Pallas
Start your visit

Compliance · Last updated June 4, 2026

Clinical disclosures.

A plain-language record of how Pallas Health is operated: which providers we work with, which states we serve, how the patient–provider relationship is established, which pharmacies dispense prescriptions on our behalf, and where patient data lives.

01

Provider network

Pallas Health is a technology platform operated by Brentmoor, Inc. Pallas does not employ medical providers, does not practice medicine, and does not direct clinical decisions.

Clinical care for patients of Pallas is delivered by Lion MD, a nationwide team of US-licensed medical professionals, in partnership with CareValidate — the clinical-operations platform Pallas uses to verify provider licensure, manage clinical workflows, and coordinate prescription dispensing. Lion MD operates through affiliated state-licensed professional corporations, and every prescribing clinician holds an active, unrestricted license in the state in which the patient is located at the time of the encounter. Clinicians are bound by their own professional licensing requirements, exercise independent clinical judgment, and may decline to prescribe when treatment is not clinically appropriate.

Medical leadership

  • Dr. Ana Lisa Carr, MD — Board-certified in family medicine, obesity medicine, and addiction medicine. NPI: 1689841744 (verify in the federal NPPES NPI Registry). Licensure verifiable through applicable state medical boards.
  • Dr. Kelly Tenbrink, MD — Board-certified in emergency medicine. NPI: 1346482684 (verify in the federal NPPES NPI Registry). Licensure verifiable through applicable state medical boards.

Several states — including Massachusetts (Board of Registration in Medicine Policy 15-05), Rhode Island (Board of Medical Licensure and Discipline Telemedicine Guidelines), and Vermont (Board of Medical Practice Policy on Telemedicine) — require telemedicine providers to make provider licensure and identifying information publicly available, rather than only during a consultation. Pallas meets this standard by posting its clinical partners and named medical leadership publicly on this page, with direct links to the federal NPPES NPI Registry above and licensure verifiable through each relevant state medical board. Every patient is additionally given the name and license information of their specific treating clinician before a prescription is issued.

The complete prescribing-clinician roster — including each clinician's license number, issuing state, and expiration date — is maintained by Lion MD on the CareValidate platform and is available to any patient, prospective patient, or state board. To verify a clinician's licensure, email support@pallashealth.co. To contact the clinical team directly, message your care team in the patient portal or email hello@pallashealth.co.

02

Jurisdictions served

Pallas Health accepts patients located in all 50 US states and the District of Columbia. Every prescription is written by a clinician individually licensed in the state where the patient is located at the time of the encounter; clinical capacity in each jurisdiction is maintained through our partner clinical network.

State-specific guides — covering telehealth rules, Medicaid coverage notes, and compounding availability — are published for the following states, with additional state pages added on a rolling basis:

The full directory of state guides is at /glp-1. If your state isn't listed there yet, the dedicated guide is in progress — you can still complete intake and be matched with a clinician licensed in your state today.

03

Patient–provider relationship

The patient–provider relationship is established through the following sequence:

  1. A prospective patient completes an online intake describing their medical history, current medications, allergies, vitals, and treatment goals, and confirms their state of residence.
  2. A clinician licensed in the patient's state reviews the intake. If the patient is located in a state that requires a synchronous (audio/video) encounter to establish the relationship — for example New Mexico, Mississippi, Kansas, West Virginia, or Rhode Island — a real-time video visit is scheduled before any prescription is issued. In states that permit asynchronous review under the applicable standard of care, the clinician may evaluate and prescribe based on the intake alone, requesting a video visit only when clinically warranted.
  3. The clinician evaluates clinical appropriateness, documents medical necessity (including indication, BMI, comorbidities, and rule-out of contraindications), and obtains informed consent for telehealth care.
  4. If the clinician determines treatment is appropriate, a prescription is issued and routed to the dispensing pharmacy with patient-specific clinical documentation. If treatment is not appropriate, the clinician communicates this to the patient and the patient is not charged.
  5. Ongoing care includes asynchronous messaging, dose-adjustment visits, and follow-up evaluations. Refills are not automatic — each renewal involves clinician review of progress and tolerability.
04

