Pillar · No. 01 Guides GFE Cluster · TOFU Updated for 2026

What Is a Good Faith Exam? A complete 2026 guide for medspas & clinics.

Before a single unit of Botox hits a patient or a single GLP-1 prescription leaves your store, someone has to perform a Good Faith Exam. Here's what that means in 2026 — the legal definition, the state-by-state variation, who can do one, and how to run a compliant workflow without losing two hours per patient.

May 14, 2026 14 min read 2,800 words
Link copied

What is a Good Faith Exam?

A Good Faith Exam — usually abbreviated GFE — is a focused medical evaluation performed by a licensed provider with prescriptive authority, conducted to establish a legitimate provider–patient relationship before any prescription is written, any prescription-strength medication is administered, or any medical procedure is performed. It is not a general physical, it is not a screening questionnaire, and it is not something an aesthetician with a checklist can do. It is the moment a licensed clinician takes ownership of a patient's care for a specific treatment.

The phrase itself comes out of medical-practice law. State medical boards use "good faith" to describe the standard a provider has to meet before they can lawfully prescribe — they have to have made a genuine, informed clinical judgment that the treatment is appropriate for the patient in front of them. The GFE is how that judgment gets documented.

For a clinic owner, the practical translation is shorter: before you touch a patient with anything that requires a prescription, a real licensed provider has to evaluate them and put their name on the chart. No GFE, no Botox. No GFE, no GLP-1. No GFE, no IV cocktail with a Rx-only additive. The treatments your business runs on are the treatments that require this.

Definition · plain English

A Good Faith Exam is the licensed-provider evaluation that establishes a prescriber–patient relationship for a specific treatment. It precedes the prescription and the procedure. Without it, the prescription isn't legally valid, the procedure isn't legally authorized, and your clinic isn't legally protected.

Why GFEs are required

GFEs aren't a Botox-industry invention. They're an extension of basic medical-practice law that's been on the books in every state for a century. Three regulatory layers sit underneath the requirement:

  • State medical-practice acts. Every state has a statute defining what constitutes "the practice of medicine" and reserving that activity to licensed providers. Diagnosing, prescribing, and ordering treatment all fall inside. A non-provider doing any of those things — even with a written protocol from a doctor down the hall — is practicing medicine without a license.
  • Scope-of-practice rules. Each license type (MD, DO, NP, PA, RN, LPN, MA) has a defined scope, set by the relevant board. The GFE has to be performed by someone whose scope includes the evaluation and the prescriptive decision that follows.
  • Federal and state pharmacy law. The DEA, the FDA, and every state pharmacy board require a valid prescriber–patient relationship before a prescription is dispensed or compounded. The GFE is the legal artifact that demonstrates that relationship exists.

The "good faith" language matters. State boards aren't just looking for a signed form — they're looking for evidence that a provider exercised real clinical judgment. A doctor who signs eight hundred GFEs an hour without speaking to the patient is, regulatorily, doing nothing at all. That's why the workflow matters as much as the credential.

A signed form without a real clinical judgment behind it is a regulatory liability dressed up as a compliance artifact.

What treatments require a GFE?

The simple rule: if it's a prescription, or if it's an injection or infusion of a substance that requires a prescription to obtain, it requires a GFE. The harder part is recognizing how much of the modern medspa, wellness, and direct-to-consumer telehealth menu falls inside that line.

Treatment category
GFE required?
Notes
Botox & neurotoxinsDysport, Xeomin, Daxxify
Required
Universal. Rx product + injection. The most-cited compliance failure in medspa board actions.
Dermal fillersJuvéderm, Restylane, RHA, Sculptra
Required
Universal. Class III medical devices + injection. Same standard as neurotoxins.
GLP-1 weight lossSemaglutide, tirzepatide
Required
Prescription. GFE + ongoing monitoring required. Compounded GLP-1 status varies by molecule — compounded tirzepatide is not FDA-approved; verify the specific product against current FDA guidance.
PeptidesBPC-157, CJC-1295, ipamorelin, tesamorelin
Required
Compounded prescription. Heightened scrutiny under FDA Section 503A/503B since 2024.
TRT & hormone therapyTestosterone, estradiol, progesterone
Required
Controlled substance in many states (testosterone is Schedule III). Initial GFE plus labs.
IV therapyMyers' cocktail, NAD+, glutathione drips
Conditional
Required when any infusion ingredient is Rx-only (most are). Mobile IV clinics get this wrong constantly.
ED medicationsSildenafil, tadalafil, troche compounds
Required
Prescription. Cardiovascular history review is standard of care.
Hair loss (Rx)Finasteride, oral minoxidil, dutasteride
Required
Prescription. Topical OTC minoxidil alone doesn't require one — but most clinic protocols pair it with Rx.
Microneedling (cosmetic only)No PRP, no Rx topicals
Not required
Cosmetic-only microneedling without prescription products generally falls outside the GFE requirement. Adding PRP, Rx numbing, or exosomes flips it.
Laser hair removalCosmetic, no Rx involvement
State-dependent
Some states require a physician GFE before any laser treatment; most don't. Check your state board before assuming laser is exempt.

