. Look Up the Practice

Search the practice name on the Secretary of State (or Division of Corporations) business search for that state.
Look for a website, Google Business Profile, booking page or social media account at the city named.
Check whether the practice appears in the NPI Registry as an organization.

A real, operating med spa usually leaves a public footprint. A practice name that turns up nothing anywhere is a warning sign.

3. Compare the Dates

Run a free domain registration (WHOIS or RDAP) lookup on the vendor’s website. If a testimonial describes using the product before the website selling it existed, ask how. The Internet Archive’s Wayback Machine can also show when testimonials first appeared and whether they’ve changed.

4. Read the Testimonials Against the Site

Does a reviewer quote a price or package the site doesn’t sell?
Do all the reviews sound alike, use the same structure, or come from one state while the product is sold nationally?
Are headshots stock photos or initials only? A reverse image search takes seconds.
Is every review five stars, with no dates?

5. Find Out Who Wrote the Documents

Clinical protocols should have a named author with a verifiable license. “Created by healthcare compliance professionals,” with no names, tells you nothing. If the site lists no owner, address or phone number, ask for them before you pay.

6. Contact a Reviewer

If a real practice turns up, call and ask whether they use the product. A genuine customer will usually confirm it in a minute.

Why “All 50 States” SOPs Don’t Meet State Requirements

Aesthetic medicine is regulated mostly at the state level, through nursing, medical and pharmacy boards. The rules differ on who may assess patients, who may order treatment, how supervision works, who may own a practice and what written protocols must contain. A single template can’t satisfy all of them at once.

No Template Is “Board Approved”

We are not aware of any state board that reviews or certifies purchased SOP templates for med spas. If a vendor says its documents are “inspection-ready” or “built to pass state board inspections,” ask which board, and ask for that in writing. Your board will look at whether your practice, staff and medical director follow the law, not at where the binder came from.

Some States Prescribe the Format

California is a clear example. Under 16 CCR § 1474, jointly adopted by the Board of Registered Nursing and the Medical Board of California, a standardized procedure must include a written description of how it was developed and approved, and each one must (16 CCR § 1474):

Be in writing, dated and signed by the personnel authorized to approve it.
Specify which functions registered nurses may perform and under what circumstances.
State specific requirements RNs must follow for each function.
Specify experience, training and education requirements.
Establish a method for initial and continuing evaluation of competence.
Provide a method for keeping a written record of who is authorized.
Specify the scope of supervision required.
Set out circumstances when the RN must immediately contact the patient’s physician.
State any limits on settings.
Specify patient record-keeping requirements.
Provide for periodic review.

The BRN takes this seriously for aesthetic work. Its probation employment form requires that RN positions involving laser, injectable cosmetic or other med spa services have standardized procedures “addressing all elements defined in CCR1474,” and asks the employer to identify where each element appears (California BRN). Several of these elements, such as the authorized-staff list, the signatures and the supervision terms, can only be filled in by your practice. A generic SOP for an injectable treatment usually leaves most of them out.

Your Structure Matters More Than Your Paperwork

New Jersey Board of Nursing orders show how a generic “medical director” section can’t fix the way a practice is set up:

In 2025 consent orders, two RN co-owners of a med spa were reprimanded and fined for owning a medical spa, employing a higher-licensed professional and performing medical procedures with little or no physician oversight. One believed that forming an LLC, completing training and hiring a medical director made the spa compliant.
A 2026 order involved a med spa owner who signed fixed-monthly-fee medical director arrangements rather than collaborative agreements, along with credential and record-keeping problems.
A 2021 order addressed a nurse running a home Botox business independently, without a collaborating physician or adequate records.

No downloaded SOP would have changed these outcomes. Ownership, supervision and delegation rules are state-specific, and your policies need to describe how your practice actually works under them.

Federal Rules Change Too

Even the parts that are national, such as FDA labeling, CDC guidance and OSHA rules, need to be current. A template written once and sold for years can drift out of date. A few examples:

Neuromodulator handling: the Botox Cosmetic label calls for reconstituted product to be used within 24 hours and identifies vials as single-dose (FDA label). A protocol allowing weeks of storage conflicts with the label.
New indications: the FDA approved Botox Cosmetic for platysma bands in October 2024 (AbbVie), and approved Radiesse for the décolleté in 2026 with specific dilution and technique instructions (FDA).
New warnings: Kybella’s September 2026 labeling added a warning against use outside the chin and new risks of nodules and masses. See our Kybella update post.
Infection control: CDC guidance is that single-dose vials are for one patient (CDC).
Bloodborne pathogens: OSHA requires employers with occupational exposure to have a written Exposure Control Plan, reviewed and updated at least annually (OSHA 29 CFR 1910.1030).

