Telehealth Payment Processing in 2026: A Practical Guide to Underwriting, Certification & Continuous Monitoring

Telehealth can look deceptively simple from the checkout screen.

A patient completes an online questionnaire or video visit. A clinician reviews the case. A medication is prescribed. A pharmacy dispenses it. A card is charged.

But the acquiring side does not see one simple transaction. It sees a connected operating model involving regulated medical services, multistate licensure, prescribing rules, pharmacy fulfillment, health-product advertising, sensitive data, card-not-present risk, recurring billing, and several third parties whose conduct can affect the merchant accepting payment.

That is why telehealth is frequently described as “high-risk” in payments.

The label does not automatically mean the business is fraudulent, clinically unsound, or unbankable. It means the risk is structural. The payment sits at the intersection of financial services and regulated healthcare, so the underwriter must understand more than ordinary retail questions such as ownership, volume, ticket size, and chargeback history.

The real question is whether the entire model works as represented—from the advertisement that brought the patient to the site through the consultation, prescription, payment, dispensing, delivery, refund, and follow-up experience.

Start With the Business Model, Not the Storefront

The first underwriting mistake is trying to classify a telehealth merchant from its homepage headline.

“Virtual care,” “wellness,” “medical weight loss,” “online clinic,” and “medspa” can describe very different payment models. One business may charge only for a professional consultation. Another may bundle the visit, medication, supplies, and ongoing care into one monthly payment. A third may market the service and collect payment while unaffiliated clinical and pharmacy entities perform the regulated work.

Those distinctions matter because merchant classification, certification, registration, licensing, and monitoring obligations follow the actual activity and payment flow—not the label selected by the merchant.

An underwriter should be able to answer at least five role questions:

1. Who markets the service? Identify the website owner, brand, lead generators, affiliates, influencers, and any agency controlling claims.
2. Who evaluates the patient? Identify the clinical entity, treating providers, consultation modality, and states served.
3. Who prescribes? Identify the prescriber, the provider-patient relationship, clinical oversight, and the rules governing the patient’s location.
4. Who dispenses and ships? Identify every fulfillment pharmacy, compounding facility, shipping origin, and jurisdiction served.
5. Who accepts the card payment and appears on the statement? Identify the merchant of record, descriptor, funds flow, refund obligation, and entity contractually responsible to the acquirer.

One company may perform several roles. That does not eliminate the need to map them. The risk frequently sits in the connection between the parties: an undisclosed pharmacy, a marketing affiliate making aggressive claims, a clinical group that does not cover every advertised state, or a merchant of record that does not match the entity shown on the certification record.

Card-present and card-not-present are channels, not business identities

A physical clinic can accept an in-person card payment for an office visit and also operate a remote channel that accepts online or telephone payment for prescription products. The presence of a storefront does not cause the remote channel to inherit the treatment of the in-person transaction.

The remote activity must be evaluated on its own facts. Depending on the model, pharmacy merchant category codes—often including MCC 5912—may become relevant, along with healthcare certification and card-network registration. The merchant should not select its own MCC or assume that an existing retail-clinic classification covers a newly added remote prescription channel. The acquirer must determine the correct classification and current program requirements before processing begins.

Why “High-Risk” Is a Structural Description

In payments, “high-risk” is often misunderstood as shorthand for fraud. Telehealth illustrates why that is too narrow.

The vertical can involve:

• regulated professional services delivered across state lines;
• prescription validity and patient-practitioner relationship requirements;
• pharmacy licensure and fulfillment across multiple jurisdictions;
• controlled substances or other tightly regulated products;
• delayed delivery after the card is charged;
• recurring programs that continue after an initial consultation;
• health and weight-loss claims that influence purchase decisions;
• affiliates, medical groups, pharmacies, laboratories, and technology vendors;
• privacy and security obligations involving sensitive health information; and
• card-network and acquirer oversight that continues after approval.

None of those factors proves misconduct. Together, however, they increase the consequence of an incomplete or inaccurate underwriting picture.

A traditional retailer can usually change a product assortment without changing the legal basis of its entire business. A telehealth merchant that adds a new compounded therapy, new pharmacy, new state, new consultation modality, or new set of efficacy claims may materially change the model the acquirer originally approved.

That is the core acquiring risk: the business can drift after boarding.

