Credentialing in healthcare is the formal process of verifying a provider’s qualifications, training, licensure, and professional history before they’re allowed to treat patients at a facility or bill through an insurance plan. It’s how hospitals, clinics, and insurers confirm that a doctor, nurse practitioner, or other provider is who they say they are and can safely practice medicine. The process typically takes 60 to 180 days for an initial application, and providers must go through it again every three years.
What Gets Verified
Credentialing isn’t a rubber stamp. Every piece of a provider’s professional background gets checked against original sources. That includes medical school diplomas, residency completion, board certifications, state licenses, and DEA registrations. The credentialing team also looks into malpractice claims, disciplinary actions from licensing boards, criminal history, and whether the provider has ever been excluded from Medicare or Medicaid programs.
A critical part of this process is called primary source verification, meaning the credentialing organization contacts the issuing institution directly rather than relying on copies the provider submits. For education, that could mean calling the medical school to confirm graduation or checking the AMA Physician Masterfile. For international medical graduates, the Educational Commission for Foreign Medical Graduates serves as a verification source. State licensing boards are contacted to confirm active, unrestricted licenses. Nurse practitioners, physician assistants, and certified nurse-midwives go through the same scrutiny, with their certifying bodies (such as the NCCPA for PAs or the ANCC for nurses) contacted directly.
The National Practitioner Data Bank is another key resource. It contains records of malpractice settlements, license suspensions or revocations, loss of hospital privileges, and expulsion from government insurance programs. Credentialing teams query this database as a standard step.
Credentialing vs. Privileging
These two terms often appear together but mean different things. Credentialing asks: does this provider meet the baseline requirements to be part of our staff? It’s about verifying credentials on paper. Privileging goes a step further and asks: what specific procedures and services is this provider qualified to perform here? A surgeon might be credentialed at a hospital but only privileged to perform certain types of operations based on their demonstrated skills and experience. Privileging also involves ongoing performance evaluations, where the facility reviews a provider’s clinical outcomes and behavior over time.
Who Requires It
Nearly every entity in healthcare has a credentialing requirement. Hospitals credential providers before granting them the ability to admit and treat patients. Insurance companies credential providers before adding them to their networks and paying claims. Government programs like Medicare and Medicaid have their own enrollment processes with strict compliance standards.
The Joint Commission, which accredits most U.S. hospitals, sets detailed standards for how medical staff credentialing must be conducted. These standards apply not just to physicians but also to physician assistants and advanced practice registered nurses, who face the same credentialing and privileging requirements. The National Committee for Quality Assurance (NCQA) sets the benchmarks most health plans follow, including the requirement that providers be re-credentialed every three years. NCQA’s standards specify which databases must be checked for sanctions and exclusions, and how verification must be documented.
How the Process Works
Initial credentialing starts when a provider submits an application with their professional history, training records, license numbers, and references. Many providers use a centralized platform called CAQH ProView to store and manage this information. CAQH maintains over 4.8 million provider records, and roughly 1.4 million providers update their data in the system each month. Health plans and hospitals can pull verified information from this database rather than asking each provider to fill out separate applications for every organization.
Once the application is submitted, the credentialing team begins verifying each element against primary sources. They check for gaps in work history, confirm board certification status, query the National Practitioner Data Bank, and review any malpractice or disciplinary history. A credentialing committee, usually composed of physicians and administrators, reviews the compiled file and makes a decision. The whole process takes 60 to 180 days for initial credentialing. Re-credentialing, which happens on a three-year cycle, is somewhat faster at 60 to 120 days because much of the baseline information is already on file.
Providers are also expected to disclose their general health status and may be required to submit to a physical or mental health examination if the institution deems it necessary. They must acknowledge receipt of hospital bylaws, regulations, and codes of conduct, and they sign off that all information they’ve provided is accurate and complete.
What Happens When Credentialing Lapses
The consequences of lapsed credentials are serious, both for providers and the organizations that employ them. If a provider’s license, certification, or enrollment expires and they continue seeing patients, any claims billed during that gap can be disqualified. Medicare audits through programs like the Comprehensive Error Rate Testing (CERT) review claims for exactly this kind of non-compliance, and they can demand repayment for every service billed while a credential was expired. Medicaid runs similar audits through its Medicaid Integrity Program.
Beyond repayment demands, organizations can face fines from regulatory agencies and risk losing their accreditation. Accrediting bodies enforce strict standards requiring that all personnel maintain valid certifications, and a single lapsed credential discovered during an audit can trigger penalties. The financial damage compounds quickly: lost reimbursements, repayment demands, fines, and the potential loss of contracts or patients who no longer trust the organization’s compliance standards.
Why It Takes So Long
The 60 to 180 day timeline frustrates providers, especially those starting at a new practice or joining a new insurance network, because they often can’t see patients or get paid until credentialing is complete. The delays come from the sheer number of verification steps, the need to contact multiple independent sources, and bottlenecks at those sources. A state licensing board might take weeks to respond. A former employer might be slow to confirm work history. If there’s a discrepancy in the application, like a gap in employment or a name change, the process stalls until it’s resolved.
Organizations that use centralized databases like CAQH and automated tracking systems can move faster, but the fundamental challenge remains: every verification must come from the original source, and those sources operate on their own timelines. For providers, the best way to minimize delays is keeping CAQH profiles current, responding promptly to requests for additional documentation, and starting the credentialing process well before a planned start date at a new facility or with a new payer.