Re-credentialing & Credentialing Maintenance Services

Re-credentialing is the periodic re-verification every payer runs to keep you in-network. Commercial plans repeat it on a fixed cycle, Medicare requires revalidation separately, and CAQH must be re-attested every 120 days throughout. Miss any of them and the payer deactivates you quietly — the first symptom is denied claims.

Credentialing isn’t a one-time event — it’s a subscription payers expect you to keep up, and the failure mode is silent. No warning call; just claims that stop paying. We turn all of it into one tracked calendar with lead-time buffers, filed early every cycle, so “quietly deactivated” never appears in your revenue report.

Who re-verifies you, and how often

The cycles are not synchronized, which is the whole problem. Four clocks run at once, and none is the calendar year.

Commercial plans: a fixed 36-month cycle. Plans accredited by NCQA must re-credential network providers at least every 36 months from the last approval date — a documented cycle, not an approximate one. The re-verification is the same primary-source work as initial credentialing: license, DEA, board certification, malpractice coverage, sanctions, work history. Plans open the file 90–120 days before your cycle date, which is why deadline-week filing is already late.

Medicare: revalidation, not re-credentialing. Medicare doesn’t re-credential — it revalidates your enrollment record, generally every five years for providers and suppliers and every three years for DMEPOS suppliers. It is a separate obligation on a separate clock, and completing a commercial re-credentialing does nothing for it.

Medicaid and its managed-care plans: two clocks again. State enrollment revalidates on the state’s schedule and each MCO re-credentials on top of it. As with initial Medicare & Medicaid enrollment, the state record must be current before the plan record can be.

Hospitals: reappointment, on the facility’s calendar. CMS requires the medical staff to conduct periodic appraisals of its members without naming an interval, so the actual deadline comes from accreditation standards and your bylaws. The Joint Commission now permits reappointment up to three years from the previous appointment date, or a shorter period where law or regulation requires one — and plenty of medical staff bylaws still run 24 months. See hospital privileging.

Continuous monitoring, between cycles. Exclusion and sanction screening doesn’t wait for the renewal date. OIG exclusion lists, federal debarment records, the NPDB and state license status are screened monthly, and an adverse hit is acted on when it appears.

The deadline table

CAQH and the 120-day rule

CAQH re-attestation is due every 120 days whether or not anything about you has changed. Let it slip and the profile stops being available to the plans that rely on it — every payer pulling your credentials mid-review finds nothing to pull, and the review stops without a clear message saying why.

This is the most common invisible delay in credentialing, and it is equally destructive during maintenance: an expired profile stalls a re-credentialing packet you otherwise filed on time. See CAQH setup & maintenance.

Medicare revalidation and how to check your due date

Your Medicare Administrative Contractor sends a revalidation notice roughly three to four months before the due date, and CMS publishes due dates about seven months ahead in its public Medicare Revalidation Due Date List. Check the list directly rather than waiting for post to reach whatever address PECOS still has for you.

If the notice is missed, Medicare first places a hold on payments and then deactivates your billing privileges. Reactivation is not a formality — it re-opens the enrollment record, and the gap between deactivation and the reactivated effective date is a window where claims simply do not pay.

What a lapse actually costs

The financial damage is rarely the renewal you missed. It is what happens downstream.

Claims deny, retroactively. A termination is effective from a date, and claims for services after that date deny as non-participating — including claims already submitted and sitting in the payer’s queue. You find out weeks later, from the remittance.

Patients get balance-billed or written off. Once the provider is out-of-network on the date of service, the practice absorbs the difference or has an unpleasant conversation with the patient. Neither is a good outcome.

The timely-filing clock keeps running. By the time the denials surface and the panel is restored, part of the affected claims are past the filing window and simply cannot be rebilled. That revenue is gone rather than delayed.

You may have to re-apply from scratch. Some payers will reinstate on the original record after a short lapse. Others treat a terminated provider as a new applicant — a full initial credentialing cycle, at the timelines initial credentialing runs on, before you can bill them again.

Directory accuracy is now part of maintenance

Health plans must verify their directory data on a rolling 90-day basis and remove listings they can’t confirm. Ignore a plan’s verification request and you can be suppressed from the directory while still fully credentialed — patients searching the plan’s site don’t find you, and referrals route elsewhere.

Related reading: the provider credentialing checklist for every document and how often it expires, credentialing vs. enrollment for why revalidation and re-credentialing are different obligations, and insurance credentialing if you’re not in-network yet.