Insurance Credentialing: The Complete Guide to Getting Paid

TL;DR: Insurance credentialing pays a claim only when four payer records agree on the date of service: the verified provider file, the enrollment and its effective date, the contract, and the provider's link to your group. File before the first patient visit. Medicare reaches back only 30 days. Commercial contracts set their own limits.

Your new physician cleared insurance credentialing in March. The approval letter sits in her file. Three months later, her claims still come back denied. The front office has stopped guessing why. Down the hall, a long-time provider dropped out of network because his attestation in CAQH, now DataSpring, slid past its date. Neither problem looks like a credentialing failure on paper. Both are. A claim pays only when several records held by different people agree with each other. The approval letter speaks for just one of them. Good credentialing and payer contracting services start by finding the record that is out of step.

A note on scope. NPDB queries, credentialing committee determinations, exclusion screening decisions, and privileging approvals remain the responsibility of the payer, the hospital, and your practice under federal, state, and accreditation rules. A credentialing partner like HRG supports the surrounding workflow. That includes documentation, enrollment applications, tracking, payer follow-up, and file management. Your practice retains authority over decisions that require its direct attestation and oversight.

Credentialed Is Only One of Four Records a Claim Needs

A claim pays only when four payer records agree on the date of service. Each of them lives with a different owner, in a different system, on a different clock. The payer's credentialing department verifies the provider against primary sources and puts the file in front of a committee. Its enrollment team then loads the approved provider as participating, with an effective date. A contract, usually signed at the group level, sets the rates and terms that participation pays under. Last comes the roster load that ties the individual provider to your group's tax ID and practice locations. That load gives the claim somewhere to land.

Those steps run in sequence inside the payer. Nothing in that sequence tells you when one finishes and the next one stalls. The approval letter your office receives usually comes from credentialing. It confirms that the provider passed verification. Nothing in it shows whether enrollment posted an effective date. Nor does it show whether the roster ever linked the provider to your group. So the office files the letter, opens the schedule, and learns about the missing step from the denials. By then the first claims have aged for weeks. That gap is the most common way insurance credentialing goes wrong after approval.

Where Each Record Stalls

Each record fails in its own way. One approval letter can hide three open problems:

Row four causes the most confusion. On every document the office holds, the provider looks finished. That exact denial pattern has its own breakdown in why credentialed providers still get denied.

The Effective Date Decides Which Visits Ever Get Paid

Payers pay from the effective date, not from the day a provider starts seeing patients. Their billing privileges attach to the moment a complete application arrives. Every day a provider works before that filing is a day at risk.

Medicare makes the rule explicit. Under 42 CFR 424.520(d), a physician's or practitioner's billing privileges start on the later of two dates: the day the contractor received an application it later approved, or the day the provider first furnished services at the new location. The retrospective billing rule at 42 CFR 424.521(a) then reaches back up to 30 days before that effective date. It covers only a provider who already met every program requirement, including state licensure.

Run a real calendar through it. A family physician starts seeing patients on January 6. After her group files the Medicare application on February 20, the contractor approves it in April. That makes February 20 her effective date, with retrospective billing reaching back to January 21. Every visit from January 6 through January 20 now sits outside the window for good. An appeal cannot rescue claims that had nothing wrong with them. The filing date was the problem.

30 days. The furthest Medicare reaches back before a practitioner's effective date. It applies only when every program requirement was already met.

Outside Medicare, the Contract Sets the Date

Commercial plans and Medicaid managed care plans do not borrow Medicare's 30 days. Each one sets its effective date in its own participation agreement or provider manual. Some backdate to the application date. Others start the clock at committee approval or at contract execution. Either one can trail verification by weeks. That variation is why a single start-date rule fails across a payer mix. In insurance credentialing, the only date that protects every payer at once is a filing date that lands before the first patient visit. How long each payer then takes is a separate question, answered in our payer-by-payer enrollment timelines.

