Section 02
Operational Plan
What we need to do tomorrow morning to actually launch
TL;DR
To actually launch, we have 7 decisions to close now, 3 quality guarantee layers to demand from partners, and 5 weeks of concrete work before the first paying customer. We do NOT manufacture peptides — we source from PCAB-accredited 503A pharmacies with third-party batch testing. We can legally claim "compounded in a PCAB-accredited pharmacy, lab-tested, physician-prescribed" but NOT "best product on the market" (FDA prohibits superiority claims without head-to-head trials). Day 1: LLC setup + parallel due-diligence on 3 partners + vibe-code the quiz funnel. First $ in: day 45.
Decisions to close
7
Weeks to soft launch
4-5
Partners to evaluate
5
Days to first customer
35-45
Critical decisions to close
Who produces the peptides?
→ A PCAB-accredited 503A pharmacy (e.g., Empower, Hallandale, CoreRx).
We NEVER manufacture. Compounding is a regulated activity requiring State Board of Pharmacy licensing + USP <797> + cGMP compliance. A 503A is a licensed on-demand compounding pharmacy. A 503B is an FDA-registered outsourcing facility (batch production). Launch plan: 503A primary + 503B backup for scale.
Which telehealth backend: CareValidate or OpenLoop?
→ CareValidate primary, OpenLoop as fallback or secondary.
CareValidate has 4 explicit product verticals (CareGLP, CareHRT, CarePEPTIDES, CareDERM) covering our full catalog. OpenLoop is more generic (longevity as category, no peptide details). OpenLoop had a January 2026 data breach (1.6M patients) + November 2025 class action with Triad Rx. Remediation due-diligence is mandatory.
Launch catalog: 3 or 5 products?
→ 3 FDA-defensible flagship + 2 adjunct.
Flagship (Category 1, FDA-2027 proof): (1) Metabolic Reset (semaglutide/tirzepatide + B12), (2) Restore HRT (estradiol+progesterone+testosterone), (3) GH Optimizer via Tesamorelin (EGRIFTA WR FDA-approved). Adjunct (higher regulatory risk, launch month 3+): (4) Sexual Vitality via Vyleesi (FDA-approved), (5) NAD+ & Sleep. BPC-157 + CJC/Ipa on standby: FDA Cat 2 review pending 2026-2027, too risky as flagship.
Beachhead: adults 30-55 or women 40+ perimenopause?
→ Women 38-52 perimenopause, $175-400K HHI.
True whitespace — Hone men-only, Midi/Alloy menopause-only no peptides, Medvi GLP-1 only. LTV 3-4x (10-15 year treatment arc vs 2-3 year male TRT). CAC 40-50% lower ($180-280 vs $400-700 male TRT). Native virality via WhatsApp/FB groups. Men 40-55 as Phase 2 secondary positioned as "your partner's protocol", not male rebrand.
Legal structure: Dubai only or also US entity?
→ Dubai FZCO (holding/IP/marketing) + Wyoming LLC (US-facing operations).
Dubai FZCO = 0% corporate tax, holds brand + IP + marketing funds. Wyoming LLC = entity signing contracts with CareValidate/US pharmacies, recipient of US customer revenue, Stripe merchant account. Wyoming because low-tax (no state income tax), owner privacy, $100-500 setup. Dubai FZCO invoices Wyoming for brand/marketing services (transfer pricing documented).
CAC budget for soft launch: how much to burn before validation?
→ $10K in 14 days (100-150 waitlist leads) before signing pharmacy contracts.
Rack the Shotgun (Perry Marshall): economic test BEFORE investing in contracts. $100/day Meta ads to "Join the waitlist" landing, target 500 signups at $20 CPL. If CPL > $30 and quiz completion < 30%, stop and rethink the angle. Do NOT sign pharmacy contracts before validating 100+ qualified signups. Medvi made the reverse mistake — sign everything then burn.
Legal/medical advisor: when to hire?
→ Before launch, not after. 10-20h consult in month 1.
Profile: ex-FDA, ex-state pharmacy board, or healthcare regulatory lawyer with compounding + telehealth experience. Estimated cost $300-500/hr, total $3-10K initial setup. Deliverables: Terms of Service review + HIPAA Privacy Policy + ad claim policy + prescribing workflow + off-label peptide disclosure. This gives us 10x liability reduction vs Medvi.
Who owns what
We do NOT manufacture anything physical and we do NOT provide healthcare services. The thin-layer model cleanly separates what we own from what partners own. This is why we can operate from Dubai, with 2 people, and scale to 8 figures — but it requires serious due-diligence on partners.
