WHO CARRIES WHICH POLICY WHEN A METABOLIC PRACTICE HAS TWO ENTITIESA working map of the cover a metabolic practice actually needs, and the questions to take to a broker and your own counsel before the build starts.

Educational overview · Approx. 10 min read · illustrative, not advice

A working map of the cover a metabolic practice actually needs, and the questions to take to a broker and your own counsel before the build starts.

The question that shows you how a model is really structured

Ask a licensor what insurance you will need, and the answer tells you more about their model than any deck. If they say "we handle that," find out what "we" means — because in a compliant structure there are at least two entities and they carry different risks, buy different policies, and answer to different regulators.

This page is a map of the cover a cash-pay metabolic practice typically needs and how the entity split changes who buys what. It is not insurance advice, legal advice, tax advice or a statement of what your state permits. Every line here is written to be taken to a licensed broker and your own counsel in your own market, which is the only place these questions get settled.

The two-entity split decides everything downstream

The corporate practice of medicine doctrine is a body of state-level rules barring unlicensed persons and corporations from owning or controlling a medical practice or employing physicians for clinical care, intended to preserve independent medical judgment. It varies meaningfully by state, and no reliable single count of states with such rules exists — treat any article that gives you a tidy number as unsourced.

The standard response is separation: a clinician-owned professional entity handling clinical care, and a management services organisation handling non-clinical functions under a services agreement. Enforcement risk turns on the degree of control the management entity exercises over clinical operations and professional judgment. That is not a settled or static area. In 2025, Massachusetts enacted MSO ownership transparency requirements, and Oregon, Washington and California saw bills introduced that would strengthen corporate-practice restrictions.

For insurance purposes the split does three things. It determines which entity has professional liability exposure arising from clinical care. It determines which entity is a party to the member-facing agreements. And it determines which entity holds the data. Get the structure wrong and the policies you buy will not sit where the exposure sits. This is the same structural question underneath sovereign ownership of an independent clinic — who actually controls what, on paper.

Medical malpractice sits with the licensed medical entity

Professional liability for clinical care belongs to the clinician-owned entity and the individual clinicians, not to the business entity. If a licensor implies their organisation carries your clinical cover, that is a red flag about the structure rather than a benefit.

Price the market before you assume anything. Medical liability premiums rose for a seventh consecutive year, and the share of reported premiums increasing year over year climbed from 13.7% in 2018 to nearly 40% in 2025 — the highest share since 2005, per AMA analysis using Medical Liability Monitor data. Premiums are also intensely local and specialty-specific: the reported 2025 manual premium for an internal medicine physician in Miami-Dade County, Florida was $59,736, against $243,988 for ob-gyn and general surgery in the same market. Miami-Dade is a high-cost outlier, not a national benchmark, and quoting it as typical would be misleading — the point is the spread, not the number.

• Claims-made versus occurrence cover, and what a tail policy costs if a clinician leaves — ask your broker to price both, in writing.
• Whether the policy contemplates telehealth encounters and encounters with members located in other states.
• Whether the policy contemplates weight-management and off-label prescribing as practised in your program, and what the carrier's underwriting questions actually are.
• Who is a named insured versus an additional insured, and what happens to the business entity's exposure if a clinical claim names it too.

The business entity buys a different stack

The management entity — the one a partner actually owns — carries the commercial risks. None of these are exotic, but they are routinely forgotten by people who assumed the malpractice policy covered the business.

Work through each of these with a broker who has written cover for healthcare management entities before, not a generalist. The wording matters more than the limit, and the exclusions matter more than the wording.

• Commercial general liability for premises and operations, including anyone who walks into a physical location.
• Professional liability or errors-and-omissions cover for the management services themselves — billing, scheduling, marketing, technology — which a malpractice policy will not touch.
• Employment practices liability once there are staff, and directors-and-officers cover if there is a board or outside capital.
• Media liability for marketing claims, which is worth raising specifically given how much enforcement attention marketing statements have drawn in this category.
• Business interruption and contingent business interruption tied to the supply and technology vendors the program depends on.

Product liability arrives the moment a supplement changes hands

The instant your business sells a physical product, a different exposure attaches — and it does not care whether the product was manufactured by someone else. Who appears on the label, who is deemed the distributor and what the marketing says all shape it.

Before a single unit ships, work out where the indemnity runs and whether it is worth anything. A manufacturer's indemnity is only as good as the manufacturer's balance sheet and the certificate of insurance behind it. Understanding how supplement supply chains actually work is a prerequisite to negotiating any of this, because you cannot allocate a risk you cannot trace.

• Ask for the manufacturer's certificate of insurance and confirm your entity is named as an additional insured on their product liability policy, with the right wording.
• Establish who is the labeller of record and who is legally the distributor for each SKU.
• Get the indemnity provisions reviewed by counsel — not skimmed by you — and confirm they survive termination of the supply agreement.
• Confirm your own product liability cover exists independently rather than relying entirely on someone else's.
• Confirm that every claim printed on the label or made in marketing has been reviewed against the compliance basics a wellness business has to get right.

