Medspa Purchasing Approvals and Monthly Budgets: A Setup Guide

A multi-provider medspa needs three purchasing controls: a short written policy that says who can order what and from whom, an approval rule that routes unusual or large orders to a second person, and a monthly supply budget with month-to-date spend everyone can see. Together they stop duplicate orders, off-list suppliers and end-of-month surprises, without slowing down routine reorders. Controlled substances sit on top of this and follow DEA rules.

Here is how to set each one up, with a policy template, a worked budget and a 30-day rollout plan.

Why do multi-provider medspas need purchasing approvals?#

When one owner-injector orders everything, controls live in their head. Once you add providers, locations or a practice manager, the gaps show up quickly:

• Two people order the same filler in the same week.
• A provider buys from a convenient website that is not on your vendor list.
• Small orders multiply, each with its own shipping fee.
• Nobody knows the month's supply spend until the card statement arrives.
• A loyalty tier is missed because orders were spread across accounts.

None of this requires bad intent. It happens because ordering is easy and visibility is poor. Approvals and budgets fix visibility.

What approval rules work for a medspa?#

The goal is to approve by exception. Routine reorders should flow; unusual orders should pause for a second look. A starting rule set:

Pick the per-order threshold from your own order history: high enough that most routine reorders clear it, low enough that an unusual order gets a look. Revisit it after two or three months.

How do you set a monthly supply budget?#

Build the budget from treatments, not from last year's total. Hypothetical example for one location:

1. Start with actual spend. Average monthly supply spend over the last six months: $38,000.
2. Split by category. Injectables $30,000, skincare $4,500, consumables and PPE $3,500.
3. Adjust for next month's treatment forecast. You expect 10% more toxin treatments. If toxin product cost averages $260 per treatment and you forecast 110 treatments instead of 100, add $2,600.
4. Add known changes. A supplier price increase on gloves: add $150.
5. Add a buffer. 3% of the total for price drift and urgent orders: about $1,220.
6. Result: a monthly budget of roughly $42,000, split by category, with month-to-date spend visible to the practice manager.

For the per-treatment inputs, see our guide to cost per injectable treatment.

Budget rules that work:

• Month-to-date spend is visible to whoever places orders.
• Orders that would cross the budget route to approval rather than being blocked outright. Sometimes the right answer is to go over, for example ahead of a busy promotion.
• Budgets are per location in multi-site practices, so one site cannot quietly absorb another's spend.
• Review monthly. Compare budget to actual by category and note the reasons for variances.

Why separate who orders, who approves and who pays?#

Because it catches mistakes and deters fraud. The U.S. Government Accountability Office's internal control standards (the "Green Book"), written for federal agencies but widely used as a framework, put it plainly: "Key duties and responsibilities need to be divided or segregated among different people to reduce the risk of error or fraud." The same standards say transactions "should be authorized and executed only by persons acting within the scope of their authority."

In a medspa, that translates to:

• Ordering: providers, the injector lead or the inventory lead.
• Approving: the practice manager or owner.
• Paying and reconciling: the owner, bookkeeper or office manager, matching each invoice to an approved order and a packing slip.

In a very small practice where one person has to do more than one of these, add a compensating control: the owner reviews every order and invoice once a month. Our guide to reading a supplier invoice includes a 10-point check to use at the payment step.

How do prescription and controlled substance orders fit in?#

Internal approvals sit on top of legal requirements; they never replace them.

• Prescription products should be ordered only under the practice's prescriber credentials and only from authorized sources. The FDA states that federal law requires health care providers who dispense or administer prescription drugs to purchase them only from authorized sources.
• Schedule II controlled substances require a DEA Form 222 or its electronic equivalent for each distribution, under 21 CFR 1305.03. Under 21 CFR 1305.05, a registrant may authorize other individuals to issue these orders by executing a power of attorney for each one, witnessed and kept with the order records.
• State rules on who may order, receive and store prescription drugs and controlled substances vary. Ask your compliance advisor to confirm your policy.

Keep your approval workflow consistent with these rules: the person listed as able to approve a controlled substance order in your software should be someone who is legally able to issue it.

What should a written purchasing policy include?#

One page is enough. Include:

1. Approved vendor list, with how each supplier was verified.
2. Who can order, by role and product type.
3. Approval rules, including the per-order threshold and budget rule.
4. Monthly budget by location and category, and who owns it.
5. Reorder lists for routine items, with preferred pack and vial sizes.
6. Receiving steps: checking quantities, lots, expiry and cold-chain condition. See our inventory management guide.
7. Payment and reconciliation: who matches invoices to orders, and when.
8. Controlled substance procedures, referencing DEA and state requirements.
9. Review cadence: monthly budget review, quarterly price and supplier review.

What should you review each month?#

A 30-minute monthly review keeps the system honest. Look at:

• Budget versus actual by location and category, with a one-line reason for each variance.
• Orders routed for approval: how many, how quickly they were approved, and whether any were rejected. Lots of routine orders being routed means the threshold is too low.
• Off-list purchases: anything bought outside the reorder list, and whether it should be added.
• New suppliers: confirm each was verified before the first order.
• Price changes on your top items since last month.
• Waste and expiry: discarded or expired product, by product and location.
• Manufacturer program status: are you on track for the tiers you planned for?

Keep the notes. After six months they tell you where your purchasing process actually leaks.

How do you roll this out in 30 days?#

• Week 1: Pull six months of orders and invoices. Build the vendor list and reorder lists. Our supply cost audit walks through the process.
• Week 2: Draft the one-page policy and set thresholds. Agree on roles with providers.
• Week 3: Set up approvals and budgets in your ordering system. Run the first orders through the new flow.
• Week 4: Review what was routed for approval. Adjust thresholds that caught too much or too little.

Where does Pink Kiwi fit?#

Pink Kiwi is built for this workflow. You set a monthly budget, orders that need a second look are routed to an approver, and saved reorder lists (which you can import from an invoice) keep routine ordering fast. Every order is placed with verified suppliers, with Rx, DEA and cold-chain requirements applied at checkout. Eligible practices can also apply for Net-30 terms. Browse the catalog to set up your first reorder list, or start with a free savings analysis of a recent invoice: we show exactly where you would save, and if we cannot find savings, we tell you.