Medspa Patient Intake Software: Compare 5 Platforms
Compare five medspa patient intake software platforms with a 100-point test for routing, forms, review, records, renewal, privacy, security, and export.
Reviewed by Abdullah Wasim. Our team checked official patient-intake, forms, records, support, and pricing material from Aesthetic Record, Boulevard, PatientNow, Vagaro, and Zenoti on September 29, 2026. We also reviewed current HHS guidance on software vendors, business associate contracts, minimum necessary uses, risk analysis, and cloud computing. Vendor capabilities are documented claims, not independently verified performance. We did not conduct hands-on product tests.
Our team found at least 118 impressions and no clicks across nine patient-intake, consultation-form, and consent-form queries in TheClinify Search Console during the 90 days ending September 27, 2026. Most impressions landed on the broader software buying guide. We used that first-party observation to select a narrower workflow topic, not as a market benchmark. Bing Webmaster data was unavailable because the connected account was not authorized for the site.
We built the six-stage Intake Evidence Chain and 48-control worksheet as original editorial tools. They are not industry standards, clinical protocols, legal tests, privacy or security assessments, certifications, or outcome forecasts. Product behavior, prices, add-ons, availability, integrations, and contract terms can change, so request a current demonstration and written quote.
AI assisted with research, drafting, and code checks. We reviewed the sources, logic, layout, and language. OpenAI ImageGen created the original featured artwork without a vendor interface, logo, patient, procedure, or performance claim. This guide is not clinical, legal, privacy, security, or compliance advice.

- Test the exact product tier with one sanitized new-patient appointment, one returning-patient renewal, and one exception.
- Keep intake, consent, internal charting, and marketing permission distinct even when one product stores them together.
- Score evidence you can inspect: routing rules, completion state, review ownership, versions, permissions, audit history, and exports.
- A high total cannot cure a failed clinical, legal, privacy, security, record-integrity, or exit requirement.
What is medspa patient intake software?
Medspa patient intake software collects clinic-approved information before or during a visit, routes it to the correct staff workflow, and keeps the completed record available for review, renewal, and retrieval. The useful buying question is not whether a platform has "digital forms." It is whether the proposed configuration preserves the full chain from invitation to usable record.
Start with one real appointment type. Demonstrate how a new patient receives the correct intake material, resumes an interrupted form, corrects an answer, signs where the clinic requires a signature, and reaches the right staff reviewer. Then show what becomes part of the record, what remains separate, when the form expires, and how the clinic retrieves it during an outage or after termination. Use synthetic or properly sanitized information in sales demonstrations.
This is a narrow workflow comparison, not a ranking of full practice platforms. Use the medical aesthetics software buying guide for the wider purchase, the software requirements checklist for clinic-wide needs, and the medical aesthetics software infrastructure page to map the public website handoff.
Which patient intake workflow should a clinic map?
Map intake as an evidence chain with six owners: invitation, completion, review, filing, renewal, and exit. Name who decides which form applies, who reviews an exception, which record is authoritative, what a patient can see, and who handles failed delivery or incomplete information. A form that exists but reaches the wrong appointment is not an intake system.
Keep neighboring records distinct. Intake gathers patient-provided information. A consultation may add provider assessment. Consent records a separate clinic-defined acknowledgment or authorization. Internal charts and treatment notes belong to staff documentation. Marketing permission needs its own basis and controls. The same platform may hold all of them, but a demo should show their different purposes, permissions, versions, and retention paths.
| Stage | Clinic decision | Evidence to capture |
|---|---|---|
| Invite | Which appointment, service, location, or patient status triggers each item? | Rule, delivery event, destination, failure state, and owner. |
| Complete | What is required, optional, conditional, editable, and saveable? | Mobile test, resume test, correction path, submission time, and signer. |
| Review | Who sees incomplete or concerning answers and what happens next? | Queue, status, alert, reviewer, sign-off, and exception record. |
| Record | Where does each answer live and who can access it? | Profile or chart location, field mapping, permissions, history, and audit event. |
| Renew | When must a form or answer be refreshed? | Expiration rule, prior version, resubmission trigger, and overdue report. |
| Exit | How will the clinic retrieve forms, signatures, versions, and context? | Opened export, field dictionary, attachments, identifiers, timing, and contract term. |
How does the 100-point Intake Evidence Chain work?