Cyber and data breach: the exposure that scales with the member list

A metabolic practice accumulates sensitive information quickly — intake data, weight and measurement history, payment details, message threads. Which legal regime applies to which records depends on which entity holds them, what they contain and what your state requires, and that is a determination for counsel, not for a marketing page.

What is not in dispute is the commercial exposure. Breach response is expensive before any liability is established: forensics, notification, credit monitoring, legal review, regulatory correspondence. Ask a broker to price cyber cover with first-party breach response, not just third-party liability, and read the sublimits carefully.

The architectural mitigation is to be deliberate about what member-facing technology touches at all. Data you never collect cannot be breached, and a system scoped to wellness content and coaching carries a different profile from one holding clinical records. The exact scope of the Atlas member-facing technology and its data handling is set out in the build documentation: Ask Atlas to put this in writing: exact scope statement for member-facing technology and data handling. Confirm it in writing before the build, and have your counsel confirm what it means for your entity.

• Which entity is the data controller for each category of record, on paper.
• What each vendor's agreement says about breach notification timelines and who pays for response.
• Whether cyber cover contemplates the specific vendors and integrations in the stack.
• What your state requires on breach notification, independent of any federal analysis.

Telehealth changes the licensure lines, not the risk lines

Medical practice is generally deemed to occur where the patient is located, so a clinician typically must be licensed in the patient's state. The Interstate Medical Licensure Compact covered up to 43 member states as of March 2026, which streamlines the pathway without eliminating the requirement.

That has a direct insurance consequence: a telehealth-first model does not reduce cover, it redistributes cost. Build-out and clinical equipment lines shrink or disappear; multi-state licensure, technology and data lines appear. That is a statement about cost composition, not about magnitude, and it is an inference rather than a surveyed finding. If you are still weighing the delivery model, telehealth versus in-clinic metabolic care is the fuller comparison.

One more line item worth naming because it is fixed and checkable: the DEA practitioner registration application and renewal fee is $888 for a three-year registration period. Whether a registration is required at all depends entirely on what the medical entity prescribes, and state controlled-substance registration requirements vary separately — confirm the current federal schedule status of every molecule in the program with your counsel and your pharmacy partner rather than assuming either way.

The cost lines nobody quotes you

Practice-management publishers commonly cite first-year startup and operating ranges of roughly $70,000–$500,000, with build-out and renovation at $20,000–$60,000, clinical equipment $15,000–$75,000, IT infrastructure and EHR $10,000–$25,000, and EHR and technology subscriptions at $500–$2,000 per month. Treat those as an inference, not a finding: the widely repeated attribution of these ranges to an industry survey could not be traced to the named source, and no authoritative survey was located.

Licensure and registration costs are jurisdiction-specific — state medical licensure, professional entity registration, and state controlled-substance registration where applicable — and cannot be generalised. These are cost figures only. No revenue figure accompanies them, none may be derived from them, and Atlas does not publish one. For how these lines are usually broken out, see how the cost structure of metabolic care is typically described.

How to run the conversation with a broker

Go in with the structure drawn, not the structure described. A broker quoting against a hand-wave will price the wrong risk, and you will find out when a claim is denied.

• Bring an entity diagram: who owns what, who employs whom, who signs the member agreement, who holds the data.
• Bring the management services agreement and the supply agreements, redacted if you must.
• Bring the actual consumer-facing marketing, because carriers underwrite what you say as much as what you do.
• Ask for the exclusions list first and the premium second.
• Then have counsel review the whole picture against your state's corporate-practice position before the build begins — this is what Atlas expects a partner to have done, and it is covered in the diligence questions worth working through before licensing anything.

If your structure is sound, the next step is qualification

Atlas provides the business layer — the program, member-facing technology, brand kit, ordering workflow and operating playbooks. Atlas provides no medical services and employs no clinicians; clinical care sits with a separately licensed medical entity, and the insurance map above is one of the reasons that boundary is drawn hard rather than blurred. How that boundary shows up in the build is set out in how Atlas structures a build and in what Atlas puts in front of counsel.

The license fee is one-time, 0% of revenue, with no ongoing partner fees, and the figure is disclosed on the fit call rather than published: The license fee is one-time. It carries 0% of revenue and no ongoing partner fees. The figure is not published anywhere, by design — it is disclosed in full on the fit call, where it can be put next to what it covers instead of floating on its own.. Atlas takes a limited number of partner builds at a time (Ask Atlas to put this in writing: partner slots per quarter). The application is a qualification step in both directions — it decides whether the market, the structure and the operator fit, and a no is a legitimate result. If you have the questions on this page ready for your own counsel, start the application.

FREQUENTLY ASKED QUESTIONS.