Opening a medspa in Arizona is genuinely achievable — the regulatory environment is more favorable here than in most states, the market for aesthetic and wellness services is strong and growing, and Arizona's full practice authority law means nurse practitioners can do it without a physician partner. But "achievable" does not mean simple. There are a dozen distinct work streams that all need to be in order before you see your first patient, and most providers who run into trouble did so because they addressed them in the wrong order, skipped one entirely, or mistook a generic online checklist for actual Arizona-specific guidance.

This guide covers every step in the sequence I would follow if I were starting over from day one — in the order that actually matters, with the Arizona-specific details that generic resources miss. Some of it will apply to you directly; some of it will depend on your license type, your service mix, and your practice structure. Where those variables matter, I'll say so.

The first question that determines everything downstream is: what license do you hold, and what can you do independently in Arizona? The answer shapes your business structure, your medical director needs, your service menu, and your staffing model.

If you are an NP

Arizona is a full practice authority state. Under A.R.S. § 32-1601 et seq., board-certified nurse practitioners hold independent prescriptive authority and may practice without physician supervision, collaboration agreements, or co-signature requirements. This means an FNP-C or ANP-C in Arizona can own and operate a medspa, prescribe medications, serve as their own medical director, and hire and supervise RNs — all without a physician involved in any part of the business. This is a significant competitive advantage that Arizona NPs should understand clearly, because it is not the law in most states.

If you are a PA

PAs in Arizona must practice under physician supervision. This means you will need a supervising physician relationship — and that relationship must be documented in a formal supervision agreement filed with the Arizona Regulatory Board of Physician Assistants (ARBPA). For a medspa, this typically means your supervising physician also serves as (or approves) your medical director. The supervision requirement does not need to be a daily on-site presence, but it must be a genuine, documented, and responsive relationship.

If you are an RN

RNs may not prescribe or order treatments independently. An RN-owned medspa must have a qualified medical director — an NP with full practice authority, a PA with an appropriate supervising physician, or a physician — who writes standing orders for every service offered and provides ongoing clinical oversight. The RN executes treatments; the medical director provides the clinical authority. This is a functional model, but it requires a more substantial and documented directorship relationship than many RNs realize when they start. See our guide on what an NP medical director in Arizona must actually provide.

Corporate practice of medicine — does it apply?

Arizona has a corporate practice of medicine (CPOM) doctrine, but it applies differently than in strict CPOM states like California. In Arizona, non-physicians can own medical practices in many contexts, and NPs with full practice authority can own and operate clinics that provide medical-grade services. However, if your service menu includes services that constitute the practice of medicine — particularly anything requiring physician orders or oversight — and you are not a physician or NP, you may need a specific legal structure (Management Services Organization, or MSO) to separate the business entity from the clinical entity. Consult a healthcare attorney before finalizing your entity structure if this applies to your situation.

Before You File Anything
A one-hour consultation with an Arizona healthcare attorney is the best $300 you will spend.

Entity structure, CPOM compliance, and medical director agreements are legal questions. This guide gives you the framework to have an informed conversation — it does not replace legal counsel for your specific situation. The Arizona State Bar's lawyer referral service and health law specialty organizations can help you find someone with relevant experience.

02

Form Your Business Entity

Once you understand your legal position, the next step is forming the entity. Most Arizona medspas operate as either an LLC (Limited Liability Company) or a PLLC (Professional Limited Liability Company). Here is the practical difference:

LLC vs. PLLC in Arizona

A standard LLC is available to anyone and provides liability protection and pass-through taxation. A PLLC is a specific entity type for licensed professionals (physicians, NPs, PAs, dentists, attorneys) that limits liability to the individual professional's own acts of malpractice — each member is not liable for another member's professional negligence. If you are a solo NP or PA owner, the practical difference between an LLC and a PLLC is minimal for liability purposes, since there are no other professional members. Many solo providers use a standard LLC for simplicity. If you have a multi-provider ownership structure, or if your healthcare attorney recommends it, a PLLC is worth the extra step.

