How to set up an MSO: the complete guide for med spa entrepreneurs

Most entrepreneurs who want to open a med spa run into the same wall early: in most states, you cannot own a medical practice unless you are a licensed physician. The business idea is sound. The market is real. The capital is ready. But the law says no.

The Management Services Organization — the MSO — is how you build around that. This article walks you through how to structure, form, and operationalize a compliant MSO for a med spa: what entities you need, what documents govern them, how money moves, where the structure fails, and what your state requires on top of the federal baseline.

Step 1: Understand the two-entity structure you are building

A compliant med spa built by a non-physician requires two separate legal entities with a clear line between them.

The Friendly PC is a Professional Corporation owned by a licensed physician. It employs the clinical staff, holds the state medical licenses, carries malpractice insurance, receives patient payments, and retains full authority over every clinical decision. In strict Corporate Practice of Medicine (CPOM) states, the physician must own 100% of this entity. In some states, nurse practitioners or physician assistants can hold a minority stake. The specific ownership requirements vary by state and must be confirmed before formation.

The MSO is a standard business entity — typically an LLC — owned by you, the entrepreneur. It handles everything that is not the practice of medicine: marketing, HR, real estate, equipment leasing, billing, technology, scheduling, supply chain, and financial management. The MSO cannot practice medicine, cannot employ physicians to deliver clinical services, and cannot make or influence any clinical decision.

The two entities are linked by a Management Services Agreement (MSA) — the most important document in the structure. The MSA defines what the MSO does, what it gets paid, and where the line between business and medicine sits. A poorly drafted MSA can invalidate the entire structure regardless of how correctly the entities were formed.

Step 2: Form the entities in the right order

Form the Friendly PC first. The physician must be identified, willing, and licensed in the state where the med spa will operate before you form the clinical entity. Do not form the MSO first and search for a physician to plug in afterward — the physician's genuine willingness to own and operate the Friendly PC is the structural foundation, not an afterthought.

Forming the Friendly PC. This is a state-specific filing with the Secretary of State, using the correct professional corporation designation for your state — a Professional Medical Corporation in California, a Professional Association in Texas, for example. The physician is the sole shareholder in strict CPOM states. The PC needs its own employer identification number, its own bank account, and its own malpractice coverage.

Forming the MSO. This is a standard LLC or corporation formation. You own it. It needs its own EIN, its own bank account, and its own operating agreement. The MSO cannot be a subsidiary of the Friendly PC, and the Friendly PC cannot be a subsidiary of the MSO. They are genuinely separate entities — not a parent and a child.

Critical from day one: do not co-mingle finances. The Friendly PC and the MSO must maintain completely separate accounts, financial records, and tax filings from the moment they are formed. Shared accounts or intermingled funds are one of the most common compliance failures and the clearest signal to a state medical board that the separation is not real.

Step 3: Draft the Management Services Agreement

The MSA is the contract that links the two entities and governs every aspect of their relationship. It must be drafted by a healthcare attorney familiar with your state's CPOM and fee-splitting rules. Do not use a template. Generic MSAs copied from the internet or generated by general-purpose AI frequently include fee structures, termination rights, or scope-of-service provisions that violate state-specific rules. The MSA is where most MSO structures fail under scrutiny.

The MSA must define:

Scope of services. A specific, exhaustive list of what the MSO provides: marketing, staffing of non-clinical employees, IT, facilities management, billing support, supply procurement, scheduling software, and so on. Vague scope language creates ambiguity about where the MSO's authority ends and the physician's begins.

Clinical autonomy protections. Explicit language confirming that the physician retains sole authority over all clinical decisions — treatment protocols, staff supervision, patient intake criteria, informed consent, prescribing, and the hiring and firing of licensed clinical personnel. The MSO has no authority over any of these. This is not boilerplate. It is the legal firewall that separates a compliant structure from an illegal one.

