An open regulatory action, a board complaint, a previous merchant termination or a warning letter attached to a principal is rarely what ends a LegitScript application, and concealing one reliably is, because the record is discoverable and being found converts a fact into a credibility problem.
The claims audit is the longest piece of work in most LegitScript applications, and its output is a list of website changes owned by people with a roadmap, which is why a certification timeline is usually decided by a sprint planning meeting nobody invited compliance to.
Certification attaches to a domain, so a rebrand, a domain migration or a corporate restructure changes the thing that was certified, and a brand that redirects its traffic before telling anyone ends up advertising a domain that appears in no LegitScript listing.
A LegitScript reviewer asks how a telehealth clinic handles an adverse event, a complaint and a product recall, and the answer that fails is a policy nobody has used, because governance is assessed on the record of decisions rather than on the document describing who would make them.
Certification assesses a website, so a pre-launch telehealth business cannot file against a landing page and a promise, and the sequencing question that decides a launch date is which parts of the build have to be finished before a LegitScript application can be submitted at all.
Mental health and substance use treatment delivered remotely combines controlled substances in some models, a patient population in crisis and confidentiality rules that go beyond HIPAA, which makes it the category where a LegitScript reviewer expects clinical governance to be documented rather than described.
The LegitScript application fee is charged per website and is not refunded whatever the reviewer decides, so a refiling spends it again, and the most common way businesses spend it twice is resubmitting quickly with one correction rather than diagnosing what actually generated the decision.
A LegitScript reviewer can reach the confirmation email, the patient portal, the dosing instructions and the card that ships in the box, and those four surfaces are usually written by different people to no standard at all, which is where a corrected claim most often survives.
Google Ads Healthcare Certification is the approval telehealth advertisers plan for, and the other channels a growth team relies on, paid social, native, affiliate, email and SMS, each apply their own healthcare rules, so a certified brand can still find four of its five channels closed.
A LegitScript review compares four accounts of a business against each other, and the one applicants underestimate is the public record, because archived pages, registry filings, app listings and a staging domain nobody retired are all reachable without asking you a single question.
A telehealth catalogue containing a laboratory panel or a home test kit adds four questions to a LegitScript application that a medicines-only file never faces: which laboratory runs it, who is licensed to order it, who interprets the result, and what the marketing promises the number means.
Two of the four factors LegitScript names as deciding review length are the applicant's responsiveness and the sufficiency of their answers, which makes the period after submission the one stretch of the timeline where a business can still make things materially worse.