Individual Enrollment, Group Enrollment, and the Provider Who Changes Jobs

Enrolling the provider and enrolling the group are separate transactions. A provider who changes practices carries neither one along. The payer contracts with your group under its tax ID and credentials the provider as an individual. Those two records meet only when the payer links that individual to that tax ID and to the locations where they practice. For Medicare, the connecting step is a reassignment of benefits from the practitioner to the group. Commercial plans make the same connection through their roster and provider data processes.

That split explains why a provider who arrives already credentialed is not ready to bill. The credential follows the provider. Participation and the group link stay behind with the old employer. Health systems often hold delegated credentialing agreements with payers. Under those agreements, the system credentials the physician on the payer's behalf. When that physician joins a private group, the payer may hold no file of its own on her. She starts close to scratch with every plan the system handled.

Until the new link posts, the payer treats the provider as out of network for your group. Some plans pay at the non-participating rate. HMO and narrow-network plans often pay nothing for a non-emergency visit with an out-of-network provider. Your patient then gets a bill for care your practice expected to collect from the plan.

Changes on your side reset the same records. A new tax ID, a merger, or a new location alters the group record every provider link depends on. Medicare requires physicians and practitioners to report a practice location change within 30 days. Commercial plans each set their own notice rules in the contract.

Why Commercial Payers Ask for What They Ask: The NCQA Layer

Most commercial and Medicare Advantage plans build insurance credentialing around NCQA standards. The paperwork demands that feel arbitrary usually trace to an accreditation requirement the plan cannot waive. Accredited plans verify licensure, education, board certification, work history, and sanctions from primary sources before a committee approves the provider. NCQA also caps how old each verification can be on the day the committee decides.

That cap explains a pattern administrators hate. A file that sits pending past the verification window does not wait politely. Its verifications go stale. The plan then has to rerun them before the committee can act. Your provider drops back in the queue while that happens. A file stalled on one missing document can lose ground twice. Plans also bring every participating provider back through review on a fixed cycle. NCQA sets recredentialing at every three years.

Most of those plans read the provider's data from DataSpring rather than collecting it fresh. Each provider must re-attest that profile every 120 days. When an attestation lapses, every connected plan sees stale data at the same moment. One missed date turns into several stalled applications. At recredentialing time it can turn into a termination notice. Our breakdown of what the NCQA standards now require covers the latest monitoring and verification changes.

Recredentialing and Revalidation: The Dates That Remove a Working Provider

A provider who is fully credentialed today can be out of network next quarter. Insurance credentialing never ends at approval. Every payer runs its own maintenance clock, out of step with all the others. Payers mail reminders to the contact on file. When that contact left the practice two years ago, nobody reads them.

Check these dates against every provider on your roster:

• DataSpring re-attestation every 120 days. A lapse freezes the data every connected plan reads. Recredentialing can then stall at several payers at once.
• Commercial recredentialing every three years under NCQA. A missed file can end participation. Re-entry then runs through initial credentialing again.
• Medicare revalidation every five years. CMS can deactivate billing privileges when a revalidation request goes unanswered. Claims stop until the provider reactivates.
• Medicaid revalidation at least every five years. Federal regulation requires state agencies to revalidate every enrolled provider. A missed deadline can disenroll the provider entirely.
• Hospital reappointment on the medical staff's own cycle. Lapsed privileges pull the provider off the hospital schedule, whatever the payer status says.
• License, DEA, and board certification expirations. Each document feeds the payer file. An expired copy stalls recredentialing until a current one reaches the plan.

Each item has a known deadline months in advance. Missing one is a tracking problem inside the practice, not a payer problem.

Who Keeps the Calendar: In-House, Offshore, or HRG

The right insurance credentialing model depends on how many providers and payers you carry and on who answers when a payer calls with a follow-up question. A single coordinator can hold the dates for a small, stable roster. Turnover, a second location, or a new payer contract is where single-person tracking starts dropping dates.

If you are still deciding whether to outsource credentialing, the hour counts settle most of it. Once you have decided, how to choose a credentialing company compares the firms that do this work.