Certification Is a Gate—Not the Finish Line

Healthcare merchant certification is one of the most important controls in card-not-present telehealth underwriting.

LegitScript’s current public healthcare-certification standards address licensure and registration, legal compliance, disciplinary history, patient services, prescription validity, partners and affiliates, privacy, advertising, and transparency. NABP’s Healthcare Merchant Accreditation similarly evaluates telemedicine providers, prescriber licensure, consultation modality, and affiliated fulfillment pharmacies. NABP publicly notes that telemedicine providers use the accreditation to meet certification and monitoring expectations associated with card-not-present payment activity.

That third-party review gives acquiring teams a valuable, specialized assessment. It can also help a merchant identify problems before boarding.

But certification answers a different question from acquiring approval.

The certifier evaluates the business against its program standards. The acquirer evaluates whether it is willing and permitted to accept the payment risk under its sponsor-bank, processor, card-network, legal, financial, operational, and risk-appetite requirements.

A certified merchant can still be declined or delayed because of financial condition, ownership history, chargeback exposure, prohibited products, unclear funds flow, unsupported volume, excessive ticket size, misleading advertising, an unacceptable fulfillment arrangement, or a model outside the sponsor bank’s appetite.

Certification is therefore best understood as a required gate for many models—not a guarantee.

A coordinated certification and payments pathway

Mentom Payments is a LegitScript Enterprise Certification Partner. For qualified healthcare businesses, Mentom can coordinate certification readiness with payment underwriting and help applicants use LegitScript's enterprise support route. Qualifying, complete applications may be eligible to be picked up for review within 10 business days or fewer.

Eligibility, program requirements, pricing, review timing, and certification decisions remain with LegitScript. Expedited timing depends on complete information and timely remediation. LegitScript certification does not guarantee payment-processing approval, advertising access, or legal and regulatory compliance. Payment processing remains subject to separate Mentom and sponsor-bank underwriting.

Verify the certification; do not merely view the badge

A badge on a website is not enough. Underwriters should independently confirm:

• the exact domain is included in the certification record;
• the certified entity is the entity accepting payment or the relationship is clearly documented;
• the certification is active and not expired, suspended, or otherwise inactive; and
• material affiliates, pharmacies, and operating locations are included or disclosed as required by the certification program.

Domain precision matters. A parent company’s certification may not automatically cover a new consumer brand, landing-page domain, sub-brand, or separate merchant of record. The same is true when a merchant changes the legal entity accepting payment after certification.

The Telehealth Underwriting Stack

Telehealth underwriting is easier to manage when it is treated as a layered review rather than one oversized checklist.

1. Legal entity, ownership, and merchant of record

Confirm the legal name, DBA, formation records, ownership, control persons, physical locations, banking, tax identity, website ownership, and entity that will sign the merchant agreement.

Then map the money. Determine who sets the price, captures the order, submits the transaction, appears on the cardholder statement, receives settlement, pays the providers and pharmacies, funds refunds, and absorbs losses.

The merchant of record should not be a thin marketing shell that cannot explain or control the service it is billing.

2. Patient location and provider licensure

Telehealth licensure analysis follows the patient. HHS explains that providers generally must be licensed or otherwise legally permitted to practice where the patient is located, subject to state-specific pathways such as full licenses, compacts, reciprocity, temporary practice rules, or telehealth registrations.

The application should include a complete provider roster, license numbers, license states, expiration dates, disciplinary history, supervising relationships where applicable, and the states in which each provider will treat patients.

A list of licensed providers is not enough if the merchant advertises nationwide service but cannot show coverage for every state it accepts.

3. Consultation modality and prescribing model

The underwriter needs to understand how a patient becomes eligible for a prescription.

Is the encounter live video, audio-only, asynchronous messaging, a dynamic questionnaire, or some combination? Who reviews the information? What triggers escalation or denial? How is identity verified? How is patient location captured? What evidence is retained? How are renewals handled?

NABP’s telemedicine guidance specifically asks applicants to document consultation modalities because states can use modality to determine whether a valid patient-practitioner relationship exists.

The payments review is not second-guessing clinical judgment. It is confirming that the merchant can explain and document a lawful, consistently applied care process.

4. Pharmacy, dispensing, and fulfillment

Identify every dispensing and fulfillment partner, even when the relationship is indirect or informal.

