In most med spas, the Medical Director's approval of protocols happens once — at onboarding — and is recorded as a signature on the last page of a binder, or an email that says "looks good."
Then the protocols change. A product is added. A dosing range is updated. A new injector joins. And nobody is quite sure whether the Medical Director ever saw the current version.
That's the gap this article is about.
Why the sign-off matters more than the protocol
A protocol tells your team how to perform a treatment. The sign-off is what connects that protocol to a licensed physician's clinical judgment.
When something goes wrong — an adverse event, a complaint, a board inquiry, an insurance claim — the questions tend to be:
What protocol was the clinician following?
Was that protocol approved by the supervising physician?
Was it the version in effect on the date of treatment?
A well-written protocol with no traceable approval answers only the first question. One missing sign-off is often all it takes to turn a defensible treatment into an unsupervised one on paper.
What a sign-off should record
A signature alone doesn't establish much. A meaningful sign-off captures:
Who approved it — the named, licensed physician, not "the practice."
Which version — the exact revision approved, so later edits can't inherit an old approval.
When — the date the approval took effect.
What they attested to — that they reviewed the content, and that it reflects their clinical direction for this practice.
Status — whether the protocol is approved, pending review, or retired.
The key word is version. If a protocol can be edited after it's approved without the approval being invalidated, the sign-off doesn't really mean anything.
Common sign-off failures
The blanket signature. One signature at the front of a 200-page binder, covering every protocol inside — including ones added later.
The email approval. "Approved!" in an email thread, with an attachment that has since been edited three times.
The inherited protocol. Protocols carried over from a previous Medical Director, never re-reviewed after the change.
The orphaned product. Protocols for products the practice stopped offering, still marked active and still signed.
The silent edit. A dosing table updated by a nurse manager after sign-off, with no new approval.
Each of these can look fine for years. They only surface when someone asks for proof.
Changing Medical Directors
When a practice changes Medical Directors, every protocol should be re-reviewed and re-signed by the new physician. The previous physician's approval reflected their clinical judgment; it doesn't transfer.
In practice, that re-review is where binders fall apart. It's hundreds of pages, the new physician has limited time, and there's no easy way to track which protocols have been reviewed and which haven't.
What good looks like
A healthy sign-off process has a few properties:
Every protocol has an individual approval status — not one signature for the whole library.
Edits reset approval. A changed protocol goes back to "pending" until it's re-signed.
The history is kept. You can see who approved each version and when, not just the latest one.
Clinicians only see approved versions in the treatment room.
It's easy for the physician — a review queue, not a binder to page through.
How ClinicalSOPs handles it
In ClinicalSOPs, sign-off is per protocol and per version. Your Medical Director reviews and attests to each protocol individually, changes send it back for review, and the full approval history is kept — so when someone asks what was approved on a given date, you can show them.
It's built for established practices that already have a Medical Director and want the paperwork to match the care they're actually providing.
See the sign-off workflow in action: request a demo.
This article is general information, not legal or medical advice. Medical Director and supervision requirements vary by state; confirm your obligations with counsel.