How HRG Handles Insurance Credentialing

We start with the four records, not the application. Our Provider Services team, led by Mellissa Harmon, builds one calendar per provider. It covers every payer's verification, effective date, contract, and group link. We file so the effective date lands before the first patient visit. HRG manages payer enrollment applications, submits them, and tracks status through the effective date. The work happens inside your own systems and payer portals. You see the same status we see, with no separate dashboard and no PDF report.

About 90 percent fewer A/R issues. HRG has seen that drop in A/R issues from outdated provider data since moving client DataSpring profiles to 30-day maintenance instead of the 120-day attestation cycle.

The entire Provider Services team is HCPro-certified in provider enrollment. Three team members have completed MGMA's Payer Contracting Certificate program. That matters on the contract record, where we negotiate directly with payers on your behalf. For providers who also need hospital privileges, HRG manages privilege applications and reappointments. We hold a 100 percent approval record on the hospital privilege applications we have managed. The hospital grants the privileges. Our hospital credentialing services page covers that side in depth.

When HRG also runs your billing, the billers who hold weekly and monthly A/R reviews see a credentialing denial the week it posts. Over 26 years, the lesson has held steady: the cheapest credentialing problem is the one caught before the first visit. Matthew Read, owner and CEO of Red River Family Clinic, put the result plainly: "They have made the process smooth and stress-free for us by getting our group and providers contracted in record time."

Find the Provider Who Is Working Without Getting Paid

Any roster that has grown or turned over in the last year probably holds one provider with a lagging record. It might be an effective date that never posted, a group link that never loaded, or an attestation a week from lapsing. Finding which one, and which payers it touches, takes a look at your actual roster, states, and payer mix. Want to know where your providers stand before the next denial tells you?

Book a credentialing review with Mellissa

Mellissa Harmon is our Executive Vice President of Contracting & Credentialing and Head of Provider Services. No pitch and no long-term contract. For a call instead, dial 913-937-2995.

Insurance Credentialing Questions Practices Ask

How long does insurance credentialing take?

The answer depends on the payer, the state, and how clean the first submission is. Medicare runs on CMS processing standards. Commercial plans move at the pace of their verification queue and committee calendar. HRG completes in roughly 60 days a Medicare application that can take a self-managing practice over a year of corrections and resubmissions.

Can a payer refuse to credential our provider because its panel is closed?

A closed panel usually means the plan believes its network already covers your area and specialty. That position can change when a practice shows real network need, such as long wait times, a specialty gap, or patients already in the plan. HRG negotiates directly with the payer on that case and re-engages after six months if it declines. The payer makes the final participation decision.

Do we need new enrollments when we add a location or change our tax ID?

A new tax ID usually means new group enrollment, new contracts, and a fresh group link for every provider. Adding a location typically needs an update rather than a new application. Medicare expects that update within 30 days. HRG maps each payer's requirement before the change takes effect so billing never pauses.

Who should own credentialing inside a practice?

One named person should own it, not a shared inbox. Credentialing staff often assume billing owns enrollment, while billing assumes credentialing finished the job. HRG keeps all four records with one Provider Services team. The people who file the application also confirm the effective date and the link.

How does HRG price credentialing work?

HRG bills credentialing hourly for time used, on a one-page, month-to-month contract with no minimums and no auto-renewal. You can set a monthly hours budget. We flag the work as it approaches that limit. Every invoice reaches you for review before we charge it.

Can we renegotiate rates when a provider recredentials?

Recredentialing and rate negotiation are separate processes, though a recredentialing cycle is a sensible moment to review what a contract pays. HRG reviews your fee schedules and prepares payer-facing justification. When a payer refuses a blanket increase, we pursue carved-out increases for high-value CPT codes. Final terms rest with the payer and your practice.

The Filing Date Is the One You Control

Payers own the committee, the effective-date rules, and the contract. The filing date belongs to you. Our new provider revenue ramp planner budgets the 90 to 120 day cash gap that follows it.