Score only the exact tier, add-ons, configuration, and integrations in the written quote. Award the stage points when the finalist passes every required control in that stage. Use partial credit only when the clinic has defined a safe workaround, named its owner, measured the extra work, and accepted the risk in writing. A roadmap promise receives zero until it is available and included.
Download the 48-control patient intake software demo scorecard before scheduling demos. Give each finalist the same worksheet and sanitized scenario so prepared tours do not change the test.
Six weighted stages follow patient-provided information from the correct invitation through completion, staff review, record filing, renewal, and usable export. Score demonstrated behavior, not feature names.
- Stage 1Route and invite15
- Demo test
- Book two similar services for a new and returning patient, then trigger the correct forms by service, location, appointment, and patient status.
- Full-score proof
- Rules, delivery events, reminders, duplicates, failed-delivery state, and an accountable owner are visible on the proposed tier.
- Stop signal
- Staff must remember which packet to send or cannot tell whether the intended patient received it.
- Stage 2Complete and recover15
- Demo test
- Complete the form on a phone, pause, resume, correct an answer, test conditional fields, submit, and recover from an expired link.
- Full-score proof
- Required fields, accessibility basics, save state, corrections, signer, time, and a clear patient support path work as configured.
- Stop signal
- Progress is lost, required questions can be bypassed, or staff cannot resolve a failed submission without recreating it.
- Stage 3Review and resolve20
- Demo test
- Submit one routine form, one incomplete form, and one answer that the clinic has defined for qualified review.
- Full-score proof
- Statuses, reviewer queue, escalation, sign-off where configured, comments, and resolution history have clear owners.
- Stop signal
- A submitted form appears complete before the required reviewer has handled the clinic-defined exception.
- Stage 4File and govern20
- Demo test
- Open the result from front-desk, provider, manager, and restricted roles, then correct a mapped profile field.
- Full-score proof
- The authoritative record, field mapping, role limits, patient visibility, correction history, and audit events are understandable.
- Stop signal
- Answers scatter across duplicate records, permissions are too broad, or a correction removes the prior context the clinic needs.
- Stage 5Renew and version15
- Demo test
- Expire a one-time form, change its template, book another visit, and compare the old submission with the new one.
- Full-score proof
- Validity rules, resubmission timing, template status, prior submissions, overdue visibility, and change ownership are preserved.
- Stop signal
- The clinic cannot tell which version applied, what changed, or which patients need an updated submission.
- Stage 6Export and exit15
- Demo test
- Export the sample patient, forms, signatures, attachments, versions, statuses, and audit context, then open the files elsewhere.
- Full-score proof
- Usable files, stable identifiers, field definitions, timing, fees, read-only access, retention, and deletion terms are documented.
- Stop signal
- The export is an image dump or PDF pile that loses patient, appointment, version, signer, or status relationships the clinic requires.
Which medspa patient intake software belongs on a shortlist?
Aesthetic Record, Boulevard, PatientNow, Vagaro, and Zenoti each publish intake or form capabilities relevant to US aesthetic and wellness clinics. The table below is a shortlist map based on official documentation, not a winner list. A documented feature may still depend on plan, add-on, region, configuration, permissions, or contract.
| Platform | Documented intake signal | What the demo still needs to prove |
|---|---|---|
| Aesthetic Record | Portal-based medical history questionnaires and treatment consents before an appointment. | Assignment rules, completion and review states, corrections, renewal, permissions, versions, and export. |
| Boulevard | Custom forms, service and location triggers, delivery timing, expiration, portal visibility, and optional sign-off. | Connected-field behavior, exception ownership, history, add-on scope, data return, and multi-location governance. |
| PatientNow | Forms and consents sent before a visit with details filed into the patient chart. | Exact routing, review queues, mapping, patient visibility, corrections, versions, and opened exports. |
| Vagaro | Custom or imported forms with signatures, booking requirements, service or membership rules, and expiration. | Required add-ons, role limits, response access, renewal reporting, field relationships, audit context, and exit. |
| Zenoti | Guest, service, and tag forms with consultation uses, validity rules, versions, and dynamic assignment options. | Configuration limits, reviewer flow, location ownership, prior-answer handling, patient access, and usable export. |
What should Aesthetic Record prove?
