Healthcare Payment Processing: How the Right ISO Protects the Merchant and the Agent

The launch problem I see most often

Healthcare entrepreneurs are some of the most capable founders I meet. They know how to build a brand, acquire customers, create a strong patient experience, and move with urgency. The agents who bring us these businesses are equally invested. They spent years building trust, and their reputation is attached to the ISO they recommend.

Then payment processing becomes the surprise at the end of the project.

The website is finished. Advertising creative is ready. Inventory, clinicians, pharmacies, or care partners are already lined up. Revenue projections assume a near-term launch. Only then does someone ask about healthcare certification, licensing evidence, marketing claims, recurring billing, or the exact relationship among the brand, medical provider, pharmacy, and merchant of record.

That is usually when the launch calendar starts moving in the wrong direction.

The problem is not that healthcare certification or payment underwriting exists. The problem is leaving the merchant and the agent to coordinate separate companies, requirements, fees, and timelines with no clear owner. A regulated healthcare business cannot treat compliance, marketing access, and payment acceptance as three unrelated approvals handled one after another—and a referral partner should not have to become the project manager just to protect the relationship.

The WSAA conversation that captured the problem

At WSAA, a referral agent who was not working with Mentom noticed our LegitScript partnership on the booth banner and stopped to ask about it. He was submitting his first healthcare merchant through another ISO, and his description was blunt: the process had been disjointed, messy, annoying, and expensive.

That did not surprise me. He was trying to protect a merchant relationship while learning a complex certification and underwriting process in real time. Every disconnected handoff made the ISO look less prepared, but the merchant was not blaming the ISO alone. The agent’s name was attached to the recommendation.

We explained that qualified merchants referred through Mentom receive white-glove coordination across certification readiness and payment underwriting. Mentom does not charge the $2,500 expedited-processing fee. Through our enterprise relationship with LegitScript, qualified merchants using Mentom’s route receive access to the expedited certification-review path without purchasing LegitScript’s separate $2,500 expedited-processing add-on. Standard application and annual certification fees may still apply and are determined by LegitScript. Eligibility, documentation, remediation, timing, and final certification remain LegitScript decisions.

The agent’s response was immediate: if that was the experience Mentom provided, we had gained a new referral partner. His reasoning was even more important than the referral itself. Agents need an ISO they can trust not to mismanage situations that affect their merchants, because those merchant relationships are ultimately the agent’s livelihood.

One business, three connected workstreams

From the merchant’s perspective, the goal is simple: launch the business, reach patients, and accept payment. From the agent’s perspective, the goal is equally clear: place the merchant with a partner that will execute well and strengthen the relationship. The organizations evaluating the business are still looking through different lenses.

These reviews are related, but they are not interchangeable. LegitScript Certification may be recognized by payment and advertising partners, yet each platform, processor, acquirer, and sponsor bank can still apply its own requirements. Certification is meaningful evidence of readiness; it is not a universal promise of approval.

That distinction matters because founders sometimes hear “get certified” and assume the rest becomes automatic. A better expectation is that certification can remove a major barrier and establish important credibility while payment underwriting continues to evaluate the entire operating and transaction model.

Start with the real business model

The strongest first conversation is not “How fast can I get a merchant account?” It is “What exactly happens from the first advertisement through the final payment, care, fulfillment, cancellation, and refund?”

Before choosing a path, be ready to explain:

• which legal entity will sign the processing agreement and appear on the customer’s statement;
• which domains, brands, and advertising channels the business controls;
• what products or services customers are buying;
• where patients are located and where clinicians are licensed;
• who prescribes, dispenses, fulfills, or provides care;
• how those parties are contracted and compensated;
• whether charges recur and how customers consent, cancel, and receive refunds; and
• what claims appear on the website, landing pages, social posts, and advertisements.

This is where experienced founders sometimes become frustrated: they have built a commercially compelling brand, but the reviewers need to see the regulated operating model underneath it. The clearer that model is, the easier it becomes to identify the right certification scope and the right payment-processing path.

