How FDA rules on injectables and devices shape a US med spa menu

What to take away

How FDA approval pathways split injectables from devices on a med spa menu

Every item on your menu sits in one of two federal buckets, and the bucket decides the paperwork you keep.

Botulinum toxin, hyaluronic acid fillers, poly-L-lactic acid and calcium hydroxylapatite are regulated as drugs or biologics. Each reaches market through a new drug application, a biologics license application or an abbreviated pathway, and each approval names an indication, a dose and often a specific anatomic site. The FDA drug hub publishes the labeling that governs those uses.

Lasers, radiofrequency platforms, microneedling pens, cryolipolysis units and ultrasound devices take the device pathways instead, and the FDA device hub explains the categories. A clearance letter covers the intended use written into the cleared labeling. It is not a licence to treat everything the box can reach.

Two services can look identical on your website and carry completely different legal footing. Toxin injected into the glabellar complex is an approved use. The same vial injected for jaw slimming is not, unless a product holds that indication.

Build the menu as a list. Beside each service, write the product, the approval or clearance number, and the labeled indication. A service with no matching line is a decision you are making on purpose, not an accident.

State law stacks on top of all of it. Four states show how far the rules diverge.

Boards in other states publish their own delegation rules. Rule numbers and supervision levels change, so confirm the current text with the board before a service page goes live.

Federal footing can be perfect while the delegation model fails a board inspection. Our med spa licensing breakdown maps those authorities.

Device classes, 510(k) clearance and what lasers and energy devices need before use

Device class is the first question to ask about any capital purchase.

Class II covers most of an aesthetic device floor. A 510(k) clearance means the maker showed the device is substantially equivalent to a legally marketed predicate. It does not mean the device was tested head to head against every rival.

When a sales representative demonstrates a device, ask for the 510(k) number, the cleared indications and the user manual. A rep who cannot produce them is selling a device that is not ready for your floor. The FDA device advice pages walk through classification and clearance.

Off-label device use is common and shifts risk to the clinician and the business. A cleared device used outside its cleared indication is a practice decision. Advertising that use as though it were cleared is a different act with a different consequence.

Maintenance and calibration belong in the same file as the clearance letter. A laser with a lapsed calibration record is a weak point in any injury claim, and several states fold device maintenance into the delegation standard. Track serial numbers, service dates and operator credentials together.

Capital planning and compliance planning belong in the same meeting. Our comparison of med spa equipment brands weighs service networks and consumable costs, which decide whether a cleared device still earns after year one.

Botulinum toxin and dermal filler approvals, plus the off-label promotion line

Botulinum toxin type A products are biologics with named indications. Glabellar lines, lateral canthal lines and forehead lines appear across approved labels, and each label states the muscles, doses and age ranges studied.

Dermal fillers follow the same pattern. Hyaluronic acid fillers hold approvals for nasolabial folds, lips, cheeks and hands depending on the product. Calcium hydroxylapatite and poly-L-lactic acid products carry their own labeled sites and volumes.

Off-label use is legal in the practice of medicine. Off-label promotion is not. A clinician may inject a filler outside its labeled site when it is medically appropriate and documented in the chart. A med spa may not build a campaign around that use or train staff from materials that present it as approved.

The line runs through your marketing, not your treatment room. Social posts, service pages, price lists and front desk scripts are all promotion. A service page naming a body area the product is not approved for has crossed from clinical judgment into advertising an unapproved use.

Federal guidance shapes where that line sits. Documents on labeling, promotion and unapproved products are searchable in the FDA guidance library, and they are written for manufacturers. That tells you how an investigator will read your website.

Most enforcement starts here. Warning letters against aesthetic businesses commonly cite unapproved injectables, unsubstantiated claims or promotion of unapproved uses. They are public, listed by company and date, and free to read.

Treat the approved indication as the default marketing claim. Keep any off-label service as a private clinical conversation documented in the chart. Our med spa compliance checklist covers how to record that conversation.

Combination products and drug-device rules that catch some aesthetic treatments

Some services are neither purely drug nor purely device, and that is where owners get surprised.

A combination product pairs a drug, device or biologic, such as a microneedling device with a topical drug or a laser with a photosensitizing agent. FDA assigns a lead center based on the primary mode of action, and the regulatory path follows that assignment.

Injectable skin boosters, biostimulators and some fat-dissolving injections sit close to this boundary. A product marketed as a device that acts through chemical means, or the reverse, invites scrutiny of how it was cleared or approved.

Imported product is a recurring problem. Unapproved fillers and toxins sold through overseas suppliers, often at prices that look too good, are the most common single source of enforcement against med spas. There is no lawful pathway to inject a product FDA has not cleared or approved for US distribution.