Review pharmacy licenses, shipping states, compounding status, contracts, service levels, complaint responsibilities, substitution rules, cold-chain or temperature-control requirements where relevant, and the process for handling a prescription that cannot be filled.

The merchant’s responsibility does not end when it forwards an order. From the cardholder’s perspective, the merchant that accepted payment owns the experience when medication is delayed, arrives warm, is substituted, or never ships.

5. Products and formulary

Obtain the complete current formulary—not just a sample list or the products featured on the homepage.

Products commonly requiring additional eligibility and compliance review include compounded drugs, peptides, weight-loss therapies, HCG marketed for weight loss, CBD, stem-cell or exosome offerings, ozone therapies, controlled substances, and other products subject to special federal, state, card-network, certification, or sponsor-bank restrictions.

The fact that a product appears in this list does not mean it is automatically illegal or universally prohibited. It means the merchant should expect a more detailed review of legal status, clinical use, sourcing, claims, fulfillment, and the acquirer’s current appetite.

6. Advertising and the complete customer journey

An underwriter should review more than the home page.

That includes paid ads, advertorials, landing pages, quizzes, social media, influencer content, email and SMS, affiliate pages, before-and-after images, testimonials, pricing claims, discount language, and the pages that appear after a customer enters the funnel.

FTC guidance focuses on the net impression of advertising, including both express and implied messages. Health-related efficacy and safety claims generally require competent and reliable scientific support. A disclaimer does not automatically cure a prominent headline, image, or price claim that leaves consumers with a misleading impression.

The merchant needs a process for approving partner content and removing noncompliant claims. “The affiliate posted it” is not an adequate control when the affiliate is driving traffic and revenue to the merchant.

7. Pricing, subscriptions, refunds, and descriptor

Telehealth models often combine an initial consultation, membership, medication, supplies, and follow-up care. The customer should be able to understand what is included, when the first charge occurs, whether the charge precedes clinical approval, what happens if the patient is ineligible, how often billing recurs, how to cancel, and how refunds work.

The descriptor should be recognizable and supported by customer service that can resolve a problem before it becomes a dispute. Policies should address medication that cannot be dispensed, shipping delays, damaged or temperature-sensitive products, paused treatment, provider unavailability, and cancellation after a renewal has been scheduled.

8. Owners, clinicians, pharmacies, and prior history

Background review should not stop at the owners.

Material disciplinary, regulatory, criminal, civil, merchant-processing, and business history involving the entity, principals, key operators, clinical group, prescribers, and fulfillment pharmacies can affect the risk assessment.

The objective is not to punish disclosed history automatically. It is to determine whether the history is relevant, resolved, accurately represented, and supported by adequate current controls.

9. Privacy, security, and data flow

Map what information is collected, where it is stored, who can access it, and which vendors receive it.

HHS states that covered providers and health plans must comply with HIPAA when delivering telehealth, including appropriate technology and business-associate arrangements where required. The acquiring review should confirm that the merchant has a credible privacy and security framework without requesting patient records or other protected health information that the payments team does not need.

Payment underwriting should verify the control environment—not become a repository for PHI.

10. Certification, MCC, card-network registration, and sponsor-bank approval

Before processing, confirm the certification path accepted for the specific model, the merchant category classification, any required card-network registration, and the sponsor bank’s approval conditions.

Exact requirements can change and may depend on jurisdiction, product, card network, merchant of record, certification provider, and acquiring program. The merchant should obtain the current answer from its acquirer rather than relying on a past approval, another processor’s setup, or a third party’s general statement.

11. Monitoring and change control

Document what the merchant must report after approval and what the acquiring team will monitor independently.

At a minimum, material changes should include ownership, legal entity, domain, brand, product or formulary, price, subscription structure, clinical group, provider roster, state coverage, consultation modality, pharmacy, fulfillment, marketing channel, claims, and expected processing volume.

If a change would have altered the original underwriting decision, it should not appear in production without review.

The Retail Medspa Trap

One of the most common classification errors occurs when a brick-and-mortar medspa expands online.

The merchant may reason that it is a physical clinic, so it should be treated like any other local medical office. That may be true for an in-person service paid for at the clinic. It does not automatically resolve a separate remote channel.

If the medspa offers an online or telephone consultation, accepts a card-not-present payment tied to a prescription product, and arranges remote dispensing or shipment, the acquiring team must evaluate that remote activity as telehealth and potentially pharmacy-related commerce.

