Credentialing and payer enrollment

Medical Credentialing Services Handled Alongside Your Billing

We file, track and renew payer enrollments so new providers can bill on their start date, and our billers know exactly when each payer's effective date begins.

  • Works inside your current EHR
  • US practice time zone, every shift
  • Weekly KPI reporting, or on your schedule
Credentialing tracker dashboard showing payer applications, CAQH status, effective dates and renewal calendar for a medical practice

Quick answer

Medical credentialing services verify a provider's qualifications and enroll them with Medicare, Medicaid and commercial payers so claims can be paid. Our team files applications, keeps CAQH current and tracks each payer's effective date alongside your billing, because the effective date decides which visits you can bill.

Disclaimer: This page is general educational information about credentialing and payer enrollment. It is not legal, compliance, coding or billing advice. Payer and state rules vary and change, and federal rules and dates cited here are current as of October 2026. Confirm requirements with each payer, your state agencies and your compliance advisor.

What do medical credentialing services include?

Medical credentialing services cover four jobs that practices often lump into one: credentialing, payer enrollment, privileging and contracting. Each has a different owner and a different finish line. Mixing them up is how a new provider ends up seeing patients before any payer can pay for the visit.

Our team performs this work alongside your billing, so the person chasing a payer application is looking at the same claims queue as the biller. If you want the longer education piece first, read our guide to insurance credentialing for group practices.

Credentialing

Verifying a clinician's qualifications from the source: license, education, training, certification, work and malpractice history. NCQA describes verification as done through the primary source, a recognized source or a contracted agent of the primary source. Payers and facilities each run their own.

Payer enrollment

Applying to a specific payer so the provider can be paid: Medicare, a state Medicaid program or a commercial plan. This is the step that produces a billing number and an effective date.

Privileging

A hospital or surgery center deciding which procedures a clinician may perform there. Under federal hospital rules the medical staff examines the credentials of candidates, and bylaws set criteria for privileges.

Contracting

The fee schedule and terms a commercial payer offers once it accepts the provider. Enrollment alone does not tell you what each service will pay.

The federal references behind those descriptions are NCQA's credentialing page and 42 CFR 482.22 (eCFR, current as of October 2026). Our post on credentialing, privileging and enrollment goes deeper on the differences. For why it all matters to cash flow, see the importance of medical credentialing.

What does an unenrolled provider cost a practice?

A provider who is not enrolled cannot be paid by that payer, and for Medicare the start date is set by when you file, not when you hope to start. Every week between the first patient visit and an approved effective date is revenue you may not be able to bill.

Under 42 CFR 424.505, a provider or supplier must be enrolled in Medicare, and once enrolled receives billing privileges and a billing number. For physicians and non-physician practitioners, 42 CFR 424.520(d) sets the effective date as the later of two dates: the filing date of an application that is later approved, or the date the provider first began furnishing services at a new practice location.

There is a narrow window for back-billing. 42 CFR 424.521(a) allows retrospective billing up to 30 days before the effective date if circumstances precluded enrollment in advance, and up to 90 days when a Presidentially-declared disaster did. The provider must have met all program requirements, including state licensure. Both figures are from the eCFR as of October 2026.

Diagram of the Medicare enrollment effective date: application filed, approved, effective date set, retrospective billing window
The effective date follows the filing date. Retrospective billing is limited to the narrow windows in 42 CFR 424.521.

Deactivation is the second leak. Per CMS's December 2025 enrollment booklet, a late revalidation can bring a stay of enrollment and deactivation of billing privileges, and unanswered documentation requests can also lead to deactivation. CMS's 2024 enrollment conference slides add that reactivation requires a complete CMS-855 and that its effective date is based on the receipt date of the application.

Commercial plans set their own effective-date rules, and whether one back-dates approval is a contract question, not a federal one. We do not quote a lost-revenue figure here because we have no primary source for one.

See what one month of delay is worth to your practice

Put your average monthly collections per provider into our revenue calculator. It gives you a starting number to bring to a credentialing conversation.

Open the Revenue Calculator

How do Medicare, Medicaid and CAQH enrollment work?

Medicare is one federal process, Medicaid is fifty state processes, and many commercial payers draw on one shared profile in CAQH. Knowing which clock belongs to which system is half the job.

