Med spas
Keep OSHA injury records and every license, permit and certification for each location in one place, with reminders before anything expires.
What Regolithe keeps for you
Sharps and needlesticks
Where a med spa keeps OSHA injury records, OSHA says contaminated needlesticks are recorded on the 300 Log as an injury, without the employee's name. Regolithe keeps a 300 log for each location, marks privacy cases so the name stays off the log, and prints Forms 300, 300A and 301.
Severe injuries
Every employer, including partially exempt ones, must report a work-related death within 8 hours and an in-patient hospitalization, amputation or loss of an eye within 24 hours. Regolithe flags any case on your log marked as a severe injury that hasn't been reported yet.
Licenses and permits
Track practitioner licenses, facility registrations and certificates for each location. Red, yellow and green status dots show what's due, and reminder emails go out 90, 60 and 30 days before each expires, and again if one lapses.
Multi-location
Each location keeps its own OSHA log and credential list. Roles control who can add or edit records, and an audit log shows who changed what and when.
Rules vary by state
Who may inject, who may run a laser, and which facility registrations you need are set by state medical, nursing and licensing boards, and they differ from state to state. Texas, for example, requires a certificate for each laser hair removal facility, and Indiana opens medical spa registration on January 1, 2027. Whatever your state requires, Regolithe can hold the license number, issuing authority and expiration date for each one, per location.
What Regolithe is not
Regolithe is record-keeping and tracking software. It does not file anything with OSHA for you, does not write safety plans or provide training, and is not legal advice. Whether a rule applies to your business depends on your facts. Check with OSHA, your state boards or your own advisor.
Questions med spas ask
It depends on your industry code and size. OSHA's partial-exemption list names industry groups 8121 (Personal Care Services), 6211 (Offices of Physicians) and 6213 (Offices of Other Health Practitioners), and employers with 10 or fewer employees all last year are also partially exempt. Which code fits each location is a fact-specific question, so confirm it with OSHA or your advisor. Even partially exempt employers must still report severe injuries.
Sources: 29 CFR 1904 Subpart B, Appendix A, 29 CFR 1904.1, 29 CFR 1904.2
OSHA says to record every work-related needlestick or cut from a sharp contaminated with another person's blood or other potentially infectious material, and to enter it on the 300 Log as an injury. To protect the employee's privacy, the name may not go on the log. In Regolithe you mark it as a privacy case, and the log, printouts and CSV show "Privacy case" instead of the name.
Source: 29 CFR 1904.8
OSHA lists them: an injury or illness to an intimate body part or the reproductive system, sexual assault, mental illness, HIV infection, hepatitis or tuberculosis, contaminated needlestick and sharps injuries, and other illnesses when the employee asks. For these, the employee's name stays off the 300 Log.
Source: 29 CFR 1904.29
Under the Bloodborne Pathogens standard, an employer required to keep a Part 1904 injury log must also keep a sharps injury log of injuries from contaminated sharps. At minimum it records the type and brand of device, the work area, and how the incident happened, and it must protect the employee's confidentiality. Regolithe's 300 log does not replace that separate sharps log.
Source: 29 CFR 1910.1030(h)(5)
It applies to occupational exposure to blood or other potentially infectious materials, which may include staff who give injections. Where it applies, OSHA requires a written exposure control plan reviewed at least once a year, and the hepatitis B vaccine made available within 10 working days of initial assignment, with some exceptions. Regolithe does not write plans or provide training.
Source: 29 CFR 1910.1030
They may. Employers with hazardous chemicals need a written hazard communication program, labels and safety data sheets workers can reach on every shift, and training. Some drugs, cosmetics and consumer products are exempt in specific circumstances, so review each product.
Sources: 29 CFR 1910.1200, OSHA Hazard Communication overview
It varies by state. The Texas Medical Board treats nonsurgical cosmetic procedures as the practice of medicine, which a physician may delegate with a physician, PA or APRN onsite or immediately available. The Medical Board of California says physicians may direct registered nurses or physician assistants to inject Botox under supervision, and no unlicensed person may. Check with your own state's boards.
Sources: Texas Medical Board, FAQ 312, Medical Board of California, cosmetic treatments FAQ
Yes. Indiana's Professional Licensing Agency has announced that medical spa registrations go live on January 1, 2027, under Indiana Code Title 25, Article 22.5, Chapter 12.5. Check the PLA site for who must register and how. Once registered, you can track the registration and its renewal date for each location in Regolithe.
Source: Indiana PLA, Physicians
Sources checked October 19, 2026. This page is general information, not legal advice.
Pilot
