What Documents Do Telehealth Merchant Account Underwriters Require?

There is no single federal telehealth merchant-account application or universal underwriting checklist. Processors and acquiring banks set their own commercial, fraud, chargeback, and compliance review procedures.

The checklist below is a practical, non-exhaustive preparation list—not a description of documents every processor requires. A reviewer may request additional information based on the business model, processing history, recurring billing, products, fulfillment relationships, and affiliated entities.

What to organize before applying

1. Business identity and ownership

Prepare records that establish who owns, controls, and operates the business:

• Articles of incorporation or organization
• IRS EIN confirmation
• Certificate of good standing, if requested
• Ownership chart and beneficial-owner information
• Government-issued identification for owners and authorized signers
• Operating agreement, partnership agreement, or corporate bylaws
• Business bank-account information
• Business-address verification
• Names and roles of affiliated entities

List material participants, including medical groups, clinicians, pharmacies, fulfillment companies, billing entities, and technology companies. The application should explain whether the entity receiving card payments is the same entity advertising and delivering the service.

2. Financial and processing history

Organize, as applicable:

• Recent business bank statements
• Prior merchant-processing statements
• Expected monthly and annual card volume
• Average and maximum transaction size
• Expected refund, cancellation, and chargeback rates
• Evidence supporting startup capital
• Forecasts or contracts supporting projected volume
• An explanation of any requested reserve or delayed-settlement arrangement

If the company has no processing history, explain how customers will be acquired, what they will be charged for, when the clinical service occurs, and when any product or recurring service is fulfilled. A transaction-flow diagram can show the path from checkout to service, refund or cancellation, and fulfillment.

3. Clinical and provider documentation

Depending on the model, an underwriter may ask for:

• Provider roster and professional licenses
• NPI records
• Group-practice or facility licenses
• Medical-director or supervising-provider agreements, where applicable
• Malpractice or professional-liability insurance
• Clinical-services agreements
• Medicare or Medicaid enrollment information
• PECOS records or CMS enrollment documentation, if the business bills Medicare
• Payer contracts or evidence supporting the stated billing model

CMS describes PECOS as a system for provider and supplier enrollment, supporting-document submission, and enrollment management. A cash-pay company should not claim Medicare enrollment or billing authority without documentation supporting that representation.

Describe the platform’s role accurately. Technology, operations, customer support, or commercial coordination do not replace the independent professional judgment and licensing responsibilities of clinicians.

4. Website, contracts, and payment policies

Prepare the materials that show the live customer journey:

• Website and patient-portal URLs
• Terms of service
• Privacy policy
• Notice of privacy practices, where applicable
• Telehealth or informed-consent workflow
• Pricing and fee disclosures
• Cancellation and refund policy
• Recurring-billing authorization
• Trial-period and membership disclosures
• Customer-service contact information
• Fulfillment and delivery terms
• Complaint and dispute procedures
• Sample receipts, invoices, and email confirmations

State clearly what the cardholder is purchasing: a consultation, membership, diagnostic service, prescription-related service, product, or combination. Checkout language, receipts, card-statement descriptors, and contracts should be consistent.

For health-related advertising, preserve support for pricing representations, testimonials, reviews, and outcome-related claims. The FTC’s health-claims guidance explains that health-related advertising claims require appropriate substantiation.

5. Privacy, security, and data handling

Consider organizing:

• HIPAA applicability analysis
• Business associate agreements, when required
• Security and privacy policies
• Data-flow diagram
• Vendor list for EHR, patient portal, telehealth, cloud, analytics, and billing systems
• Incident-response and breach-notification procedures
• PCI DSS materials for card handling
• Explanation of whether card data is tokenized or handled directly
• Controls addressing the use of health information by marketing and analytics tools

HHS explains that a covered entity generally needs a written business associate contract when a vendor performs services involving protected health information on its behalf. Whether HIPAA applies, and which vendors are business associates, depends on the parties’ roles and activities.

The FTC Health Breach Notification Rule may also apply to certain health-app and personal-health-record businesses. Do not send an underwriter unnecessary patient records; use redacted examples when appropriate.

6. Pharmacy, prescription, or product-related records

If the business facilitates prescription products, prepare only records relevant to the actual model, such as:

• State pharmacy licenses
• Pharmacy or dispensing-partner agreements
• Wholesale or fulfillment agreements
• Prescription-routing and fulfillment description
• Pharmacy address and responsible-professional information
• Documentation identifying any compounding pharmacy or supplier
• Product and advertising substantiation
• Explanation of which entity charges the customer and which entity fulfills the order

A telehealth provider’s professional license does not automatically establish pharmacy authority. FDA materials identify pharmacy licensing, a U.S. physical address, pharmacist access, and prescription requirements as important indicators in evaluating online-pharmacy activity.

How to submit the package

Use four review questions:

• Identity: Who owns the business and receives funds?
• Service: What does the customer buy, and who delivers it?
• Money flow: When is the customer charged, and what can trigger a refund or dispute?
• Controls: How are health information, card data, complaints, and incidents handled?

Then create a document index. Give each file a clear name, date, and indication of which entity it applies to. Keep the legal entity, website, contracts, invoices, bank account, and payment flow consistent.

When additional review may occur

A processor or acquiring bank may ask more questions when a business has limited operating history, high-ticket services, recurring billing, remote patient acquisition, prescription fulfillment, compounded products, multiple legal entities, or substantial card-not-present activity. Completing a checklist does not guarantee approval, processing limits, settlement terms, reserve terms, or ongoing account availability.

This article intentionally provides federal and general operational context rather than state-specific legal conclusions. Requirements may differ wherever patients, clinicians, professional entities, pharmacies, laboratories, facilities, or fulfillment partners operate. Review each relevant jurisdiction with qualified counsel and the applicable regulator; the federal sources cited here do not establish nationwide authorization.

Use the on-page healthcare underwriting checklist

Use the checklist above to identify missing ownership, financial, clinical, customer-contract, privacy, and fulfillment records before submitting an application. It is an organizational tool, not a promise of processor approval.

MDLaunchr is the brand behind WhiteLabelClinic.com, a white-label telehealth infrastructure platform designed to help qualified businesses evaluate and coordinate the technology, operational, compliance, clinical-network, and fulfillment relationships involved in launching telehealth services. Explore how MDLaunchr and WhiteLabelClinic.com can support a compliance-first telehealth launch.

Frequently asked questions

Is there one standard set of telehealth merchant account documents?

No. Processors and acquiring banks set their own procedures. The checklist covers practical preparation categories, but a reviewer may request more information.

Does a cash-pay telehealth business need PECOS enrollment?

Not necessarily. PECOS is relevant when a business represents that it enrolls in or bills Medicare. The actual need depends on the billing model.

Should a platform send patient records to an underwriter?

Provide only what is necessary to explain the service and controls. Use redacted examples where appropriate and avoid unnecessary protected health information.

What documents matter for recurring telehealth payments?

Prepare service terms, affirmative recurring-billing authorization, pricing and renewal disclosures, cancellation and refund policies, sample receipts, and the timing of charges.

Does pharmacy involvement change the application?

It can. Prescription, dispensing, shipping, or compounding activity may require pharmacy licenses, partner agreements, fulfillment details, supplier information, and a clear funds-flow explanation.

Does completing the checklist guarantee approval?

No. Documentation supports review but does not guarantee approval, rates, reserves, settlement terms, processing limits, or continued account availability.