A physician credentialing checklist is the list of documents, identifiers and applications three different groups review before a doctor can treat and bill: insurance payers, hospitals and government programs. Each group checks the same core credentials, such as the license, DEA registration, board certification, malpractice history and work history, but each adds its own requirements and runs on its own clock.
Getting this right early is worth real money. Medallion’s analysis of more than 64,000 payer enrollments found a national median of 60 days from submission to completion, with the slowest states reaching 196 days. Every one of those days starts only after a complete file is in, and a physician who sees insured patients before approval may not be paid for those visits. This checklist is built so a practice can start four months out, finish the file once and avoid the errors that send applications back.
What Is Physician Credentialing?
Physician credentialing is the process of verifying a doctor’s qualifications directly with the organizations that issued them. Instead of accepting copies, the reviewer confirms the medical degree with the school, the license with the state board, the specialty with the certifying board and the malpractice history with the National Practitioner Data Bank (NPDB). The result is a decision on whether the physician meets the organization’s standards.
Credentialing is often confused with two related steps. Payer enrollment loads the approved physician into an insurer’s billing system with an effective date, and privileges decides which procedures a physician may perform inside a hospital. We explain the first one in detail in our guide to provider credentialing vs payer enrollment. This checklist covers all three, because a new physician usually needs all three before the first full schedule.
Who Checks Your Credentials and What Each Wants
The fastest way to build a complete file is to know who will read it. Each reviewer below has its own rulebook, and the strictest one sets the standard for your paperwork.
| Reviewer | Rulebook | What It Decides | Renewal Cycle |
|---|---|---|---|
| Commercial and Medicare Advantage payers | NCQA credentialing standards, collected mostly through CAQH ProView | Whether the physician can join the network | Recredentialing every 36 months; CAQH re-attestation every 120 days |
| Hospitals and surgery centers | Medical staff bylaws and Joint Commission standards | Medical staff membership and clinical privileges | Reappointment at least every two years |
| Medicare | CMS enrollment rules, through PECOS and the Medicare contractor | Billing privileges and the effective date | Revalidation every five years |
| Medicaid | State Medicaid agency rules plus federal minimums | State enrollment; managed care plans credential separately | Revalidation at least every five years |
Two recent rule changes matter for 2026 files. Under the 2025 NCQA credentialing updates, payer verifications can be no older than 120 days when the credentialing committee decides, and enrolled providers must be checked for sanctions at least monthly. On the hospital side, The Joint Commission caps clinical privileges at two years before reappointment.
Starting a New Physician Soon? iSolve RCM’s medical credentialing services build the file, submit every payer, Medicare and Medicaid application and track each one to its effective date, so your new physician can bill from day one.
Get a Free Credentialing Plan
The Master Physician Credentialing Checklist
This is the full set of provider credentialing documents, with a mark for each reviewer that usually asks for it. Collect every item once, save each as a clearly named PDF and reuse the same set across every application.
| Document | Payers | Hospital | Medicare | What to Watch |
|---|---|---|---|---|
| Government photo ID | ✓ | ✓ | ✓ | Legal name must match every other document |
| CV with month and year for every role | ✓ | ✓ | Payers commonly ask about gaps of six months or more; hospitals often ask about gaps of 30 days or more | |
| Medical school diploma | ✓ | ✓ | Verified directly with the school | |
| Residency and fellowship certificates | ✓ | ✓ | Program names and dates must match the CV | |
| ECFMG certificate, if trained abroad | ✓ | ✓ | Needed for graduates of medical schools outside the US and Canada | |
| Every state license, active and inactive | ✓ | ✓ | ✓ | Hospitals often want the full license history |
| DEA registration for each state | ✓ | ✓ | A separate registration for each state where you prescribe controlled substances | |
| State controlled substance registration | ✓ | ✓ | Required in states that issue their own | |
| Board certification or eligibility | ✓ | ✓ | Include expiration dates | |
| Malpractice certificate of insurance | ✓ | ✓ | Current policy, limits and dates | |
| Malpractice claims history | ✓ | ✓ | Payers and hospitals compare it with the NPDB | |
| Hospital affiliation history | ✓ | ✓ | Hospitals commonly ask for 10 years | |
| Peer references | ✓ | Hospitals often ask for three, evaluating clinical competence | ||
| Health status attestation and immunizations | ✓ | Required by most medical staff offices | ||
| BLS or ACLS certification | ✓ | Depends on specialty and privileges | ||
| Individual NPI and taxonomy code | ✓ | ✓ | ✓ | Taxonomy should match the specialty you bill |
| CAQH ProView ID, profile attested | ✓ | Payers pull most of the file from here | ||
| Disclosure answers with written explanations | ✓ | ✓ | ✓ | Any license action, claim, sanction or gap |
The hospital columns reflect a typical Joint Commission accredited medical staff office, as summarized in this Joint Commission credentialing checklist. Exact requirements come from each hospital’s bylaws, so ask for the medical staff application early.
