How to Get Credentialed With Insurance Companies: The Order, the Documents, and What Stalls It

Credentialing is six jobs, and the first three are entirely in the practice's control. Doing them in this order matters, because each later step reads data entered in an earlier one.

Step	Where it happens	What you end up with	Who controls the clock
1. Get an NPI (Type 1 for the provider, Type 2 for a group)	NPPES, the CMS registry	The identifier every later form asks for	You
2. Assemble the document file	Your office	License, DEA, malpractice face sheet, CV, W-9 and the rest, all current	You
3. Build and attest the CAQH profile	CAQH Provider Data Portal (DataSpring)	A CAQH Provider ID that commercial payers pull your data from	You
4. Enroll in Medicare and Medicaid	PECOS (or paper) for Medicare; your state's Medicaid portal	A Medicare effective date and PTAN; a Medicaid provider ID	The contractor or state, once the file is complete
5. Apply to each commercial payer	Each payer's own portal or form	A credentialing decision after verification and committee	The payer, once the file is complete
6. Contract, load and confirm the effective date	Payer contracting team	A signed agreement and a written in-network effective date	Shared

Credentialing is the payer verifying the provider is qualified; contracting is the agreement that sets rates and makes the provider in network. Approval alone does not put you in network. And some providers only need the first part: physicians who round at hospitals often need their own payer ID numbers (a Medicare PTAN, a Medicaid ID, and IDs at plans such as the Blues, Aetna, Humana and UnitedHealthcare) so the hospital group can bill their professional claims, rather than a contract of their own. Know which one you need before you apply.

The National Provider Identifier is free and issued through NPPES. Every individual provider needs a Type 1 NPI. A practice that bills as an organization, under its own tax ID, also needs a Type 2 NPI for the group. Medicare's own system says it plainly: a provider must have an NPI before enrolling in Medicare through PECOS.

Pick the NPPES taxonomy for the specialty you will bill; payers compare it to the application. Our explainer on NPI Type 1 vs Type 2 covers which one goes in which box on a claim.

CAQH's own quick reference guide starts new users with a CV, license, DEA and state controlled-substance certificates, W-9, malpractice face sheet, a summary of any malpractice cases, and every past and current practice location. Payers add their own items. The working list:

• State license for every state you will practice in, active and unrestricted
• DEA registration and state controlled-substance registration, if you prescribe
• Malpractice certificate of insurance (current face sheet) and claims history
• CV in month/year format, with every gap explained; payers read gaps as questions
• Board certification, diploma, residency and fellowship documents where they apply
• Government photo ID and the documents that prove your Social Security number
• For the practice: the IRS letter showing the tax ID (CP-575 or 147-C), a W-9, the group NPI, state business registration, a voided check for electronic payment, and every service location
• Hospital privileges or an admitting arrangement, where a payer or specialty requires one

We keep our full intake list, with why each item matters, on what we need to start credentialing. Use it as a checklist whether or not you hire us. The rule that saves the most time: check that every expiration date is at least several months out before you file. A certificate that expires while the payer is verifying it sends the file back.

Many commercial plans, including Aetna, Cigna, UnitedHealthcare and Humana, read your credentialing data from CAQH rather than from a paper form; what they ask for is your CAQH Provider ID. CAQH runs a shared provider data profile: you enter your information once, authorize which health plans may view it, and each plan pulls it instead of asking again. In June 2026 CAQH rebranded as DataSpring, powered by CAQH. The provider portal itself did not move. DataSpring's clinician Q&A says the CAQH Provider Data Portal (formerly CAQH ProView) keeps the same login at proview.caqh.org, that no action is needed because of the rebrand, and that providers are not charged to use it.

The CAQH steps, in the portal's own order: register (either from a payer's invitation letter that carries your CAQH Provider ID, or by self-registering), complete each section, clear every "required fix" the review screen flags, upload the supporting documents, authorize the plans you are applying to, and attest. Two of those trip people up. Authorization is a separate click; a complete profile no plan is authorized to see does nothing. And attestation is not one-time: the portal asks you to re-attest every 120 days (180 days for providers practicing in Illinois). A lapsed attestation stalls every CAQH-based payer at once.