Aesthetic Record's patient portal page says patients can complete pre-appointment medical history questionnaires and treatment consents, then access appointment, treatment, and personal information. That establishes a patient-facing intake signal, but it does not answer the whole evidence chain. Ask Aesthetic Record to route two similar services, show incomplete and reviewed states, update a returning patient's information, restrict roles, preserve prior submissions, and open the clinic's export outside the system.
What should Boulevard prove?
Boulevard's current forms and charts documentation distinguishes client-provided forms from staff-only charts. It documents service and location assignment, one-time or every-appointment delivery, confirmation and reminder links, check-in completion, expiration, client-portal visibility, and medical-director sign-off with the Medspa add-on. Test connected profile fields, corrections, disabled templates, exceptions, role permissions, renewal reports, and exports on the quoted bundle.
What should PatientNow prove?
PatientNow's EMR page says forms and consents can be sent before a visit and filed into the chart, where forms, photos, notes, and treatment details remain tied to the patient. Treat that as a vendor description until the proposed configuration proves the trigger, delivery failure, completion state, review owner, mapped fields, patient visibility, corrected answer, prior version, audit history, and export.
What should Vagaro prove?
Vagaro's form-template guide documents blank, templated, and imported forms with configurable questions, images, signatures, and required completion for bookings or purchases. Its forms and SOAP notes comparison separates client-provided forms from staff documentation and explains response access. Prove the exact form add-on, service rules, expiration, manual-send path, role access, renewal list, audit context, and export.
What should Zenoti prove?
Zenoti's form administration documentation covers guest, service, and tag forms, including intake or consultation uses, validity periods, versions, dynamic form assignment, and retained answers in some workflows. Ask Zenoti to configure the clinic's actual form graph, not a generic tour. Test multi-location ownership, service and tag collisions, signature and review steps, template changes, permissions, patient access, historic submissions, and an opened export.
What should a 30-minute intake demo include?
Use one synthetic new-patient appointment and one returning-patient appointment. Send the script before the meeting. Spend the first 20 minutes on the normal path and exceptions, five minutes on roles and audit evidence, and five minutes opening an export and matching it to the quote. Record unanswered questions instead of accepting a later promise as a pass.
Begin from the clinic's service page so the booking workflow and intake trigger are tested together. Then open the patient-facing path on a phone-sized screen. The clinic should decide which questions, acknowledgments, consents, reviewers, and escalation rules are appropriate; the vendor should demonstrate how the software applies those decisions.
- Book the same service for a new patient and a returning patient, then show why each receives a different packet.
- Interrupt mobile completion, resume it, correct one answer, submit an incomplete exception, and expire one link.
- Show the staff queue before and after the clinic-defined reviewer resolves the exception.
- Compare front-desk, provider, manager, patient, and restricted-role access to the submitted information.
- Change a template, trigger renewal, and identify the form version attached to each submission.
- Export the record, signature, attachments, status, version, identifiers, and audit context, then open every file.
What privacy, security, and governance questions belong in the review?
Do not buy intake software because a page displays a compliance badge. HHS explains that a software vendor is a business associate when it needs access to protected health information to provide its service, while a vendor that merely sells software and has no PHI access may not be. Determine the actual entity, data, activity, and relationship using the HHS software-vendor guidance and qualified advisers.
When a business associate agreement is required, the HHS sample contract provisions cover permitted uses, safeguards, incident reporting, subcontractors, access support, termination, and return or destruction where feasible. HHS also describes the minimum necessary standard and an ongoing security risk-analysis process. Those duties cannot be proven by a sales demo alone.
Ask who can build, assign, view, correct, approve, export, and delete each form. Review authentication, role design, audit events, backups, incident handling, mobile access, integrations, subprocessors, retention, patient requests, and offboarding. If a cloud provider maintains ePHI for a regulated entity, HHS says a business associate agreement is required even if the provider holds only encrypted data and lacks the key; see its cloud computing guidance.
How should the clinic compare cost and exit terms?
