---
title: "LegitScript certification: the real timeline, week by week"
description: "Ad platforms will not run telehealth ads without it, and most applicants stall in document review. The sequence that gets brands certified on the first pass."
canonical: "https://cuvo.co/blog/legitscript-certification-timeline"
last-updated: "Jun 17, 2026"
---
# LegitScript certification: the real timeline, week by week

By Cuvo Legal Team, Compliance Department. Published Jun 17, 2026. Compliance.

Google, Meta, and the major card networks all check for LegitScript certification before a telehealth brand can advertise or take payment, which makes the review a gate, not a formality. Most applicants clear the questionnaire and then stall for months in document review, usually over the same handful of disclosure and licensing gaps. Here is what LegitScript actually examines, the week-by-week sequence that clears on the first pass, and the part Cuvo prepares on a brand's behalf.

For a direct-to-consumer telehealth brand, certification is not paperwork you file after launch. It is the switch that turns advertising on. Google's Healthcare and medicines policy and Meta's Drugs and Pharmaceuticals advertising standard both require LegitScript certification before a US advertiser can promote prescription-drug and telemedicine services, and the major card networks check for it before onboarding certain healthcare merchant categories. Until the certificate clears, campaigns do not run. That single dependency is why the review timeline decides your launch date.

**The gate at a glance**
- Google Ads: LegitScript required for prescription-drug and telemedicine ads (US)
- Meta: LegitScript certification or Meta's own review, plus onboarding
- Card networks: Checked for certain healthcare merchant categories
- What is reviewed: Registration, internal and external practices, advertising
- Self-managed timeline: 3 to 6 months, industry standard
- With Cuvo's prepared structure: 7 to 14 days average, 3 days fastest recorded

## 01. Why certification is the advertising gate

Google restricts ads for the online prescribing, dispensing, and sale of prescription drugs, and its published healthcare policy states that in the United States advertisers must be certified by LegitScript to run them. Google's own guidance is blunt about enforcement: accounts found promoting prescription drugs without the required certification can be suspended on detection, without a prior warning. Telemedicine providers that facilitate prescribing sit squarely inside that policy.

Meta's Drugs and Pharmaceuticals advertising standard runs on the same hinge. Meta's policy states that advertisers cannot run ads promoting prescription drugs unless they are actively certified by LegitScript or have cleared Meta's own internal review, have completed Meta's prescription-drug onboarding, and include a disclaimer directing people to consult a licensed health professional or obtain a valid prescription. Meta also limits targeting for these ads to the United States, Canada, and New Zealand, and to adults. A brand that plans to acquire patients on either platform is planning around LegitScript whether it says so or not.

## 02. What LegitScript actually reviews

LegitScript does more than confirm that a business exists. Its published standards group the review into four areas, and an application is judged on all of them together rather than on any one in isolation.

**Registration and compliance**
- Valid licensing for every service and state you operate in
- Compliance with the law in each jurisdiction you serve
- Adherence to prescription and telemedicine law

**Internal practices**
- Disclosure of legal or regulatory history from the past ten years
- Corporate structure and ownership on the record
- A clear answer to who controls clinical decisions

**External practices**
- Compliant patient services and vetted affiliates or partners
- Privacy protections for patient data
- A valid prescription behind every medication dispensed

**Transparency and advertising**
- Honest, accurate claims across the website
- Pricing that does not imply medication without a consultation
- Advertising aligned with the law and platform policy

Two of those areas, the site claims and the clinical ownership, are where most first-time applications come apart. They are the subject of the next two sections.

## 03. The week-by-week sequence

LegitScript itself says review time depends on the sequence in the queue, the complexity of the business, the responsiveness of the applicant, and the clarity of the documents provided. Three of those four are inside your control before you ever click submit. A prepared application moves through the phases quickly because there is nothing to send back. Here is the shape of a clean run set against the points where unprepared applicants lose weeks.

**A prepared application against where unprepared applicants stall**

| Stage | Prepared application | Where unprepared applicants stall |
| --- | --- | --- |
| Application and fee | Filed with the checklist already complete | Filed early to *start the clock*, with gaps unresolved |
| Questionnaire | Answered from existing policies and licenses | Answers surface policies that must be written from scratch |
| Document review | Records match the answers; few clarifications needed | **Back-and-forth** over licensing, ownership, and disclosures |
| Site claims check | Prescription-required and consultation language already live | Pricing pages flagged for implying medication without a visit |
| Decision | Certificate issues; ads and payments unlock | Rejection, remediation, resubmission, months added |

## 04. Where applications actually stall: document review

Most applicants do not fail the questionnaire. They stall in document review, and LegitScript's own guidance and its telehealth advertising webinars point at the same recurring gaps. The most common is website disclosure: a site that lists medication prices without stating clearly that a consultation and a valid prescription are required, or that omits prescription-required language altogether. Close behind are unclear clinical ownership, where it is not obvious who employs the providers and who controls prescribing, and incomplete licensing records for the states a brand intends to serve.

LegitScript reviewers describe a predictable trap: applicants who submit first and plan to remediate later are the ones who end up in multi-month cycles, because a resubmission filed before the underlying issue is fixed simply draws another rejection. Remediation is rarely a document you can produce in an afternoon. It often means rewriting site copy, restructuring an entity, or obtaining a license, and each round resets the clock. The difference between three days and three months is almost never the reviewer. It is how much was ready before the file was opened.