Physical presence does not erase obligations attached to remote prescribing, dispensing, certification, card-network registration, advertising, or monitoring.

The cleanest approach is to map each channel separately:

• In-person channel: services performed at the clinic; card presented or paid in connection with the office visit; no remote prescription sale assumed.
• Remote channel: online customer acquisition; remote consultation; prescription decision; CNP payment; pharmacy fulfillment; shipment; recurring care or medication plan.

If those channels use the same merchant account, the underwriting record must still reflect the complete activity. In some cases, the acquirer may require different configurations or accounts. The merchant should not commingle a newly launched remote program under an existing retail account without approval.

Common Certification and Underwriting Roadblocks

Most delayed applications are not delayed by one dramatic issue. They are delayed by gaps between the website, application, licenses, contracts, and operating model.

Operations

• incomplete or inconsistent state licensure;
• advertised geographic coverage that exceeds the provider roster;
• unclear consultation modality or clinical oversight;
• a merchant of record that does not match the operating entity;
• prescribing practices that are not documented consistently;
• missing ownership, disciplinary, or litigation disclosures;
• incomplete pharmacy agreements or unclear funds flow; and
• policies that do not explain ineligible patients, unfilled prescriptions, refunds, or cancellations.

Advertising

• treating compounded and FDA-approved products as equivalent;
• overstating efficacy or minimizing material risks;
• using “FDA approved,” “generic,” “same active ingredient,” or similar regulatory language inaccurately;
• before-and-after claims without adequate support or qualification;
• price advertising that omits consultation, membership, shipping, or renewal terms;
• testimonials or influencer content that create an unsupported net impression; and
• affiliates publishing claims the merchant does not monitor or control.

Products and services

• products that fall outside a certifier’s, sponsor bank’s, processor’s, or card network’s current eligibility;
• compounded products without a clear patient-specific, pharmacy, and legal framework;
• controlled substances without a documented federal and state prescribing analysis;
• therapies whose sourcing, approval status, labeling, or claims are unclear; and
• adding new therapies after certification or boarding without review.

Partners

• pharmacies or vendors with unresolved regulatory issues;
• unaffiliated clinical or pharmacy partners that are not disclosed;
• affiliates that are not certified where the program requires it;
• limited visibility into a partner’s licensure, quality controls, complaint process, or sub-vendors; and
• contracts that do not allocate responsibility for refunds, delivery, data, and regulatory compliance.

Compounded GLP-1 Marketing Requires Extra Care in 2026

GLP-1 programs deserve their own underwriting discussion because product availability, compounding policy, enforcement, and advertising scrutiny have moved quickly.

In March 2026, FDA announced warning letters to 30 telehealth companies over false or misleading claims involving compounded GLP-1 products. FDA’s current guidance reminds telehealth companies that compounded drugs are not FDA-approved and should not be marketed as generic versions of, the same as, or clinically proven equivalents to FDA-approved products. FDA also warns against language implying that it approves or licenses compounding facilities.

This does not mean every compounded prescription is categorically unlawful. It means the legal basis, patient-specific need, compounder, product source, labeling, advertising, and fulfillment must be evaluated against current law and policy.

For underwriting, that creates several practical controls:

• capture the exact product and dosage form rather than the marketing category alone;
• identify whether the dispensing entity operates under section 503A or 503B and verify its current status;
• review the pharmacy’s regulatory history, including FDA actions where relevant;
• compare the website’s claims with the actual product being dispensed;
• confirm that branding does not obscure who compounded or dispensed the drug;
• review cold-chain, delivery, replacement, and complaint procedures; and
• recheck the model if FDA shortage status, enforcement policy, or product eligibility changes.

The website must be reviewed at the offer level. A generic disclaimer in the footer will not fix a product page that creates the impression that a compounded drug is FDA-approved or equivalent to an approved product.

Controlled-Substance Rules Are Time-Sensitive

Telemedicine prescribing of controlled substances is a separate legal analysis and should never be inferred from a general telehealth approval.

DEA and HHS have extended certain federal telemedicine prescribing flexibilities through December 31, 2026. The current federal framework includes different authorities with different conditions, and prescriptions must still comply with DEA requirements and applicable federal and state law.

