How to choose a medspa EMR

Start with how your clinic works

An EMR runs almost every part of a medspa day. It holds your charts, consents, photos, schedule, payments and marketing lists. Once your records live in it, moving again is slow and costly. So do some homework before you book a single demo.

Write down your most common treatments and who performs them. For many clinics that list starts with neurotoxin, dermal filler, laser, facials and IV therapy. Note how long each chart takes today and where staff lose time. Ask your injectors, your front desk lead and your medical director what they would change. Their answers become your demo script.

Next, list what you must bring with you. That usually means patient contact details, allergies, medical history, past treatment notes, photos, signed consents, memberships and open balances. Ask your current vendor how you can export each one. You will need that answer no matter which EMR you choose.

How to run a fair demo

Sales demos follow a happy path. The rep knows every click, the sample patient has no allergies, and nothing goes wrong. You want to see how the software handles a normal busy day in your clinic.

Send each vendor the same short script before the call. Ask them to chart your most common treatment from start to finish, then check the patient out. Then ask for a trial login and run the script yourself. The same script works with every vendor, including a Dolce Health demo.

• Use the same script and the same sample patient with every vendor.
• Ask to drive, or get a trial login and repeat the script on your own.
• Time each chart from opening the visit to signing the note.
• Bring an injector, your front desk lead and, if you can, your medical director.
• Test on the devices you really use, such as the front desk computer or a tablet in the treatment room.
• Ask which features you saw are live today and which are still planned.
• Score each vendor right after the call, while it is fresh.

What to test in a demo

Use this table as your scorecard. Each row is something a medspa does every day. The last column tells you how to test it with your own hands during a demo or trial.

Use made-up patients in any trial. Do not load real patient records into a system until that vendor has signed a business associate agreement with your clinic.

Charting and clinical records

Charting is where most provider time goes, so test it hardest. Look for templates that match the treatment. A neurotoxin chart needs product, lot, expiry, dilution and units by zone. A filler chart needs syringes, volume, tissue plane and needle or cannula. A laser chart needs the device, settings and Fitzpatrick type. If one generic form covers everything, your providers will type the same details again and again.

Check how the injection map works on the screen you will use. You should be able to place points quickly, change units, and see a running total. The product and lot should flow into inventory, so nobody has to count vials by hand at the end of the week.

Then look at what happens after the note is written. A signed note should lock. Changes should go through an amendment that records who made it, when and why. If your medical director reviews charts, the review queue should be easy to work through and should show what was approved. If the EMR offers AI-drafted notes, confirm that the provider reviews and signs every note before it is final.

Front desk, payments and marketing

Your front desk works in the calendar and checkout all day. Book a visit, move it, check the patient in and take payment. See whether the calendar warns you when a provider or room is double-booked. At checkout, add a tip, a promo code, a membership discount and two payment methods. Make sure it records the payment types you accept, such as HSA/FSA cards or patient financing.

Ask how card processing works. Some EMRs require their own processor, and others let you choose. Ask about rates, deposits, refunds and what happens when a card is declined. If you sell memberships, ask how recurring billing works and what happens when a payment fails.

For marketing, build a real audience, such as patients who have not been in for a few months. Preview the email or text before it goes out. Check that every marketing email has an unsubscribe link and your postal address, and that opt-outs are honored. Sending texts to patients in the US also requires carrier registration, so ask who handles it and how long it takes.

Data, access and security

Your patient data belongs to your clinic. Ask the vendor to show you the export screen during the demo. Find out which records you can export, in what format, and whether photos, consents and chart notes come with them. Ask whether exports cost extra, and how long you have to get your data out if you leave.

Next, test access. Every staff member should have their own login so the audit log shows who did what. Roles should limit what each person can see and do. Look for a session timeout on shared screens, two-factor sign-in, and a way to limit sign-ins to your clinic network, such as an IP allowlist.

Finally, open the audit log. It should show who viewed or changed a record, and when. If you ever face a patient complaint, a board inquiry or a breach review, this log is how you answer.

Questions to ask every vendor

Ask these in writing so you can compare answers side by side. A vague answer tells you something too.

• Data export. Can we export all of our data at any time? In which formats? Are photos and signed consents included? Is there a fee?
• BAA. Will you sign a business associate agreement before we load patient data? Which of your own vendors will handle our data?
• Pricing structure. Is pricing per provider, per location or per clinic? What is included, and what costs extra, such as texting, AI features, extra locations or storage?
• Payment processing. Do we have to use your processor? What are the rates, and can we switch later?
• Contract. How long is the term? Does it renew on its own? What does it cost to cancel?
• Onboarding. Who moves our data? Who trains our staff? How long does setup take, and what do you need from us?
• Support. How do we reach support, during which hours, and who answers?
• Roadmap. Which features in the demo are live today? Which are planned, and when?

Red flags to watch for

One red flag is not always a deal breaker. Raise it with the vendor and see how they answer. Several red flags together usually mean the EMR will cost you time and money later.

• The rep will not let you drive the software or offer a trial login.
• Answers about data export are vague, or getting your data out costs extra.
• The vendor will not discuss a business associate agreement.
• A HIPAA badge or seal is offered as proof of security. The US government does not certify software under HIPAA.
• Signed notes can be edited with no amendment trail.
• Staff share one login, or roles cannot limit what people see.
• AI tools finalize or sign notes without a provider review.
• Key features shown in the demo turn out to be planned for later.
• Pricing stays hidden until you sign, or the contract renews for years on its own.
• You must use the vendor's payment processor, with no clear way to leave.

EMR demo checklist

Tick items as you go.