We own
- BioForge brand (USPTO Class 5 and 44 trademark registration)
- Website, quiz funnel, app (vibe-coded with AI)
- Clinical protocols (curation + baseline dosing + titration schedules + cycling rules)
- Customer database + analytics + CRM
- Content library (protocol pages, education, blog)
- Pricing strategy, positioning, marketing claims
- Customer relationship (customer success, community, retention)
- Ad creatives, UGC coordination, influencer partnerships
- Procedural IP: quiz algorithm, recommendation engine
Partners own
- Pharmacy license (State Board of Pharmacy 503A or FDA-registered 503B)
- Physical compounding of peptides under cGMP + USP <797>
- Medical prescribing (board-certified MD/DO/NP via CareValidate/OpenLoop)
- State licensing coverage for all 50 US states + DC
- HIPAA-compliant infrastructure for health data
- Cold-chain shipping (2-8C with data logger)
- Certificate of Analysis (CoA) + third-party lab testing
- Adverse event reporting + FDA compliance operations
Why it matters
This clean separation is not an aesthetic choice — it is the difference between a commercial company (Dubai, 0% tax, 2 people) and a regulated healthcare company (licenses, audits, FDA, $5M+ capex). Medvi operates this way. Hims operates this way. We operate this way. Our competitive advantage lives IN brand + protocols + customer relationship, NOT in healthcare infrastructure (which is a rentable commodity).
The 3 layers of quality guarantee
Layer 1 — Pharmacy
We source only from PCAB-accredited 503A/503B pharmacies. PCAB (Pharmacy Compounding Accreditation Board) is the gold standard for US compounding — requires biennial audit across 30+ parameters (personnel, facilities, equipment, QA, documentation).
Verification
PCAB certificate verifiable on achc.org. Request: last audit date + any FDA Form 483 observations + batch recall policy.
Reference standard
PCAB Accreditation Standards + USP <797> (sterile compounding) + USP <71> (sterility testing) + cGMP for 503B
Layer 2 — Testing
Every batch must have a Certificate of Analysis (CoA) from an independent (not in-house) lab. Minimum tests: identity (HPLC), purity (>98%), sterility (USP <71>), endotoxin (USP <85> LAL test), potency.
Verification
Request sample CoA per batch supplied. Preferred labs: Alcami, Eurofins Lancaster, SGS. Avoid pharmacies using only in-house testing.
Reference standard
USP <71> sterility, USP <85> endotoxin, USP <1225> validation of compendial methods
Layer 3 — Medical
Every Rx issued by board-certified physician via CareValidate/OpenLoop platform. Baseline labs mandatory before prescribing. Synchronous video consult (not async) for first visits. 30/60/90 day follow-ups.
Verification
Publish NPI + state license # + CV of every physician on site. Public video intros available. Public IGF-1 cap policy for GH peptides. Refills refused against cycling rules.
Reference standard
State medical board licensing, ABMS board certification, state-specific telehealth prescribing laws
What we can and cannot say in marketing
Verifiable claims we can legally make
"Compounded in a PCAB-accredited pharmacy"
Verifiable fact. PCAB accreditation publicly listed on achc.org. Process claim, not efficacy claim.
"Every batch tested for identity, purity, and sterility by independent lab"
Verifiable fact if CoAs are documented. Process claim, defensible.
"USP <797>-compliant sterile preparations"
Public USP standard. Verifiable via PCAB audit and pharmacy compliance docs.
"Prescribed by board-certified physicians after laboratory evaluation"
Verifiable fact if true (operationally mandates baseline labs).
"Certificate of Analysis available upon request"
Verifiable transparency. Forces pharmacy partner to provide CoA per batch.
Claims we CANNOT make (FDA/FTC liability)
"The best peptide product on the market"
FDA/FTC superiority claim. Requires published head-to-head clinical trial. Medvi received warning letter for even milder claims. NEVER make.
"FDA-approved peptides"
Compounded peptides are NOT FDA-approved. Only Vyleesi (bremelanotide) and EGRIFTA WR (tesamorelin) are FDA-approved in our catalog. For others, claim is false and generates immediate warning letter.
"Cures perimenopause symptoms" / "Reverses aging"
Disease claims require FDA NDA. All "cures/treats/reverses disease X" claims without NDA are illegal. Medvi 2026 warning letter specifically cites this.
"Guaranteed results or your money back"
Medical products cannot guarantee results (individual biological variability). Money-back YES on dissatisfaction, NO on "guaranteed efficacy".
"Proven to increase longevity"
No human RCTs prove increased longevity with peptides. False claim = FTC action. You can say "associated with markers of cellular health" but not "proven to extend lifespan".