How to file in Arizona

  1. Choose your entity name — search the Arizona Secretary of State database at azcc.gov to confirm availability. Names must include "LLC" or "PLLC" as applicable and cannot be deceptively similar to existing entities.
  2. File Articles of Organization (LLC) or Articles of Organization for PLLC through the Arizona Corporation Commission at azcc.gov. As of 2025, the standard filing fee is $50 for online submission. Expedited processing is available.
  3. Create an Operating Agreement — this is not required by Arizona law to be filed, but it is essential for your records. It defines ownership percentages, management structure, profit distribution, and what happens if an owner leaves or dies. Do not skip this even if you are a solo owner.
  4. Apply for your Federal Employer Identification Number (EIN) through the IRS at irs.gov — free, instant online. You need this to open a business bank account, hire employees, and file taxes. Do it the same day you receive your LLC approval.
  5. Open a dedicated business bank account — your LLC needs its own account to maintain the liability protection the entity provides. Commingling personal and business funds is the single most common way providers inadvertently pierce their corporate veil.
  6. Register for Arizona Transaction Privilege Tax (TPT) with the Arizona Department of Revenue at azdor.gov if you will be selling retail products (skincare, supplements). Service-based businesses often do not collect TPT, but confirm with your accountant.
DBA — Doing Business As
Your brand name and your LLC name can be different.

If you want to operate as "Radiance Medspa" but your LLC is filed as "Smith Healthcare LLC," you file a Trade Name (DBA) with the Arizona Secretary of State. This is separate from your LLC filing and costs approximately $10. Your bank account, marketing, and signage use the DBA; your legal and tax documents use the LLC name.

03

Secure Your Medical Director (If You Need One)

If you are a board-certified NP with full practice authority in Arizona, you are your own medical director. You still need to produce all the clinical documentation a directorship requires — but you produce it as the owner-director rather than under a third-party arrangement.

If you are a PA, an RN, or a non-clinician business owner, you need an Arizona-licensed medical director before you can operate. This is not a box to check after you have signed a lease and ordered supplies — it is a prerequisite that shapes your service menu, your protocols, and your liability position from day one.

A compliant medical directorship must include written standing orders individualized to each service you offer, service-specific emergency response protocols, consent form review and co-signature, ongoing chart review on a defined schedule, and genuine availability for clinical questions during patient care. A director who provides their name and signature for a monthly fee without these elements is not providing a directorship — they are providing a liability risk that the practice owner will bear alone.

For a full breakdown of what Arizona law requires and what to look for in a qualified director, read our dedicated guide: Can an NP Be a Medical Director in Arizona? If you are looking for active NP medical directorship for an Arizona practice, Beso Provider Hub offers full-scope directorship for medspas, IV lounges, hormone clinics, and sexual wellness practices across the Phoenix metro.

04

Scout and Secure Your Location

Location decisions are more consequential for medspas than for most businesses because the physical space must work clinically, legally, and commercially at the same time. A space that is beautiful but requires $200,000 in build-out, or that is in a zone that prohibits medical use, or that has a landlord who doesn't understand healthcare lease terms, will cost you far more than the rent.

Zoning and use permits

Before you fall in love with a space, confirm the zoning allows medical or personal service use. In Phoenix and the surrounding municipalities, most commercial zones allow medspa-type businesses, but not all. Some municipalities distinguish between "medical office" and "personal service" — how your practice is classified determines which zone is appropriate. Call the city's planning and zoning department with the address and your intended use before you sign anything. This takes one phone call and 15 minutes. Many providers skip it and find out after they've signed a lease that they need a conditional use permit, adding months and thousands of dollars to the timeline.

What to look for in a medspa space

Lease terms — what to negotiate

Medical practices have specific lease needs that standard commercial tenants don't, and most landlords are not experienced with them. Key points to negotiate:

05

Design Your Service Menu

Your service menu is a financial and clinical decision simultaneously, and both dimensions matter. The most common mistake new medspa owners make is selecting services based on what they're excited about — or what they've been trained in — rather than what the local market supports and what their license allows.

Start narrow, then expand

The instinct to open with a full menu is understandable but usually wrong. A focused menu of four to six services executed exceptionally well builds reputation faster than a broad menu executed inconsistently. Start with your strongest clinical skills and your highest-margin services, prove those, then add.