Compounded versions of approved toxins need their own conversation. Compounding rules limit what a pharmacy may produce and what a prescriber may use, and those boundaries have shifted. Get written confirmation from the compounding pharmacy and your medical director before the product reaches the menu.

When a service combines a device and a drug, write two protocols. One covers device settings and the cleared indication. The other covers the drug, its approval status and the injection plan. Inspectors read them separately.

Reading FDA warning letters and recalls as a menu risk check

Warning letters are the closest thing to a public list of what not to do.

Read each one for three things: the product named, the claim made, and the corrective action demanded. A letter citing an unapproved injectable usually describes how the business advertised it, which is the part owners skip.

Most FDA warning letters ask for a written reply within 15 working days of receipt. The reply has to name the corrective steps taken and the date they will be complete. Ask for an extension before that window closes, not after.

Missing the window does not end the matter. FDA can seize product, seek an injunction in federal court and assess civil money penalties, and the letter stays public on the agency site. Your written reply is also a document a state board can request.

Run a quarterly check against your own menu. Take each service page and each product you buy, search the FDA warning letters archive and the recall notices, and note any match.

A product named in a recall notice comes off the floor the day you learn of it, with lot numbers checked against inventory.

Recalls come in classes. Class I covers products likely to cause serious harm, Class II covers temporary or reversible harm, Class III covers violations unlikely to cause harm. Any class touching an injectable you stock justifies a same day inventory check.

Supplier diligence is the same exercise from the other direction. Ask for the distributor's license, the product's approval or clearance number, and lot documentation on every shipment. Grey-market pricing is a signal, not a bargain.

Keep a one page log of every product on your menu, its approval or clearance number, your supplier, and the date you last checked enforcement databases. That log answers most questions before an inspector asks them. Our guide to profitable med spa services shows how to weigh margin against this compliance load.

Menu and advertising copy: compliant and non-compliant examples

Menu-level detail means naming the product, its pathway and its labeled indication. That line goes next to each service.

Dermal fillers clear as Class III devices, so the number you record is a PMA number, not a drug approval. Numbers and indications sit on the carton and in the FDA Purple Book, Orange Book and device databases.

Advertising copy is the second half of the menu. Two claims can describe one treatment and only one is publishable.

Advertising rules add a second layer. The Federal Trade Commission polices deceptive claims, and state boards police how you describe supervision and credentials. Testimonials, before and after photos and outcome promises all fall inside that review.

Keep superlatives out. Permanent, risk free, or FDA approved for a use that was never approved are the phrases that generate complaints. Say what the product is cleared or approved to do, and say who performs the treatment.

Price advertising carries its own risk. A promotional price for a service you cannot legally deliver as advertised, because supervision or product requirements differ, is a refund and a complaint waiting to happen.

Train the front desk on the same language. The person answering the phone makes marketing claims too, and a script promising an unapproved result undoes a compliant website.

Marketing and compliance should share a calendar. Our med spa marketing and growth playbook treats claim review as part of campaign intake rather than a last minute approval.

Training, labeling and adverse event records a board investigator reads

Adverse event reporting is not optional for serious outcomes. Device-related deaths and serious injuries go to FDA through the manufacturer and, in many cases, directly to the agency. Drug reactions follow the MedWatch route. A log with no entries for years suggests nobody is looking, not that nothing happened.

Labeling discipline matters at the point of care. Keep the package insert or user manual accessible, and do not decant product into unlabeled vials. Unlabeled syringes and vials are a standard inspection finding and a real patient safety risk.

The training file should show more than attendance. Record the trainer, the product, the technique covered and a competency sign-off. When a board investigator asks whether an injector was trained on a specific product, a certificate with a date is a weak answer and a signed competency record is a strong one.

Bloodborne pathogen training and infection control procedures belong in the same file. The OSHA bloodborne pathogens standard and CDC infection control guidance set expectations that apply to every injection room.

Review the whole file once a year, before renewal season rather than after a complaint. The cost of that afternoon is small next to the cost of rebuilding a menu under investigation.

Common questions

Does a 510(k) cleared device mean the treatment is FDA approved?

No. Clearance means the device is substantially equivalent to a legally marketed predicate for a stated intended use. It is not approval of every treatment a provider might perform with it. The cleared indications are the boundary.

What happens if FDA sends a warning letter to a med spa?

The letter names the violation and demands corrective action within a set period. Ignoring it can lead to seizure, injunction or referral, and the letter becomes public and searchable. Read the ones sent to businesses like yours before you write your own service pages.

Do I need a DEA registration to stock botulinum toxin?

Botulinum toxin products are not controlled substances under federal scheduling, so a DEA registration is generally not required for them. Some states impose separate requirements. Check your state board and your pharmacy rules before you order.