Medicare: forms, PECOS and revalidation

According to CMS's December 2025 booklet, most physicians and non-physician practitioners apply on the CMS-855I, and clinics and group practices on the CMS-855B. CMS describes PECOS as the online Medicare enrollment system. Reassignment of benefits, which lets a group bill for a clinician, now lives on the 855I. The separate CMS-855R was discontinued effective October 31, 2023, per CMS's 2024 conference slides.

Revalidation is generally every five years for most provider types. CMS can also ask for off-cycle revalidation, and 42 CFR 424.515 gives you 60 calendar days to respond once notified. Changes also have clocks. Under 42 CFR 424.516(d), a change of ownership, an adverse legal action and a change, addition or deletion of a practice location must be reported within 30 days, and all other changes within 90 days.

Medicaid: one program, many rulebooks

Medicaid enrollment is run by each state, so forms, portals and timelines differ. Federal rules set a floor. 42 CFR 455.414 requires states to revalidate every provider at least every five years, and 455.410 requires ordering and referring professionals to be enrolled. Our Medicaid credentialing guide covers the steps; we check your state's current rules before we file.

CAQH ProView: the profile many plans read

CAQH ProView holds one provider profile that authorized health plans read, so you enter data once. CAQH rebranded as DataSpring in June 2026, and the provider portal is now called the CAQH Provider Data Portal, at the same proview.caqh.org address. Re-attestation is generally every 120 days, or every 180 days for providers practicing in Illinois, according to CAQH's current resources page (2026). A 2022 Priority Health notice warns that a plan may be unable to recredential a provider who has not re-attested, and the contract may be terminated. If you miss the window, the profile status changes to Expired. Some plans word it differently; one Blue plan's FAQ says every four months. Check each plan's current wording.

Enrollment clocks that apply to most practices
SystemWhat the rule saysWhere it comes from
Medicare initial enrollmentMost physicians and non-physician practitioners file CMS-855I, groups and clinics CMS-855B, online through PECOS or on paperCMS MLN booklet (Dec 2025)
Medicare effective dateLater of the filing date of an application later approved, or first service at a new location42 CFR 424.520(d) (eCFR, Oct 2026)
Medicare retrospective billingUp to 30 days if circumstances precluded advance enrollment; 90 days after a Presidentially-declared disaster42 CFR 424.521(a) (eCFR, Oct 2026)
Medicare revalidationGenerally every 5 years; off-cycle requests possible; 60 days to respond42 CFR 424.515; CMS MLN (Dec 2025)
Medicare changesOwnership, adverse legal action, location: 30 days. Other changes: 90 days42 CFR 424.516(d) (eCFR, Oct 2026); CMS conference slides (Aug 2024)
Medicaid revalidationState must revalidate all providers at least every 5 years42 CFR 455.414 (eCFR, Oct 2026)
Medicaid ordering and referringOrdering or referring professionals must be enrolled participating providers42 CFR 455.410 (eCFR, Sep 2026)
CAQH ProViewRe-attest generally every 120 days (180 in Illinois); plan wording can differCAQH resources (2026); Priority Health (2022)

Sources: eCFR (current as of October 2026), CMS MLN9658742 (December 2025), CMS National Provider Enrollment Conference slides (August 2024), CAQH resources page (2026), CAQH ProView quick reference (2015), Priority Health provider notice (2022). Rules change; confirm with each payer.

What about payer turnaround times?

We do not publish a typical number of days. Turnaround differs by payer, state, provider type and how complete the application is, and we found no primary source we would stand behind. Ask each payer for its current timeline in writing and file early. That is the one lever you control.

How medical credentialing differs by specialty

The core process is the same, but a specialty changes which licenses, registrations and facility approvals have to line up first. The table lists what we check by specialty group.

What changes in credentialing by specialty group
SpecialtyWhat changesWhat we line up first
Behavioral healthSeveral license types (psychologists, counselors, social workers, therapists) with separate state boards. Medicare began paying MFTs and mental health counselors on January 1, 2024, with a separate CMS-855I for each state.The exact license title, supervision hours and state, before any payer application
Pain managementControlled-substance prescribing adds DEA registration, which is tied to each location where controlled substances are handled (with an exception for offices that only prescribe), plus facility privileges for procedures.DEA registration by location, state license, facility approvals
CardiologyHospital privileges for catheterization or device work are granted by the facility and are separate from payer enrollment.Facility privilege dates, payer enrollment and group reassignment together
OrthopedicsSurgery depends on privileges at each hospital or surgery center, and each facility runs its own review.A privileging timeline per facility so the surgery calendar can open
Family practiceNurse practitioners and PAs are enrolled in their own right on the CMS-855I, and APRNs hold a license in each state where they practice.Individual enrollments for every clinician, not only the physician
NeurologyTelehealth consults across state lines raise the question of which state license applies to the patient's location.State licenses for every state where patients will be located
RadiologyMulti-site coverage means many practice locations, and location changes have their own reporting clock.One clean list of locations before filing