CAQH itself credentials no one; its guide says to "check with each individual organization to determine your credentialing status." Our CAQH explained page covers the CAQH number, how to find a lost one, and the profile errors that stall applications.

Medicare does not use CAQH and does not run a credentialing committee for physicians. It enrolls you. Physicians and non-physician practitioners apply online through PECOS, which needs an I&A (Identity & Access) login, or on the paper CMS-855I application. A group enrolls as an organization, and an individual who works for a group reassigns their Medicare benefits to it so the group can bill. Our PECOS explainer walks through the screens.

Three Medicare rules change how you plan a start date:

• The effective date is not the approval date. Under 42 CFR 424.520(d), billing privileges for physicians and non-physician practitioners start on the later of the date an application that was subsequently approved was filed, or the date the provider first began furnishing services at the new practice location. Filing early protects the date.
• There is a short look-back. 42 CFR 424.521 lets those providers bill for services furnished up to 30 days before the effective date (90 days after a Presidentially declared disaster) when circumstances kept them from enrolling first. Visits before that window are outside the rule.
• Each contractor publishes its own processing times. Medicare is run regionally by Medicare Administrative Contractors. First Coast, the Florida contractor, publishes that 95% of clean online applications without a site visit are processed within 15 calendar days and 100% within 50. Look up your own contractor's page; do not assume another region's figure.

Medicaid enrolls through your state's portal under its own screening rules, and Medicaid managed-care plans may credential you separately. Florida's version of that, with the 21-day deficiency window, is in the Florida guide.

For commercial plans, the application usually starts on the payer's provider website with a request to join the network, sometimes called a letter of interest. Ask first whether the network is accepting your specialty in your area. Then the payer runs primary-source verification (it checks your license, education, board status, malpractice history and sanctions directly with the source) and sends the file to its credentialing committee.

Each payer runs its own verification, even when it pulls the application from CAQH, and its requests count against your clock: answer them the day they arrive. Log every payer's filing date, reference number, representative and what is outstanding; that log turns "we're waiting" into "they need one document."

When credentialing clears, the payer's contracting team sends an agreement with a fee schedule. Read the fee schedule before you sign; it is the price list for every visit you will bill that plan. After you sign, the payer loads you into its system for each location and product. Only then are you in network, and only from the effective date the payer confirms.

Get that date in writing, then set up electronic remittance (ERA), electronic payment (EFT) and clearinghouse enrollment for that payer. In-network claims dated before the effective date are the classic, avoidable first-month denial.

Most guides blame slow payers. In our casework, the most common cause is closer to home: bad data from the providers. Not missing effort, mismatched facts: the same provider described three slightly different ways, on forms a payer compares line by line.

The data	Where it has to match	How it goes wrong
Practice address	Application, CAQH, NPPES, the W-9	CAQH still shows the old office or a suite number the application leaves off
Legal name and tax ID	W-9, IRS letter, application, Medicare enrollment	A DBA on one form, the legal entity on another
NPI and taxonomy	NPPES, CAQH, application	Individual and group NPIs swapped, or a taxonomy that does not match the billed specialty
License	State board record, CAQH, application	Renewed license uploaded to one place but not the other; expired copy still on CAQH
Malpractice coverage	Face sheet, CAQH, application	The certificate lapsed or the carrier changed mid-application
Work history	CV, CAQH, application	Gaps unexplained, or dates that differ by a month between the CV and CAQH

Each mismatch means a question, a wait, and a clock that restarts from "complete." The fix: before anything is filed, put these fields side by side and make them identical. That one audit beats any amount of follow-up later.