Scope of practice — what your license actually allows

In Arizona, NPs with full practice authority can offer a broad range of services independently. But "can prescribe" does not mean "can perform safely without training." Scope of practice is a floor, not a ceiling — you still need documented clinical training for each specific procedure you offer, and that training needs to be reflected in your credentialing file. This matters both for your malpractice insurance coverage (most policies require training documentation for each procedure) and for your medical directorship arrangement if you are not an NP.

Margin by service category

High-margin services — those with 70% or better margins after cost of goods — include neuromodulators (Botox, Dysport), PRP-based procedures (O-Shot, P-Shot, Vampire Facial), medical weight management, IV therapy (excluding very high-cost additives), and membership programs. Medium-margin services include dermal fillers, laser treatments (high equipment costs), and hormone therapy (compounding pharmacy costs vary significantly). Low-margin or break-even services — often used as patient acquisition tools rather than revenue centers — include consultations, microneedling with topicals only, and basic skincare retail.

For a detailed breakdown of which service lines generate the strongest margins and how to price them, see our guide on medspa revenue optimization (coming soon).

06

Build Your Clinical Compliance Infrastructure

This is the step most providers underinvest in until something goes wrong. Clinical compliance infrastructure — protocols, standing orders, consent forms, emergency procedures — is what protects you, your staff, and your patients when something unexpected happens. It is also what you will be asked to produce if you are ever audited, sued, or investigated.

Standing orders

Every service you offer must have a written standing order signed by your medical director (or by you, if you are the NP director). Standing orders specify what the treatment is, who is authorized to perform it, under what patient conditions it may be performed, what the contraindications are, what the dosing or procedure parameters are, and what to do if something goes wrong. A standing order for "injectable services" is not adequate — you need one for each specific product category you use.

Emergency response protocols

Write emergency procedures before you see your first patient. Every service carries specific adverse event risks, and your staff needs written protocols — not improvised decisions under pressure — for each one. For injectables: vascular occlusion, anaphylaxis, vasovagal response. For IV therapy: anaphylaxis, air embolism, phlebitis, extravasation. For laser: thermal injury, eye exposure. These protocols must be physically present in each treatment area, reviewed with all clinical staff at hire, and updated annually or when your service menu changes.

Emergency kit

Arizona does not have a single statewide emergency kit requirement for medspas, but your standing orders and protocols should specify what your kit contains, and your malpractice insurance and medical director will expect you to have one. At minimum: epinephrine (auto-injector and/or vials if you have staff who can administer), diphenhydramine, a blood pressure cuff and pulse oximeter, hyaluronidase if you offer fillers, and emergency contact information posted prominently. Check expiration dates quarterly.

Patient consent forms

Each service requires its own informed consent form — not a generic "treatment consent" that covers everything loosely. A compliant consent form describes the specific procedure, its mechanism, expected outcomes and their variability, known risks and adverse events, alternatives to the procedure, and what the patient agrees to. It must be signed and dated before treatment, retained in the patient's chart, and reviewed by your medical director. Do not use consent forms downloaded from the internet without having them reviewed by a licensed clinical authority familiar with Arizona law.

Patient intake and screening

Design intake forms that screen for contraindications specific to each service you offer. A medical history form that asks about drug allergies and current medications is a starting point — it is not sufficient for services like high-dose vitamin C infusions (which require G6PD screening), hormone therapy (which requires lab baseline), or sexual wellness procedures (which require specific history elements). Your intake forms should be as service-specific as your consent forms.

Compliance Checklist — Before Patient One
  • Signed medical director agreement in place
  • Written standing orders for every service offered, signed by director
  • Emergency response protocol for each service-specific adverse event
  • Emergency kit stocked and expiration dates checked
  • Service-specific patient consent forms reviewed by director
  • Service-specific patient intake and screening forms
  • Post-procedure instruction handouts for every service
  • Malpractice insurance in force and covering all offered services
  • HIPAA Notice of Privacy Practices posted and available to patients
  • All clinical staff credentialing files complete and on site
07

Set Up Your Vendor and Supply Relationships

Vendor relationships for a medspa are more complex than for most small businesses because several of your key supplies — prescription medications, controlled substances, and compounded formulations — have regulatory strings attached to who can order them, how they must be stored, and from whom they can be purchased.