Sources: CMS MFT/MHC enrollment FAQ (May 2024); 21 CFR 1301.12 (eCFR, Oct 2026); 42 CFR 482.22 (eCFR, Oct 2026); CMS MLN9658742 (Dec 2025); Nurse Licensure Compact FAQs; HHS Telehealth licensing pages (2025). Operational notes are RCM Finder's own.

See the full list on our specialties hub to find the billing patterns that sit next to each of these credentialing differences.

Telehealth and multistate practice

HHS states that a telehealth appointment occurs in the state where the patient is located at that time, and that compact participation is voluntary. Compacts exist for physicians, nurses, psychologists and several therapy professions (HHS page, December 2025). The Nurse Licensure Compact covers RN and LPN/VN licenses only, so APRNs need a license in each state. A compact simplifies licensure. It does not enroll anyone with a payer.

How does our credentialing process work?

It starts with a free practice audit of every provider, payer and expiration date. Then we collect documents, file applications, follow up with each payer and hand the effective date to billing. Pricing is quoted after the audit.

  1. 1

    Free practice audit

    We list every provider, payer, location and current status, plus license, DEA, malpractice and CAQH dates. You get a plain list of gaps and a filing order.

  2. 2

    Business Associate Agreement and document intake

    We put a Business Associate Agreement in place before accessing patient data. Provider documents are collected through a secure channel, not email attachments.

  3. 3

    Applications and CAQH profile

    We prepare Medicare, Medicaid and commercial applications and bring the CAQH profile current. The provider reviews and attests, because the attestation is theirs.

  4. 4

    Payer follow-up

    We track each application, answer payer questions and escalate stalled files. Every open item has an owner and a date.

  5. 5

    Effective date and billing hand-off

    When a payer confirms approval, we record the effective date and tell the billing team which dates of service can go out and which stay on hold.

  6. 6

    Re-attestation and revalidation calendar

    We keep a calendar of CAQH attestations, license and DEA renewals, and Medicare and Medicaid revalidations, so none of them lapse quietly.

Credentialing workflow diagram from provider documents to CAQH, payer applications, effective date and claim release
From provider documents to released claims, with one owner per stage.

Start with a free practice audit

Send us your provider list and payer mix. We will show you which enrollments are open, which are at risk and what to file first.

Get a Free Practice Audit

Where credentialing fits in our four pillars

Credentialing sits at the start of the revenue cycle. Nothing downstream works until the provider is enrolled, so each pillar depends on it.

Pillar 1 · Healthcare Marketing

Healthcare Marketing: do not advertise a provider you cannot bill

New-provider campaigns work well when the provider's payer status is known, so ads promise only what the schedule can deliver.

  • Insurance accepted, stated accurately
  • Launch dates matched to effective dates
  • Provider profiles kept consistent
Explore Healthcare Marketing
Pillar 2 · Virtual Medical Assistants

Virtual Medical Assistants: book the right visits

Our assistants use enrollment status so front-desk scheduling and eligibility checks match who is in network.

  • Schedule by payer status
  • Eligibility checked before visits
  • Same practice time zone
Explore Virtual Medical Assistants
Pillar 3 · End-to-End RCM

End-to-End RCM: claims released on the right date

Billing needs the effective date for each payer to know what can go out and what must wait.

  • Held claims tracked by provider
  • Denials traced to enrollment gaps
  • Weekly KPI reporting, or on your schedule
Explore End-to-End RCM
Pillar 4 · Practice Management System

Practice Management System: one record, credentialing next

The portal tracks claims by stage today. A provider credentialing module is coming next and is not live yet.

  • Claim pipeline by stage
  • Role-based access and audit log
  • Credentialing module: coming next
Explore Practice Management System

In-house, a credentialing vendor or our team: which fits?

