Med Spa Policies and Procedures: What Each Page Has to Carry
Published October 7, 2026 · 7 minute read · General information, not legal advice. Your licensing regulators decide what applies to you.
A policy is a statement of position. A procedure is the ordered steps for carrying it out. Med spa policies and procedures get bound into one manual and talked about as one thing, which is how a page ends up trying to do both jobs and failing when somebody has to follow it or change it.
What follows is about the pages. The subjects the manual covers and the clinical content on any page belong to the practice and to whoever holds clinical accountability for it.
A policy and a procedure answer different questions
A policy is short: what the practice does about a subject, who it applies to, and who settled the question. It carries no steps. A procedure is the steps, in order, with a role named against each and a record named at the end.
The split earns its keep at revision time. When the practice changes the way something is done, the procedure changes and the position usually does not. When the practice changes what it will and will not offer, the position changes and several procedures change behind it. A page that mixes the two has to be reopened for both kinds of change, and the signature on it no longer says which kind happened.
The header block every page carries
- The page title and a document number
- The revision marker, and the date that revision took effect
- The role that owns the page, not only a person's name
- The date the page comes up to be read again
- The signature of whoever accepted this revision for use
Federal laboratory rules write this part down. 42 CFR 493.1251 is the procedure manual standard for laboratories. Paragraph (d) requires every procedure, and every change to one, to carry the current laboratory director's signature and date before use, after their review. Paragraph (e) requires the laboratory to keep "a copy of each procedure with the dates of initial use and discontinuance" (Cornell LII). That section governs laboratory testing and is cited for structure rather than reach, with applicability a question for the practice's own counsel and carrier.
Two things in it are worth borrowing. The signature attaches to a revision rather than to the document, so a signed page with no revision marker cannot be matched to what was signed. And a retired page is kept with the date it stopped being used, which is how anyone answers later what the practice was doing that month. Revision numbers and change logs covers the numbering, and the policy ownership record names the owning role for every page at once.
Get the Clinic Opening File
A free print-and-fill file for owners getting ready to open: a workstream index, an open items register, a document inventory and an opening day go or no-go record. It comes by email, along with each new guide when it publishes.
Sent by Scope & Standard through beehiiv. Every email has an unsubscribe link. See Privacy.
What a med spa SOP adds that a policy does not
An SOP is a procedure under a different name. Four things decide whether anybody can follow one.
- One role per step. A step written as "the clinic confirms" has nobody performing it.
- The record the step produces, named as a document. Not "document the result".
- An exception line. What happens when the step cannot be completed, written into the step.
- Where the finished record lands, and who can retrieve it.
The same standard says something useful about borrowed content. Paragraph (b) lists 14 items a procedure in that manual must include "when applicable to the test procedure". Paragraph (c) then allows "Manufacturer's test system instructions or operator manuals" to be used to meet items (b)(1) through (b)(12). The two left outside that allowance are the thirteenth, "The laboratory's system for entering results in the patient record and reporting patient results", and the fourteenth, "Description of the course of action to take if a test system becomes inoperable."
That is the line worth copying. A procedure can incorporate a document somebody else wrote for the parts that document already covers. The parts nobody else can write are the ones about this practice: where its records go, and what its people do when the usual route is closed. They are also the two a purchased template leaves blank.
An IV hydration clinic SOP is the same page with different steps
The structure does not change between service lines. What changes is which steps carry a record and which need an exception line. A mobile service adds steps that happen away from the building, so the record travels and the exception line covers a step attempted with nobody else present. What a mobile IV therapy SOP must contain covers dispatch and closeout.
Who the pages get written with, and when they come up again
One federal source writes down both of those, for a different kind of facility. 42 CFR 491.9(b) covers rural health clinics and federally qualified health centers. It requires their health care services to be furnished under written policies, and requires that "the policies are developed with the advice of a group of professional personnel that includes one or more physicians and one or more physician assistants or nurse practitioners", adding that "at least one member is not a member of the clinic or center staff". Its listed contents reach the services furnished directly and those furnished through agreement or arrangement, guidelines for the medical management of health problems, and rules for drug and biological handling. Those policies "are reviewed at least biennially by the group of professional personnel" and as necessary by the facility (Cornell LII).
That section reaches those facilities and not a private practice, and it is cited for the shape rather than the reach. The part worth noticing is the contents list: it reaches the services the facility does not perform itself, which a manual describing only what happens inside the building leaves out.
The index is what turns a stack of pages into a manual
A set of signed pages is not a manual until something lists them. The index is one table: every page, its document number, its current revision, the date that revision took effect, and the owning role. It is the only place that answers which version is in force without opening every file. Start it before the pages. Which clinic policies to draft first covers the drafting order, and the index is where that order gets recorded as it is worked through.
The Intake and Screening Module holds the screening and evaluation records an intake procedure points at. The Emergency Preparedness Module holds the activation criteria page and the drill log, a position statement and a procedure record sitting next to each other. The Medical Director Oversight Module is where the clinical accountability question gets recorded. What goes on the clinical lines in all three is the practice's to write.
Do this next
Open the newest policy or SOP the practice wrote and look at the top of page one. Find the revision marker, the date that revision took effect, the owning role, and the date the page is due to be read again. A page missing any of the four cannot be told apart from the draft it came from. Then pick a step in the middle of that page and name the role that performs it. If it reads "the clinic" or names no actor, nobody has been assigned that step.
- Intake and Screening Module, $29
- Emergency Preparedness Module, $29
- Medical Director Oversight Module, $34
Questions this guide answers
What is the difference between a policy and a procedure?
A policy is a short statement of position. It says what the practice does about a subject, who it applies to, and who settled the question. A procedure is the steps, in order, with a role named against each step and a record named at the end. The split matters at revision time, because changing how a thing is done should touch the procedure and leave the position alone.
What goes in a med spa policies and procedures manual?
An index listing every page with its document number, current revision, effective date and owning role, then the pages themselves. Each page carries a revision marker, an effective date, the owning role, a review date and the signature of whoever accepted that revision. The subjects the manual covers are the practice's decision, settled with whoever holds clinical accountability.
Is an SOP the same as a procedure?
Yes, under a different name. What decides whether anyone can follow it is narrower than the name. One role named per step, the record each step produces named as a document, a line for what happens when a step cannot be completed, and where the finished record lands.
Who signs a clinic policy?
Whoever the practice has decided may accept that page for use, signing a specific revision rather than the document in general. Where the page carries clinical content, who may accept it is settled with whoever holds clinical accountability and recorded before the page goes into use.
How often do policies and procedures get reviewed?
The interval is the practice's decision. What matters for the page is that the next review date is printed on it, and that a change in how the work is done triggers a review on its own rather than waiting for the calendar.