Skip to content

Adding certification filing to an agency service line

By VeriScripts · Reviewed by Jerome T. · · 7 min read

Key takeaways

  • An agency taking this on is selling an outcome it cannot promise, and that reshapes the scope, the contract and the status vocabulary long before it changes anything about the filing.
  • The knowledge gap is small and learnable. The judgement gap — knowing which discrepancy matters and which is cosmetic — only closes with volume.
  • Two clauses carry most of the exposure: one placing the burden of accuracy on the client for their own representations, and one capping how many rounds of response the fee covers.
  • The most common failure mode is running certification through an existing project process, which reports status as percentage complete and treats submission as delivery.

Adding LegitScript certification filing to an agency service line is rarely a knowledge problem. The application is long and particular, but it is learnable, and a competent operator can work out what it wants within a handful of files. What stops agencies is something else: certification is the first service most of them sell where the deliverable is a decision somebody else makes.

Everything else on the menu ends with an artefact you hand over. A site launches. A campaign runs. A policy document gets signed off. Certification ends with an outcome you do not control and cannot promise, and the work you actually performed is invisible next to it. That difference reshapes how you scope the engagement, how you price it, how you staff it and what your contract has to say.

This is written for agencies, MSOs and platforms considering certification as a service they sell to clients. If you are getting your own business certified, the question is entirely different and none of the staffing or liability material below will be relevant to you.

The knowledge is learnable, the judgement is the gap

New teams assume the hard part is knowing what the application asks. It is not. Reading the questions once tells you most of what you need, and the second file goes considerably faster than the first.

The gap is calibration. A client's intake answers say they use a single compounding pharmacy; their website lists three products the pharmacy does not make. Their policy page describes a refund window their checkout flow contradicts. Their clinical protocol document is real but was written for a different state. Each of those is a discrepancy, and the skill is knowing which ones will draw a question and which are cosmetic.

That judgement comes from seeing many files, not from reading guidance. Your first several applications will be slow, and you should price and schedule them as though they will be, because the alternative is discovering the ramp cost on a client's timeline.

There is a shortcut, and it is unglamorous: record what happened. If you keep the follow-up questions each file drew and what triggered them, calibration accrues to the agency rather than to whichever person happened to work the file. If you do not, you re-learn it every time somebody leaves.

Certification does not behave like a deliverable

Agency processes are built around scoped work with an end date. Certification is open-ended in a specific way: the file stays live until it resolves, and during that window it can generate work at unpredictable intervals.

This breaks fixed-scope thinking in two places. The first is the rework loop — a follow-up question arrives, you need a document the client does not have to hand, and three weeks of elapsed time buys you a paragraph. The second is the waiting. Nobody in an agency is used to owning a file that is not being worked on but is also not finished.

The practical consequence is that you need a status vocabulary that answers who owes the next action rather than how far along the project is. "In review" describes a phase and tells your account manager nothing. "Waiting on client: pharmacy agreement" tells them who to chase and what to chase them for. This is the same discipline that running applications at volume forces on anybody with more than a dozen live files, and it is worth adopting before you have twelve, not after.

The liability conversation belongs before the first sale

You cannot sell an outcome you do not control, and the temptation to imply otherwise is strongest during the sales conversation, when the client asks the obvious question about approval odds.

The honest position is narrow and defensible. You prepare the application, you submit it, you manage the responses, and the certifying body alone decides. That is what the contract should say, in those terms. It should also say what happens when follow-up questions arrive: who responds, within what window, and whether that work is inside the fee.

Two clauses matter more than the rest. One is the attestation boundary — the client is responsible for the truth of what they represent about their business, and you present their facts rather than warranting them. The other is the resubmission clause, because a fixed fee with unlimited rework is a fee you have not priced. That mechanic is worth working through properly before you publish a rate card, and it is covered in pricing a white-label certification service.

Hire, partner, or licence the workflow

There are three ways to stand this up, and the right one depends almost entirely on expected volume.

