Med spa software that stops consultation leads going cold

If you are searching for med spa software, you probably need two things that rarely live in one tool: a med spa CRM that follows up every consultation enquiry, and a safe way to handle client information under HIPAA. Most "best med spa software" lists still recommend general sales CRMs and never mention a BAA. This page shows what JBMOnboard360 covers, what it does not, and what it costs.

Med spa CRM vs EMR: do you need both?

Usually, yes. An EMR records care. A CRM runs the relationship before and after the visit: who enquired, who booked a consultation, who never came back and why. Here is how the work splits in a typical med spa.

HIPAA and your med spa: the BAA is included

A med spa with a medical director, prescribing, or electronic insurance transactions is likely a HIPAA covered entity (AccountableHQ, third-party guide). Covered entities need a BAA with every vendor that stores client health information for them, including a CRM or form tool. See the HHS covered-entity guidance and ask your compliance advisor.

JBMOnboard360 is HIPAA-ready. US customers are hosted on AWS in the United States, encrypted in transit and at rest, with daily backups copied to a second US region. A BAA comes with every plan; it is not an add-on. A BAA alone does not make you compliant. Your own policies, training and risk analysis still matter. Read more in our guide to a HIPAA-ready CRM and our page on HIPAA intake forms with QR codes.

WhatsApp for enquiries, never for health information

About 26% of US adults use WhatsApp, and far more among Hispanic (56%) and Asian (51%) adults, according to Pew Research (2026). If your clients already message you there, the concierge answers general questions: prices, hours, which treatments you offer and when a callback suits them. Do not collect symptoms, medical history or other health information over WhatsApp, and do not treat WhatsApp as HIPAA compliant. Send clients to your intake form for anything clinical. See how the WhatsApp CRM works.

Copy these: consultation follow-up messages

Keep follow-ups free of health details. Use them by email or WhatsApp for clients who wrote to you first.

Med spa software pricing, worked out

JBMOnboard360 publishes its US prices. For most med spas the Business plan fits: one price per location with unlimited users at that location.

• One location, any number of staff: $399 a month billed annually ($4,788 a year), or $499 billed monthly.
• Three locations: 3 × $399 = $1,197 a month billed annually, or 3 × $499 = $1,497 monthly.
• Ten or more locations: Enterprise starts at $349 per location per month, billed annually, and includes the Support CRM for HQ with 5 agent seats and data migration.
• A small team: Professional is $79 per user per month billed annually ($99 monthly). Three users cost $237 a month.

Many med spa platforms do not publish multi-location prices. As of October 2026, Zenoti lists no prices on its pricing page, and Boulevard lists Essentials at $143 per location per month, with Forms as an add-on from $65 per location (joinblvd.com/pricing).

When JBMOnboard360 is not the right fit

Be honest with yourself about what you need on day one. JBMOnboard360 does not do these in the US today:

• Card payments or online checkout. It sends invoices and tracks payments only.
• Memberships or treatment packages.
• SMS or text reminders.
• Charting, photos, injectables tracking or ePrescribing.

If your business runs on memberships and text reminders, stay with an all-in-one med spa platform such as Boulevard, Zenoti or GlossGenius. Boulevard publishes a BAA (joinblvd.com), Zenoti offers one on request (zenoti.com) and GlossGenius offers one for med spas (glossgenius.com), all as of October 2026. JBMOnboard360 fits best when leads go unanswered, locations need one view, and your team wants a CRM and help desk with a BAA at a published price. Compare in our Zenoti alternative page.