How to Open a Virtual TRT Clinic

To open a virtual TRT clinic, stand up a storefront that keeps protected health information off it, contract a licensed provider network to approve every order, partner with a 503A compounding pharmacy for testosterone, and add lab monitoring plus cold-chain shipping. Because testosterone is a Schedule III controlled substance, prescribing depends on the DEA telemedicine flexibility window in effect through December 31, 2026. Everything else in this guide is about doing those four things without building a liability.

TRT is not the same launch as a hair-loss or skincare brand. Most direct-to-consumer telehealth categories run on non-controlled 503A products, where the main gates are provider approval and state licensing. Testosterone adds a controlled-substance layer on top of all of that. If you have already read our how to start a men's health telehealth clinic guide, treat this as the TRT-specific deep cut: the parts that are different are the parts that will get you in trouble if you skip them.

Is opening a virtual TRT clinic even legal right now?

Yes, under a temporary federal window, and only if you build for controlled substances. Testosterone is a Schedule III controlled substance under the Controlled Substances Act. The Ryan Haight Act of 2008 generally requires at least one in-person evaluation before prescribing a controlled substance over the internet. Telemedicine TRT is possible today only because of a DEA/HHS flexibility extension.

The specifics matter. DEA and HHS published the Fourth Temporary Extension of COVID-19 Telemedicine Flexibilities for Prescription of Controlled Medications in the Federal Register on December 31, 2025 (document 2025-24123), effective January 1, 2026 through December 31, 2026. During that window, a DEA-registered practitioner may prescribe controlled medications, including testosterone, via telemedicine without a prior in-person evaluation. That is an exception, not a repeal of Ryan Haight. The single most important strategic decision you make is designing a clinic that can keep operating if this window is not renewed. We cover that scenario near the end.

Why is testosterone treated differently from other telehealth products?

Because it is a scheduled drug, so the whole operating model inherits controlled-substance rules. Non-controlled 503A products, like many dermatology and hair-loss items, need provider approval and licensing but not DEA registration. Testosterone requires DEA-registered prescribers, controlled-substance recordkeeping at the pharmacy, and prescribing that is gated by federal telemedicine rules on top of ordinary state medical practice law.

That difference shows up everywhere: which providers you can contract, how the pharmacy logs the fill, which states are practical to ship to, and how much documentation you keep. It is also why we recommend most operators not build a TRT-only clinic. Carrying non-controlled categories alongside TRT spreads risk if the controlled-substance rules tighten, a point we make in more depth in protect telehealth margins with category diversification.

Who approves the prescriptions, and what does approval actually mean?

A licensed, DEA-registered provider approves every single order, based on the patient's intake and labs. This is not a rubber stamp and it is not automation. The provider reviews symptoms, confirms medical appropriateness, checks labs, and takes clinical responsibility for the prescription. In a defensible TRT clinic, no order reaches the pharmacy without that human decision recorded against the patient record.

You get providers one of two ways: employ or contract them directly, or work through an established clinical group. Either way, they must be licensed in the patient's state and registered with the DEA. Building coverage across states is a real project, which is why operators lean on a 50-state prescriber network rather than credentialing one clinician at a time. For how approval is enforced in the order flow rather than assumed, see provider approval on every order. neolife is built so the prescription is gated at the clinical layer, not at the shopping cart.

What does the lab monitoring workflow look like?

TRT is a monitored therapy, so labs are part of the product, not an afterthought. A defensible program orders baseline labs before starting testosterone and follow-up labs on a schedule the provider sets. The workflow has to capture results, route them to the provider, and gate refills on review.

The core panel your provider network will typically design around includes:

• Total testosterone, and often free testosterone, to confirm a real deficiency before treating and to titrate dosing.
• Hematocrit and hemoglobin, because testosterone can raise red blood cell counts (erythrocytosis), a known safety signal.
• PSA and a prostate assessment for age-appropriate patients, to monitor prostate health.
• A general metabolic and lipid picture, plus estradiol where clinically indicated.

The exact tests, thresholds, and cadence are clinical decisions your providers own. Your job as the operator is to make ordering, result capture, and provider sign-off a reliable loop inside the patient record, not a pile of PDFs in an inbox. When a follow-up hematocrit comes back high, the system should hold the refill for provider review, not auto-ship.

Which pharmacy fills the testosterone, 503A or 503B?

For patient-specific TRT prescriptions, you work with a 503A compounding pharmacy. Under the FDA compounding framework, 503A pharmacies compound against an individual prescription tied to a valid patient-provider relationship. 503B outsourcing facilities make office-stock batches under cGMP and serve a different use case. Most virtual TRT clinics route patient-specific injectable and topical testosterone through a 503A partner.

