Clinical disclosures.

Pallas Health is a technology platform operated by Brentmoor, Inc. Pallas does not employ medical providers, does not practice medicine, and does not direct clinical decisions.

Clinical care for patients of Pallas is provided by independent US-licensed physicians and nurse practitioners contracted through OpenLoop Healthcare Partners, PC and its affiliated state-licensed professional corporations, a national telehealth provider network. Each prescribing clinician holds an active, unrestricted license in the state in which the patient is located at the time of the encounter. Clinicians are bound by their own professional licensing requirements, exercise independent clinical judgment, and may decline to prescribe when treatment is not clinically appropriate.

Patients receive the name and license information of their treating clinician at the time of the consultation, and licensure can be verified through the relevant state medical or nursing board.

Provider rosters are managed by OpenLoop and updated on a continuous basis. The full clinician roster, licensure numbers, and expiration dates are available on request to support@pallashealth.co.

Pallas Health currently accepts patients located in the following US jurisdictions. Additional states are added as our partner clinical network expands its licensure footprint.

• California (CA)
• Texas (TX)
• Florida (FL)
• New York (NY)
• Ohio (OH)
• Georgia (GA)
• Illinois (IL)
• Michigan (MI)
• New Jersey (NJ)
• North Carolina (NC)
• Pennsylvania (PA)
• Virginia (VA)
• Washington (WA)

The complete current list — including telehealth and compounding-availability detail per state — is also published at /glp-1.

The patient–provider relationship is established through the following sequence:

1. A prospective patient completes an online intake describing their medical history, current medications, allergies, vitals, and treatment goals, and confirms their state of residence.
2. A clinician licensed in the patient's state reviews the intake. If the patient is located in a state that requires a synchronous (audio/video) encounter to establish the relationship — such as Texas — a real-time video visit is scheduled before any prescription is issued.
3. The clinician evaluates clinical appropriateness, documents medical necessity (including indication, BMI, comorbidities, and rule-out of contraindications), and obtains informed consent for telehealth care.
4. If the clinician determines treatment is appropriate, a prescription is issued and routed to the dispensing pharmacy with patient-specific clinical documentation. If treatment is not appropriate, the clinician communicates this to the patient and the patient is not charged.
5. Ongoing care includes asynchronous messaging, dose-adjustment visits, and follow-up evaluations. Refills are not automatic — each renewal involves clinician review of progress and tolerability.

Pallas Health does not own or operate a pharmacy. Prescriptions issued by clinicians on the platform are dispensed by the following US-licensed partner pharmacies, depending on the medication, the patient's shipping state, and current capacity:

• [Partner pharmacy 1] — 503A compounding pharmacy. Compounded semaglutide and tirzepatide preparations. (License number and state of licensure on file with compliance.)
• [Partner pharmacy 2] — 503B outsourcing facility. Compounded semaglutide and tirzepatide preparations.
• [Brand-name dispenser] — Retail/specialty pharmacy network for any FDA-approved semaglutide or tirzepatide products prescribed when clinically appropriate.

The placeholders above are filled in for each operating jurisdiction at the time the partner pharmacy contract is executed. Current pharmacy partners and their state pharmacy license numbers are disclosed on request to support@pallashealth.co.

The patient portal — where patients view prescriptions, message their care team, manage refills, and access encounter records — is operated by our telehealth platform partner and goes live alongside our June 2026 launch with OpenLoop. Existing waitlist patients will receive credentials and an onboarding email when the portal is enabled.

In the interim, patients can reach the care team at hello@pallashealth.co.

Patient health information (PHI) is handled in accordance with HIPAA. Patient medical records — including clinical history, encounter notes, and prescriptions — are created, maintained, and controlled by OpenLoop Healthcare Partners, PC (the HIPAA Covered Entity providing medical services). Pallas Health (Brentmoor, Inc.) operates the technology platform and acts as a HIPAA Business Associate to OpenLoop under an executed Business Associate Addendum. Pallas executes downstream Business Associate Agreements with each subcontractor that handles PHI on our behalf.

• Clinical platform & EHR: OpenLoop Healthcare Partners, PC and its affiliated state-licensed professional corporations operate the clinical workflow and electronic health record system used by prescribing clinicians. All individual patient medical records are created and maintained in OpenLoop's EHR and remain under OpenLoop's control.
• Application platform: Convex (Convex, Inc.) — encrypted application database and serverless backend for the Pallas web product, on the Convex Professional plan with HIPAA and SOC 2 Type II audit reports. Account information, intake responses, and waitlist records are stored on Convex under an executed Business Associate Agreement, with daily backups enabled.
• Authentication & SMS verification: Convex Auth and Twilio (for one-time verification codes).
• Payment processing: Stripe. Pallas does not store cardholder data; only billing status and invoice metadata.
• Transactional email: Resend (Resend, Inc.) for account verification, login links, and generic non-PHI notifications. Pallas does not transmit PHI via email; clinical and treatment communications occur in-app through the authenticated patient portal.
• Web hosting: Vercel (front-end), with traffic served via Vercel's managed edge network.

Data in transit is protected with TLS 1.2+. Database encryption at rest is provided by the underlying vendors. Detailed information on data retention, patient access rights, and deletion is in our privacy policy.

Pallas connects patients with clinicians who may prescribe compounded semaglutide and tirzepatide. Compounded medications are not FDA-approved products, are not generic versions of brand-name drugs (such as Ozempic^®, Wegovy^®, Mounjaro^®, or Zepbound^®), and have not been evaluated by the FDA for safety, efficacy, or quality. Pallas does not market compounded medications as equivalent to, clinically proven as, or generic versions of any FDA-approved drug.

Compounded preparations are dispensed only after a licensed clinician documents a patient-specific clinical need; pricing alone is not a basis for compounding under FDA guidance. The prescribing clinician forwards patient-specific documentation (prescription, indication, and any relevant clinical detail) to the dispensing 503A or 503B pharmacy.

Adverse events should be reported to FDA MedWatch at 1-800-FDA-1088 or fda.gov/safety/medwatch. Patients should also report side effects to their Pallas clinician at hello@pallashealth.co.

For LegitScript verifications, state board inquiries, or any other compliance-related correspondence, please contact: support@pallashealth.co.