The two rows worth re-reading are IV therapy and laser hair removal. Both have meaningful gray areas, and both produce a disproportionate share of enforcement actions because clinics assume the requirement doesn't apply to them when it does.

Who can perform a Good Faith Exam?

A GFE has to be performed by a licensed provider with prescriptive authority for the medication or device involved. In practice, that's one of four credentials — but with significant state-by-state variation in scope and supervision:

MD Medical Doctor Full prescriptive authority in all 50 states. The default. May supervise NPs/PAs in restricted-practice states.
DO Doctor of Osteopathic Medicine Functionally equivalent to MD for prescriptive authority and supervision rules. Treated identically by most boards.
NP Nurse Practitioner Full practice in 28 states; reduced or restricted in the rest. In restricted states, an NP can perform a GFE only under a collaborative agreement with a physician.
PA Physician Associate Always operates under a supervising physician relationship. Scope of prescriptive authority is state-defined.

Who cannot perform a GFE is just as important: registered nurses (RNs), licensed practical nurses (LPNs), medical assistants (MAs), aestheticians, and laser technicians cannot. They can administer treatments under provider order and protocol — and in the right workflow they're indispensable — but they cannot make the prescribing decision. That line is where most clinics get into trouble.

Heads up

A common medspa structure — aesthetician sees the patient, provider signs the chart by text message afterward — has been the basis for cease-and-desist letters in at least a dozen states. The provider has to make the clinical decision before treatment, not ratify it after.

In-person vs. telehealth GFEs

The single biggest shift in medspa compliance over the last several years: the GFE no longer has to happen in your treatment room. Most states now allow a synchronous telehealth GFE provided the standard of care is met — but the specific scope-of-practice and supervision rules vary state to state, and a handful of states still require an in-person initial evaluation for certain prescriptive treatments. Check your state's board before assuming telehealth is universally accepted for the procedures you offer.

"Synchronous" is the operative word. A questionnaire isn't a GFE. An asynchronous chat thread isn't a GFE. A pre-recorded video isn't a GFE. The standard, in the states that accept telehealth GFEs, is that the provider and the patient interact in real time, with two-way audio and video, with enough time and clinical attention that a board would consider it a legitimate medical encounter.

The clinical bar isn't lower for telehealth — it's the same. The provider reviews the intake, asks the relevant questions, evaluates whether the treatment is appropriate, and documents the encounter. Practically, a telehealth GFE for a routine treatment takes between five and ten minutes when the intake has been pre-loaded. We'll come back to this in §06.

What a compliant GFE workflow looks like

A defensible workflow has six discrete stages. Skip any one of them and you've created an evidentiary gap that an attorney or a board will exploit.

The Compliant GFE Workflow · 5 stages

From product page to treatment chair, without the regulatory exposure.

1
Intake
Structured medical questionnaire collected at the point of purchase — not at the door.
2
Match
Patient routed to a state-licensed provider with the right scope for the treatment.
3
Exam
Live synchronous video call. Provider reviews intake, evaluates, makes the prescribing decision.
4
Document
Provider signs the GFE record. Treatment plan, prescription, and notes attached to the chart.
5
Treat
Authorized treatment proceeds. GFE on file for the regulatory window (typically 12 months).

Two operational notes from running this workflow at scale. First, the intake is where most of the time goes — and where most of the time can be removed. A patient who has filled out a structured medical history at checkout means a provider can review and run the call in under five minutes. A patient who shows up for a five-minute call and gets handed a clipboard means a fifteen-minute call. Front-load the intake.

Second, the "treat" step is where the provider–staff hand-off has to be clean. The provider's order has to be in writing, attached to the patient record, and accessible to the treating clinician before they touch the patient. Verbal hand-offs and "the doctor said it's fine" don't survive a board inquiry.

Common GFE compliance mistakes that get clinics fined

Five patterns produce the bulk of enforcement actions. None of them are obscure. All of them are avoidable.

