What is Decoda Health building?

An AI-native operating system built for the next generation of clinical care. We're empowering medical practices with the tools they need to thrive in an AI-native world. From autonomous front desks to intelligent charting, we've got you covered.

How much did Decoda Health raise and who led the round?

Decoda Health Raises $4.5M to Build the Operating System for Modern Care, led by Y Combinator.

What are the new med spa laws in 2026?

State legislatures are regulating med spas directly for the first time. Indiana's SB 282, Texas's Jenifer's Law, California's SB 351, and New Jersey's S2996 — each has specific requirements, deadlines, and a 2026 compliance checklist.

How can med spas reduce no-shows?

Cut your med spa no-show rate below 5%. See which reminders, deposits, and card-on-file rules to use for each appointment — with research, a copy-paste cancellation policy, and a plan for backfilling empty slots.

How much does it cost to open a med spa in 2026?

Med spa startup costs in 2026 run $150K–$500K. See the full cost breakdown, medical director requirements, and how long until a new med spa is profitable.

How can med spas set up VIP memberships and patient wallets?

Modern med spas can set up custom membership tiers, auto-convert recurring charges to patient credit, and split payments across wallets, gift cards, and physical cards at checkout.

What's the best way to manage recurring memberships for a med spa without a separate CRM?

A purpose-built med spa EMR like Decoda handles multi-tier memberships natively — including per-item rollover, tiered discounts, configurable billing cycles, and automatic credit conversion — so you never need a separate CRM or spreadsheet to track member benefits. Membership configuration that most general-purpose tools fail to deliver is built directly into the checkout and patient profile.

How do I set up and conduct telehealth or virtual follow-up visits inside my practice management software without letting patients self-book them?

You can configure virtual locations within your scheduling settings and restrict them to staff-initiated booking only, keeping telehealth appointments — like post-operative follow-up calls — fully internal. The virtual visit lives inside the same scheduling and clinical documentation environment as your in-person care, so notes and records stay in one place.

AI-native EMR vs. legacy EMR with AI added on — what's the real difference for a med spa?

A legacy system that bolts AI on top can only apply intelligence to what its rigid architecture allows — typically scheduling or chat. An AI-native system is built so that AI understands context across the full patient journey, from the first phone call through clinical notes, inventory, and follow-up campaigns. For a med spa, that difference shows up in charting speed, front desk automation, and inventory tracking — not just appointment reminders.

What are the biggest software switching triggers for elective-care clinics in 2026?

The most common reasons independent practices switch software are poor customer support, fragmented tools that don't talk to each other, missing or broken membership features, and compliance gaps in clinical documentation. Multi-location growth and new state licensing requirements in 2026 are also pushing owners to find a single system that works across locations.

Can I manage high-risk payment processing — like peptides, semaglutide, or ketamine — through my med spa software?

Yes — Decoda supports high-risk payment processing through its Rainforest integration, which covers services and products like peptides, semaglutide, GLP-1, ketamine, and TRT/HRT. If you currently have a merchant relationship with Stripe or Square, it's worth verifying compatibility before assuming your existing setup covers high-risk categories, since those processors routinely freeze funds for these service types.

How do I reduce the time my front desk spends on phone calls without losing the personal feel patients expect?

An AI front desk answers missed calls, texts patients back immediately, and handles routine booking and follow-up questions 24/7 — so your staff focuses on the patients already in the room. Clinic partners using this approach see a 70% reduction in inbound call volume on average, which gives the front desk time to deliver the attentive experience that keeps patients coming back.

What should I look for in a med spa EMR if I'm running GLP-1 or weight loss programs?

Look for billing cycles that match your program cadence — 6-week, 10-week, and 12-week options are standard for structured weight loss and GLP-1 protocols — along with automated patient follow-ups and high-risk payment processing for compounding medications. Clinical note templates and care plan timelines purpose-built for weight loss workflows prevent the documentation gaps that create compliance risk.

Will patients see my personal or work email address when they join a telehealth video call?

No — telehealth video calls initiated through Decoda are conducted within the platform's virtual visit environment, so your personal or work email address is not exposed to patients. The invite and join flow is handled through the scheduling and communications layer, keeping your contact information private.