That date is not a safe harbor for every product, prescriber, modality, or merchant model. It is a reason to treat the topic as time-sensitive.

An application involving controlled substances should identify:

• the schedules and products involved;
• DEA registrations and prescribing entities;
• consultation modality;
• patient identity and location controls;
• applicable in-person or telemedicine requirements;
• state prescribing and dispensing restrictions;
• the pharmacy and shipment path; and
• the plan for a change in federal rules or expiration of a temporary authority.

If the article is updated after December 31, 2026, this section must be re-researched before publication.

Privacy and Technology Belong in the Review

Telehealth is a technology-enabled care model, but technology alone does not make it compliant.

The review should cover the patient portal, video or messaging platform, identity and location controls, e-prescribing connection, pharmacy handoff, payment page, customer support tools, analytics, affiliates, and any vendor receiving health or payment data.

Covered healthcare providers and health plans must use telehealth technology in a manner consistent with HIPAA. HHS also emphasizes privacy and security risk analysis, secure communications and storage, and appropriate vendor arrangements.

The payment side has a narrower responsibility. It should verify that the merchant has credible controls, contracts, and incident-response ownership while minimizing sensitive data collection.

The principle is simple: understand the data flow, but do not ask the merchant to send patient charts as proof of ordinary underwriting controls.

Customer Operations Are a Risk Control

Telehealth disputes are not created only by stolen cards.

They can originate from a customer who did not recognize the descriptor, believed a one-time purchase was a subscription, was charged before clinical approval, could not cancel, did not receive a refund after being found ineligible, or received a shipment later than expected.

These are customer-experience failures, but they become payments problems.

A strong program should monitor:

• descriptor recognition and customer-contact information;
• authorization timing relative to consultation and prescribing;
• refund timing and aging;
• cancellation completion and confirmation;
• renewal notices and recurring terms;
• shipment, tracking, temperature, and delivery exceptions;
• first-contact resolution and complaint escalation;
• dispute reason codes and complaint themes; and
• concentrations by product, marketing source, pharmacy, state, and subscription cohort.

The best fraud platform cannot fix a misleading renewal flow or a refund queue that takes three weeks.

Continuous Monitoring After Approval

Certification and underwriting are snapshots. Telehealth businesses are not.

Providers join and leave. Licenses expire. Pharmacies change. New states open. Landing pages appear. Subscription prices move. A merchant adds a compounded product or an affiliate launches a more aggressive advertisement. Those changes can happen without a corresponding update to the underwriting file.

Continuous monitoring should combine automated and human review.

Website and content monitoring

• new domains, subdomains, brands, or landing pages;
• new products, doses, bundles, or prices;
• changes to claims, testimonials, guarantees, before-and-after imagery, or disclosures;
• new subscription or refund terms; and
• new affiliates, influencers, or lead funnels.

License, certification, and partner monitoring

• provider and pharmacy license status;
• certification status and covered domains;
• new or removed prescribers and pharmacies;
• disciplinary, enforcement, warning-letter, or litigation developments; and
• changes to consultation modality or geographic coverage.

Payments and customer monitoring

• volume and average-ticket movement against the approved forecast;
• approval, refund, dispute, and fraud trends;
• descriptor complaints and cancellation contacts;
• delivery and fulfillment complaints;
• unusual state, product, pharmacy, affiliate, or cohort concentrations; and
• sudden processing shifts that suggest an undisclosed business-model change.

Automated scanners and monitoring providers can identify change. They do not replace judgment. A new word on a page may be harmless, while a subtle change in how a compounded product is described may be material.

The operating goal is not to freeze the merchant. It is to create a governed path for change.

What a Strong Application Package Looks Like

A complete package does not guarantee approval, but it materially improves speed and decision quality.

Corporate and financial

• formation documents, ownership, IDs, tax identity, addresses, banking, and financial statements;
• processing history, current statements, dispute history, forecast volume, average ticket, maximum ticket, and seasonality;
• complete website and domain inventory; and
• a diagram of the merchant-of-record and funds flow.

Clinical and licensing

• clinical entity and provider roster;
• licenses by state, expiration dates, and disciplinary disclosures;
• consultation modalities and provider-patient relationship workflow;
• clinical oversight and escalation policies; and
• controlled-substance analysis if applicable.

