For TRT, HRT & med-spa clinics

Every controlled dose, signed, sealed, and audit-ready.

Testosterone · Ketamine · Phentermine · every Schedule II–V drug — plus peptides, GLP-1s & supplements

If your practice administers or dispenses a scheduled medication, federal law already expects proof of every dose — most practitioners are surprised how much. AttestRx captures a patient-signed, tamper-evident record of each injection, infusion, and pellet, synced to the EMR you already use — the same sealed record for every scheduled drug in your fridge, from hormones to ketamine to weight-loss medications.

HIPAA · BAA signed DEA 21 CFR 1304 records State PMP / CSPMP feeds 7-year sealed retention
TRT clinicsHormone optimizationMed spasPellet therapyWellness & longevityMulti-location groups
What's at stake

Compliance is cheap. Violations aren't.

Missing or incomplete dose logs are among the most frequently cited violations across hormone practices of every kind — TRT and HRT clinics, med spas, and wellness programs alike — and one inspection without them can put a practice's DEA registration, and its entire hormone revenue line, at risk.

Five figures

in civil penalties per record-keeping violation — and every undocumented dose can count separately.

1 business day

to notify DEA of theft or significant loss — and to report dispensed doses to your state's prescription monitoring program.

7 years

of administration records you may be expected to produce, readily retrievable, at any unannounced inspection.

The product

The compliance layer your EMR doesn't have.

Practice-management platforms book appointments and store charts. None of them produce court-ready proof that a specific patient received a specific controlled dose from a specific vial. That's the entire job of AttestRx — and it's drug-agnostic by design: testosterone, ketamine, phentermine, or any Schedule II–V medication your practice lawfully administers or dispenses gets the same sealed record.

Patient-signed proof of every dose

Patients acknowledge each injection or pellet insertion on a counter kiosk. We capture the signature image plus stroke-timing forensics — the data that proves a real hand signed it — hashed at the moment of capture.

Tamper-evident audit chain

Every record is cryptographically linked to the one before it and sealed in write-once storage. Any alteration, by anyone, becomes mathematically provable — a bound, notarized logbook, digitized.

Lot & vial reconciliation

Each dose ties to a drug, lot number, vial, and administering provider. Running balances reconcile signatures against physical stock, so inventory counts and loss investigations tie out in minutes.

Take-home dispensing labels

For doses that go home, the sealed record prints the vial label itself — directions your provider designates, quantity, lot and expiration from your inventory, and the federal caution statement. The label on the vial, the patient's signature, and the lot in your fridge become one connected chain. Applies where your state permits practitioner dispensing of the medication.

Inventory Intelligence

Built to Schedule II discipline — applied to everything you stock. Burn rates, reorder points, expiring-lot forecasts, and internal inventory audits for every product in the fridge: controlled drugs, peptides, GLP-1s, supplements. Because every dose draws down a lot in real time, the forecasting runs on sealed data — not guesswork.

Witnessed destruction logging

Expired lots and wasted doses get the same treatment as administrations: what was destroyed, how, by whom — with a second staff member co-signing as witness — sealed into the audit chain, and the lot balance reconciles to zero. The paperwork inspectors ask about most, handled in ninety seconds.

Your brand on the kiosk

The signature station your patients touch wears your clinic's name, logo, and colors — not ours. Configure it once in settings and every kiosk updates itself. To your patients it's simply how your practice does things properly.

Audit exports & state PMP feeds

One-click inspector exports with chain verification, plus automated nightly dispensing reports to your state monitoring program — zero-reports included — for clinics that send vials home.

How it works

Fifteen seconds at the point of care.

No new platform for your staff to learn. The kiosk pre-stages from your appointment calendar, and everything downstream is automatic.

1

Patient signs

The right name, drug, dose, and lot are already on screen when the patient walks up.

2

Record sealed

Hashed, chained to the previous entry, and written to tamper-proof storage — permanently.

3

EMR updated

A receipt lands on the client's card in your EMR automatically. Staff never leave their workflow.

4

Always audit-ready

Inspector exports, inventory reconciliation, and state feeds generate from the same sealed records.

A look inside

From front desk to audit file — here's the whole system.

One tablet at the counter, one dashboard for your team, and a sealed evidence vault doing the compliance work in the background.

Your EMR

Appointment booked

An EMR webhook pre-stages the visit — patient, drug, dose, lot.