CAQH Credentialing Checklist
Most commercial payers collect credentialing data through CAQH ProView. A complete and current profile is the single biggest time saver in payer credentialing, and an incomplete one is one of the most common reasons an application stalls. Before you apply to any payer, confirm these five things:
- Every section is complete, including practice locations, hospital affiliations and the full work history.
- Current copies of the license, DEA, board certificate, malpractice certificate and CV are uploaded and not expired.
- Every payer you plan to join is authorized to view the profile.
- The disclosure questions are answered, with explanations attached where needed.
- The profile is attested, and a reminder is set to re-attest every 120 days. Blue Cross Blue Shield of Michigan, for example, warns that a missed re-attestation removes providers from its directory and ends their credentialing status.
Medicare Enrollment Requirements for Physicians
Medicare does not credential physicians through a committee or use CAQH. Physicians enroll through PECOS or paper CMS-855 forms, and the Medicare Administrative Contractor (MAC) screens the application before granting billing privileges. Here is the Medicare credentialing checklist most physicians need.
| Requirement | Details |
|---|---|
| CMS-855I | Individual enrollment, including reassignment of benefits to your group. The old CMS-855R was merged into the CMS-855I in 2023. |
| CMS-855B | Needed only when the group or clinic itself is enrolling for the first time |
| CMS-855O | For physicians who only order or refer and do not bill Medicare |
| CMS-588 | Electronic funds transfer authorization |
| Matching data | Legal name, NPI, license and practice location must match NPPES and the state board |
Timing is the part that costs practice money. Under Medicare’s effective date rules, the effective date is the later of the date the MAC receives an approvable application or the date you started seeing patients at the location, and Medicare allows billing back only 30 days before it. File in PECOS before the first patient visit, not after. If the MAC asks for more information, answer within 30 days, because a rejected application loses its filing date. The CGS notice on the CMS-855I explains the merged reassignment section.
Remember that Medicare Advantage plans are private payers. They credential physicians separately, usually through CAQH, even after Original Medicare enrollment is approved.
Medicaid Credentialing Requirements
Medicaid enrollment runs through each state’s Medicaid agency, with its own forms and portal. Federal rules require physicians who order or refer services for Medicaid patients to be enrolled, even if they never bill Medicaid, and states must revalidate every provider at least every five years. Most Medicaid patients are covered by managed care plans that credential physicians on their own after state enrollment, so budget time for both steps.
Hospital Privileging Checklist
Privileges are granted by the hospital’s medical staff, not by payers, and they follow a separate application. Expect to provide:
- The medical staff application and a signed release of information
- A delineation of privileges form listing the procedures you are requesting, with case logs where the hospital asks for them
- Peer references who can speak to your current clinical competence
- A health status attestation, immunization records and life support certifications
- Proof of current malpractice coverage that meets the hospital’s limits
If the physician needs to start before the medical staff and board meet, many hospitals can grant temporary privileges to a new applicant for up to 120 days under Joint Commission standards. New privileges also come with a focused professional practice evaluation (FPPE), a period of monitored performance before the physician moves to routine ongoing evaluation.
How to Get Credentialed With Insurance Companies
Insurance credentialing follows the same path with most commercial payers, even though each uses its own forms. This is how to credential a provider with a commercial plan:
- Confirm the payer’s network is open for the physician’s specialty and location.
- Make sure the CAQH profile is complete, attested and authorized for that payer.
