Getting credentialed with insurance companies means gathering your professional documentation, completing a centralized profile through CAQH ProView, submitting applications to each insurer you want to join, and waiting through primary source verification that typically runs 90 to 120 days per plan. Each insurer runs its own review, so providers joining several networks usually have multiple applications in motion at once. Until an insurer credentials you and you sign its participation agreement, you cannot bill that insurer for patient services.
Gather Your Documentation Before You Apply
Incomplete applications are the single most common reason credentialing stalls. The first two weeks of any insurer’s review are spent checking that everything is there, and missing items send you to the back of the queue. Assemble the following before you open an application.
National Provider Identifier
The NPI is a 10-digit number that identifies you across every insurer, clearinghouse, and federal health program. You get it free through the National Plan and Provider Enumeration System, run by CMS.1Centers for Medicare & Medicaid Services. National Provider Identifier Standard (NPI) No application moves forward without one. If you practice as an individual and also operate a group, you may need both a Type 1 (individual) and Type 2 (organizational) NPI.
Tax Identification
Insurers need a tax ID to process reimbursements. Sole practitioners typically use their Social Security Number; group practices and professional entities use an Employer Identification Number from the IRS.2Internal Revenue Service. Taxpayer Identification Numbers The name on your tax ID must match exactly what appears on your application and your NPI registration. Mismatches are a frequent cause of processing delays.
Active, Unrestricted License
Every insurer verifies that you hold an active, unrestricted license in the state where you intend to practice. For physicians that means passing the USMLE or COMLEX-USA, depending on your training pathway.3American Association of Colleges of Osteopathic Medicine. Board Examinations and Licensure Nurses, psychologists, social workers, and allied health professionals follow their own board requirements, which vary by state. Most state medical boards require renewal every two to three years, and nearly all mandate continuing education hours on topics such as pain management, opioid prescribing, or ethics.4Federation of State Medical Boards. Continuing Medical Education by State Even a brief lapse pauses your credentialing status, and you cannot bill for services rendered during the gap.
Malpractice Insurance
Virtually every insurer requires proof of professional liability coverage before granting network status. The most commonly required minimum is $1 million per claim and $3 million in aggregate annual coverage, though some insurers and specialties require more. You will submit a Certificate of Insurance showing coverage amounts, policy dates, and whether the policy is occurrence or claims-made. If you carry a claims-made policy, some insurers will ask about tail coverage, which protects you against claims filed after a policy expires for incidents that occurred while it was in force.
DEA Registration
If you prescribe, administer, or dispense controlled substances in Schedules II through V, you must hold an active DEA registration.5GovInfo. U.S.C. Title 21 – Section 823 Many insurers ask for your DEA number even when your specialty rarely involves controlled substances, because it doubles as an identity verification tool. If your practice does not involve controlled substances at all, note that on the application and expect follow-up from the credentialing committee.
CLIA Certificate for In-Office Labs
If your practice performs any laboratory testing on-site, including simple tests like rapid strep or urinalysis dipsticks, you need a Clinical Laboratory Improvement Amendments certificate. A Certificate of Waiver covers simple, low-risk tests as classified by the FDA, and you obtain one by submitting Form CMS-116 to your state agency.6Centers for Medicare & Medicaid Services. How to Obtain a CLIA Certificate Each testing location needs its own certificate, and CLIA certificates are valid for two years. Insurers ask for the number if you bill for any lab services.
Build a CAQH ProView Profile
The Council for Affordable Quality Healthcare runs the platform most private insurers use for credentialing intake, called the Provider Data Portal (commonly ProView). You enter your information once, and participating health plans pull data directly instead of asking you to fill out a separate form for each one.7CAQH. CAQH Credentialing Suite
Your profile covers personal information, professional IDs (NPI, DEA, state license numbers), education and training history, specialty board certifications, practice locations, hospital affiliations, malpractice insurance details, employment history, professional references, and disclosure questions.8CAQH. Provider User Guide Once the profile is complete you designate which organizations can access it.
CAQH requires you to re-attest your data periodically. Letting attestation lapse is one of the easiest ways to trigger a credentialing hold, because an insurer that pulls stale data will either return the application or begin review with outdated information. Set a calendar reminder.
Disclose Everything
Credentialing applications require full transparency about your professional history. Expect to provide a complete curriculum vitae covering every position you have held, including clinical roles, academic appointments, and any gaps in practice. Unexplained gaps raise flags; a brief written note covering the reason (parental leave, further training, illness) usually resolves them.
You must also disclose any malpractice claims, settlements, or judgments, and any disciplinary actions, license restrictions, or sanctions, whether current or historical, including matters that were investigated and dismissed. Insurers cross-check your disclosures against the National Practitioner Data Bank, which collects reports on malpractice payments, adverse licensure actions, federal and state healthcare-related criminal convictions, and exclusions from government programs.9National Practitioner Data Bank. NPDB Guidebook – Queries, Overview Omitting something that shows up in the NPDB is far worse than disclosing it upfront with context. The omission itself can be grounds for denial even when the underlying event would not have been.
Providers operating through a business entity may be asked for tax records, ownership details, and documentation showing billing compliance. Anyone previously excluded from Medicare or Medicaid will need to show the exclusion has been lifted and that corrective steps like compliance training are complete.