Small practices with one new provider can often file in-house. Groups adding clinicians, opening locations or entering new states usually need dedicated hours. The table compares the options without a thumb on the scale.

Three ways to handle credentialing and payer enrollment
QuestionIn-house staffStand-alone credentialing vendorRCM Finder team alongside billing
Best forOne or two providers a yearLarge volume, many facilitiesPractices that want enrollment tied to claim release
Who knows the claims impactOften the biller, informallyRarely; hand-off neededThe same team reads both queues
Main riskApplication sits behind daily workStatus reports lag billing realityScope must be agreed in writing up front
Ongoing calendarSpreadsheet or memoryVendor trackerShared calendar with billing
What you should still ownProvider attestationsProvider attestations and account loginsProvider attestations and account logins

Our guide to delegated vs non-delegated credentialing explains a related choice some payers offer larger groups.

What should you ask any credentialing vendor?

Ask who owns your accounts, how documents are protected and what happens when a payer asks a question. Credentialing files hold sensitive personal and professional data, and a vendor that handles patient or claim data is generally a business associate.

HHS lists claims processing, billing and practice management as business associate activities and requires satisfactory assurances, in the form of a contract, before protected health information is shared. Be wary of any vendor selling a HIPAA "certification": HHS does not endorse or recognize private Security Rule certifications.

  1. Will you sign a Business Associate Agreement before accessing any patient data?
  2. Who owns the CAQH, PECOS and NPPES logins, and can we change the credentials if we leave?
  3. Does the provider personally attest to their own application data?
  4. How do you track expiring licenses, DEA registrations and malpractice coverage?
  5. How often do we get a status report, and does it show each payer's effective date?
  6. What do you do when a payer asks for more information or denies enrollment?
  7. Which payers and states do you file in, and which do you decline?

At RCM Finder, we put a Business Associate Agreement in place before accessing patient data. We work with your documents under role-based access, and the practice keeps ownership of its accounts. A provider credentialing module in our portal is coming next; it is not live today.

Talk through your provider roster with our team

Tell us who is joining, where and with which payers. We will say what we can take on and what your team should keep.

Talk to Our Team

Who this is for, and who it is not for

We would rather tell you now than after you sign. Here is where we fit and where we do not.

A good fit if you are

  • Practices adding a physician, nurse practitioner, PA or therapist.
  • Groups opening a new location or entering a new state.
  • Practices whose billers hold claims while enrollment is pending.
  • Owners who want enrollment, CAQH and renewals in one calendar.
  • Practices that already outsource billing and want one team accountable for both.

Probably not a fit if you are

  • Hospital medical staff offices that need a facility credentialing verification organization.
  • Practices that need a guaranteed approval date; no payer or vendor can promise one.
  • Buyers who need a self-serve credentialing software product today; the portal module is coming next.
  • Providers who will not review and attest their own applications.

Expert recommendations from our operations team

What we would do first if we were running your practice's revenue cycle tomorrow.

  1. 01

    File before the first patient visit

    For Medicare, the effective date follows the filing date, not the start date. We build the filing order from your hire or location-opening date.

  2. 02

    Put every expiration date in one calendar

    Licenses, DEA registrations, malpractice policies, CAQH attestations and revalidations fail separately. We track them together.

  3. 03

    Keep the practice as owner of every account

    CAQH, PECOS and NPPES accounts should belong to the provider or practice, with named delegates. That makes a vendor change painless.

  4. 04

    Hold claims until the effective date is confirmed

    A claim sent too early becomes a denial and a rework item. We tell billing which dates of service are safe.

  5. 05

    Check state rules for Medicaid and telehealth before filing

    State requirements change. We confirm the current Medicaid process and patient-location licensure rules for each state first.

  6. 06

    Enroll every clinician, not only the physician

    Nurse practitioners, PAs and behavioral health clinicians have their own enrollment and license requirements. Skipping them stalls the schedule.

Frequently asked questions

What is the difference between credentialing and payer enrollment?

Credentialing verifies a clinician's qualifications, such as license, training and history. Payer enrollment is the application that lets a specific payer, such as Medicare, Medicaid or a commercial plan, pay that clinician's claims. Credentialing supports enrollment but does not replace it. Our team handles both and tracks each payer's effective date for billing.

How long does medical credentialing take?

It varies by payer, state and how complete the application is, and we do not publish a typical number because we found no primary source for one. Medicare's effective date follows the filing date, so filing early is the main lever. We ask each payer for its current timeline in writing during the audit.