- Submit the payer’s application or portal request and record the reference number.
- Sign a new contract, or ask to have the physician added to the group’s existing contract.
- Follow up every one to two weeks and answer any request for information the same week.
- Get the effective date in writing and confirm the physician appears correctly in the payer’s directory before billing.
Start with the payers that cover most of your patients. Approval from the largest plans lets the physician fill most of the schedule while smaller applications finish.
The 120-Day Physician Credentialing Timeline
A complete file and a fixed schedule are the only parts of the provider credentialing process a practice controls. This plan works backward from the physician’s first day. For payer-by-payer ranges, see our guide on how long provider credentialing takes.
| When | What to Finish |
|---|---|
| 120 to 90 days before start | Collect every document on the master checklist; confirm state licenses and DEA for the practice state; confirm NPI and taxonomy |
| 90 to 75 days before start | Complete and attest CAQH; submit Medicare through PECOS with reassignment; submit state Medicaid |
| 75 to 60 days before start | Submit applications to the top commercial payers; submit the hospital medical staff application |
| 60 to 0 days before start | Follow up on every application weekly; answer requests within days; request temporary privileges if needed |
| First day | Schedule insured patients only with payers that have confirmed an effective date |
| First 90 days | Finish remaining payers; confirm directory listings; add every renewal date to a tracking calendar |
Behind Schedule Already? If your physician starts in less than 60 days, the order of applications matters more than ever. iSolve RCM can prioritize Medicare and your highest-volume payers first so revenue starts as early as the rules allow.
Talk to a Credentialing Specialist
Checklist Add-Ons by Situation
The master checklist covers most physicians. These situations add their own steps.
| Situation | Add to the Checklist |
|---|---|
| New graduate from residency | Residency completion letter if the certificate is not issued yet; board eligibility documentation; an early start on the state license, which often takes the longest |
| Moving to a new state | New state license (the Interstate Medical Licensure Compact can speed this up in participating states); a new DEA registration for that state; new state Medicaid enrollment; an update of the practice location in PECOS |
| Joining an existing group | Reassignment to the group in the CMS-855I or PECOS; roster additions under the group’s existing payer contracts; linking the individual NPI to the group’s TIN |
| Opening your own practice | EIN and IRS letter; group (Type 2) NPI; CMS-855B for the group; new payer contracts, which take longer than adding to an existing one |
| Telehealth across state lines | A license in each state where patients are located during the visit; payer rules on telehealth credentialing and place of service |
Red Flags That Slow Approval and How to Prepare
Application problems are expensive. In Medallion’s 2026 survey of healthcare leaders, nearly a third of organizations reported payer enrollment denial rates between 25% and 50%, and 40% of those denials were tied to application errors. Most red flags are not deal breakers. They become delays when they show up without an explanation.
| Red Flag | How to Prepare |
|---|---|
| Malpractice claims or settlements | A short written summary of each case and its outcome; run a self-query of the NPDB first so nothing surprises you |
| License restrictions or past disciplinary action | Board documents showing the resolution and current unrestricted status |
| Gaps in work history | A dated written explanation for every gap, attached before submission |
| Lapsed or pending board certification | Proof of board eligibility or the scheduled exam date |
| Names or addresses that do not match | One legal name used everywhere: license, NPPES, CAQH, DEA and IRS records |
| Federal program exclusions | Check the OIG exclusion list and SAM.gov before applying; an active exclusion blocks Medicare and Medicaid payment and usually stops commercial credentialing too |
We cover the operational causes, such as missing follow-up and incomplete CAQH profiles, in our guide to credentialing delays.
Keep It Active: The Renewal Calendar
Approval is not the finish line. These dates keep a physician in network, and missing any one of them can stop payment. For the full process, use our provider recredentialing checklist.
| Item | How Often |
|---|---|
| CAQH ProView re-attestation | Every 120 days |
| Payer recredentialing | Every 36 months under NCQA standards |
| Hospital reappointment | At least every two years |
| Medicare revalidation | Every five years |
| Medicaid revalidation | At least every five years, sooner in some states |
| DEA registration | Every three years |
| State medical license | On each board’s renewal cycle |
| Malpractice policy | Each policy period; upload the new certificate to CAQH |
In-House or a Medical Credentialing Company?