Pharmaceutical and injectables distributors

Botulinum toxin (Botox, Dysport, Xeomin, Jeuveau) and hyaluronic acid fillers (Juvederm, Restylane, Sculptra, Radiesse) are prescription products in Arizona. They must be ordered under a valid DEA-registered prescriber's name and delivered to a licensed medical facility or provider address. To establish accounts with the major distributors — Allergan, Galderma, Merz, Evolus — you will need your provider's license number, DEA number if applicable, and the practice's business information. Expect 2–4 weeks to establish new accounts, so start this process before your opening date.

Compounding pharmacies

If your service menu includes hormone therapy, peptides, custom IV formulations, or any compounded medication, you need a relationship with a licensed 503A or 503B compounding pharmacy. In Arizona, compounded medications must be prescribed by a licensed prescriber for an individual patient (503A) or ordered in larger quantities for office use (503B). Not all compounding pharmacies operate in all states or ship all products — vet your pharmacy partners carefully, confirm their accreditation (PCAB is the gold standard), and understand their turnaround times before you commit to a service launch date.

PRP equipment

If you offer any PRP-based services (O-Shot, P-Shot, Vampire Facial, hair restoration, orthopedic PRP), you need a centrifuge and blood draw supplies. Centrifuge options range from purpose-built aesthetic PRP kits (Eclipse, EmCyte, Regen Lab) that include the centrifuge, tubes, and processing protocol, to general lab centrifuges that you use with aftermarket PRP tubes. The purpose-built systems are more expensive per procedure but produce more consistent platelet concentration and come with defined protocols — important for both clinical outcomes and your standing order documentation.

Malpractice insurance

Secure your malpractice policy before you open. Many providers rely on the policy that covered them in their previous employment — that policy does not cover a private practice you own. You need a new, standalone policy in the name of your practice entity. Key things to confirm: the policy covers every procedure you plan to offer (some policies exclude sexual wellness procedures, experimental treatments, or off-label uses — confirm specifically); the policy covers both you and any employed or contracted clinical staff; and you understand whether the policy is occurrence-based (covers claims for incidents that happened while the policy was active, even if filed later) or claims-made (only covers claims filed while the policy is active). Occurrence-based is generally preferable for medical practices.

08

Hire and Credential Your Staff

Staffing decisions are where new practice owners make some of their most expensive mistakes — both by hiring too quickly and by hiring too slowly. A single bad hire in a clinical role can create liability, compliance problems, and patient safety issues that cost far more than the time you saved by not screening thoroughly.

Clinical staff — what you actually need at launch

Most single-provider medspas launch with one or two clinical staff beyond the owner: typically a Medical Assistant (MA) or Licensed Practical Nurse (LPN) to assist with treatments and patient flow, and a front desk person who handles scheduling, intake, and retail. The instinct to hire another injector or NP before you've proven your patient volume usually results in overstaffed overhead before revenue is stable. Wait until you consistently have more appointments than you can see before adding clinical capacity.

Scope of practice by role

In Arizona, who can perform which procedures depends on their license. NPs and PAs can perform all services within their training and scope. RNs can administer injections and IV therapy under standing orders from a qualified medical director. Medical Assistants can assist, prep patients, apply topicals, and perform non-invasive treatments that don't require a clinical license in Arizona (such as some microneedling with non-prescription serums, depending on depth and product). Aestheticians (licensed by the Arizona State Board of Cosmetology) can perform facials, chemical peels within defined concentrations, and laser treatments under specific supervision arrangements — but they cannot inject or administer prescription treatments.

Credentialing files — what you must keep

For every clinical staff member, maintain a credentialing file that includes: a copy of their current, active license; verification that the license is unencumbered (check the relevant Arizona state board website); documentation of training or certification for each specific procedure they are authorized to perform; current CPR/BLS certification; proof of malpractice coverage if they carry their own; and a signed job description that defines their authorized scope in your practice. Your medical director should review and sign off on the scope of practice for each clinical staff member.

W-2 employees vs. 1099 contractors

Many practice owners try to bring on clinical staff as 1099 independent contractors to avoid payroll taxes and benefits obligations. The IRS and Arizona Department of Revenue have specific tests for contractor vs. employee classification — if you control when, where, and how someone works, they are almost certainly an employee. Misclassifying employees as contractors is one of the most common compliance errors in small medical practices and carries significant financial penalties. Consult your accountant before you make your first hire.