Partner pharmacies

Pallas Health does not own or operate a pharmacy. Prescriptions issued by clinicians on the platform are dispensed by the following US-licensed partner pharmacies, depending on the medication, the patient's shipping state, and current capacity:

503A pharmacies are licensed and inspected by their respective state boards of pharmacy. 503B outsourcing facilities are registered with and inspected by the FDA under current Good Manufacturing Practice (cGMP) standards. The specific pharmacy used for a given prescription depends on the medication, the patient's shipping state, and current capacity.

State pharmacy license numbers for each partner are disclosed on request to support@pallashealth.co.

05

Patient portal

The patient portal — where patients view prescriptions, message their care team, manage refills, and access encounter records — is operated by our telehealth platform partner and goes live alongside our July 2026 launch. Existing waitlist patients will receive credentials and an onboarding email when the portal is enabled.

In the interim, patients can reach the care team at hello@pallashealth.co.

06

Patient data & infrastructure

Patient health information (PHI) is handled in accordance with HIPAA. Patient medical records — including clinical history, encounter notes, and prescriptions — are created, maintained, and controlled by our contracted clinical partner network (the HIPAA Covered Entity providing medical services). Pallas Health (Brentmoor, Inc.) operates the technology platform and acts as a HIPAA Business Associate to the clinical partner under an executed Business Associate Addendum. Pallas executes downstream Business Associate Agreements with each subcontractor that handles PHI on our behalf.

  • Clinical platform & EHR: Our contracted clinical partner network (Lion MD) and the CareValidate clinical-operations platform operate the clinical workflow and electronic health record system used by prescribing clinicians. All individual patient medical records are created and maintained in the partner's EHR and remain under the partner's control.
  • Application platform: Convex (Convex, Inc.) — encrypted application database and serverless backend for the Pallas web product, on the Convex Professional plan with HIPAA and SOC 2 Type II audit reports. Account information, intake responses, and waitlist records are stored on Convex under an executed Business Associate Agreement, with daily backups enabled.
  • Authentication & SMS verification: Convex Auth and Twilio (for one-time verification codes).
  • Payment processing: Stripe. Pallas does not store cardholder data; only billing status and invoice metadata.
  • Transactional email: Resend (Resend, Inc.) for account verification, login links, and generic non-PHI notifications. Pallas does not transmit PHI via email; clinical and treatment communications occur in-app through the authenticated patient portal.
  • Web hosting: Vercel (front-end), with traffic served via Vercel's managed edge network.

Data in transit is protected with TLS 1.2+. Database encryption at rest is provided by the underlying vendors. Detailed information on data retention, patient access rights, and deletion is in our privacy policy.

07

Compounded medications & FDA disclosures

Pallas connects patients with clinicians who may prescribe compounded semaglutide and tirzepatide. Compounded medications are not FDA-approved products, are not generic versions of brand-name drugs (such as Ozempic®, Wegovy®, Mounjaro®, or Zepbound®), and have not been evaluated by the FDA for safety, efficacy, or quality. Pallas does not market compounded medications as equivalent to, clinically proven as, or generic versions of any FDA-approved drug.

Compounded preparations are dispensed only after a licensed clinician documents a patient-specific clinical need; pricing alone is not a basis for compounding under FDA guidance. The prescribing clinician forwards patient-specific documentation (prescription, indication, and any relevant clinical detail) to the dispensing 503A or 503B pharmacy.

Adverse events should be reported to FDA MedWatch at 1-800-FDA-1088 or fda.gov/safety/medwatch. Patients should also report side effects to their Pallas clinician at hello@pallashealth.co.

08

Compliance contact

For LegitScript verifications, state board inquiries, or any other compliance-related correspondence, please contact: support@pallashealth.co.