The management fee. The fee the Friendly PC pays the MSO for services. This must reflect fair market value for the services actually provided — not a percentage of patient revenue, not a proxy for clinical profits. Regulators treat a fee that is excessive relative to the services rendered, or one tied to patient volume or revenue, as evidence that the MSO is extracting clinical profits in violation of fee-splitting law. A base-plus-variable structure — a flat monthly retainer for defined services, plus reimbursement for documented variable costs — is the most defensible approach. The management fee should be set so the Friendly PC roughly breaks even at year end, with surplus flowing to the MSO through the fee. Profit should not sit in the clinical entity.

Funds flow. The MSA should explicitly map how money moves: patients pay the Friendly PC, the Friendly PC pays the MSO the management fee, the MSO pays MSO-level expenses. Clinical expenses — provider payroll, malpractice insurance, medical supplies — are paid from the Friendly PC. Administrative and operational expenses are paid from the MSO. Clinical staff should be on the Friendly PC's payroll. Non-clinical staff on the MSO's. Payroll is one of the most common places funds flow breaks down operationally.

Termination provisions. The MSO cannot have the right to acquire the Friendly PC, options to purchase the physician's equity, rights of first refusal, or any provision that gives the MSO control over the physician's ownership of the clinical entity. These provisions are specifically prohibited in states like California under SB 351 and undermine the CPOM independence the structure requires everywhere.

Step 4: Document the FMV basis for your management fee

If the management fee is ever challenged — by a state medical board, a tax authority, or in litigation — the defense is a documented fair market value analysis conducted at arm's length. Without it, an excessive fee looks like clinical revenue extraction dressed up as a management agreement.

For most early-stage med spas, a formal third-party valuation report is not required, though it is the gold standard for larger or multi-location operations. At minimum, document the specific services the MSO is providing, the market rate for each service if purchased separately, and the total fee derived from that analysis. Keep this documentation in the MSO's records and update it annually as the scope of services changes.

Step 5: Build the operational reality to match the legal structure

The era of paper compliance is over. Enforcement trends in 2025 and 2026 have shifted: regulators are no longer satisfied with a compliant-looking MSA. They are looking at operational conduct — who actually makes decisions about patient volume, clinical protocols, staffing, and marketing. If internal communications show the MSO owner directing clinical operations, the contract offers little protection.

The physician must be genuinely involved. Chart review logs, signed clinical protocols, documented site visits, and on-call availability records are the evidence of genuine oversight. Without them, the structure does not hold up under audit. A physician who signs documents and cashes a check but never reviews charts, never updates protocols, and is unreachable during operations is a strawman arrangement. Regulators in every strict CPOM state are specifically targeting these.

Marketing must identify the clinical entity. The MSO drives the brand — but the brand markets medical treatments. All patient-facing materials — consents, contracts, advertising, website copy — must clearly identify the licensed medical entity as the provider of care. "Medical services provided by [Physician Name] Medical Corp, managed by [Brand Name]" is the compliant pattern. "Med Spa by [Brand Name]" without physician attribution is the problematic one.

Run an annual compliance audit. Review the MSA against actual operations once a year. Confirm that the funds flow is being followed, that the physician's oversight documentation is current, that payroll is hitting the right entity, and that no operational drift has pushed the MSO into clinical decision-making.

What your state requires

The two-entity structure is consistent. What changes by state is the physician ownership requirement, the fee-splitting rules, and the enforcement posture.

California. The strictest CPOM state in the country. Under California Business and Professions Code § 2400, the Friendly PC must be at least 51% owned by a licensed MD. SB 351, effective 2026, voided MSO non-competes and explicitly bars MSOs from exercising clinical control. AB 1415 requires 90 days' notice to the Office of Health Care Affordability before any material change in control or asset transfer. Percentage-based management fees are technically permitted but are scrutinized heavily — flat FMV fees are the safer path. Off-the-shelf MSA templates are not adequate for California; the current SB 351 landscape requires attorney-drafted documents.

New York. New York enforces CPOM strictly under Education Law § 6530. All medical practices must be owned 100% by licensed physicians — no exceptions for NPs or PAs owning a majority. Percentage-based fee-splitting between a physician and a non-physician entity is explicitly prohibited; flat FMV fees are required. Every patient-facing communication must clearly attribute medical services to the licensed physician entity. Regulators are increasingly targeting advertising where a non-medical brand claims to provide medical services.