How Insurers Verify What You Submit
Insurers do not take your word for anything. They conduct primary source verification, contacting your medical school, residency program, licensing boards, and certification bodies directly. Many delegate the work to organizations accredited by the National Committee for Quality Assurance, which sets the industry standard for credentialing quality.10National Committee for Quality Assurance. Credentialing Accreditation Requirements
Insurers also check federal exclusion databases. The Office of Inspector General maintains the List of Excluded Individuals/Entities, which identifies providers barred from federally funded healthcare programs, and any entity that hires or credentials an excluded provider faces civil monetary penalties.11Office of Inspector General. Exclusions Program The System for Award Management database tracks exclusions from federal procurement and assistance programs more broadly.
Verification is what makes the 90-to-120-day window unavoidable. The middle weeks of the timeline are the insurer waiting on responses from schools, boards, and databases. Final weeks go to committee review and a formal decision. If you also need hospital clinical privileges, plan on another 30 to 45 days, and submit that application at the same time as your insurance applications so the two clocks run in parallel.
Medicare and Medicaid Are Separate
Enrolling in Medicare is not part of your CAQH-based private insurance credentialing. Medicare enrollment happens through the Provider Enrollment, Chain, and Ownership System, an online portal maintained by CMS.12Centers for Medicare & Medicaid Services. Become a Medicare Provider or Supplier Paper applications exist, but PECOS is faster and lets you track status.
Most physicians, nurse practitioners, and other individual clinicians do not pay a Medicare enrollment fee. Institutional providers and suppliers, such as durable medical equipment companies and opioid treatment programs, pay a $750 application fee when enrolling, re-enrolling, revalidating, or adding a practice location.13Centers for Medicare & Medicaid Services. Medicare Provider Enrollment Hardship exceptions are available case by case with supporting documentation.
Once enrolled, you must report certain changes to your Medicare Administrative Contractor on tight deadlines. Ownership changes, adverse legal actions, and practice location additions or deletions must be reported within 30 days. All other enrollment changes must be reported within 90 days.14eCFR. 42 CFR 424.516 – Additional Provider and Supplier Requirements Missing those windows can lead to revocation of billing privileges.
Medicaid varies by state. Some states accept Medicare enrollment as sufficient; others require a separate application. Contact your state Medicaid agency early to learn what it requires.
Effective Dates Determine What You Get Paid
The credentialing effective date, not your first day at the practice, controls the earliest date you can bill an insurer. For most private insurers, the effective date is either the date they received your completed application or the date the credentialing committee approved you, depending on the insurer and state law. Some states require insurers to pay in-network rates for services provided during credentialing if the application is ultimately approved; many do not.
For Medicare Part B, the initial effective date is generally the later of the application receipt date or the date you first furnished services at a new location, and it can be backdated up to 30 days before the application was received.15Centers for Medicare & Medicaid Services. Medicare Effective Dates If billing privileges were deactivated and you reactivate them, retrospective billing may apply, but you will not be paid for services during the deactivation period.
The practical rule: submit applications as early as you can, ideally before you begin seeing patients at a new practice. Every week between your start date and your application receipt date is a week of services you may never be paid for.
Sign the Participation Agreement
Verification approval does not automatically make you in-network. You still have to sign a participation agreement with the insurer, and it deserves a careful read before you sign. The contract sets your reimbursement rates, usually as a fee schedule that may pay well below Medicare for some services and above for others. Check the specific procedure codes most relevant to your practice rather than relying on an overall summary.
Watch the claims submission deadline in particular: missing a filing window means you forfeit payment for that service. Also look at prior authorization requirements, referral rules, utilization review policies, how rate changes are communicated, and the termination clause, which specifies how much notice either party must give to end the relationship. Notice periods vary by insurer and by state, and commonly run 90 to 180 days. Leaving a network without following the termination process can expose you to breach-of-contract claims.
Plan for Recredentialing From the Start
Credentialing is not one-and-done. Private insurers following NCQA standards must recredential every provider at least every 36 months.16National Committee for Quality Assurance. Proposed Standards Updates to 2025 Accreditation Programs If the insurer cannot complete recredentialing by the deadline because you failed to provide updated information, it must administratively terminate you from the network. NCQA allows a 30-day grace period past the deadline before the insurer must treat you as a new applicant and start the entire process over.
Medicare revalidation runs on its own clock. Most providers and suppliers revalidate every five years; durable medical equipment suppliers revalidate every three. A missed revalidation can put a hold on your reimbursement or deactivate billing privileges entirely, and Medicare will not pay for services furnished during a deactivation.17Centers for Medicare & Medicaid Services. Revalidations (Renewing Your Enrollment) Keep a master calendar for every insurer’s recredentialing cycle and your Medicare date; reminders from insurers and CMS are helpful but not reliable enough to depend on.
When a Panel Is Closed or You’re Denied
Sometimes you finish the entire application only to learn the insurer’s panel is closed to new providers in your specialty or area, meaning the insurer has decided it has enough providers of your type. You can appeal by showing a gap your practice would fill: patient-to-provider ratios showing a shortage, specialized training or services not currently in the network, extended office hours that improve access, or letters from in-network physicians who want a referral option they don’t currently have. Some states have “any willing provider” laws that limit an insurer’s ability to refuse qualified applicants who accept the contract terms. If you believe a closed panel violates network adequacy rules in your state, the state insurance department can investigate.
Outright denials are not always the end. Common reasons include incomplete applications, unresolved discrepancies between your disclosures and database records, past disciplinary actions, or lapsed credentials. The insurer must give a written explanation and outline your appeal rights. Move quickly, because appeal windows are short. Address the stated reason directly: submit the missing documentation, or provide a detailed explanation with supporting evidence for a malpractice or disciplinary matter. If the appeal fails, most insurers let you reapply after fixing the deficiency, so treat the denial letter as a checklist for your next attempt.