The kiosk

Patient signs

Fifteen seconds at the counter. Signature + stroke data captured.

The vault

Record sealed

Hashed, chained to the last record, locked in write-once storage.

Your reports

Always ready

Inspector exports, inventory tie-outs, and state PMP feeds.

app.attestrx.com
Dashboard
Dose Records
Inventory
Reports
Settings
Today — Gilbert Clinic✓ CHAIN VERIFIED 6:00 AM
14Doses signed today
2Vials in use
11:59 PMNext state report
PatientDoseLotTimeStatus
Marcus T.Test Cyp 200mg/mL · 0.5mLA22319:14aSEALED
Dana R.Test Cyp 200mg/mL · 0.4mLA22319:41aSEALED
Chris B.Pellets · 10 × 200mgP091710:05aSEALED
Alina K.Test Cyp 200mg/mL · 0.5mLA224410:32aSEALED

The back end — your team's dashboard & auditor view

Marcus T.

Testosterone Cypionate 200mg/mL · 0.5 mL · Lot A2231

By signing, I acknowledge receipt of the medication and dose shown above on Jul 24, 2026.

Confirm & Sign

The device — delivered, mounted & configured by our team

Integration

Built to sit beside your EMR — not replace it.

Your EMR stays the system of record for patients and appointments — AttestRx is the sealed evidence vault beside it. We integrate with any EMR that offers a modern API handshake (REST endpoints or webhooks), and we handle the connection for you during onboarding.

PULL

Minimum necessary

Only the contact ID, name, and DOB needed to match the patient. Nothing else leaves your EMR.

CAPTURE

Evidence stays with us

The signature, stroke data, lot, and audit chain live in our sealed store — never in the EMR.

PUSH

The receipt

A note lands on the client card: dose acknowledged, timestamp, record ID. Staff see it instantly.

Why clinics love this setup

  • Appointment webhooks pre-stage the kiosk — the right patient is on screen before they walk up.
  • Your EMR's PHI exposure stays minimal, keeping its compliance scope — and yours — small.
  • Your records live outside the EMR — switch systems down the road without losing a single sealed record.
  • The alternative

    Dispensing platforms sell you a system.
    You need a layer.

    The tools that offer controlled-substance reporting today are physician dispensing platforms — built for practices running an in-house pharmacy operation. To get the one feature you need, you'd adopt a whole second system beside your EMR.

    Dispensing platforms

    A second system to run

  • Reporting bundled inside point-of-sale dispensing, repackagers, and billing you may never use
  • Staff working in another application beside your EMR
  • Built for pain management and ortho — not hormone clinics
  • No patient-signed proof of administration, no tamper-evident evidence chain
  • AttestRx

    Exactly the piece you're shopping for

  • State controlled-substance reporting with zero-report automation — no dispensing platform required
  • Your EMR stays the system of record; we plug into it
  • Built for TRT, HRT, and med-spa workflows from day one
  • Adds what no reporting platform has: patient-signed, hash-chained proof tied to lot and vial
  • Pricing

    One simple price. Less than two patient visits a month.

    EVERYTHING INCLUDED
    AttestRx Complete
    $349 /mo per location
    One plan. Fully audit-ready.
  • Kiosk signature capture with stroke forensics
  • Tamper-evident audit chain & 7-year sealed retention
  • Lot & vial reconciliation and inventory reports
  • EMR sync — receipts on the client card automatically
  • One-click inspector exports with chain verification
  • State PMP dispensing feed & zero-report automation, where required
  • Unlimited take-home dispensing labels — no per-label fees, ever. Platforms priced below us often charge per printed label; in a busy dispensing month, that quietly costs more than the difference.
  • Onboarding & EMR connection
    One-time setup, BAA, staff training
    $500
    Kiosk kit, installed
    Delivered, mounted, configured, tested — by our team
    $399
    Pay annually
    Two months free — $3,490/yr per location
    −17%
    Request a call
    Getting started

    Live in one week. No IT project.

    DAY 1

    Paperwork

    We sign the BAA, provision your secure environment, and collect your drug list and providers.

    DAY 2–3

    Connect

    Your EMR linked with read-minimal access. Appointment webhooks tested against a sandbox patient.

    DAY 4

    Kiosk arrives

    Pre-configured tablet ships to your front desk. Mount it, power it, done — it finds us automatically.

