LegitScript Certification for Google Ads: Who Needs It

Key takeaways

LegitScript certification is required by Google for online pharmacies, prescription drug services and telemedicine advertisers in the markets where those categories are permitted — it is not required for every business that mentions peptides.
The gate is what you promote and how you take money for it, not what industry you say you are in. Research-use suppliers and B2B manufacturers are generally outside the certification path entirely.
LegitScript publishes a two-part fee structure: a non-refundable application fee plus an annual certification fee per website. Budget for both, and for a review that runs in months rather than days.
Certification and Google Ads certification are two separate applications. Passing LegitScript does not automatically switch your ads on — you still submit the Google Ads healthcare certification form afterwards.
There is almost always compliant demand you can capture while an application is pending. Waiting in silence for three months is a choice, not a requirement.

Do I actually need LegitScript certification?

You need LegitScript certification if you want Google Ads to promote prescription medications, online pharmacy services, or telemedicine that results in a prescription — in the countries where Google permits those categories at all. If you sell research-use compounds, supplements, devices, or B2B supply with no prescribing relationship and no prescription drug terms in your ads or landing pages, certification is generally not the gate you are stuck behind, and applying for it will not fix a suspension caused by something else.

That distinction matters because certification is slow and expensive, and a large number of the businesses that ask us about it are blocked by an entirely different policy. We see companies spend a quarter chasing certification while the actual disapproval was a misrepresentation problem on their About page.

The three-question triage

1. Does a prescription get issued as a result of the click? 2. Do your ads, keywords or landing pages use prescription drug names? 3. Do you dispense or ship a prescription medication? If all three are no, certification is unlikely to be your blocker — look at misrepresentation and unapproved-substances signals first.

What certification actually covers

Google does not run this verification itself. It accepts third-party certification from LegitScript and, in the US and Canada, also recognises NABP Digital Pharmacy accreditation and .pharmacy domains for pharmacy advertisers. LegitScript expanded its pharmacy certification partnership with Google in 2026, which is why the process has become more visible to smaller operators who previously never encountered it.

Certification categories that matter to this industry:

Business type	Certification typically required	What it unlocks
Telehealth platform that prescribes	LegitScript healthcare / telemedicine	Ads for prescription-linked consultations in permitted markets
Compounding pharmacy (503A/503B)	LegitScript or NABP accreditation	Pharmacy service advertising, prescription drug terms subject to local rules
Wellness clinic, no prescribing	Usually none	Service ads without prescription drug terms
Research peptide supplier	Not applicable	Nothing — the constraint is unapproved substances, not certification
Wholesale / manufacturer (B2B)	Not applicable	Nothing — B2B positioning is the lever

Note the bottom two rows. Certification is not a general-purpose “peptide licence.” It cannot make a research-use catalogue advertisable, and paying for it will not change how an unapproved-substances review reads your product pages.

What does it cost and how long does it take?

LegitScript publishes a two-part fee schedule: a non-refundable application fee charged up front, and an annual certification fee per website charged once the application is approved. Published figures for healthcare certification have sat around a $975 application fee plus roughly $2,150 per website per year, putting a single-site first year in the low thousands. Fees change and vary by merchant category and complexity — confirm current pricing with LegitScript directly rather than trusting a blog, including this one.

Timeline is the part that surprises people. Self-managed applications commonly run three to six months from submission to decision, and longer where documentation comes back incomplete. The clock is not really a queue; it is a document exchange, and most of the elapsed time is the applicant assembling licences, ownership records and clinical protocols that were never written down.

Two applications, not one

Approval from LegitScript is step one. You then submit Google’s own healthcare and medicines certification form for the advertiser account and the specific countries you want to serve in. Teams that assume the ads switch on automatically lose weeks discovering otherwise.

How to prepare so the review is not the bottleneck

Every application we have watched go slowly went slowly for the same reason: the business could not evidence something it genuinely does. Assemble these before you submit, not after they are requested.

Entity documentation. Legal name, registration, ownership structure, and the same name reflected in your domain registration, Ads billing and payment descriptor.
Licensure. State or national licences for every prescriber and every pharmacy you work with, current and downloadable.
Clinical process description. How intake works, who reviews it, what qualifies a patient, what happens when someone is declined.
Pharmacy relationships. Named partners, contracts, and the jurisdictions they dispense into.
Website transparency. Contact route, physical address, refund and shipping terms, privacy policy, and no orphan pages contradicting your clinical claims.
Advertising claims inventory. A list of every outcome claim on your site with the support for it. Anything unsupportable comes down before submission, not during review.

If you cannot produce items 1–4 in a week, that gap — not LegitScript — is your real timeline.

What the application process actually looks like

Described from the outside it sounds like a form. In practice it is a structured audit of your business, run asynchronously, where each round of questions costs a week or more of calendar time. Understanding the shape of it is how you compress it.

Category selection. You choose the certification type — telemedicine, online pharmacy, healthcare merchant — and this decides which standard you are held to. Choosing wrong means restarting.
Application and fee. The non-refundable application fee is charged per website. Multiple domains mean multiple applications, which is a strong argument for consolidating onto one domain before you apply.
Documentation submission. Corporate records, licences, prescriber credentials, pharmacy agreements, privacy and telehealth policies, and screenshots or access to the patient journey.
Website review. Reviewers walk your site the way a patient would, including intake. Broken flows, placeholder text and staging pages become findings.
Clarification rounds. The part that consumes the calendar. Answer completely the first time; partial answers cost another cycle.
Decision and monitoring. Certification is not one-and-done. Certified merchants are monitored, and material changes to your model are expected to be disclosed.