A single physician joining a practice with a handful of payers can be credentialed in-house by an organized office manager. The math changes as the practice grows. A group adding several physicians a year is tracking dozens of applications, CAQH attestations every 120 days, hospital reappointments every two years and revalidations every five, for every physician.
| Factor | In-House | Credentialing Services |
|---|---|---|
| Best fit | One or two physicians, few payers, stable roster | Growing groups, multiple states or specialties, frequent new hires |
| Payer knowledge | Learned one application at a time | Payer-specific forms, contacts and follow-up routines already in place |
| Tracking | Spreadsheets and calendar reminders | Dedicated tracking of every application and renewal date |
| Risk | Delays when the person handling it is out or leaves | Coverage does not depend on one staff member |
If you compare physician credentialing services, ask four questions: Who follows up with payers, and how often? How do you track CAQH attestations and revalidation dates? Will you handle Medicare, Medicaid and hospital privileges, or payers only? And what reports will we see while applications are pending?
How iSolve RCM Handles Physician Credentialing
iSolve RCM is a medical billing company headquartered in Edison, New Jersey, and credentialing is part of how we keep claims paying. Our team handles payer enrollment, CAQH ProView setup and maintenance, NPI registration, Medicare and Medicaid enrollment and recredentialing, then tracks every application to a confirmed effective date.
Because the same company handles billing, an enrollment problem gets caught before it turns into a stack of denied claims. A physician added to the wrong group record, a lapsed CAQH attestation or a missing Medicare reassignment is fixed at the source.
Get Your Physicians Credentialed Without the Back-and-Forth Tell us how many physicians you are adding and which payers you need. We will send a credentialing plan with the order of applications and the documents we need from you. Explore our provider credentialing services.
Get a Free Credentialing Plan Call iSolve RCM
Frequently Asked Questions
What is physician credentialing?
Physician credentialing is the process of verifying a doctor’s education, training, licenses, board certification, malpractice history and work history directly with the sources that issued them. Payers, hospitals and other healthcare organizations use it to decide whether a physician can join their network or medical staff.
How long does physician credentialing take?
Payer enrollment takes a median of about 60 days after a complete application is submitted, based on Medallion’s data from more than 64,000 enrollments, and up to 196 days in the slowest states. With document gathering, CAQH setup and hospital privileges, most practices plan for three to four months.
What documents are needed for provider credentialing?
Most reviewers ask for a photo ID, a CV with dates, the medical school diploma, residency and fellowship certificates, every state license, DEA registration, board certification, a malpractice certificate and claims history, NPI and an attested CAQH profile. Hospitals also ask for peer references, a health status attestation and a privileges request.
How do you credential a provider?
Gather the full document set, confirm the NPI and taxonomy, complete and attest CAQH, enroll in Medicare through PECOS, enroll in state Medicaid and apply to each commercial payer. Then follow up on every application weekly and confirm each effective date before billing that payer.
What are the Medicare credentialing requirements for physicians?
Physicians enroll through PECOS or the CMS-855I, reassign benefits to their group in the same application, set up electronic payment with the CMS-588 and keep their name, NPI, license and location consistent with NPPES. Medicare revalidates enrollment every five years.
Can a physician see patients before credentialing is complete?
A physician can treat patients, but payment depends on each payer’s effective date. Medicare allows billing back up to 30 days before the effective date when circumstances justify it. Commercial payers set their own rules and many will not pay for visits before the effective date, so confirm it before scheduling their patients.
What is the difference between credentialing and privileging?
Credentialing verifies a physician’s qualifications. Privileging is a hospital decision about which specific procedures that physician may perform at that facility. A physician usually needs both payer credentialing and hospital privileges before working at full capacity.
What does a medical credentialing company do?
A medical credentialing company prepares and submits applications to payers, Medicare and Medicaid, maintains CAQH profiles, follows up until each application is approved and tracks renewal dates such as CAQH re-attestation, recredentialing and revalidation.
Do I need to recredential every year?
Not every year, but you need to keep several cycles current: CAQH re-attestation every 120 days, payer recredentialing every 36 months, hospital reappointment at least every two years and Medicare and Medicaid revalidation every five years.
