Insurance credentialing is how a health plan verifies you before it lets you bill as an in-network physician, and it runs on a clock most new doctors find out about too late. Your Medicare effective date is the day you filed, not the day you were approved. Everything else follows from that.
This guide walks the process in five steps, using CMS regulations and NCQA’s own published standards instead of the timelines credentialing vendors like to quote. You will also see where files stall in practice, and what each week of delay actually costs you.
Before you start, five documents decide whether your file even opens
Every payer application asks for the same core set: an active state medical license, a Type 1 NPI, a DEA registration if you prescribe, malpractice coverage with current limits, and a work history with no unexplained gaps. Missing any one of them stops the file before verification even begins.
None of this is optional paperwork. NCQA, the non-profit that accredits most US health plans, requires accredited organizations to verify practitioner credentials through a primary source, run every file past a designated credentialing committee, and monitor sanctions and complaints between cycles. The plan is not taking your word for any of it.
| What you need | Where it comes from | What the payer does with it |
|---|---|---|
| State medical license | Your state medical board | Verified against the board directly |
| Type 1 NPI | NPPES | Identifies you on every claim |
| DEA or CDS certificate | DEA, plus the state if it issues its own | Verified as a separate credential |
| Malpractice coverage | Your carrier | Limits checked, claims history reviewed |
| Work history | You | Gaps must be explained in writing |
Cost check: the pieces themselves are mostly free. An NPI costs nothing, the CAQH Provider Data Portal is free to clinicians because participating health plans fund it, and commercial payers do not charge you to apply. The real cost is time. Every week you spend out of network is a week of patients you either turn away or treat without getting paid.
Step 1: Lock the license and the NPI before you open a payer portal
No payer will credential a physician who is not yet licensed in the state where the practice sits. Get the license first, then the Type 1 NPI, then the DEA registration tied to that practice address. Applying out of order guarantees a rejection and a restart weeks later.
The NPI is the fast part. It is free, it is permanent, and a complete NPPES application usually clears in about ten business days. The license is the long pole, and it varies wildly by state. Start it the moment you sign an employment contract, not when you arrive.
Your DEA registration needs to carry the address where you will actually prescribe. A DEA certificate still showing your residency program address sends a credentialing file back to the bottom of the queue.
Step 2: Build one CAQH profile, then keep attesting to it
Almost every commercial payer pulls your background from a single shared profile rather than asking you to retype it. You enter education, training, work history, licenses, malpractice coverage and documents once, then authorize each health plan to read it. Keeping that profile current is the whole job.
The name changed recently and the confusion is real. As of June 2026, CAQH operates as DataSpring, powered by CAQH, following its move from non-profit to for-profit ownership in January 2026. The provider-facing system kept its name: it is the CAQH Provider Data Portal, and it holds more than 4.8 million records. Guides that still call it CAQH ProView are describing a product name the organization retired.
Common mistake: creating a second profile because the DataSpring branding looks like a new platform. It is not. Your existing login, CAQH ID, documents and attestation history all carry over. A duplicate profile splits your data across two records, and payers pulling the wrong one see an incomplete file.
Attestation is the part that bites later. DataSpring reports that 2.5 million clinicians confirmed their data within the last 120 days, which tells you how the cycle runs in practice. Let yours lapse and payers stop seeing current information, which stalls applications you thought were moving.
Step 3: Apply to each payer separately and log every reference number
There is no universal application. A complete CAQH profile feeds the payers you authorize, but each health plan still runs its own intake, its own committee and its own contract. You apply to Aetna, then to Cigna, then to the Blues plan in your state, one at a time.
Pick your panels deliberately. Four to six plans that actually carry patients in your area beat twenty applications you cannot track. Medicare and your state Medicaid program run on their own separate enrollment systems and deserve their own slot on the list.
Save the confirmation or ticket number for every submission. In our experience helping physicians across all 50 states, the single most useful artifact in a stalled credentialing file is the reference number from the original submission, because it is the only thing that settles an argument about when the clock started.
Step 4: Verification and a committee decide your file, not the portal
Once your application lands, the plan verifies each credential at its source and sends the file to a credentialing committee of practicing peers. Submitting the application is not the decision. A human body reviews the file, applies established criteria, and documents a rationale for approving or denying you.
NCQA certifies eleven separate verification products, and each one is a distinct check: license to practice, DEA or CDS certification, education and training, board certification, work history, malpractice claims history, state licensing board sanctions, Medicare and Medicaid sanctions, application processing, attestation content, and ongoing monitoring of sanctions. Your file is eleven small investigations running at once.
Each of those verifications also expires. NCQA caps how old a check can be when the committee votes, and the caps are not uniform, which is the detail almost every credentialing explainer flattens into a single number.
Read that chart as a deadline, because that is what it is. If your file sits while one verification ages past its cap, the plan has to redo it before the committee can vote, and you lose that time twice. A slow response from you on one document can reset work that was already finished. The full picture of the NCQA rulebook payers work from covers how those windows tightened in July 2025.
Worth knowing: approval is not permanent. NCQA-accredited organizations monitor sanctions, license expirations and complaints monthly between cycles, and they recredential you on a fixed clock rather than when someone remembers. That is what recredentialing asks of you every three years, and it uses the same verification machinery as the first time.