Compounded testosterone commonly takes a few forms, each with its own handling and status:

Formulation	Typical form	Controlled status	Fulfillment note
Testosterone cypionate	Injectable oil, vial	Schedule III	Most common TRT; ships to patient, temperature-aware
Testosterone enanthate	Injectable oil, vial	Schedule III	Alternative ester; similar handling to cypionate
Testosterone cream/gel	Topical, compounded	Schedule III	Daily dosing; still controlled, still provider-gated
Ancillary support (e.g., anastrozole)	Oral, as indicated	Non-controlled	Managed by provider protocol, not always dispensed

A few operating requirements do not bend. The pharmacy must be licensed in every state you ship into, and it must be set up to dispense controlled substances with the recordkeeping that implies. Confirm both before you send a single order. For the full 503A-versus-503B breakdown, read 503A vs 503B pharmacy for telehealth. One practical note on money: keep your pharmacy economics clean, using flat fair-market fees rather than any percentage-of-value or take-rate arrangement, to stay clear of anti-kickback and EKRA risk.

How do injectables get to the patient safely?

By shipping direct-to-patient with packaging and licensing that respect the product. Compounded injectable testosterone is a sterile drug, so shipping is not a solved commodity problem. You need validated packaging, sensible transit times, and a pharmacy partner whose fulfillment is built for temperature-aware, controlled-substance shipments across state lines.

Direct-to-patient shipping also means the pharmacy's state licensing has to match your patient footprint, and controlled-substance shipments carry extra care. This is where a lot of TRT launches underestimate the work. The details of validated coolers, transit windows, and what actually needs cold handling are worth getting right before your first ship, and we walk through them in cold-chain shipping for compounded injectables. The clinic's job is to make sure every shipped order is one a provider approved, against current labs, to a state the pharmacy is licensed in.

What is the actual stack, layer by layer?

Four layers, each doing one job, connected by an overlay so you are not locked into any single vendor. Here is how the pieces sit together and where neolife fits.

Layer	What it does	Who provides it
Storefront	Marketing, checkout, subscription, refills. PHI stays off it.	Shopify (commerce only)
Clinical intake and record	Intake, labs, provider review, the patient record you own	neolife (PHI-safe layer)
Provider network	Licensed, DEA-registered clinicians who approve each order	Your employed or contracted clinicians
Fulfillment	503A compounding, controlled-substance dispensing, shipping	Your 503A pharmacy partner

The storefront runs on Shopify, but Shopify does not sign HIPAA Business Associate Agreements, so no protected health information can live there. Intake answers, lab results, and clinical notes belong in a HIPAA-appropriate system. neolife's architecture keeps PHI off the storefront by design, holding the clinical layer and the patient record separately while Shopify stays a clean commerce surface. There is more on that split in 503A vs 503B pharmacy for telehealth and the men's-health launch guide linked above.

neolife is the overlay that sits on top of the pharmacy you already use. It takes an approved order and routes it into your 503A partner without a rip-and-replace, so you can add or switch pharmacies later without rebuilding. Critically, you own your patient data as the system of record. The clinic owns the relationship; the rail moves the order. That ownership is what lets you survive vendor changes and regulatory changes alike.

What are the launch steps in order?

Follow them in sequence, because each one gates the next. Skipping ahead is how clinics end up shipping controlled substances they cannot defend.

1. Decide your entity and structure, and get counsel on the MSO/PC arrangement for practicing medicine across states.
2. Contract a licensed, DEA-registered provider network covering your target states, with a TRT clinical protocol including lab requirements.
3. Sign a 503A compounding pharmacy licensed in every state you will ship to, confirmed for controlled-substance dispensing and injectable shipping.
4. Stand up the storefront on Shopify for commerce only, and connect the PHI-safe clinical layer so intake and records never touch the store.
5. Wire the lab ordering and result-review loop so refills gate on provider sign-off.
6. Get LegitScript certified, which is effectively required to run paid ads for a telehealth or Rx business on Google and Meta.
7. Run a small pilot cohort end to end, from intake through approved order, fill, cold-chain-aware ship, and follow-up labs, before you scale spend.

LegitScript is not optional if you plan to advertise; details are in LegitScript telehealth certification. Sequence matters more here than in most launches because of the controlled-substance layer.

What if the DEA telemedicine window closes?

Assume it might, and build so you are not exposed. The current flexibilities run through December 31, 2026. If they are not extended, controlled-substance telehealth prescribing reverts toward the Ryan Haight in-person evaluation requirement. Operators who take this seriously are building hybrid or in-person evaluation pathways, referral relationships, and product lines that also carry non-controlled 503A categories so revenue does not depend entirely on the window staying open.

The overlay model is what makes adaptation cheap. Because you own the storefront and the patient record, and because neolife routes orders rather than holding your business hostage, you can change the clinical workflow, add an in-person step, or lean harder on non-controlled categories without rebuilding the company. A clinic that rented its whole stack from a single telehealth-in-a-box vendor does not have that option.

Talk to us

neolife is the fulfillment rail underneath a virtual TRT clinic: PHI-safe intake, provider-gated approval, and order routing into the 503A pharmacy you already use, with you owning the patient record. You keep your storefront and your data, and you add pharmacies without a rip-and-replace. If you are launching or moving a TRT program, talk to us about running it on the rail instead of a locked box.

This article is educational and is not legal, medical, or regulatory advice. Testosterone is a controlled substance and the rules change; verify every requirement with qualified counsel and licensed providers before you operate.