The LegitScript Application, Step by Step: What Actually Happens After You Pay

Before you open the portal

The application lives at certification.legitscript.com, a desktop web portal (LegitScript recommends Chrome; mobile isn't supported). Account creation is straightforward, but the email confirmation link expires in two hours, so finish registration in one sitting.

Preparation determines your timeline more than anything LegitScript does. Before paying, have ready: your Secretary of State filing number, the completed licensure spreadsheet (for telemedicine, physician license numbers per state), the per-jurisdiction telemedicine compliance template, your compounding addendum if applicable, an exhaustive list of every domain you or your principals operate, affiliate and partner details with certification status, five years of audit and inspection history, and test login credentials for any sign-in area of your site.

One question trips people up on disclosure scope: the adverse-action question reads broadly: lawsuits, warning letters, consent agreements, FDA Form 483s (which LegitScript notes aren't 'discipline' but must still be provided when observations required corrective action), monetary penalties of $2,000 or more, and payments-industry fines like Visa or Mastercard program assessments all belong in the answer. Disclosed history is workable. Discovered history usually isn't.

The application autosaves and can be completed in stages, but the review can't start until everything's in. Assemble the documents first; the questionnaire itself is an afternoon.

Payment comes before the questionnaire

The $975-per-website application fee is charged up front (before you see the application questions) and it's nonrefundable regardless of outcome. The $2,150 annual certification fee is authorized at the same time and charged only if certification is issued. Both fees are per website: three domains on one application means three application fees and, on approval, three annual fees, and every domain you operate must be disclosed even if you're not certifying it.

You'll also agree to recurring billing terms at checkout: certification renews annually on your certification anniversary, charged automatically to the card on file unless you cancel at least five business days before the anniversary date. Calendar that date; it's the kind of quiet auto-renewal that surprises finance teams a year later.

Expedited processing (an added fee) is widely misunderstood: it moves you to the front of the queue, but it does not shorten the review itself. It's worth it when the queue is long and your submission is genuinely complete; it's wasted money on an application that will draw deficiency questions anyway.

The 18 questions

The application proper is an 18-question form covering: your business model and time in operation; ownership and principals; licensing (via the spreadsheet templates); every domain and mobile app you operate; whether your site has a login area (if yes, you provide working test credentials); jurisdiction-by-jurisdiction telemedicine compliance (the patient-practitioner relationship, patient identification, consent, online prescribing rules, and medical-records handling per state); affiliates including marketing partners; compounding details; recent audits and inspections; DEA registration and diversion-minimization procedures if controlled substances are involved; and the five-year adverse-action disclosure.

Tooltips clarify most questions, answered questions turn grey so you can track progress, and 'N/A' is an acceptable answer where a question genuinely doesn't apply. The trap isn't difficulty; it's inconsistency. Reviewers cross-check your answers against your website, your licenses, and public records, so the questionnaire is where sloppy earlier decisions (an undisclosed domain, an affiliate you forgot) surface as credibility problems.

What happens after you hit submit

Within roughly two business days, LegitScript's Client Relations team screens the submission for completeness; missing items get flagged by email before an analyst ever sees the file. Then the application enters the analyst queue, and a certification analyst picks it up when available. Status is trackable in the portal throughout.

During review, minor problems can often be fixed without penalty; LegitScript's standards explicitly allow reasonable remedial action during the certification process. This is why the pre-audit matters: items you fix before applying cost nothing, items an analyst finds cost a round-trip, and items you concealed cost the application.

For sites still under construction, LegitScript grants certification on a preliminary basis: you provide wireframes or staging access plus a completion timeline, and the certification is publicly verifiable while conditions are pending. One nuance worth knowing: the seal code itself is issued once the conditions are met, so a preliminarily certified business can be legitimately certified without displaying a seal yet.

After approval: seals, directories, and renewals

On approval, the annual fee charges and your site appears in LegitScript's public directory, the same checker patients, processors, and ad platforms use (the free lookup tool allows a handful of searches per week). Displaying the seal on your site is encouraged but not required; the seal links to your public verification page, and its value is letting visitors verify you in one click.

Certification is a monitored status, not a diploma. You're expected to report disciplinary actions within 30 days, keep licensure current, and survive ongoing monitoring. About 60 days before your anniversary, renewal notices start, with the auto-charge landing on the anniversary itself unless you've canceled five business days ahead.

The meta-lesson from the whole process: LegitScript optimizes for completeness and consistency. Run a readiness pass first (our free Preflight scanner covers the website half in about a minute), then walk into the portal with the documents lane already done.