**Self-managed application**
- Site claims and disclosures written and revised mid-review
- Clinical ownership assembled while the questionnaire is open
- Licensing gathered state by state under deadline
- Each rejection restarts a document round; 3 to 6 months is common
- Advertising and payments wait the entire time

**Arriving with Cuvo's structure**
- Launches on providers, pharmacies, and technology already certified
- Policies, licensing records, and disclosures assembled before filing
- Clinical ownership defined by the operating structure, not improvised
- Cuvo files the application and manages the clarifications to a decision
- Average 7 to 14 days, with the fastest recorded approval at 3 days

## 05. What Cuvo prepares, and what stays yours

Cuvo prepares and files the certification as part of the platform. Cuvo assembles the policies, licensing records, and documentation LegitScript reviews, submits the application, and manages the clarifications through to a decision. The brand reviews and signs. Because a brand on Cuvo launches on providers, pharmacies, and technology that already operate under LegitScript certification, the review starts from a known platform rather than a blank file, which is what compresses the timeline.

The line is just as clean on the other side. The certification, the compliant structure underneath it, and the ongoing obligations that keep it valid are Cuvo's to prepare and maintain. The advertising is not. Campaigns, creative, targeting, and marketing strategy remain the operator's, run on the accounts the certificate unlocks. Cuvo does not write a brand's ads, and certification does not mean LegitScript, Google, or Meta endorses a brand. It means the brand met the standard to be allowed to advertise.

> **Where the work divides** Cuvo prepares and files the LegitScript application and maintains the certified structure it rests on. The operator owns the ads, the campaigns, and the marketing that run once the certificate clears. Certification is permission to advertise, not a guarantee of approval and not an endorsement by any platform.

- 3 days Fastest LegitScript approval on Cuvo (Recorded across recent Cuvo brand applications)
- 7-14 days Average approval with Cuvo's prepared structure (Application filed and managed by Cuvo)
- 3-6 months Industry standard, self-managed (The typical self-run review window)

## 06. After the certificate: renewals and monitoring

Certification is not a finish line. LegitScript renews certification annually, which means paying the renewal fee and re-verifying that licensing, structure, and site claims still hold. Between renewals, LegitScript monitors certified merchants: it reviews website content, watches licensing status, and tracks complaints, and it expects to be notified of significant changes such as a shift in ownership, a new location, a change in licensure, or a material change to services. If monitoring surfaces a problem, the merchant is given a window to correct it or risks suspension or revocation, which would pull advertising down with it.

- Annual renewal with updated documentation and fees
- Periodic monitoring of site content, licensing status, and complaints
- Notice to LegitScript of ownership, location, licensing, or service changes
- Advertising kept truthful and aligned with platform policy on an ongoing basis
- Prompt remediation of any issue LegitScript flags, to hold the certificate

On Cuvo, those obligations sit inside the platform. Cuvo maintains the certified structure and handles the renewal and its documentation, so the recurring compliance work does not land on the brand's team. The operator keeps its attention on the campaigns.

## Frequently asked questions

**Q: Can we run ads before certification comes through?**

A: No. Google and Meta both check for active LegitScript certification before a US advertiser can promote prescription-drug or telemedicine services. Running campaigns before the certificate clears risks disapproval and, on Google, account suspension on detection without a prior warning. Certification is the event that unlocks advertising, which is why it sets the launch date. Cuvo manages LegitScript certification as part of the platform, with expedited certification included in Grow and Enterprise setup.

**Q: What happens if the application is rejected?**

A: Most rejections are not the end. They identify specific gaps, commonly a website disclosure, a licensing record, or unclear clinical ownership, that must be corrected before resubmitting. The important point from LegitScript's own guidance is to remediate fully before reapplying, because resubmitting over an unfixed issue simply produces another rejection and adds weeks. Cuvo assembles the documentation before filing to avoid that cycle, though no application outcome can be guaranteed.

**Q: Does certification transfer between entities?**

A: Certification is tied to the certified business and website, not something a new brand inherits automatically, and LegitScript expects to be notified of ownership or structural changes. A brand on Cuvo receives its own certification, built on already-certified infrastructure rather than transferred from another entity.

**Q: What does LegitScript certification cost?**

A: LegitScript's published pricing is a one-time, nonrefundable application fee plus an annual certification fee charged per website, with the exact amount depending on the complexity of the business; LegitScript does not post a single flat price. Published certification guides commonly cite figures in the range of a roughly $975 application fee and about $2,150 per website per year, but treat those as third-party estimates rather than a quote from LegitScript. These fees are separate from anything Cuvo provides.

**Q: How do renewals work?**

A: Certification is renewed each year. LegitScript re-verifies licensing, structure, and site claims and collects the renewal fee, and it monitors certified merchants between renewals. On Cuvo, the platform maintains the certified structure and manages the renewal documentation, so the recurring work stays off the operator's plate.

**Keep reading**
- [DEA telemedicine flexibilities extended through 2026](/blog/dea-telemedicine-flexibilities-2026): The prescribing rule behind every telehealth launch
- [The best white-label telehealth platforms](/blog/best-white-label-telehealth-platforms): How the build-versus-partner options compare
- [How to start a virtual clinic without a medical license](/blog/start-a-virtual-clinic-without-a-medical-license): Where certification sits in the eight launch steps
- [Cuvo pricing](/pricing): What the platform includes, certification prepared and filed

*Compliance disclaimer: This article is for informational purposes only and is not legal advice. LegitScript sets its own review schedule, and certification is not guaranteed. Fastest and average timelines reflect recent Cuvo brand applications and typical outcomes, not commitments, and no result on any individual application is promised. Certification does not imply that LegitScript, Google, Meta, or any payment processor endorses a brand. Each brand remains responsible for its own advertising and for compliance with all applicable platform policies and federal and state law.*

Canonical page: https://cuvo.co/blog/legitscript-certification-timeline