Payer Credentialing Timeline and Cost

Run every payer through the same four stages and record where each one sits. The stages are not interchangeable, and the answer to "are we live with this payer?" is a different stage for each payer at any given moment.

Stage 1 - Data and primary source verification. NPI obtained or confirmed through NPPES. The CAQH Provider Data Portal profile (until recently called CAQH ProView) completed, documents uploaded and attested, and the target payers authorized to view it. The payer or its delegate then performs primary source verification of licensure, education, board certification, malpractice history and sanctions. This stage is mostly provider-controlled: nothing here is waiting on a payer decision, and most of the delay attributed to payers originates in an incomplete file.

Stage 2 - Credentialing decision. The payer's credentialing committee or delegated entity approves the provider. Provider-controlled work here is limited to answering requests for additional information quickly.

Stage 3 - Contracting. A participation agreement is executed, the fee schedule attaches, and the provider is loaded to the network for the specific products they will be in. This is the stage most often assumed to be included in credentialing and most often is not. Ask explicitly whether the contract is per-provider or a group agreement the provider is added to, and which products (commercial, exchange, Medicare Advantage, Medicaid managed care) the agreement covers — those are frequently separate networks.

Stage 4 - Enrollment and effective date. Registration as a billing provider completes and the payer states an effective date. For Medicare, submit Form CMS-855I (individual), CMS-855B (organization) or CMS-855R (reassignment of benefits) through PECOS; for state Medicaid, the state's enrollment portal, and then each managed care organization separately. Capture the effective date in writing at approval — claims for dates of service before it deny or pay out of network.

The tracker. One row per provider per payer, with columns for: payer and product line, application type and submission date, stage (1-4 above), payer reference or tracking number, the named contact, the date of the last follow-up, the date and content of any outstanding request for information, the contract execution date, the effective date as stated in writing, and the first billable date of service. Two derived columns earn their keep: days since last payer contact, and whether the effective date is retroactive to a date you have already delivered services on.

Credentialing timelines rarely blow up for exotic reasons. Seven delays account for most of the damage, and the first three are entirely inside the practice's control:

1. Incomplete applications. Payers return applications for missing documents, inconsistent information or expired credentials, and each round trip costs a cycle.
2. Stale provider data profiles. An un-attested or outdated CAQH Provider Data Portal profile stalls every commercial application that depends on it.
3. Multi-state complexity. Each state board has its own requirements, so multi-state practices wait on the slowest jurisdiction.
4. Payer processing backlogs. Payer panels carry backlogs that extend timelines beyond their stated turnaround. This one is not provider-controlled — which is why the tracker records the date of last contact rather than an expected date.
5. Late starts. Practices that do not begin until a provider's start date lose billable months, and the loss multiplies across the payers that provider needs to see a full panel.
6. Credentials that lapse mid-process. A license or certificate that expires while an application is pending forces re-verification and restarts the clock with that payer.
7. Missed retroactive-billing windows. Retroactive billing is an exception, not a default. Medicare's is fixed by regulation at up to 30 days before the effective date (90 days after a Presidentially-declared disaster); commercial and Medicaid windows are payer-specific and some do not exist at all. Confirm the window in writing per payer before relying on it.

The revenue math is unforgiving, and it is arithmetic rather than an industry estimate: an uncredentialed provider generates encounters that cannot be billed to that payer. Multiply your own average daily billable charges by the days a provider sits uncredentialed and you have the exposure for one provider, one payer. We do not publish a dollar range here because a credible one does not exist — the figure depends entirely on specialty, payer mix and schedule density, and any vendor quoting you a universal per-day number produced it from nothing. Run it on your own numbers instead.

Medicare is the one payer whose dates are set in regulation rather than in a service-level promise, so plan against the regulation.

Effective date. For physicians, non-physician practitioners, physician and non-physician practitioner organizations (and the other supplier types the section lists), the effective date of billing privileges is the later of the date of filing of a Medicare enrollment application that was subsequently approved by a Medicare contractor, or the date the provider first began furnishing services at the new practice location (42 CFR 424.520(d), read 17 September 2026). The filing date is what you protect: a complete application filed earlier moves the effective date earlier, and an application that is returned for correction is not the application that was approved.

Retrospective billing. The same provider types may retrospectively bill for services furnished at the enrolled practice location for up to 30 days prior to the effective date where circumstances precluded enrollment in advance, or 90 days prior where a Presidentially-declared disaster under the Stafford Act did (42 CFR 424.521(a), read 17 September 2026), provided all program requirements including state licensure were met. That 30-day window is the entire cushion — it is not a general grace period.

Processing time. CMS does not publish a guaranteed turnaround for enrollment applications, and the Medicare Administrative Contractors post their own current processing timeframes, which move. Take the number from your own MAC's published page on the day you plan, and record the date you read it. What extends an application is predictable regardless: missing information or signatures, discrepancies between the application and supporting documents, and verification delays at licensing boards.

Reassignment. Form CMS-855R (reassignment of benefits, for a provider joining an existing group) is a narrower transaction than an initial enrollment because the underlying provider is already enrolled — but the effective-date rule above still governs when the group can bill.

Commercial payers run credentialing and contracting as separate workflows, often in separate departments, and the second is where practices lose time they did not budget. A credentialing approval letter is not a network effective date; ask for the contract status in the same call.

Most large payers — UnitedHealthcare, Aetna, Cigna and Blue Cross Blue Shield plans — pull primary credentialing data from the CAQH Provider Data Portal, so a complete, attested, payer-authorized profile removes the most common source of delay. Payers with proprietary application processes (some smaller commercial payers, some workers' compensation carriers) do not pull from it and require manual document gathering.

