Most vendor pages selling "charting software" to medspas say HIPAA-compliant, say injection mapping, and move on to pricing. That's the wrong altitude. A chart that gets pulled for review — by a board, by a client's attorney, by the practice's own risk manager — isn't judged on the login screen. It's judged on whether the lot number matches the units administered, whether the injection site is documented, and whether that's consistent from chart to chart, provider to provider.
What charting actually means for a medspa
Strip away the marketing language and a medspa chart needs to hold four things: provider notes, treatment history, dosages and lot numbers where relevant, and before/after photos. That's it. The question that separates real charting software from a notes app is whether all four live on one client record, or whether the clinical piece sits in a separate module you tab into every time a client calls about their last treatment. On Lumè, it's one record — the same one that holds the appointment, the consent form, and the invoice.
Charting software, not a certified EHR
Lumè provides clinical charting — treatment notes, consent, photo documentation — not a certified EHR. A certified EHR is a distinct regulatory category, built for practices that write prescriptions and operate as full medical clinics. Those practices need a certified EHR alongside a CRM, not instead of one.
Most independent medspas aren't in that category. If neurotoxin and filler are the core of the practice, you don't need hospital-grade prescribing infrastructure. You need a chart that holds up under scrutiny without costing a hospital IT budget to run.
Dosage and lot number aren't a footnote
For injectable-driven practices, this is most of what the chart is for. A client comes back six months later, sees a different provider in the same practice, and that provider needs the dosage and the lot number in front of them — on the same record, every time. That's continuity across providers and traceability of product.
The software's job here is documentation, not judgment. It doesn't recommend a dose. It doesn't suggest an outcome. It gives the provider a structured place to record what already happened, formatted consistently enough that six months of charts don't look like six different note-taking styles.
The architecture behind the chart
A chart that's easy to alter after the fact isn't one we'd trust either. Every PHI read across the system writes to an append-only audit log, encryption applies in transit and at rest, and tenant data is isolated at the database level — so one practice's records never sit in the same queryable space as another's.
None of that is an upsell. A Business Associate Agreement is included in the standard contract at every tier, not reserved for an enterprise plan. If compliance is a paid tier, the base product doesn't have it — it's decoration on a product that was never built HIPAA-first to begin with. We'd rather the floor be the floor. More on how the architecture holds together is here.
We frame this as defensible and addressable, not as a guarantee. HIPAA compliance isn't a box you check once and never revisit.
Consent lives on the chart
Every form is versioned. Every signature captures name, timestamp, device or IP, and the exact form version signed — because "the client signed a consent form" means nothing if you can't show which version, when, and on what device. The form auto-sends on booking, so it's handled before the appointment instead of rushed at check-in, and it's stored on the chart itself — not a separate consent platform you have to cross-reference against the appointment record.
Photos, same record
Before/after photos follow the same logic: they sit on the same client record as the provider notes and the consent form, not in a separate gallery app. The storage and marketing-use questions around photos deserve their own answer, and we've written that up separately rather than compress it here.
Sized for an independent medspa
Most medical spas don't need the weight of a hospital EMR, and they don't want a salon tool with a blank text box where clinical fields should be. Lumè is built for the space in between — solo nurse injectors, single-location spas, and small multi-location groups adding providers and rooms as they grow.
Lumè is not the right call for a large enterprise chain — that's Zenoti's lane, not ours. Buying up or down a size is the most common and most expensive mistake practices make choosing a CRM.
Seven jobs, one record
Charting isn't bolted onto a CRM built around something else. It sits next to scheduling, payments, memberships, and marketing, all on the same client record. Seven jobs, one record.
That matters past the audit case, too. Rebooking prompts and lapsed-client win-backs draw on the same chart. They know when a client's last neurotoxin appointment was because it's the same record — not a sync job between two systems that occasionally drifts.