Subcontracting to a specialist gets revenue moving in weeks. You keep the client relationship, you keep a margin that is thinner than you would like, and you keep every problem that is not the filing itself: the chasing, the status questions, the apology when something sits for a fortnight. It is the fastest route and the one most likely to be mistaken for a solved problem.

Hiring builds real capability. It also takes months to ramp, needs a second person before you can take a holiday, and only earns back the fixed cost at sustained volume. Agencies that hire before demand exists tend to end up with an expensive generalist doing three filings a quarter.

Licensing a workflow and doing the work in-house sits between the two. You carry the review labour but not the tooling build, and the calibration stays with your team. It suits agencies whose clients are already asking, where the volume is real but not yet enough to justify a dedicated compliance hire.

The client relationship changes shape, usually for the better

Certification pulls you into a custodial role. You become the party that holds a client's compliance record, and that changes what they ask you about.

They will come to you when they add a product to the catalogue, when they take on a new state, when they switch payment provider, when their acquirer asks a question they cannot answer. None of that was in the statement of work. All of it is either scope creep or the most defensible retainer on your menu, and which one it becomes is decided by whether you built somewhere to put it.

That is the strategic argument for taking this on at all. Certification is sticky in a way that campaign work is not, because the record has to live somewhere and moving it is genuinely painful for the client.

The failure mode is treating it as another project

The symptoms are consistent enough to be diagnostic. A statement of work with a fixed delivery date. A project manager assigned as though this were a build. Status reported as a percentage. Clients who hear "submitted" and understand it as "done", then reappear angry once the silence has gone on longer than they expected.

Underneath all four is the same mistake: managing the file as a project rather than as a case with a state. A project has a plan you execute against. A case has a current condition, an owner of the next action, and a history — and if your system cannot tell an account manager the current condition without opening an inbox, the process will fail somewhere between the eighth and the fifteenth file.

What clients experience of that system is not incidental, either. It is most of what they think they are buying, which is the argument in the client portal is the product.

The infrastructure is almost identical from one agency to the next

The infrastructure a certification service line needs is unglamorous and mostly identical across agencies: structured intake, one place clients upload to, an explicit status per file, an owner for follow-ups, and a queryable record of what each application drew. The VeriScripts platform is that infrastructure, white-labelled, so the agency's name is on the portal and ours is not. If you are still testing whether the demand is real, our done-for-you service will file a single application at a published price while you find out.

Frequently asked

Does an agency need a compliance background to file LegitScript applications for clients?
Not a formal one. The application asks for facts about the client's business, its licensure, its clinical governance and its website, and the work is mostly gathering those facts and reconciling them against what the site actually says. What you do need is somebody willing to be pedantic and to own the follow-up loop. A regulatory background shortens the ramp because it builds calibration faster, but agencies without one get there through volume instead.
Should we hire for certification work or partner with a specialist?
It depends on expected volume and on how much client-facing burden you want. Subcontracting to a specialist gets revenue moving fastest and costs you the thinnest margin, but you still own the relationship, the chasing and the complaints when a file stalls. Hiring builds real capability and takes months to ramp, which only pays back at sustained volume. Licensing the workflow and doing the work yourself sits between the two.
Should certification be sold on its own or bundled with the work around it?
On its own, and let it pull the rest along behind it. Bundling buries the price of the part clients find hardest to value, and it ties an invoice for design or campaign work that finished weeks ago to a file that has not resolved. Kept separate, certification behaves like an entry product: it is bought under time pressure, it obliges you to learn the client's business in unusual detail, and the questions it raises about their site, their policies and their catalogue lead naturally into the services you already sell. Bundling collapses that sequence into a single negotiation, and the half that gets discounted is rarely the right one.

Keep reading

Filing one application, or a hundred?

The platform is for teams running certifications for their own clients. If you only need your own business certified, our done-for-you service files it end to end at a published price.