Step 5: Contracting sets the date your money actually starts
Approval and payment are two different events. After the committee clears you, the plan sends a participation agreement and a fee schedule, and only the countersigned contract carries an effective date. Until that date exists in writing, you are an approved physician who still cannot bill that plan.
Medicare is the one place where the rule is written down and not negotiable. Under 42 CFR 424.520(d), your effective date is the later of the date you filed an application that was subsequently approved, or the date you first began furnishing services at the new practice location. Approval date does not enter into it.
There is a small rescue built into the rules. 42 CFR 424.521(a) lets physicians retrospectively bill for services furnished up to 30 days before their effective date, provided every program requirement including state licensure was already met. That window stretches to 90 days only where a Presidentially declared disaster prevented enrolling in advance.
Filing early is worth more than following up often. The filing date is the anchor for everything Medicare will pay you.
Commercial plans set effective dates by contract instead of by regulation, and some backdate to the application date while others start on the first of the month after the countersignature. Ask for the effective date in writing before you schedule a single patient under that plan.
Where insurance credentialing applications actually stall
Files rarely die from a denial. They stall, quietly, on something small: a work-history gap nobody explained, an address mismatch between your NPI record and your application, a malpractice certificate that expired mid-review, or a lapsed attestation that made your shared profile look incomplete to every plan at once.
From the licensing desk: the delays we see most often are not caused by payers being slow. They are caused by a document that expired while a file sat waiting, or by a physician who never learned the file was waiting at all. Payers rarely chase you twice. Someone has to own the follow-up calendar, and by default nobody does.
Anything unusual in your history deserves a written explanation attached at submission rather than an answer given three weeks later. Malpractice claims history is one of the eleven checks, so a settled claim will surface anyway. You should know what a plan will see before it sees it, which is why we tell physicians to run an NPDB self query on themselves before the first application goes out.
Deadline watch: two clocks run against you at once. Verifications age out at their NCQA caps while the file sits, and the Medicare retrospective window covers only 30 days before your effective date. A file that drifts for a month loses ground on both, and neither clock sends you a reminder.
We see the same pattern across states and specialties: the physicians who get paid soonest are the ones who filed early with a clean file, not the ones who called the most. If you would rather hand the tracking to someone else, our payer enrollment team runs this end to end.
Insurance credentialing: quick reference
The numbers below are the ones worth writing on the inside of a folder. They come from federal regulation and from NCQA’s own published standards, not from vendor estimates, and they hold regardless of which plan you are applying to or which state you practice in.
| Insurance credentialing: quick reference | Current |
|---|---|
| Medicare effective date | Later of filing date or first date of service at the location |
| Medicare retrospective billing | Up to 30 days before the effective date |
| Retrospective window, declared disaster | Up to 90 days |
| NCQA verification products | 11 separate checks |
| Longest NCQA verification shelf life | 180 days (Accreditation) |
| Shortest NCQA verification shelf life | 90 days (Certification) |
| Credentialing committee | Required for NCQA Credentialing Accreditation |
| Cost of a CAQH Provider Data Portal profile | Free to clinicians |
Frequently asked questions
How does insurance credentialing work?
A health plan verifies your license, training, work history and malpractice record at their original sources, then sends the file to a credentialing committee that approves or denies you. Contracting follows separately, and only the signed contract carries the effective date you can bill from.
How long does credentialing usually take?
There is no published standard, and it varies by plan. What is fixed is how long verifications stay valid: NCQA caps them between 90 and 180 days depending on the check and the program. A file that outruns those caps forces the plan to verify again.
How much does insurance credentialing cost?
Applying is generally free. An NPI costs nothing, the CAQH Provider Data Portal is funded by participating health plans rather than clinicians, and commercial payers do not charge application fees. The expense is the unbilled time between starting work and your effective date.
What are the two types of credentialing?
Physicians meet two: payer credentialing, which lets you bill a health plan as an in-network provider, and facility or privileging credentialing, which lets you practice at a specific hospital. They use similar verifications but are granted by different bodies and neither substitutes for the other.
Does insurance credentialing expire?
Yes. NCQA-accredited organizations recredential practitioners on a fixed cycle and monitor sanctions, complaints and license expirations monthly in between. Your CAQH profile also needs regular attestation, and letting it lapse can stall applications and directory listings at every plan reading it.
What happens if a provider is not credentialed?
Claims for that plan are denied or held, because the payer cannot confirm you meet its standards. For Medicare, services furnished more than 30 days before your effective date cannot be billed at all, so the revenue from that period is simply gone.
The Bottom Line
File early, file clean, and get every effective date in writing. Medicare pays back to your filing date and no further than 30 days beyond it, commercial plans set their own, and every verification in your file has an expiry date working against you. Start the week you sign your contract.
Our team handles physician payer enrollment end-to-end: CAQH profile setup and attestation, payer applications and follow-up, Medicare and Medicaid enrollment, and effective-date tracking so nothing ages out mid-review. We work with physicians, PAs, and nurse practitioners across all 50 states.
This article provides general guidance only. Credentialing and payer enrollment requirements change frequently and vary by health plan and by state. Always verify current requirements with the specific payer and with CMS before submitting an application. Last fact-checked: September 8, 2026.
Written by Medicallicensing Team · Reviewed by David Ivaniuk, CEO Medicallicensing · Last updated: September 8, 2026 · Last fact-checked: September 8, 2026