Launch plan — 5 concrete weeks
Week 1 — Foundations and Due-Diligence
Goal: Close the 7 critical decisions + partner shortlist
Tasks
- Day 1: Book demo CareValidate + OpenLoop (request Revenue Calculator + SOC 2 report + BAA template)
- Day 1-2: Book demo Empower Pharmacy + Hallandale + CoreRx (request PCAB cert + latest FDA Form 483 + CoA sample)
- Day 2-3: Setup Wyoming LLC ($500 via Northwest Registered Agent) + Dubai FZCO (already active ICG?)
- Day 3-5: Open US business bank account (Mercury) + initial Stripe application (pharma category, 7-14d approval)
- Day 5-7: Close the 7 decisions documentally in a shared doc with Marco
- Day 7: Shortlist 2 telehealth + 2 pharmacy finalists
Potential blockers
SOC 2 report turnaround 3-5 business days. Stripe pharma approval 7-14 days. All starts day 1 in parallel.
Week 2 — Legal and Compliance
Goal: Hire regulatory advisor + setup operational legal entities
Tasks
- Day 8-10: Hire healthcare regulatory advisor (ex-FDA or state pharmacy board), $300-500/hr, total $3-10K setup
- Day 10-12: Draft Terms of Service + Privacy Policy (HIPAA-aware) + Medical Disclaimer + Ad Claim Policy
- Day 12: Register final domain + trademark "BioForge" USPTO Class 5 (pharma) + Class 44 (medical services)
- Day 13-14: Rack the Shotgun test — $100/day Meta ads to landing "Join the waitlist", target 50 signups at $20 CPL
- Day 14: Decision gate — if CPL > $30 and quiz completion < 30%, stop and rethink angle
Potential blockers
Stripe approval in-flight. Trademark search: 2-4h lawyer time to verify availability.
Week 3 — Brand and Tech Build
Goal: Site + quiz funnel + creative library ready for soft launch
Tasks
- Day 15-18: Vibe-code quiz funnel (7-10 questions, branching logic, output recommended protocol) — Antigravity
- Day 15-18: Design system (OKLCH tokens, non-Inter/Roboto font) + landing hero + pricing page
- Day 18-19: Setup analytics (Hyros + PostHog) + ESP (Active Campaign, already in stack) + referral tracking
- Day 19-21: Create 30 creative variants with AI (hook + proof + CTA variations) for Meta A/B testing
- Day 21: Public protocol library — 5 protocols with PubMed citations (no signup required)
Potential blockers
Clinician intro videos require partner signed (Week 4). Placeholder videos until signature.
Week 4 — Partner Signing and Soft Launch Prep
Goal: Sign partner contracts + onboard physicians + waitlist campaign
Tasks
- Day 22-24: Sign partnership contracts (CareValidate + pharmacy primary + pharmacy backup)
- Day 24-26: Onboard 2-3 prescribing physicians (CV + NPI + video intro) on site
- Day 26-27: Public policies live — IGF-1 cap, cycling rules, refill policy, transparent pricing
- Day 27-28: Waitlist campaign scale — $500/day Meta ads, target 500 waitlist signups, "500 spots, first come first served"
- Day 28: Internal dry-run — end-to-end flow (quiz → consult → Rx → shipment) with 2 friends-and-family
Potential blockers
Contract negotiation can slip 3-7 days if exclusivity / data clauses contested.
Week 5 — Go-Live
Goal: First 50 paying customers + operational metrics dashboard
Tasks
- Day 29: Open waitlist to first 50 customers (early access, no discount — premium positioning)
- Day 29-35: Scale ad spend to $2-5K/day based on CPL, focus on quiz funnel conversion
- Day 30-45: Daily metrics review (CAC, CPL, quiz→consult conversion, consult→Rx conversion, Rx→shipment)
- Day 35-45: First clinical consults via partner, first Rx issued, first peptide shipments
- Day 45: First payment cleared — first $ in hand
- Day 50: 30-day lab follow-ups start, first cohort data
Potential blockers
Cold-chain shipping delays in remote areas. Stripe holds on first pharma payments can delay cash 3-7 days.
Partner due-diligence — checklist
CareValidate
Primary telehealth backend — 4 product verticals (GLP / HRT / Peptides / Derm)
Questions to ask
- ?Explicit support for BPC-157, TB-500, CJC-1295, Ipamorelin, PT-141, NAD+, Epitalon beyond GLP-1?
- ?SOC 2 Type II report — last audit date + open findings?
- ?HIPAA BAA (Business Associate Agreement) template in advance?
- ?Pricing model: per-transaction %, flat fee, hybrid? Specific range for our volume?
- ?Exclusivity requirements — can we have multiple pharmacies?
- ?Data ownership post-termination — customers remain ours?