How long does it actually take to migrate from an existing EMR to a new practice management system?

A well-managed migration from an existing EMR takes three to four weeks when the new vendor handles the heavy lifting — data transfer, appointment history, and team training. The practices that report painful migrations are almost always ones where the vendor handed them a checklist and disappeared; white-glove migration support, where the team configures the system to match how your practice actually runs, is the difference between chaos and a clean cutover.

What does a system of record actually mean for an independent med spa, and why does it matter?

A system of record means every patient interaction — calls, bookings, clinical notes, payments, inventory usage, and follow-ups — lives in one place and feeds the same patient profile. For an independent med spa, this matters because fragmented tools create data silos where rebooking reminders don't fire, membership credits get miscounted, and providers walk into appointments without full patient history. One connected record is how a small team operates like a much larger one.

Concierge Software for Your Practice

Picking concierge medicine software in September 2026? This guide covers the features that matter most before you sign.

What Concierge Medicine Is (and Why It Demands Different Software)

Concierge medicine runs on a simple premise: patients pay a monthly or annual retainer and get same-day access, longer appointments, and a physician who actually knows their name. No insurance middlemen, no 15-minute slots, no three-week waits.

That model breaks down quickly when you try to run it on software built for fee-for-service billing. Generic EHRs were designed around volume, insurance codes, and high patient throughput. Concierge practices invert that logic entirely, trading volume for depth across a deliberately small panel.

The gap shows up fast. Recurring membership billing, 24/7 communication obligations, and relationship-level documentation all require capabilities that standard practice management tools were never built to handle. The U.S. concierge medicine market was valued at $7.35B in 2024 and is projected to grow at a CAGR of 10.33% through 2030. Between 2018 and 2023, concierge and DPC practices grew 83%. Software that fits the model has become a real platform decision.

Concierge Medicine vs. Direct Primary Care: Why the Distinction Matters for Software

Concierge medicine charges a high annual retainer while keeping insurance billing intact. Patients pay for access; insurance still pays for services. DPC cuts insurance out entirely, replacing it with a low flat monthly fee, typically around $100 per month.

That structural difference has direct software consequences. A concierge practice needs retainer billing plus claims management running in parallel. A DPC practice needs pure membership infrastructure with recurring payments and no insurance workflow at all. Shortlisting vendors before clarifying which model you run means reviewing the wrong feature set entirely.

Feature Requirement	Concierge Medicine	Direct Primary Care (DPC)
Patient fee structure	High annual or monthly retainer	Low flat monthly fee (~$100/mo)
Insurance billing	Required (claims management runs alongside retainer billing)	Not required (insurance is cut out entirely)
Membership/retainer billing	Required (with prorating, pausing, and credit rollover)	Required (recurring payments, no claims layer)
Billing architecture	Dual-track: retainer + claims management in parallel	Single-track: pure membership infrastructure
HIPAA BAA requirement	Yes	Yes
24/7 secure patient messaging	Required	Required
Member-only scheduling	Required	Required

The Core Feature Requirements for Concierge Medicine Software

Before opening a single vendor demo, know which features are non-negotiable for your model.

Membership and retainer billing with automated recurring payments
Secure patient messaging and a portal patients can access after hours
Clinical charting built for longitudinal, relationship-based care
Telehealth support for the virtual touchpoints your retainer promises
Scheduling that accommodates same-day and next-day access without manual juggling
E-prescribing, including controlled substances if your scope requires it

A gap in recurring billing or after-hours communication breaks the core promise of the concierge model before a patient even books their second appointment.

Membership and Retainer Billing: The Feature That Separates the Right Software from the Wrong One

Recurring billing sounds simple until you're dealing with a patient who pauses their membership mid-cycle, adds an IV drip beyond their retainer, or cancels with unused credits sitting in their account. Generic payment processors handle none of that gracefully. Purpose-built membership billing software handles prorations, freezes, credit rollovers, and failed card retries automatically.

