LegitScript certification for Google Ads, explained

LegitScript is an independent certification body. Google requires its certification before an advertiser in certain restricted categories can run ads at all — most commonly addiction treatment, telemedicine, pharmacy, and some healthcare services.

Without it, ads in those categories are disapproved. This is not a ranking penalty or a quality signal; the ads simply do not run.

The category boundaries are not always obvious. A clinic offering a mix of wellness and treatment services can find one service line restricted and the rest fine, which is worth establishing before building campaigns rather than after.

An evidence pack rather than a form. Licensing, ownership, clinical staffing, policies and practices, assembled and submitted for review.

The work is mostly assembly and coordination — gathering documents that exist in several places inside the business and presenting them coherently. The bottleneck is usually internal, not the reviewer.

Budget real calendar time. This is not a same-week process, and it gates advertising entirely, so it belongs at the front of a launch plan rather than in parallel with it.

Certification carries renewal dates. Renewals get missed because nobody owns the calendar, and a lapsed certification stops advertising in the restricted categories.

For an operator running a handful of locations, this is manageable. Across thirty accounts in a manager account structure, renewal dates are exactly the sort of administrative detail that decays — the same category of failure as unclaimed promotional credits and drifting naming conventions.

A compliance log with renewal dates, owned by someone, is the entire fix. It is unglamorous and it is why MCC management treats regulated verticals as carrying more administrative load rather than the same load.

The first row is common and frustrating. A certified advertiser gets flagged anyway, usually because automated policy matching caught a phrase rather than because anything is actually wrong. It is correspondence work, not a real violation, and it resolves with evidence.

The last row catches multi-location operators. Certification scope is tied to entities, and a new clinic added to the group is not automatically covered by the group's existing certification.

Suspension is a different problem from disapproval, and the reason matters enormously. Circumvention and misrepresentation suspensions are the hardest, and require documented remediation before an appeal is credible.

Appeal preparation is evidence assembly: what was wrong, what changed, and proof of the change. An appeal that argues rather than documents usually fails.

Nobody can guarantee a platform's decision, and any provider who does is guessing on your behalf. What is controllable is the quality of the documentation and the persistence of the escalation.

If the suspension followed activity nobody on the team recognises, treat it as a security incident rather than a policy one — that is a compromise until proven otherwise, and the containment clock is already running.

Three things make regulated advertising boring rather than fraught, which is the goal. A compliance log with renewal dates and a named owner. An onboarding runbook that confirms certification scope covers each new entity before campaigns are built. And a policy correspondence file, so the next disapproval is answered with the last successful appeal rather than from scratch.

That is administrative infrastructure rather than campaign work, and it is usually nobody's explicit job. If you are running regulated advertising across multiple locations, it should be someone's.