The honest answer is per payer, and only some payers publish anything:

• UnitedHealthcare: its credentialing FAQ says the process "generally takes up to 14 calendar days" once it has a completed application and all required information, and that schools, boards and hospitals answering verifications affect that (UHC FAQ, July 2024).
• Cigna: "This typically takes 45 to 60 days to complete" (Cigna credentialing page).
• Aetna: no overall day count; it commits to sending a CAQH registration kit within 10 business days of the request (Aetna FAQ).
• Medicare: set by your regional contractor; First Coast's published figures are above.

Two things are true of every one of them. The clock starts on a complete application, so the data audit above is the biggest lever you have. And none of them includes contracting and loading, which follow credentialing. The full Florida table, including Florida Blue, Humana's verification windows and Florida Medicaid, is in our Florida credentialing timelines guide, with a day-by-day script for when to call.

Nothing in credentialing requires a third party. The honest split:

Task	Doing it yourself	What ClaimCarePro does
NPI and documents	Free; an afternoon if the documents are current	Intake through a private upload folder, then a check of every expiration date and field before anything is filed
CAQH profile	Free to providers; budget a long sitting for a first profile	$250 per provider, one-time: build or clean up, upload, authorize and attest
Each payer application	Staff time per payer; any payer or state fee	$250 per payer, per provider: the complete application, the data-match audit, and follow-up until the payer gives a decision
Follow-up	Calls and portal checks until each file moves	Weekly follow-up with each payer that has an open file, logged with date, representative and reference number; we aim to answer payer requests the day they arrive
Keeping it current	Re-attest CAQH every 120 days; track every expiration	$99 per provider per year: CAQH re-attestation, expirables tracking, address and tax-ID updates (revalidation billed separately)

For a new practice, the bundle is $1,750 per provider for CAQH, Medicare, Medicaid and six commercial payers, and $1,400 for each additional provider in the same group with the same payers. Payer- and state-imposed application fees pass through at cost. Full pricing and a worked two-provider example are on our credentialing services page.

For some practices the right answer is to do it yourself.

Your situation	Doing it yourself fits when	A service fits when
Number of payers	One provider, two or three payers	Several payers, or Medicare, Medicaid and commercial at once
Start date	Months away, with no patients booked	A fixed opening or hire date that the payer clocks cannot miss
Who has the time	An office manager with protected hours each week	Front desk already full; follow-up would happen "when there's time"
Data condition	One location, one tax ID, documents current	A move, a new entity, a changed carrier, or providers joining from other groups
After approval	Someone will own the 120-day CAQH clock and every expiration	Nobody will, and a lapse would stall every CAQH payer

The real cost is rarely the fee; it is weeks of visits that cannot be paid in network. We ran two medical practices while doing their billing (about us), and the order above is the one we would follow for our own.

Re-attest CAQH every 120 days (180 in Illinois) and after any change of address, tax ID, license or carrier. Plans that follow NCQA standards recredential every three years; Medicare revalidation is generally every five. Track every license, DEA, board and malpractice expiration on one calendar with someone's name next to it.

To hand it off, start with what we need from you, see pricing on credentialing services, or contact us to talk it through.

Last updated October 16, 2026. Reviewed by Jacob Greenberg, ClaimCarePro.

• CAQH ProView Provider Quick Reference Guide: caqh.org (documents to start; registration; authorization; re-attest every 120 days, 180 in Illinois; check status with each organization)
• DataSpring, "CAQH rebrands as DataSpring" (June 7, 2026): dataspring.com
• DataSpring Clinician Q&A (June 2026): dataspring.com (portal access unchanged; no charge to providers)
• CMS PECOS: pecos.cms.hhs.gov (NPI before enrollment; I&A login)
• CMS NPPES: nppes.cms.hhs.gov
• 42 CFR 424.520(d), effective date of billing privileges: law.cornell.edu
• 42 CFR 424.521, retrospective billing: law.cornell.edu
• First Coast Service Options, CMS-855 processing timeframes: medicare.fcso.com
• UnitedHealthcare Credentialing FAQ (July 2024): uhcprovider.com
• Cigna, Credentialing: cigna.com
• Aetna, Joining the Provider Network FAQs: aetna.com