Ask any vendor these questions before signing:

Does the system support prorated billing when a patient joins mid-cycle?
Can memberships be paused or cancelled with credits retained through the billing period?
Does it handle rollover credits and add-on packages tied to a single patient account?
Is payment data stored in a HIPAA-compliant environment, not merely processed by a generic card tool?

That last point matters more than most owners realize. Standard processors like Square or Stripe weren't built for clinical environments, and concierge practices face the same HIPAA obligations as any covered entity regardless of whether they bill insurance. Payment infrastructure that stores or transmits protected health information needs a Business Associate Agreement in place. If a vendor can't produce one, that's a disqualifying gap.

Patient Communication and 24/7 Accessibility Requirements

Accessibility is the core promise a concierge patient is paying for. When they can't reach you at 8 PM, the software failed them before your staff did.

That accessibility has to be built on compliant infrastructure. WhatsApp, standard texting, and personal email are not HIPAA-compliant channels. Any patient message containing protected health information needs to travel through a system covered by a Business Associate Agreement. Consumer apps are not. That distinction becomes a liability the moment a patient sends a lab result photo through iMessage. HIPAA patient messaging centralizes every channel (SMS, DM, and email) in one compliant inbox.

In software terms, "24/7 accessibility" means a secure patient portal for asynchronous messaging, automated after-hours responses that acknowledge urgent inquiries without staff intervention, and a mechanism for capturing unanswered calls and following up before the patient calls someone else. AI Front Desk closes that gap without requiring a human on call around the clock.

Clinical Documentation Built for a High-Touch, Low-Volume Practice

Smaller patient panels (300 to 600 versus 2,000-plus) give concierge physicians something most never get: time to chart the full picture. That depth requires customizable SOAP templates built around how you actually practice, plus a patient summary view that pulls clinical history together before you walk in the room.

Integrated lab tracking matters too. Results should land directly in the chart, not in a separate inbox requiring manual copy-paste. AI scribe functionality deserves a close look: ambient listening that drafts a compliant note before the patient leaves saves 10 to 20 minutes of post-visit documentation per appointment. For practices that have expanded into wellness or aesthetics, before-and-after photo documentation should live inside the chart, not in a separate app.

Scheduling That Supports Small Patient Panels and High-Demand Access

Scheduling in a concierge practice works differently. You're honoring a commitment to a defined panel of patients who expect same-day or next-day access on demand, so public-facing booking links are often the wrong tool. You need access controls that restrict scheduling to enrolled members only.

A few scheduling capabilities worth confirming with any vendor:

Member-only booking flows that restrict online scheduling to your patient panel
Telehealth configuration for virtual visits handled inside the same scheduling environment as in-person appointments
Automatic prep and cleanup buffers so back-to-back slots don't create unaccounted gaps
Mobile payment and scheduling support for house calls or off-site appointments

That last point applies more than most vendors acknowledge. Concierge physicians see patients at home, at offices, and at locations beyond a fixed clinic room. Software that only functions well inside one physical location creates friction the moment you leave it.

HIPAA Compliance and Data Security: Non-Negotiable Requirements

HIPAA applies regardless of whether you bill insurance. Smaller concierge practices are not exempt from OCR enforcement, and a high-profile patient panel makes a breach costly in ways that go well beyond the fine.

Run any vendor through these technical safeguards before signing anything:

Role-based access controls with unique user identification per staff member
Full audit logs showing who accessed or modified a patient record and when
Encrypted messaging for all patient communication containing protected health information
HIPAA-compliant cloud storage with documented security standards
A signed Business Associate Agreement available before you go live

Vetting Software Vendors: Questions to Ask Before You Sign

Bring these questions to every vendor conversation before any contract is signed:

How does the billing engine handle retainer billing alongside insurance claims?
How long does BAA execution take, and who initiates it?
Who owns the data if you leave, and in what format can you export it?
What does migration cover, and how long until go-live?
What is the actual support response time, and through what channel?
Are there usage caps on messaging or AI minutes, and what do overages cost?

That last question catches more buyers off guard than any other. A headline subscription price can double once a high-volume practice hits message limits or AI usage thresholds. Get the overage math in writing before you sign.