Certification is more than a fee or a seal

One of the most common misconceptions is that certification is simply another charge required before a business can process payments or advertise. That misses what is actually being evaluated.

LegitScript’s current healthcare standards address areas including licensing and business registration, legal compliance, prior discipline, affiliates and partners, patient services, privacy, prescription validity, transparency, and advertising. Its public guidance also describes documentation such as licenses, registration details, applicable controlled-substance authorization, privacy policies, affiliate information, and product and service descriptions.

In other words, the review reaches well beyond the checkout page. It asks whether the business behind the page is operating transparently and within the standards that apply to its model.

That depth is exactly why preparation matters. A founder who approaches certification as a purchase is likely to be surprised by questions and remediation. A founder who approaches it as operational due diligence can use the process to identify gaps before those gaps disrupt payment acceptance, advertising, or growth.

Where avoidable delays usually begin

Every business model is different, but the same categories of delay appear repeatedly.

The website gets ahead of the operating model

Marketing teams publish claims, products, pricing, subscription terms, or service locations before the final clinical and fulfillment relationships are documented. When the public-facing story and the actual workflow do not match, reviewers need clarification or changes.

The applicant cannot map every party

Telehealth and card-not-present healthcare can involve a brand, a medical group, individual clinicians, one or more pharmacies, fulfillment vendors, software platforms, affiliates, and marketing partners. Missing contracts, undisclosed domains, or unclear responsibilities create more questions because each relationship can affect eligibility and underwriting.

Licenses and scope do not align

A business may be ready to market nationally before its professional, facility, pharmacy, prescribing, dispensing, or other applicable permissions support the full footprint being presented. Reviewers need the jurisdictions, services, and evidence to line up.

Customer terms are treated as boilerplate

Cancellation, refund, subscription, renewal, shipping, contact, privacy, and consent language are part of the operating experience. Copying generic policies from another website rarely explains what this business actually does.

The team responds in pieces

A complete and consistent response is easier to evaluate than a trail of partial documents supplied by different people. Assign one internal owner who can coordinate legal, clinical, pharmacy, marketing, technical, and payment materials.

How to prepare before you apply

The goal is not to predict every question. It is to make the business easy to understand and the evidence easy to review.

1. Map the customer journey. Document the path from advertisement or referral through onboarding, consultation, payment, prescribing, fulfillment, delivery, support, cancellation, and refund.
2. Map the entities and domains. Identify the merchant of record, contracted medical groups, clinicians, pharmacies, fulfillment partners, affiliates, owned domains, landing pages, and alternate brands.
3. Confirm licenses and service geography. Match every regulated activity to the people, entities, facilities, and jurisdictions involved.
4. Review the public experience. Make sure the website, advertising, disclosures, claims, policies, checkout, descriptor, and customer-support information accurately reflect the operating model.
5. Organize the evidence. Maintain current agreements, licenses, registrations, policies, ownership records, service descriptions, partner details, and other relevant materials in one controlled location.
6. Coordinate certification and payments early. Give both paths the same underlying business map so the merchant is not explaining two different versions of the company.
7. Plan for remediation. Questions and required changes are not necessarily signs that the process has failed. Respond quickly, completely, and consistently.

Move fast without confusing speed with shortcuts

Founders are right to care about time. Delayed payment acceptance can postpone revenue, and delayed advertising access can postpone customer acquisition. The answer, however, is not to minimize the review or withhold complexity.

The responsible way to move faster is to remove unnecessary waiting:

• confirm the correct eligibility and application path before submitting;
• provide complete information at the beginning;
• make one person accountable for follow-up;
• keep the certification and payment teams aligned on the same facts;
• answer remediation questions promptly; and
• avoid launching new products, claims, domains, or partners in the middle of review without explaining the change.