The compression lever

Response latency is the only variable you fully control. Teams that turn clarification requests around in 48 hours routinely finish in a fraction of the time of teams that take three weeks per round, with identical documentation.

Why applications fail or stall

Refusals are less common than indefinite stalls, and the stalls cluster around a small number of causes:

Model mismatch. The business describes itself as telehealth but functions as an order-taking storefront with a nominal prescriber review. Reviewers look at whether a clinical decision genuinely occurs.
Unverifiable partners. A pharmacy that will not be named, or a licence that cannot be produced, blocks the file entirely.
Claims the site cannot support. Outcome percentages, “FDA approved” used loosely about a compounded formulation, or testimonials describing results.
Entity inconsistency. Three variations of the company name across domain WHOIS, Ads billing, payment descriptor and corporate filings.
Geography beyond licensure. Marketing that implies national availability when prescribers are licensed in a handful of states.
Orphan content. Old blog posts with dosing guidance or affiliate links that contradict the clinical positioning presented in the application.

Every one of these is discoverable before you apply. A pre-application self-audit against this list is the cheapest hour in the whole process.

Life after certification

Certification changes what you may promote. It does not exempt you from everything else, and the accounts that get into trouble post-certification are usually the ones that relaxed.

Google’s own certification is still required and is country-scoped. Adding a market later means revisiting it.
Ad-level review continues. Individual ads are still disapproved for claims, and repeated violations still carry account risk.
Restricted term rules still apply to keyword targeting. Certification type determines what you may bid on — see advertising compounded GLP‑1s.
Renewal is annual and per website. Diary it; lapsed certification stops ads without warning.
Material changes get disclosed. New pharmacy partner, new treatment category, new domain — all reportable rather than quietly shipped.

Treat certification as an operating standard rather than a hurdle cleared, and the account stays stable. Treat it as a badge and you will meet the same review again on worse terms.

What you can run while the application is pending

Certification restricts prescription promotion. It does not silence the account. Depending on how your business is structured, there is usually a compliant surface to work while you wait:

Brand terms. People searching your name are already yours to lose. Protect them.
Non-prescription services. Consultations, lab panels, coaching, memberships and diagnostics, described as services rather than as a route to a specific drug.
Condition-adjacent education with no drug names, feeding an email list rather than a checkout.
Measurement build. Get conversion tracking and offline conversion imports finished during the wait so that day one of certified traffic produces usable data.

Two things not to do: do not keyword-target prescription drug names hoping the disapprovals go unnoticed, and do not spin up a second domain to run what the first one cannot. Both read as circumvention and both make the eventual certified account harder to operate.

Not sure which category you fall into? The Google Ads Readiness Score takes a few minutes and tells you whether certification is your blocker or a distraction, and if you want a human read on it, book a strategy call.

Founder Question

“Can we just pay for certification and be done with the compliance problem?”

Our Perspective

Certification clears one specific gate — whether you are a legitimate prescription or pharmacy operation. It does nothing for a misrepresentation flag, an unapproved-substances reading of your product pages, or a claim you cannot substantiate. We have seen businesses spend months and several thousand dollars on an application while the actual disapproval sat on their About page. Diagnose first, then apply if the diagnosis says to.

Practical Recommendation

Run the three-question triage before spending a dollar on certification. If no prescription is issued, no drug names appear in your ads or pages, and you dispense nothing, your blocker is almost certainly a different policy.
Assemble entity documents, prescriber licences, pharmacy agreements and your clinical process description before you apply. Elapsed time in these applications is mostly your response latency, not a queue.
Keep brand terms, non-prescription services and the tracking build running while the application sits with the reviewer. Waiting silently for a quarter is a choice, not a requirement.

What we learned

The most common expensive mistake we see is a research-use supplier paying for a certification process built for pharmacies. Certification answers the question 'is this a legitimate prescription operation?' If your business does not prescribe or dispense, that question was never the one blocking you, and the months spent applying would have been better spent on site transparency and product data.

Frequently asked

Does LegitScript certification guarantee my ads get approved?

No. It clears one specific gate. Your ads, keywords and landing pages are still reviewed against every other policy, and certification does nothing for a misrepresentation or unapproved-substances issue.

Can I advertise peptides for research use with LegitScript certification?

Certification is built around prescription and pharmacy services, not research chemicals. It does not create a path for research-use catalogues, and applying for it in that situation is usually wasted money.

Do I need certification in every country I advertise in?

Certification is location-specific. Google permits these categories in a limited set of countries and the requirements differ per market, so confirm each target country before you assume coverage carries over.

Can an agency apply on my behalf?

An agency can assemble and manage the application, but the certification attaches to your business and website, and the licences and clinical evidence have to be genuinely yours.

Next step

If you want this applied to your account and your site rather than read in the abstract, book a 30-minute strategy session. We will look at the domain before the call.

Book a Strategy Call

Do You Need LegitScript Certification to Run Google Ads?