09

Build Your Tech Stack

You need four categories of software before you open: an EMR (Electronic Medical Record) or practice management system, a scheduling and booking tool, a payment processor, and a HIPAA-compliant patient communication platform. These can overlap — several systems cover multiple categories — but don't let that simplicity prompt you to under-invest. A disorganized charting system or a non-HIPAA-compliant texting tool creates compliance problems that compound over time.

EMR / practice management

For aesthetic and wellness practices, the leading options are Aesthetic Record, Jane App, PatientNow, Mindbody (for lighter clinical needs), and Kareo. Aesthetic Record is purpose-built for medspas and aesthetics, with photo documentation, before/after tracking, and injectable unit logging built in — it is a strong choice for a practice heavy in injectables. Jane App has excellent scheduling and documentation features with a clean interface and is well-suited to wellness-oriented practices. PatientNow skews toward larger practices with more complex patient acquisition and CRM needs. Whatever you choose, it must be HIPAA-compliant and capable of producing the documentation your chart audits require.

Scheduling and booking

Patients expect to book online — a practice that requires phone-only scheduling loses bookings to competitors every day. Your EMR may include online booking; if not, tools like Square Appointments, Acuity Scheduling, or Calendly (with appropriate HIPAA agreements) can fill the gap. The booking flow should collect basic intake information and allow credit card pre-authorization or deposits for high-value appointments.

Payments

Healthcare businesses have specific payment considerations: HSA/FSA card acceptance (many medspa services qualify if you have a medical director), split payment capabilities for expensive treatments, and package or series prepayment. Square, Stripe, and Clover all work for medspas. If you offer financing (CareCredit, Cherry, Alphaeon), set up those relationships before you open — patients who want a $1,200 treatment and can't qualify for or afford to pay cash will often proceed if financing is available at point of service.

HIPAA compliance

HIPAA applies to your practice from day one. Key requirements: a signed Business Associate Agreement (BAA) with every vendor who touches patient data (EMR, email, payment processor, scheduling software); a Notice of Privacy Practices posted in your office and on your website; a designated Privacy Officer (can be you); and documented staff HIPAA training. Text messaging with patients must be done through a HIPAA-compliant platform — standard SMS from a personal phone is not compliant. Tools like Klara, Spruce Health, and several EMRs include HIPAA-compliant messaging.

10

Social Media and Marketing

Social media is the primary patient acquisition channel for most medspas — and it is also the area where new practice owners most frequently create compliance, legal, and reputational problems for themselves. Knowing what to post and what not to post is as important as knowing how to post effectively.

Instagram — your most important channel

For aesthetic and wellness practices, Instagram is the primary platform. Patients researching a new medspa will check Instagram before they call. Your feed is your portfolio. Priorities: consistent aesthetic that matches your brand (lighting, editing style, and composition matter), a mix of before/after content, educational posts, behind-the-scenes content, and provider personality. Post at minimum three times per week to maintain algorithmic presence. Stories and Reels get more reach than static feed posts in the current algorithm — build the habit of short-form video even if it feels uncomfortable.

Before/after content — legal rules

Before/after photos are your most powerful marketing asset and your highest-compliance-risk content. FTC rules require that before/after photos represent typical results, not best-case results. You must have signed photo release forms from every patient whose image you post — this should be part of your standard intake documentation. You must disclose if any editing beyond color correction has been applied. You cannot use a competitor's before/after photos or stock photography represented as your own patient outcomes. Arizona Board of Nursing rules also prohibit misleading claims about treatment outcomes — "permanent results" for treatments that are not permanent, or success rates you cannot substantiate, create professional liability beyond just FTC exposure.

What you cannot say on social media

Regulated claims create regulatory exposure. You cannot claim specific cure rates, promise specific outcomes, or use patient testimonials that imply guaranteed results. For PRP-based sexual wellness services (O-Shot, P-Shot), you are operating in a space with limited FDA approval — claims must be carefully worded to describe what the procedure does mechanistically, not what outcomes it guarantees. For compounded medications or hormone therapy, FDA rules on advertising compounded drugs apply. When in doubt, have your attorney or medical director review your content before posting.