Pharmacy and products

• all dispensing and fulfillment pharmacies;
• licenses, 503A/503B status where relevant, contracts, and regulatory history;
• complete formulary and product eligibility analysis;
• shipping, cold-chain, replacement, complaint, and failed-fulfillment procedures; and
• responsibility matrix for the merchant, clinician, pharmacy, and vendors.

Customer journey and compliance

• ad library, affiliate list, landing pages, and claims substantiation process;
• pricing, consent, recurring billing, cancellation, refund, and descriptor disclosures;
• privacy policy, terms, telehealth consent, and data-flow overview;
• customer service contacts, hours, escalation, and complaint procedures; and
• certification record covering the correct entity and domains.

Change control

• a named owner for reporting material changes to the acquirer;
• controls for approving new providers, pharmacies, products, states, and marketing claims;
• monitoring cadence and evidence retention; and
• a process for suspending an offer that is no longer eligible or supportable.

Frequently Asked Questions

Does every telehealth merchant need LegitScript certification?

Not every healthcare or telehealth model has the same certification requirement. The answer depends on the services, products, prescription activity, card-present or card-not-present channel, merchant of record, card network, acquirer, sponsor bank, advertising platform, and jurisdiction. Many CNP telemedicine and online-pharmacy models use LegitScript Healthcare Certification or NABP Healthcare Merchant Accreditation, but the merchant should confirm the accepted path with its acquirer before applying.

Can Mentom help expedite LegitScript certification?

Mentom is a LegitScript Enterprise Certification Partner. Qualifying, complete applications may be eligible to be picked up for review within 10 business days or fewer. Eligibility, program requirements, pricing, review timing, and final certification decisions remain with LegitScript and depend on complete information and timely remediation. The expedited certification pathway does not guarantee payment-processing approval.

Does certification guarantee a merchant account?

No. Certification is a specialized compliance review and may be a required gate. The acquirer still evaluates financial, ownership, operational, product, marketing, card-network, sponsor-bank, and risk-appetite requirements.

Can a physical medspa use its existing retail merchant account for an online prescription program?

It should not assume so. A remote consultation and CNP prescription-payment channel can create materially different classification, certification, registration, and monitoring requirements. The medspa should disclose the new model and obtain approval before processing it through an existing account.

Who decides the MCC?

The acquirer assigns the merchant category code based on the merchant’s actual activity and applicable card-network rules. A merchant or software provider should not select a favorable MCC and treat it as self-approved.

Are compounded GLP-1 programs prohibited from payment processing?

There is no responsible universal answer. Eligibility depends on the current legal and regulatory status, product, compounder, patient-specific model, claims, dispensing and shipping process, certification, card-network rules, and sponsor-bank appetite. FDA’s 2026 enforcement and guidance make false or misleading equivalency, approval, and sourcing claims a significant underwriting concern.

What changes should be reported after approval?

At a minimum: ownership, legal entity, bank account, domain, DBA, product, price, subscription terms, provider roster, states served, consultation modality, pharmacy, fulfillment, marketing channel, claims, processing volume, and any change affecting certification or card-network registration.

How long does telehealth underwriting take?

There is no honest universal timeline. A complete, internally consistent package moves faster than a fragmented one, but timing also depends on certification, licensing verification, product complexity, pharmacy relationships, sponsor-bank review, and follow-up questions. Start before the desired launch date and avoid building the launch plan around an unapproved assumption.

What is the underwriter ultimately trying to determine?

Whether the entity accepting payment controls a lawful, transparent, supportable customer journey and whether the acquirer can understand, approve, register, monitor, and stand behind the resulting payment activity.

The Real Objective: A Business That Stays Underwritable

Telehealth payment processing is not solved by obtaining one badge, passing one review, or launching one merchant account.

The durable objective is a business that stays underwritable as it grows.

That means the certification record matches the domain and entity. Licenses cover the patients served. The consultation model works in each jurisdiction. Pharmacy relationships are transparent. Product claims match the product actually dispensed. Pricing and recurring terms are clear. The merchant owns the customer experience. Material changes are reviewed before they go live. Monitoring detects drift before it becomes a sponsor-bank, card-network, regulator, or cardholder problem.

The payments industry should not treat every telehealth merchant as a bad actor. It should treat the model with the level of precision that regulated healthcare and card-not-present commerce require.

That precision is what allows compliant telehealth businesses to scale.