You went into aesthetics for the artistry, the patient relationships, and the freedom — not to become a documentation clerk. But here's the uncomfortable truth that experienced injectors learn the hard way: the day something goes wrong, your chart stops being paperwork and becomes evidence.
When a patient files a complaint with the nursing or medical board, or a plaintiff's attorney requests records, the investigation quickly stops being about what you remember doing and becomes entirely about what you can prove you did. As one healthcare law firm bluntly put it, in these cases the question becomes "less about what staff members say happened and more about what the documentation can prove happened."
If your notes are thin, generic, or scattered across a paper folder and your camera roll, you're exposed — no matter how flawless your technique was. The good news: a defensible chart isn't complicated. It just has to consistently capture six things. Here they are.
Every tox and filler note should capture: (1) the product, lot number, and expiration; (2) exact injection sites and units/volume per site; (3) specific, dated consent; (4) your clinical assessment and contraindication screen; (5) photographs with proper authorization; and (6) adverse events, aftercare, and follow-up. Miss one consistently, and that's the gap an investigator or attorney will find.
This is the field injectors skip most — and it's the one that matters most in a product-related adverse event or a recall.
Your note should record the exact product administered (e.g., the specific neurotoxin or filler brand), its lot number, and its expiration date. Regulators and manufacturers treat lot-and-expiration tracking as a baseline expectation, because it's the only way to prove the product wasn't expired and to trace it if a batch is recalled.
What good looks like: product name + lot # + expiration, recorded at the time of treatment — not reconstructed from memory a week later.
A face diagram with the number of units or the volume placed at each site isn't a nicety — it's core evidence. It demonstrates your dosing was reasonable, shows the anatomical plan, and gives any future provider (or investigator) a precise picture of what was done.
What good looks like: a mapped diagram or a clear site-by-site breakdown (e.g., "glabella: X units across 5 points"), with total units/volume reconciled against the product drawn.

A signature at the bottom of a generic form is not the same as documented informed consent. Your record should show that this patient consented to this procedure, including the material risks discussed (bruising, asymmetry, vascular occlusion for filler, etc.), alternatives, and that their questions were answered — dated to the encounter.
What good looks like: consent tied to the specific treatment and date, reflecting a real risk conversation — not a one-time form signed at the first-ever visit and never revisited.
Before you inject, you screen. Your chart should prove it. That means a current medical history, medication and allergy review, relevant contraindications checked, and the clinical indication for treatment. In board investigations, documented assessment and orders are exactly what supervisors and investigators look for to establish that care met the standard.
What good looks like: a documented pre-treatment assessment showing you screened for contraindications before the needle, not a blank "patient tolerated well."
Before-and-after photos are clinical documentation and protected health information. Two things have to be true: the images are captured and stored securely as part of the record, and you have a separate, specific photo authorization if you intend to use them for anything beyond the chart (like marketing). A general treatment consent does not cover posting a patient's face on Instagram.
What good looks like: dated clinical photos in the record, plus a distinct marketing-use authorization on file before any image leaves the chart.
The chart that protects you is the one that shows the whole story — including what happened after. Document aftercare instructions given, any complication or adverse event (and exactly how you assessed and managed it), and follow-up contact. Complication documentation is the single most under-kept field in aesthetics, and it's precisely the one that demonstrates you acted appropriately when something didn't go to plan.
What good looks like: aftercare noted at every visit, and — when a complication occurs — a factual, contemporaneous record of the assessment, the intervention, and the follow-up.
| # | Field | The question it answers |
|---|---|---|
| 1 | Product + lot # + expiration | What went in, and was it in-date? |
| 2 | Injection map + units/site | Where, and how much? |
| 3 | Specific, dated consent | Did they understand and agree to this? |
| 4 | Assessment + screening | Did you screen before you treated? |
| 5 | Photos + authorization | Is it documented and lawfully used? |
| 6 | Adverse events + follow-up | What happened after, and how did you handle it? |
This is for solo and small-practice injectors — RNs, NPs, PAs — who chart their own notes and want documentation that protects their license without stealing their evenings.
This isn't a substitute for your practice's legal counsel or your medical director's protocols. Think of it as the floor, not the ceiling — the fields that should be present in every note, on top of whatever your state and supervising physician require.
We built ScribeFlow because injectors deserve charting that's fast and defensible — a tool that structures a complete SOAP note from a quick dictation, prompts for the fields above, and stores everything encrypted so a breach yields unreadable data. We're also honest about what it is: a documentation tool, not a lawyer, and not a magic "HIPAA compliance" button. It makes doing the right thing faster — the judgment is still yours.
If the after-hours charting is the tax you're tired of paying, your first 20 charts are on us — no card required.
Do cash-pay med spas really need this level of documentation? Yes. Documentation obligations follow the care, not the payment method — and cash-pay practices are still subject to board oversight and malpractice exposure.
Isn't a signed consent form enough? A signature proves a form was signed. It doesn't prove informed consent for a specific procedure on a specific day. Document the conversation, not just the signature.
How long should I keep these records? Retention requirements vary by state and entity type — confirm yours with counsel. The safe default is "longer than you think," stored securely.
Educational content, not legal advice. Documentation and retention requirements vary by state, license type, and practice structure — confirm specifics with your medical director and qualified counsel.