On timelines, use the payer's own published number rather than an industry range, and date-stamp it. Cigna, for example, publishes 45 to 60 days for medical credentialing but routes behavioral health through Evernorth on a separate track — see our Cigna provider credentialing guide for the current network status. Ambetter publishes no national timeline at all, because enrollment runs through a different Centene plan in each state; our Ambetter credentialing guide by state maps the plan structure and the timelines individual states do publish. Where a payer publishes nothing, the honest planning input is the tracker's own history: what that payer took for your last three providers.

Effective dates vary the same way — some payers make participation effective on the credentialing approval date, others backdate to receipt of a clean application, and some set it at contract execution. Get it in writing, per payer, at approval.

State Medicaid has a structure worth planning around even where the calendar is unpredictable. Fee-for-service enrollment goes through the state's own portal or paper application and usually requires state-specific documentation beyond what the CAQH Provider Data Portal holds. Managed care is a second, separate step: each managed care organization runs its own credentialing and contracting cycle, generally after state enrollment is approved, even where it relies on the state-level approval underneath.

Processing times differ by state and by program and are published — where they are published at all — by the state agency or its administrative contractor, not by any national source. Take the number from the state's own provider enrollment page on the day you plan, and record the date, rather than carrying over a figure from another state or another year.

What is fixed federally is the back end: a state Medicaid agency must revalidate the enrollment of all providers, regardless of provider type, at least every 5 years (42 CFR 455.414, read 17 September 2026). Put the revalidation date in the tracker the day enrollment is approved — a lapsed Medicaid enrollment stops claims as effectively as never having enrolled.

Most payer credentialing has no direct fee. The CAQH Provider Data Portal is free to providers — the operator states that providers may enter, maintain and share their professional and practice information free of charge, with health plans paying for access (the CAQH Provider Data Portal operator's own FAQ, read 17 September 2026). Medicare enrollment through PECOS carries no application fee for physicians and non-physician practitioners: the Medicare application fee applies to prospective and revalidating INSTITUTIONAL providers, including institutional providers adding a new practice location, and the amount is reset each calendar year (42 CFR 424.514, read 17 September 2026). Confirm which form and which provider category you are filing under before assuming either way. Most commercial payers charge no direct credentialing fee. Some specialty payers and some workers' compensation carriers charge a nominal application fee; amounts are payer-specific and are not published in any consolidated source, so confirm each one at the point of application.

The substantial cost is labour — gathering documents, completing applications, tracking them across payers, following up on stalled ones, and capturing effective dates. Rather than adopting a staffing ratio from an article, measure your own: time three applications end to end, multiply by the number of provider-payer combinations you expect this year, add the follow-up cadence (one contact per payer per fortnight is a defensible baseline), and price it at the loaded hourly cost of whoever does it. That number is the one to put beside a vendor quote.

Third-party credentialing services price per provider per payer, usually at a lower rate for recredentialing cycles. Published rate cards are rare in this market, so treat any quoted industry average as unverified and ask a prospective vendor for its own written schedule — including what happens when an application stalls, who owns the follow-up, and whether contracting is in scope or only credentialing.

Recredentialing is a ceiling, not a calendar invitation. For organizations accredited by NCQA, a practitioner who is not recredentialed within 36 months is scored down; NCQA states there is no grace period, and that the cycle may not be extended except in the situations its standards list, such as active-duty military assignment or medical leave. If the deadline is missed by no more than 30 calendar days the organization may still complete the recredentialing; past that, the practitioner must go through initial credentialing again (NCQA FAQ directory, "36-month Recredentialing time frame", read 17 September 2026). That is a standard binding accredited organizations — it is not a law of nature, and a non-accredited payer may run a different cycle.

The recredentialing review pulls current data from the provider's CAQH Provider Data Portal profile, which is why the attestation cadence matters. The operator states that providers must attest to their data profile every 120 days — every 180 days for Illinois providers — to comply with credentialing requirements, and that a profile not attested within that window moves to Expired status; providers who respond to the quarterly directory confirmation email are in practice re-attesting every 90 days (the CAQH Provider Data Portal operator's own FAQ, read 17 September 2026). An expired profile at the moment a payer reaches for it is the single most avoidable recredentialing delay.

Government programs run on their own cycles. Medicare requires a provider or supplier other than a DMEPOS supplier to resubmit and recertify the accuracy of its enrollment information every 5 years, with 60 calendar days to respond once CMS notifies them, and CMS may also require off-cycle revalidation (42 CFR 424.515, read 17 September 2026); DMEPOS suppliers run a 3-year cycle. State Medicaid agencies revalidate all providers at least every 5 years.

Claims with dates of service before the effective date typically deny or pay at out-of-network rates. Which effective date applies is the whole question, and it is set per payer: Medicare's is fixed by regulation at the later of the filing date of the approved application or the first date of service at the location, with up to 30 days of retrospective billing behind it, while a commercial payer may make participation effective on the approval date with no backdating at all.

The patient's responsibility for out-of-network claims depends on the plan's benefits and on No Surprises Act protections, which apply to specific scenarios including emergency services and certain services delivered by non-participating providers at participating facilities — not to a routine scheduled visit with a provider who is simply not yet in network.

Some payers will hold claims pending a credentialing decision and process them retroactively once approved; others deny and require resubmission, and a few will not pay at in-network rates for that period under any circumstances. The defensible posture is to delay seeing a payer's patients until participation with that payer is confirmed in writing, or to disclose the non-participating status to the patient before the visit and obtain a written financial responsibility acknowledgment. Practices that leave this to chance accumulate a backlog of denied claims that is difficult to resolve after the fact.