    DAY 5

    Train & go live

    Thirty minutes with your staff. First real signatures captured the same afternoon.

    WEEK 2

    Prove it

    We run your first inspector export together, so you see exactly what an auditor would see.

    FAQ

    Questions hormone clinics ask us.

    Do you only track controlled substances?

    No — the platform is engineered to the strictest standard (Schedule II–grade custody: sealed records, lot-level reconciliation, witnessed destruction) and then applies that same discipline to everything on your shelf. Peptides, GLP-1s, compounded products, supplements: one inventory system, one audit trail, one set of burn-rate forecasts and internal audit reports. Controlled substances get the full compliance treatment; everything else simply gets tracked better than it ever has been.

    Do you prescribe, or decide doses?

    Never — and the product is built so it can't. Prescribing and dispensing stay entirely with your providers: your provider designates every dose, your clinic enters label directions and quantities, and AttestRx prints and preserves exactly what your team recorded. We're the documentation layer underneath your practice, not a participant in it. Software that claims clinical authority should worry you; ours is designed never to have any.

    Does every feature apply in my state?

    The core platform — patient-signed administration records, the tamper-evident chain, inventory, witnessed destruction, and audit exports — applies in all 50 states, because DEA recordkeeping obligations are federal. Take-home dispensing labels and automated state reporting apply where your practice is lawfully permitted to dispense: some states restrict practitioner dispensing of Schedule II–III medications (Florida, for example), and a few restrict fee-based physician dispensing more broadly (such as Texas). During onboarding we configure your account to your state — features that don't apply to your practice simply aren't in your way. This is product configuration, not legal advice; your practice remains responsible for its own dispensing authority.

    Is this e-prescribing (EPCS)?

    No — and that's deliberate. AttestRx documents the administration and dispensing of doses your providers have already prescribed through their existing channels. Administration records don't require EPCS certification, which is why we can be live in your clinic in a week instead of a year.

    We only inject in-office. Do we need state PMP reporting?

    In most states, in-office administration by the provider is not a reportable dispensing event — reporting kicks in when patients take vials home. Many hormone clinics do both, and AttestRx covers both in one plan: every administered dose gets a signed, sealed record, and for dispensed take-homes we automatically generate the state submission file, upload it to the clearinghouse by the deadline, and file zero-reports on days nothing is dispensed — no staff task involved. We'll help you confirm your clinic's exact obligations with the state during onboarding.

    Does this only work for testosterone?

    No — AttestRx is built for controlled-substance documentation, not any particular drug. Any Schedule II–V medication your practice lawfully administers or dispenses gets the identical treatment: patient signature, lot and vial tracking, provider and DEA attribution, and the sealed audit chain. Testosterone is simply the most common case in hormone practices — clinics also use AttestRx for medications like ketamine and phentermine. You define your drug list during onboarding, and you can add to it anytime.

    Does this cover testosterone pellets?

    Yes. Pellet insertions are logged the same way as injections — patient signature, lot, quantity, provider — and pellet counts flow into the same inventory reconciliation, which is where most pellet programs struggle in audits.

    Is it HIPAA compliant?

    Yes. Encrypted in transit and at rest on HIPAA-eligible AWS infrastructure, access-controlled and audit-logged, with a Business Associate Agreement signed with your practice as part of setup.

    We have multiple locations.

    Each location gets its own kiosk, inventory ledgers, and reporting scoped to its DEA registration, with group-level dashboards across all sites. Pricing is per location, and multi-site groups get onboarding batched together.

    What happens during a DEA inspection?

    You hand the inspector a read-only auditor login or a one-click export: every dose, signature, lot, and running balance for the date range, with cryptographic chain verification attached. That's the entire interaction we build for.

    Get in touch

    Tell us about your clinic. We'll call you.

    Share a few details and we'll reach out within one business day to walk through your setup, your reporting obligations, and which plan fits — no pressure, no sales script.

    Why "AttestRx"?

    at·test /ə-ˈtest/ · verb

    from Latin attestariad- ("to") + testari ("to bear witness"), from testis, "a witness." To confirm something is true, and stand behind it.

    /är-ˈeks/ · symbol

    from Latin recipe — "take" — the word physicians have opened prescriptions with for centuries, worn down over time into the ℞ every pharmacy knows.

    AttestRx, then, means exactly what it does: a witness for every dose.