  1. Retrospective signing. The provider reviews and signs the GFE after the treatment has been delivered. From a regulatory standpoint, the treatment was unauthorized at the moment it was performed — the later signature doesn't cure that. This is the #1 finding in medspa state-board actions.
  2. Out-of-state provider, wrong state license. The provider has to be licensed in the state where the patient is physically located at the time of the GFE. A California-only physician seeing a patient on vacation in Texas is practicing in Texas, and Texas doesn't recognize a California license to do it.
  3. Asynchronous intake mistaken for a GFE. A patient filled out a long-form questionnaire, a nurse reviewed it, an automated system flagged green, and treatment proceeded. No live provider evaluation occurred. A questionnaire alone is not a substitute for a GFE in any state — the questionnaire is intake, not the exam itself.
  4. RN or aesthetician performing the evaluation. Discussed above. The treatment can be administered under provider order by a non-prescriber. The evaluation cannot.
  5. Expired or missing GFE on follow-up visits. Most boards expect a GFE refresh annually, or whenever the treatment plan changes materially. A new medication category, a new indication, or a long lapse in care all trigger a fresh evaluation.
Cost of a missed GFE

The downside isn't theoretical. Depending on the state and the severity, enforcement actions can include cease-and-desist orders, monetary fines, license suspension for the supervising provider, and, in some jurisdictions, practice-of-medicine charges. Merchant processors and malpractice carriers typically respond quickly when an enforcement letter lands — account holds and coverage reviews are common downstream effects.

How Quidget automates the GFE for clinics

Quidget is a WordPress + WooCommerce plugin that runs the entire workflow above inside a clinic's existing storefront. The clinic doesn't change its branding, doesn't change its store, doesn't change its provider relationships if it has them, and doesn't change its checkout flow. The plugin adds the regulatory layer underneath.

The mechanics:

  • A patient adds an Rx product to their cart on the clinic's site. The intake collects the medical history inline, at checkout — not at a separate visit.
  • On submit, the patient is matched to a Qualiphy-network provider licensed in the patient's state. Qualiphy's network covers 48 states (every state except Alabama and Mississippi).
  • The patient lands on a live video consultation, usually within minutes. The provider has the intake on screen, runs the GFE in real time, and makes the prescribing decision on the call.
  • Signed GFE documentation and the prescription are routed back into the WooCommerce order — your fulfillment workflow continues as it normally would, with the regulatory artifacts attached to the order.
  • A clinic with an existing supervising provider can route to that provider instead of the Qualiphy network. The plumbing works either way.

The benchmark we hold the network to is under five minutes per routine exam. That isn't because we rush — it's because the intake is structured, the provider sees it before the call begins, and the documentation is generated as the call happens rather than written up afterward.

The shorter way to read all of this: if your clinic sells anything on the table in §03 and you don't currently have a defensible GFE workflow, Quidget is the workflow. If you do have one already and it's costing you more than five minutes a patient or a meaningful chunk of provider salary, we should still talk.

Frequently asked questions

The nine questions clinic owners ask most often when we walk them through this — pulled from a hundred-plus implementation calls in 2024–2026.

No. A GFE is a focused, treatment-specific evaluation by a licensed provider with prescriptive authority. It establishes a provider–patient relationship for the specific treatment being requested. It is not a general physical, and a general physical from another provider doesn't substitute for the GFE for your specific treatment.

Yes, in most states, subject to scope-of-practice and standard-of-care rules. Specific requirements vary state to state, and a handful of states still require an in-person initial evaluation for certain prescriptive treatments. Qualiphy's telehealth GFE network currently operates in 48 states — Alabama and Mississippi are the two not in our coverage today.

A licensed provider with prescriptive authority — typically an MD, DO, NP, or PA. Specific scope-of-practice and supervision rules vary by state. Aestheticians, RNs, and medical assistants cannot perform a GFE, though they can administer treatments under provider order.

Yes. Botox is a prescription medication delivered by injection, so a GFE is required before any treatment in every state. Missing or improperly performed GFEs for Botox are one of the most common compliance failures cited in state-board actions against medspas.

Consequences range by state but typically include cease-and-desist orders, monetary fines, license suspension for the supervising provider, and in some jurisdictions criminal practice-of-medicine charges. Merchant processors and malpractice carriers can also respond quickly when an enforcement letter lands.

A well-run GFE for a routine aesthetic or wellness treatment takes 5 to 10 minutes. The Qualiphy network averages under five minutes per routine exam by pre-loading the intake before the call begins so the provider walks in with the clinical context already on screen.

No, but you do need a current GFE on file. Most clinics refresh the GFE annually, or whenever the treatment plan changes materially — a new medication, a new indication, or a new injectable category. Some states have specific re-evaluation cadences; we recommend annual at minimum.

The GFE is the medical evaluation that establishes the patient–provider relationship and the clinical justification for treatment. The prescription is the order that authorizes a specific medication or treatment. The GFE precedes — and supports — the prescription. They are not interchangeable.

Not necessarily. Multi-provider clinics often rotate. The requirement is that some qualified provider has performed a current GFE and that the documentation is accessible at the point of treatment. Continuity is a quality consideration, not a compliance one in most states.