Texas. Texas enforces CPOM through its Medical Practice Act (Tex. Occ. Code § 155) and the Texas Medical Board, which has been increasingly active in auditing MSO structures at med spas. Texas permits certain NP- and PA-ownership structures under collaborative practice agreements, but the physician medical director must have genuine oversight involvement — not nominal sign-off. The Texas State Board of Pharmacy also requires clinical justification documentation before compounded prescriptions, which means the physician's involvement is audited on the clinical side as well as the ownership side. Percentage-based fees carry fee-splitting risk and should be structured conservatively with FMV documentation.

Florida. Florida has no explicit CPOM statute and is one of the few states where non-physicians can directly own a medical practice in some circumstances. However, Florida's fee-splitting prohibitions under Florida Statutes § 458.331 and the Florida Board of Medicine rules still constrain how money flows between a non-physician business and a physician practice. Even without a CPOM doctrine, any arrangement that looks like a physician splitting professional fees with a non-licensed entity in exchange for referrals or business generation is prohibited. Florida is also one of the most permissive states for non-compete enforcement, meaning MSO agreements with physician partners that include restrictive covenants are more likely to be enforced here than in California or New York — a consideration when negotiating the physician relationship.

Michigan. Michigan recognizes CPOM through its Public Health Code (MCL § 333.16221) and medical board rules. Med spa operators in Michigan must use a Friendly PC structure when offering prescription services. The Michigan Board of Pharmacy requires out-of-state pharmacies to obtain a Michigan pharmacy license before dispensing to Michigan patients, which is relevant for med spas offering compounded treatments. Management fees must reflect FMV and the MSO cannot exercise clinical control. Michigan's pending non-compete legislation, if passed, may affect MSO agreements with physician partners that include restrictive covenants — a risk worth monitoring for any operator currently negotiating physician arrangements in Michigan.

The documents you need to build this

A complete, compliant MSO structure for a med spa requires the following documents, in roughly this order:

• Friendly PC formation documents:

  Articles of incorporation, bylaws, shareholder agreement, physician equity documentation

• MSO formation documents:

  Articles of organization, operating agreement, EIN registration

• Management Services Agreement:

  The governing contract between the two entities — scope, fee structure, funds flow, clinical autonomy protections, termination provisions

• FMV documentation:

  The analysis supporting the management fee, updated annually

• Medical director agreement:

  If the Friendly PC physician is also serving as medical director, a separate agreement defining supervision obligations, chart review cadence, protocol authority, and compensation

• Patient-facing attribution:

  Updated consents, intake forms, and advertising materials that correctly identify the clinical entity as the provider of care

• Separate bank accounts and accounting systems:

  One for the Friendly PC, one for the MSO, with no co-mingling

How to use Inhouse to build it

Start a chat and tell Inhouse you want to build an MSO structure for a med spa in your state. Describe the services the med spa will offer, whether you have a physician partner identified, and your target state. From there, Inhouse works through the build with you document by document.

Inhouse can draft the Friendly PC formation checklist tailored to your state's professional corporation requirements, a first-draft MSA with scope, fee structure, funds flow, and clinical autonomy provisions mapped to your state's CPOM rules, a management fee memo documenting the FMV basis for your fee, a physician partner term sheet to bring to the negotiation, and a patient-facing attribution template for consents and advertising.

For each document, Inhouse works through the specific provisions with you so you arrive at your attorney with a working draft rather than a blank page. That cuts legal time and cost significantly — the attorney is reviewing and finalizing, not starting from scratch.

What gets routed to a lawyer: final review and execution of the MSA, entity formation filings, the formal FMV opinion for larger operations, and any state-specific issues like California SB 351 compliance or Michigan non-compete risk in physician agreements. Inhouse builds the foundation; your attorney closes it out.

This article is for general information only and does not constitute legal advice. CPOM laws, fee-splitting rules, and MSO formation requirements vary significantly by state and are subject to change. California's SB 351 and AB 1415 introduced material changes effective 2025-2026; Michigan's pending non-compete legislation may affect physician agreements. The information in this article reflects the law as of June 2026. Consult a licensed healthcare attorney in your state before forming any entity, drafting any management services agreement, or entering into any physician partnership arrangement.