Corporate Practice of Medicine: How Healthtech Companies Stay on the Right Side of the Line

You built a digital health company. Patients book through your app, clinicians see them over video, and your software runs the whole experience. Then your investor’s counsel asks how you handle the Corporate Practice of Medicine, and the room goes quiet.

The Corporate Practice of Medicine doctrine, usually shortened to CPOM, shapes how a healthtech business can be owned and run. Founders who understand it early build structures that hold up. Founders who learn about it during a financing or an acquisition spend months and real money fixing what they could have set up correctly from the start.

What CPOM actually says

In many states, a corporation cannot practice medicine, and a non-physician cannot own a medical practice or share in its professional fees. The policy behind the rule is that medical judgment should belong to a licensed clinician, not to a company answering to investors.

For a traditional clinic, this is simple. For a venture-backed company built around clinical care, it creates a direct conflict. Your investors are not physicians. Your cap table is built for venture returns. And yet the business depends on delivering medical care. CPOM sits right on top of that tension.

The friendly-PC structure, in plain terms

The standard answer is a two-entity model, often called the friendly-PC or MSO structure.

A licensed physician owns a professional corporation, the PC, which employs the clinicians and delivers the actual medical care. Your company operates a management services organization, the MSO, which provides everything that is not the practice of medicine: the technology, the billing, the scheduling, the marketing, the back office. The MSO and the PC sign a management services agreement that sets the terms between them.

Done correctly, the clinicians practice medicine inside the PC, your company runs the business through the MSO, and the two connect through contracts rather than ownership. Investors fund the MSO. The PC stays physician-owned.

Where founders get it wrong

The structure works only if the substance matches the paperwork. A few patterns create the most risk.

Controlling clinical decisions through the MSO. The MSO can handle business operations. The moment it starts dictating treatment protocols, overriding clinical judgment, or pressuring volume in a way that touches care, regulators can treat the structure as a sham.

Fee splitting that looks like fee splitting. How the MSO is paid matters. Management fees tied directly to a percentage of clinical revenue draw scrutiny in some states. The fee should reflect fair value for real services, documented and defensible.

A PC owner who is not actually engaged. A “friendly” physician who signs once and disappears is a liability. The PC owner needs genuine authority and a real relationship with the company, governed by agreements that handle succession if that physician ever leaves.

Ignoring the overlap with Anti-Kickback and Stark. CPOM rarely travels alone. Referral and payment arrangements in a healthcare business also raise the Anti-Kickback Statute and, where Medicare and Medicaid are involved, Stark. A structure that solves CPOM and ignores these creates exposure on a different front.

Why it matters before you raise or sell

A diligence team that knows healthcare will check your structure first. If the friendly-PC setup is missing, or it exists on paper but the company controls clinical care in practice, the deal stalls while everyone assesses the risk. We have seen financings pause for months over structures that would have cost far less to build correctly at formation.

The states add another layer. CPOM rules vary, and a model that works cleanly in one state can run into trouble in another. If you operate across state lines, the structure has to account for each one where you deliver care.

Build it into the company, not onto it

The healthtech companies that handle CPOM well treat it as part of how the business is built, not a compliance project bolted on later. Set up the PC and MSO at the right time, write a management services agreement that reflects what each entity actually does, pay fees that hold up to scrutiny, and keep clinical judgment where the law requires it.

If your model touches clinical care and you are not certain your structure holds up, that is worth a conversation before your next raise rather than during it. It is one of the matters we handle most often for digital health founders, and it is far cheaper to get right early.