Google Business Profile

Your Google Business Profile (GBP) is the second most important local marketing asset after Instagram, and it is free. Set up your GBP before you open, with accurate hours, address, phone number, and services listed. Actively solicit Google reviews from satisfied patients — they are the single strongest factor in local search ranking. Respond to every review, positive and negative, promptly and professionally. Do not offer incentives for reviews (against Google's terms of service and FTC rules).

Your website

A functional website is table stakes. It does not need to be elaborate, but it must: load fast on mobile, have your phone number and booking link prominently placed, list your services, and make it visually clear that you are a professional clinical practice rather than a hobbyist. A website that looks like it was built in 2012 undermines the premium positioning most medspas need to command premium prices.

Email marketing

Email is the highest-ROI retention marketing channel for medspas — it is also the one new practices build the latest and regret the most. Start collecting patient email addresses from day one through your booking and intake process. A monthly email to your list with a featured service, a clinical education piece, and a limited offer consistently produces appointment bookings at near-zero cost.

11

Your First 90 Days — The Soft Launch

The soft launch period — the first 30 to 90 days of operation — is when you build the clinical habits, patient experience systems, and operational rhythms that will either compound into a strong practice or create problems you spend years correcting. Most providers race through it trying to generate revenue. The ones who go slowly in this window build something that can actually scale.

Month one: systems and staff

Before you open to the general public, run through your full patient encounter — intake, consent, treatment, post-procedure instructions, payment, booking follow-up — with internal "patients" (staff, friends, family members willing to try a service). Identify every friction point, every moment where you don't have the right form, the right protocol, or the right system. Fix them before they happen with real patients. This is also the time to train staff on the EMR, on your intake process, and on your emergency protocols.

Month two: controlled patient volume

Open to a controlled patient volume — not full capacity. A common approach is to open by referral or waitlist only for the first four to six weeks, allowing you to work through early operational issues with a manageable number of patients rather than being overwhelmed on day one. Encourage every patient to leave a Google review and refer a friend. The economics of a new medspa almost always come down to word of mouth in the first 90 days — no amount of Instagram posting replaces a satisfied patient telling three colleagues about their experience.

Month three: review and adjust

At the 90-day mark, pull your numbers: revenue per service, cost of goods by service, patient volume, appointment conversion rate from inquiry to booking, and repeat booking rate. These metrics will tell you what is working, what needs adjustment, and where to put your energy in the next quarter. If you are not tracking these from day one, you are managing by intuition rather than information — which is how practices end up busy but unprofitable.

90-Day Priorities
What actually matters in your first 3 months

Google reviews (aim for 20 before month three), a clean and consistent Instagram feed, a functioning EMR with complete patient records, protocols your staff has rehearsed, a referral incentive program for existing patients, and a clear metric dashboard you look at every week. Revenue in month one is less important than systems that can generate revenue at scale in month twelve.

12

The Mistakes That Derail Most New Medspas

Every mistake on this list has been made by real providers — usually more than once. Most are recoverable if caught early. Some are not.

Most Common Launch Mistakes
Avoidable errors that derail or delay new medspas

Getting Help — You Don't Have to Build This Alone

Most of what this guide covers can be figured out independently, given enough time and research. What it cannot give you is the judgment that comes from having done it before — from knowing which vendor relationships actually deliver, which compliance gaps are the ones boards actually investigate, which service lines the Phoenix market supports at which price points, and how to sequence 12 simultaneous work streams without dropping the ones that matter most.

Beso Provider Hub offers practice launch consulting specifically designed for this stage — a scoped engagement that covers your entity structure review, service menu design, protocol development, vendor setup, and 90-day launch roadmap, delivered as written documentation you own and act on. If you are 3 to 6 months out from opening, a single consulting engagement at this stage is typically worth more than anything else you could spend that money on.

We also offer active medical directorship for Arizona practices that need a qualified NP director, and hands-on clinical training across 14 procedures if you are still building your clinical toolkit before launch.

If you have a specific question this guide didn't answer, book a free discovery call — we'll tell you directly whether and how we can help.