What We Found in a Purchased Template Set

To see what buyers actually receive, we purchased a set of ten aesthetic SOPs from one vendor, covering neurotoxin, hyperhidrosis, dermal and lip filler, Radiesse, Sculptra, Kybella, PDO threads, intralesional steroid and microchanneling. Here is what we found:

One template, ten titles. The documents were more than 90% identical word for word. Each swapped in only a handful of treatment-specific lines. The consent, aftercare, training and roles sections were the same for a neurotoxin, a thread lift and a steroid injection.
No clinical parameters. None gave a dose, dilution, volume, needle or cannula size, or treatment limit. Each left all of these to the medical director.
No one named. The SOPs said only that “licensed clinical staff” treat “within scope.” They never said whether RNs may perform the procedure, what level of supervision applies, or which state they were written for.
The medical director signs for compliance. The sign-off asks the medical director to affirm that the protocol reflects applicable state regulations, while the vendor’s disclaimer says it is not liable for regulatory consequences.
Missing or outdated label content. The Kybella SOP lacked the September 2026 warnings. The hyperhidrosis SOP called the treatment “cosmetic use,” although the FDA indication is therapeutic: severe primary axillary hyperhidrosis. It also implied treating other body areas without noting that their safety and effectiveness have not been established (BOTOX label). The Radiesse SOP listed “skin tightening” without separating it from the one approved diluted use.
A device with an FDA warning. The microchanneling SOP covered a device the FDA warned in 2021 was being marketed without clearance or approval (FDA warning letter). The SOP did not mention the device’s regulatory status.
Copy-and-paste aftercare. Filler warning signs such as blanching and vision change appeared in the neurotoxin and steroid aftercare. The neurotoxin’s own boxed-warning symptoms, such as trouble swallowing, breathing or speaking, did not.
California format not met. Measured against 16 CCR § 1474, the set had no description of how the procedures were developed, no RN functions, no record of who is authorized, and no defined scope of supervision.

A template like this isn’t so much wrong as empty. The work of turning it into a real protocol, and the responsibility for it, stays with your practice.

Questions to Ask Before You Buy

Who wrote these documents, and what are their names and license numbers?
Which state’s rules were they written for, and which laws or regulations do they cite?
For California, where does each 16 CCR § 1474 element appear?
When were they last checked against current FDA labeling?
Can I see a full sample page before I buy?
Does each SOP include product-specific doses, dilutions and limits, or are they left blank?
Does it name which license types may perform each step, and under what supervision?
Does the sign-off ask my medical director to certify state compliance that the vendor itself disclaims?
Can you put me in touch with a customer I can verify?
What is your business name, address and phone number?
Which board, if any, has reviewed these documents? Please show me in writing.

Whatever you buy or write, your medical director and practice must review, adapt, sign and follow it. A binder on a shelf protects no one.

Where to Report Fake Testimonials

The FTC: report at ReportFraud.ftc.gov and include “fake review” in the comments (FTC Consumer Advice). The FTC can seek civil penalties for violations of the rule (FTC).
The platform: report the review or ad where it appears. The FTC lists how to report suspicious reviews on major sites.
Your state Attorney General: most accept consumer protection complaints online.

Stick to what you checked and what you found. That is what investigators can use.

Need Policies Written for Your Practice?

We write and revise practice-specific policies and procedures, including treatment protocols, consent forms and aftercare instructions, for your state and treatment menu. Book a consult or start with the free Binder Blueprint.

Our Sister SiteWant CE on these topics? AestheticNursingCEs.com offers online CE courses from a California BRN Provider (#18009), including free CE, and the Aesthetic Nursing CEs Blog.

Educational information only, not legal or clinical advice. Follow your medical director-approved protocols. Requirements vary by state; confirm with your state board.

BOTOX® is a registered trademark of Allergan, an AbbVie company. RADIESSE® is a registered trademark of Merz. KYBELLA® is a registered trademark of Allergan, an AbbVie company.

Sources

Back to the Blog