On data ownership: vendors who charge to release your records or export your patient data are a real category. Ask directly whether there are exit fees tied to data portability. A vendor confident in their product has no reason to hold your data hostage.

How Decoda Health Fits Practices That Are Expanding Beyond Primary Concierge Care

Concierge practices rarely stay narrowly defined for long. A patient panel built on retainer primary care tends to expand organically into GLP-1 and weight management programs, IV therapy, hormone optimization, and aesthetic services. The trust is already there. The demand follows. Practices that grow into wellness and integrative medicine need software designed for that expanded scope from the start.

That expansion is where most concierge software breaks. A system built only for retainer billing and clinical notes has no membership architecture for multi-service wellness programs, no inventory tracking for injectables or infusion supplies, and no AI-assisted charting built for aesthetic workflows.

Decoda Health was built for exactly this hybrid profile. Scheduling, clinical documentation, AI Scribe, advanced membership configuration, and patient communications all run inside one system. Clinic partners using Decoda Health see an average 70% reduction in call volume and 80% reduction in check-in time. The membership billing handles multi-tier configurations, per-item rollover, and tiered discounts that standard concierge software typically cannot replicate. Practice owners who want software that carries them from a traditional retainer model through a full elective-care expansion without switching systems should take a direct look at Decoda Health.

Final Thoughts on Software Built for Concierge Medicine

The wrong software creates friction at every touchpoint your patients are paying to avoid. Retainer billing, after-hours access, and documentation depth are not features you can bolt on later. Getting this right from the start is the cleaner path. Talk to Decoda Health to see how the system handles the workflows covered here.

Frequently Asked Questions

What concierge medicine software features should I confirm before signing with any vendor?

Three capabilities decide whether a platform actually fits the concierge model: recurring retainer billing that handles mid-cycle pauses, credit rollovers, and prorated joins; a secure HIPAA-compliant patient messaging portal with automated after-hours responses; and longitudinal clinical charting with integrated lab results. Confirm each one with a live demo, not a feature checklist, because billing edge cases and documentation depth are where most platforms fall short in practice.

What's the difference between concierge medicine software and DPC software?

Concierge medicine needs retainer billing running alongside insurance claims management — both workflows active in parallel. Direct primary care runs pure membership infrastructure with no insurance layer at all. Evaluating vendors before you've clarified which model you run means you're checking the wrong feature set, so start with that structural distinction before opening a single demo.

Can I use a general EHR like a standard fee-for-service system for a concierge or elective-care practice that's expanding into GLP-1, IV therapy, or aesthetics?

General EHRs were built around insurance codes and high patient throughput — the opposite of what a concierge or hybrid elective practice needs. When a retainer-based practice expands into weight management programs, IV therapy, or aesthetic services, the gaps get harder to work around: no multi-tier membership architecture, no inventory tracking for injectables or infusion supplies, no AI-assisted charting built for aesthetic workflows. A system like Decoda Health was built to carry practices through that expansion without requiring a second platform.

Does a concierge medicine practice still need a Business Associate Agreement with its software vendor?

Yes. HIPAA applies regardless of whether you bill insurance, and any software that stores or transmits protected health information requires a signed BAA before you go live. Consumer tools — WhatsApp, standard texting, personal email — carry no BAA and are not compliant channels for clinical communication. If a vendor can't produce a BAA, that ends the evaluation.

What should I ask a concierge medicine software vendor about data ownership and exit terms?

Ask directly whether there are fees tied to exporting your patient records when you leave. Some vendors charge to release data or restrict export formats — a practice with years of clinical history on file is effectively held hostage. Get the answer in writing before you sign, and confirm what format your data exports in so it's actually usable in another system.

How does the AI scribe handle documentation for internal medicine and concierge care workflows, not just aesthetic treatments?

Ambient AI scribe tools record the visit conversation in real time and generate a structured SOAP note before the patient leaves, regardless of whether the appointment is a primary care intake, a chronic disease check-in, or an aesthetic consultation. Decoda Health's AI Scribe uses custom SOAP templates and longitudinal patient context, so the note reflects the full clinical picture rather than a generic procedure log — the same scribe that documents a Botox session can document a hormone panel review or a GLP-1 follow-up visit in the same chart.