Compare a written 12-month scenario, not a base subscription. Include the core platform, form or medspa add-on, users, providers, locations, messages, signatures, storage, patient portal, integrations, API access, migration, template setup, training, support, and temporary double-running. Put the unit behind every variable charge in the worksheet.
Treat export as a launch requirement. Request a sample with representative forms, signatures, attachments, versions, mapped fields, statuses, patient and appointment identifiers, and audit context. Open it before signing. Record the export format, timing, fees, assistance, read-only period, retention, deletion, and termination terms. The software migration plan provides a separate control room for data validation and cutover.
| Cost layer | Put this in writing | Proof before approval |
|---|---|---|
| Product | Tier, forms module, portal, roles, locations, limits, and renewal terms. | Configured quote and current feature schedule. |
| Usage | Messages, signatures, storage, integrations, API, overages, and payment fees. | Three volume scenarios and unit rates. |
| Implementation | Migration, templates, mapping, permissions, training, pilot, and support owners. | Scope, acceptance tests, timeline, and exclusions. |
| Exit | Formats, relationships, attachments, history, timing, help, access, retention, and deletion. | Opened sample export and contract language. |
How should a clinic make the final decision?
Shortlist no more than three products after the clinic maps its invitation, completion, review, filing, renewal, and exit requirements. Let operations, front desk, clinical leadership, privacy or security, implementation, and finance owners score their sections independently. Keep any critical legal, clinical, privacy, security, access, record-integrity, or export requirement as a pass-or-stop gate outside the weighted total.
Choose only after reviewing the configured demo, current documentation, written quote, agreements, implementation plan, export sample, and unresolved limits. Reuse the demo script as the launch acceptance test. The implementation checklist turns the selected workflow into owners and release gates; the patient portal guide adds enrollment, access recovery, patient-visible records, messages, and support checks.
TheClinify's managed custom clinic websites are $2,499 setup plus $499 per month. Clinic software and custom Portal work are discovery-priced because users, integrations, patient-facing features, and data duties change the scope. Third-party software costs are separate unless a written proposal says otherwise.
What did this guide verify, and what remains untested?
We checked the linked official pages on September 29, 2026 and reported only documented intake or adjacent form signals. We did not test products, plans, clinical logic, forms, agreements, integrations, accessibility, privacy or security controls, support, exports, or outcomes.
Capabilities may depend on plan, region, location, configuration, approval, add-on, integration, or contract. Treat this guide as a reproducible demo plan, not a vendor ranking or professional opinion. Verify the current product and terms, then use qualified clinical, legal, privacy, security, and accessibility review where the workflow requires it. Read our editorial policy and About page for publisher and correction details.
FAQ
What should medspa patient intake software include?
Start with service and patient-status routing, mobile completion, save and correction behavior, review queues, record mapping, role permissions, audit history, expiration, versions, reminders, and usable exports. Add features only when the clinic has a defined purpose and owner for them.
Which aesthetic clinic software has the best consultation forms?
There is no universal winner. Aesthetic Record, Boulevard, PatientNow, Vagaro, and Zenoti document different intake or form capabilities. Score the same sanitized invitation, completion, exception, record, renewal, and export test on the exact tier and configuration proposed.
Is a patient intake form the same as informed consent?
No. Intake gathers patient-provided information, while informed consent is a separate process defined by the clinic and applicable requirements. Software can route and record steps, but it cannot decide whether the content, conversation, signer, timing, or clinical process is sufficient.
Does digital intake software make a medspa HIPAA compliant?
No. HIPAA coverage and duties depend on the entity, data, relationship, use, agreements, configuration, safeguards, and operating practices. Software can support controls, but the clinic and its qualified advisers must determine and manage the applicable obligations.
How much does medspa patient intake software cost?
Cost can include the base platform, forms or medspa add-ons, users, providers, locations, messages, signatures, storage, portal access, integrations, migration, setup, training, support, and exit services. Ask every finalist to price the same 12-month scenario in writing.
Need the intake handoffs mapped before you build?
Bring one appointment path, your current forms, staff roles, patient-facing steps, and export needs. We can scope how a custom Portal should connect to the clinic-owned intake workflow.
Request a Portal discovery call