- ?State licensing coverage — all 50 states + DC?
- ?Response time SLA for patient questions (hours)?
- ?Uptime SLA + disaster recovery policy?
Red flags
- "Yes we support everything" answer without specific peptide list
- Pricing > 40% transaction value (per Medvi model)
- Data hostage clauses (customers locked post-termination)
- No SOC 2 Type II or audit older than 12 months
- Forced exclusivity on pharmacy
Estimated pricing
Estimated 40-50% transaction value (from Medvi model, not confirmed). Negotiable on volume.
OpenLoop
Fallback/secondary telehealth backend — physician network
Questions to ask
- ?Remediation status of January 2026 data breach (1.6M patients)?
- ?Status of November 2025 class action with Triad Rx (oral tirzepatide)?
- ?Physician training specific to peptide protocols (not just general telemedicine)?
- ?Prescribing volume limits per physician?
- ?Integration with non-OpenLoop 503A pharmacies?
Red flags
- Incomplete or undocumented breach remediation
- Physician pool shared with Medvi or other bad actors
- Platform lock-in (OpenLoop partner pharmacy only)
Estimated pricing
$30-80 per consult range + ongoing management fee. TBC.
Empower Pharmacy
Primary 503A/503B pharmacy — Texas-based
Questions to ask
- ?PCAB accreditation active — last audit date?
- ?FDA Form 483 observations in last 3 years?
- ?Third-party lab for CoA (not in-house only)?
- ?USP <797> compliance documentation + Media Fill testing frequency?
- ?Cold-chain shipping with 2-8C data logger for every shipment?
- ?Backup plan if FDA tightens on GLP-1 compounding (additive pathway)?
- ?Peptide catalog coverage — BPC-157, tesamorelin, semaglutide, HRT bioidenticals?
- ?Pre-filled pen capability (KEY differentiator for us)?
- ?Lead time from Rx to ship (target < 5 business days)?
Red flags
- Expired or never-obtained PCAB
- Open FDA Form 483 critical observations
- In-house testing only, no third-party CoA
- No cold-chain data logger
- No pre-filled pen capability (blocks Longevity tier differentiator)
Estimated pricing
Estimated 15-25% transaction value for COGS (wholesale peptide $18-81 + compounding + shipping).
Hallandale Pharmacy
Backup 503A pharmacy — Florida-based
Questions to ask
- ?Same due-diligence as Empower (PCAB, Form 483, testing, cold-chain)
- ?Capacity to absorb volume if Empower has disruption?
- ?Pricing delta vs Empower?
Red flags
- Same red flags as Empower
- Insufficient capacity for backup scenario
Estimated pricing
Comparable to Empower, range 15-25% transaction value.
Legal/Regulatory Advisor
Ex-FDA / pharmacy board consultant for launch review
Questions to ask
- ?Specific experience compounding pharmacy + telehealth DTC?
- ?Previous client portfolio in our space?
- ?Turnaround for Terms + Privacy + Ad Claims review?
- ?Ongoing availability for Rx workflow questions?
Red flags
- Generalist not specialized in healthcare
- No compounding experience (only big pharma)
- Rate > $600/hr without clear value
Estimated pricing
$300-500/hr, setup $3-10K, ongoing $500-2K/month.
From day 0 to first $ in hand
- 1
Day 0
· Andrea + MarcoDecisions closed + LLC setup started
- 2
Day 3
· AndreaDemo calls CareValidate + OpenLoop + 3 pharmacies completed
- 3
Day 7
· AndreaPartner shortlist + SOC 2 reports received
- 4
Day 10
· Advisor + AndreaRegulatory advisor signed + Terms/Privacy draft started
- 5
Day 14
· Marco (marketing)Rack the Shotgun test complete (50-150 waitlist signups at CPL < $30)
- 6
Day 18
· AndreaQuiz funnel + landing live (vibe-coded)
- 7
Day 21
· AndreaPublic protocol library + 30 creative variants ready
- 8
Day 24
· Andrea + advisorPartner contracts signed (telehealth + 2 pharmacies)
- 9
Day 28
· MarcoWaitlist campaign scaled to $500/day, target 500 signups
- 10
Day 29
· Andrea + MarcoGo-live to first 50 waitlist customers
- 11
Day 35
· PartnerFirst clinical consult via CareValidate
- 12
Day 40
· PartnerFirst peptide Rx issued + pharmacy ships
- 13
Day 45
· SystemFirst payment cleared — FIRST $ IN HAND
- 14
Day 50
· Partner + AndreaFirst 30-day lab follow-up + cohort retention data
- 15
Day 60
· Andrea (analytics)First cohort complete — early LTV signals