A compliance audit of your GLP-1 telehealth site, read the way FDA and LegitScript read it.
We review the public surface of a telehealth practice, the landing pages, the intake funnel, the product imagery, and the legal pages, against the claim patterns FDA cited in its 2026 warning letters to telehealth companies and against the LegitScript certification standards. Every finding comes back quoted from your own pages, with the rule it runs into and the fix. Most fixes are copy and image changes.
- Scope
- Site, funnel, legal pages
- Findings
- Quoted and cited
- First look
- Free, no strings
- Remediation
- Fixed fee, not hourly
What the letters cited
What the letters were actually about.
Not clinical practice. The letters were about the public website: what the pictures showed and what the words claimed. Five patterns account for most of the citations, and every one of them is a copy or image change.
The company's name on the vial
Product renders that put the telehealth brand on the label represent the company as the compounder of a drug it does not make. This was the first item cited, and it is the one most sites still carry.
Same as, generic for, identical to
Any phrasing that ties a compounded product to an approved one. The same active ingredient, a generic version, clinically proven, or a side by side with a brand name. Each implies an evaluation the compounded product never had.
Approval by association
FDA-approved, FDA-registered, or FDA-licensed attached to the product, the pharmacy, or the facility. Compounded drugs are not FDA-approved, and FDA does not approve or license facilities, so the words do work they are not allowed to do.
Borrowed results
Percentages, pounds, and inches presented as what the product does, lifted from trials of the approved drug or from nowhere. Results belong to the product that was studied.
The net impression
Statements that are each defensible and together read as approved, reviewed, or equivalent. This is the test the reviewer applies to the whole page, so it is the test applied here.
What gets checked
What gets checked, page by page.
Product imagery and labels
Every vial, pen, and box render on the site, and whose name is on it.
Sourcing and facility language
How the pharmacy and the compounding are described, including 503A and 503B wording, and any FDA adjective attached to either.
Equivalence and comparison claims
Same active ingredient, generic, identical, clinically proven, and brand-name comparisons, in copy, in FAQs, and in intake screens.
Efficacy claims and statistics
Any number offered as a result, with or without a source, and whether it belongs to the product being sold.
Required disclosures
The not FDA-approved statement, where it sits, whether every page that sells carries it, and whether testimonials are marked as paid and results as variable.
Pricing as stated versus as charged
Headline price against the FAQ, the checkout, and the terms. Prepaid terms, renewal timing, and refund language, read the way a reviewer and a card network read them.
Prescription validity language
Pre-approved, instant, minutes, and hours. Anything that implies the prescribing decision precedes the care.
Who is practicing
Our doctors on the page against the facilitator language in the terms. The two have to describe the same arrangement.
Pharmacy and prescriber transparency
Whether the dispensing pharmacy is named, whether the professional entities are, and whether the states served are disclosed on the pages a patient reads.
Legal pages
Terms, telehealth consent, and privacy, for drafting notes left in, HIPAA statements that contradict the funnel, and tracking disclosures that contradict the pixels.
Affiliate and advertising exposure
Affiliate programs, affiliate tracking on ad landing pages, and prescription drug terms in ad destinations, all of which the certified merchant answers for.
The intake funnel
Every screen before the medical questions, read as a patient sees it, because the funnel is usually where the strongest claims live.
Process
Four steps, and the first one costs nothing.
- 01
Request
Name, work email, and the domain. Public pages only, so there is nothing to give us access to.
- 02
Scorecard
The findings that matter most, quoted from your pages, with the rule each runs into and the fix. Free, complete for what it covers, and yours whether or not we ever speak again.
- 03
Remediation
A fixed fee to rewrite the copy, replace the imagery, and clean up the legal pages alongside your counsel, then a readiness pass against the certification criteria before any re-review.
- 04
Re-check
Enforcement comes in waves and each one names new patterns. A fresh read of the site after each wave, on request, so the fix does not age out.
Our commitment
We do not file complaints.
The findings we send you are yours. We do not report a company we have contacted to FDA, LegitScript, a state board, an ad platform, or anyone else, whether or not it hires us, and we do not raise the possibility in a sales conversation. That is a written policy, and it is published so that you can hold us to it.
No finding is conditioned on a purchase. No deadline in anything we send is of our making. The only urgency is the public enforcement record, which you can read without us.
We describe what we observed and which published standard it runs into. We do not tell you that you have broken the law. That judgment belongs to your counsel and to the agencies, and we work alongside the former.
Our review experience comes from taking a practice of our own through certification and keeping it certified since. We say so up front because it is the credential, and because you should know it before you share anything with us.
FAQ
What operators ask before they send a domain.
Is the first look really free?
Yes. The scorecard is the proof of the work, so it is complete for what it covers and there is no obligation attached to it. If it tells you everything you need and you fix it yourself, that is a fine outcome and a normal one.
Will you report us if we do not hire you?
No. The commitment above is the whole answer, and it does not depend on how the conversation goes. Nothing we send is contingent on anything you do next.
Who is this for?
Licensed telehealth practices selling compounded therapies that hold certification or intend to. If a business sells outside the prescribing model, its problem is the model rather than the copy, and an audit is the wrong tool for it.
What does remediation cost?
There is no price list. The fee is fixed, quoted after the scorecard, and scoped to what was found: how many pages carry findings, whether the legal pages need counsel involved, and whether a certification re-review is coming. Never hourly, and the scope does not move after signature.
Can you guarantee a letter never arrives?
No. Agencies and certifying bodies decide on their own criteria and their own schedule. What a remediation does is remove what a reviewer can point to on the page, which is the part within anyone's control.
What do you need from us?
Nothing beyond the domain. The review reads public pages the way a patient and a reviewer would. Do not send logins, patient information, or protected health information, and we will not ask for them.
Is this legal advice?
No. We are not a law firm and we do not practice law. We build the operational and technical structure and prepare documents for review. Your attorney reviews and signs off, and we work alongside them. If you do not have healthcare counsel, we will introduce you to some.
Request
Send the domain. The first look is free and it is yours either way.
Name, work email, and the site. We reply to every request, and nothing we send back is conditioned on what you do next.
Kynzen provides business and operational consulting. Not legal, medical, or tax advice.