Mentom’s enterprise relationship with LegitScript is designed to help qualified healthcare merchants enter that process with more direction, stronger coordination, and less avoidable expense. We help the merchant understand what to expect, connect the right parties, keep payment readiness moving in parallel, and give the referral partner a responsive point of accountability. Qualified cases can access the expedited certification-review route without the usual separate expedite charge to the merchant. LegitScript remains the certification expert and makes its own eligibility, standards, documentation, timing, remediation, and approval decisions. Mentom and its acquiring partners separately determine payment-processing approval.

Certification is the beginning, not the finish line

A healthcare business does not stop changing after approval. It may add products, medications, clinicians, states, pharmacies, affiliates, advertising channels, websites, or subscription options. Laws, platform policies, certification standards, card-brand expectations, and acquiring requirements can also change.

That means the certified and approved version of the business needs change control. Before making a material change, ask:

• Does this change what we sell or who provides care?
• Does it add a new jurisdiction, pharmacy, medical group, affiliate, or domain?
• Does it change the customer’s price, renewal, cancellation, refund, or fulfillment experience?
• Does it introduce a new claim or advertising channel?
• Does our certification provider, processor, acquirer, or sponsor bank need to review it first?

The goal is not merely to get approved and start processing. The goal is to stay processing as the business grows.

What merchants and agents should ask a payment provider

• Do you understand our specific healthcare model, or are you treating every healthcare business the same?
• What certification, registration, licensing, and documentation requirements are likely to apply?
• Can certification preparation and payment underwriting move in parallel?
• Who will help us coordinate questions and remediation?
• Will the referral partner receive clear status updates without having to chase multiple companies?
• What certification or expedite costs can the partnership reduce for a qualified merchant?
• What business changes must we report after approval?
• How will recurring billing, refunds, disputes, descriptor clarity, and customer support be evaluated?
• What happens if our website, pharmacy, clinical model, products, or advertising strategy changes?

A good payment relationship should produce clear expectations before launch—not a new list of surprises after the business is already committed. For an agent, the answer should also reveal whether the ISO will help strengthen the merchant relationship or quietly put it at risk.

Build for the business you want to keep

I understand why certification and underwriting can feel like they are slowing a launch. When a business is ready to generate revenue, every unanswered question feels expensive.

But getting online quickly does not mean much if the business cannot stay online, maintain payment acceptance, or reach customers through the advertising channels it planned to use.

The strongest healthcare companies do not bolt compliance onto the end of the launch. They build the company, the public experience, the certification path, and the payment strategy from the same operating model. The strongest referral partners also know they do not have to master that entire model alone; they have to choose an ISO that will protect the merchant experience when the opportunity becomes complex.

Related Mentom resources

• Healthcare Payments and LegitScript Support→
• Telehealth Payment Processing in 2026: A Practical Guide→
• Mentom Partners With LegitScript→

Sources and references

• LegitScript customer spotlight: Mentom Payments

  — Alexis Lichterman interview and source voice.

• LegitScript Healthcare Certification

  — Current eligibility guidance, process, standards, documentation, platform recognition, and certification context.

• Mentom Healthcare Payments

  — Current Mentom service positioning, qualifications, and separation of certification from payment underwriting.

• Mentom Telehealth Payment Processing Guide

  — Deeper underwriting, operating-model, and continuous-monitoring context.

Editorial and legal note

This article provides general educational information from a payments and merchant-readiness perspective. It is not legal, medical, pharmacy, card-network, certification, advertising-platform, or compliance advice. Requirements vary by business model, product, jurisdiction, card network, sponsor bank, acquirer, processor, platform, and certification provider and may change. LegitScript determines certification eligibility, requirements, pricing, timing, remediation, and approval. Payment processing remains subject to separate underwriting and approval.

AUTHOR PROFILE

Alexis Lichterman

Alexis Lichterman is Senior Vice President, Sales at Mentom Payments. A former payments-company founder and CEO with nearly 17 years of industry experience, Alexis works with merchants and referral partners to turn complex payment opportunities into well-supported, durable relationships. Her perspective sits at the intersection of sales growth, partner trust, merchant experience, and the operational follow-through required to keep a promise after the application is submitted.

View Alexis’s author profile →