What's the fastest way to get a concierge practice live on new software without losing patient data?

The shortest path from contract signing to go-live is a white-glove migration where the vendor handles data transfer, appointment history, and staff training rather than leaving those tasks to your team. Decoda Health runs a 3–4 week migration process end-to-end; the one item practices must handle themselves is collecting new card-on-file details from membership patients, because credit card data cannot be transferred between payment systems for security reasons.

Concierge medicine software vs. general practice management software — what's actually different under the hood?

The core architectural difference is billing logic: general practice management tools are built around fee-for-service transactions, where each visit generates a charge. Concierge software has to run recurring retainer billing as the primary revenue layer — handling mid-cycle joins, pauses, credit rollovers, and cancellation logic — while optionally layering add-on charges on top. Most general-purpose tools process one-time payments fine but break down the moment a patient wants to pause a membership or carry unused credits forward to the next cycle.

Can I run a concierge practice and a wellness or aesthetics program on the same software system?

Yes, if the system was built to handle both clinical documentation depth and elective-care workflows in the same chart — most single-purpose tools cannot do both. Decoda Health runs scheduling, AI Scribe, multi-tier membership billing, inventory tracking for injectables and infusion supplies, and patient communications inside one system, so a practice that starts with primary care retainers and expands into IV therapy or GLP-1 programs does not need to add a second platform.

What are the real HIPAA risks of using consumer messaging apps for after-hours patient communication in a concierge practice?

Any message that contains protected health information — a lab result photo, a symptom description, a medication question — sent through WhatsApp, iMessage, or standard SMS travels outside a HIPAA-covered environment and exposes the practice to enforcement action. The fix is a secure patient portal or encrypted messaging module covered by a signed Business Associate Agreement with your software vendor; automated after-hours responses through that same system let patients reach you at 10 PM without staff intervention and without the compliance exposure.

Should I look for concierge medicine software that handles telehealth natively, or is a separate telehealth tool fine?

A separate telehealth tool creates a split record: the video visit happens in one system while the chart, billing, and follow-up messaging live in another, and reconciling those manually adds time and error risk. Native telehealth built into the scheduling and clinical documentation environment means the virtual appointment books, charts, and closes out in the same workflow as an in-person visit — no extra login, no copy-paste into the chart afterward.

What scheduling features matter most for a concierge practice with a defined patient panel?

Member-only booking controls are the first thing to confirm: your panel patients should be able to book same-day or next-day slots that are not visible to the general public. Beyond access restrictions, per-provider booking links, automatic prep and cleanup buffers, and telehealth configuration inside the same calendar environment matter more for a concierge workflow than the high-volume online booking features that dominate most vendor demos.

How do I evaluate whether a software vendor's support will actually be responsive after I've signed the contract?

Ask for a documented support SLA — specifically the median first-response time, the channel it comes through, and whether you get a dedicated contact or a rotating help desk. Then ask current customers the same question directly, because vendor-provided response time figures and actual customer experience frequently diverge. Practices that switched to Decoda Health from legacy systems have cited sub-5-minute response times via a dedicated Slack channel as the clearest contrast with vendors whose support queues ran three weeks for straightforward requests.

What usage limits should I watch for in a concierge medicine software contract before I sign?

Message volume caps and AI usage minutes are the two most common sources of unexpected overage costs — a platform with a fixed monthly subscription price can bill materially more once a high-volume practice hits those limits. Before signing, ask for the exact monthly message and AI minute allotments included in your tier, the per-unit overage rate, and an estimate based on your current patient volume so the total cost math is clear from the start.

What's the right way to handle e-prescribing, including controlled substances, inside a concierge medicine software system?

Electronic prescribing for controlled substances (EPCS) requires DEA-compliant identity verification and two-factor authentication at the point of prescribing — confirm that any vendor you evaluate has EPCS built into the platform, not routed through a third-party tool that requires a separate login. Decoda Health supports EPCS natively within the chart workflow; provider activation is handled with support from the engineering team, so the setup process does not fall entirely on the practice.

Concierge Medicine Software Buying Guide (September 2026)

TL;DR