Can we bill for services before enrollment is approved?

For Medicare, only within narrow windows: 42 CFR 424.521(a) allows up to 30 days before the effective date when circumstances precluded enrollment in advance, or 90 days after a Presidentially-declared disaster, if all requirements were met. Commercial plans set their own rules, so check each contract before scheduling.

How often do we have to re-attest in CAQH or revalidate with Medicare?

CAQH re-attestation is generally every 120 days (180 in Illinois), though plan wording can differ. Medicare revalidation is generally every five years for most provider types, with possible off-cycle requests and 60 days to respond. Medicaid programs must revalidate providers at least every five years under 42 CFR 455.414. We keep one calendar.

Does RCM Finder offer credentialing?

Yes, as a service our team performs alongside your billing, beginning with a free practice audit. It is not a self-serve product, and a credentialing module in our portal is coming next but is not live today. Pricing is quoted after the audit, based on providers, payers and states.

Do nurse practitioners and PAs need their own enrollment?

Yes. CMS's booklet says most physicians and non-physician practitioners complete the CMS-855I, so each clinician is generally enrolled individually. State licensure also matters: the Nurse Licensure Compact covers RNs and LPN/VNs only, so APRNs need a license in each state where they practice. We check both before filing.

No cost, no commitment

Get your free practice audit

Tell us about your practice. A member of our operations team replies within one business day.

  • A review of your recent claims, denials and A/R aging
  • Where your front desk and prior authorizations slow payment
  • A prioritized fix list you keep, whether or not you hire us

Pricing is quoted after the audit, based on your volume and the services you choose. Prefer to talk? Call +1 (302) 556-2288.

Tell us about your practice

RCMFinder Master Intake Form
AA

About the author: Awais Afzal

Healthcare Operations & Data Analyst, RCM Finder

Awais has spent more than 16 years in healthcare digital marketing and clinical operations management. He builds data-driven revenue cycle blueprints for high-ticket medical practices and leads product development of the RCM Finder portal. More about our team.

How we write: every figure, code and rule on this page was checked against the primary source listed below and independently fact-checked before publishing. We re-review this page every six months. Last reviewed October 12, 2026; next review April 12, 2027.

Sources

  1. 42 CFR 424.505 - Basic requirement for enrollment — eCFR (2026)
  2. 42 CFR 424.510 - Requirements for enrolling — eCFR (2026)
  3. 42 CFR 424.515 - Requirements for reporting and revalidation — eCFR (2026)
  4. 42 CFR 424.516 - Additional provider and supplier requirements for enrolling and maintaining active enrollment status — eCFR (2026)
  5. 42 CFR 424.520 - Effective date of billing privileges — eCFR (2026)
  6. 42 CFR 424.521 - Request for payment — eCFR (2026)
  7. Medicare Enrollment for Providers and Suppliers (MLN9658742) — CMS (2025)
  8. Provider Enrollment 101 (National Provider Enrollment Conference slides) — CMS (2024)
  9. Medicare Provider Enrollment pages — CMS (2026)
  10. MFT and MHC Provider Enrollment FAQs — CMS (2024)
  11. 42 CFR 455.414 - Revalidation of enrollment — eCFR (2026)
  12. 42 CFR 455.410 - Enrollment and screening of providers — eCFR (2026)
  13. CAQH Resources and FAQs (DataSpring, formerly CAQH) — CAQH / DataSpring (2026)
  14. CAQH ProView Provider Quick Reference Guide — CAQH (2015)
  15. Make sure to re-attest with CAQH every 120 days — Priority Health (2022)
  16. Provider network FAQs — Blue Cross and Blue Shield of Texas (undated)
  17. Credentialing Accreditation and Certification Programs — NCQA (2026)
  18. 42 CFR 482.22 - Medical staff — eCFR (2026)
  19. 21 CFR 1301.12 - Separate registrations for separate locations — eCFR (DEA) (2026)
  20. Licensure compacts — HHS Telehealth.HHS.gov (2025)
  21. Licensure for behavioral health — HHS Telehealth.HHS.gov (2025)
  22. Nurse Licensure Compact FAQs — NLC (2026)
  23. Business Associates guidance — HHS (2026)
  24. Are we required to certify our organization's compliance with the standards? — HHS (2010)