Credentialing vs. payer enrollment: what's the difference?

The short answer

Credentialing is the verification step. A health plan, hospital or credentialing organization confirms that a provider is who the application says they are — education, training, licensure, board certification, work history, malpractice coverage and sanction history — by checking those facts against the original sources rather than taking the paperwork's word for it.

Payer enrollment is the contracting and billing step. It is the application to one specific health plan, under one specific tax ID and one specific practice location, that puts the provider into that plan's network and creates the billing relationship the plan's claims system will recognize.

Credentialing answers "is this person qualified?" Enrollment answers "will this plan pay this person, at this address, under this tax ID, starting on what date?" A provider can be fully credentialed and still be unable to bill. That gap is where practices quietly lose money.

Credentialing, contracting, enrollment and privileging — side by side

Four different processes get called "credentialing" in everyday conversation. They are separate, they are run by different people, and they produce different things. Confusing them is the most common reason a practice believes a provider is ready to bill when they are not.

Read down the last column and the practical point is hard to miss: only one of the four produces something a claims system checks. A practice can hold a verified credentialing file, a signed participation agreement and full hospital privileges, and still have claims rejected, because the enrollment record naming this provider at this address under this tax ID does not exist yet.

What credentialing actually involves

The defining feature of credentialing is primary source verification. The organization doing the credentialing does not accept a copy of a diploma or a license number typed into a form. It goes to the source: the state licensing board for the license, the certifying board for board certification, the school or residency program for training, the malpractice carrier for coverage.

A credentialing file is usually built from the same set of items every time:

• Current state license (and DEA registration, where the provider prescribes)
• Education, training and residency or fellowship history
• Board certification status
• A complete work history with every gap explained
• Malpractice insurance certificate showing carrier, limits and dates
• Malpractice claims history
• Queries against national databanks and federal exclusion lists
• Hospital affiliations and references

Many health plans pull most of this from a shared credentialing database rather than asking for it directly, which is why keeping that profile complete, current and attested matters so much. Attestations expire on a schedule. When one lapses, every application that depends on that profile stops moving, and usually nobody tells you — the file simply sits.

Credentialing ends with a decision, typically from a credentialing committee. That decision is an approval of the provider. It is not, by itself, permission to bill.

What payer enrollment actually involves

Enrollment is where the provider gets attached to the money. It is done per payer, and often per tax ID, per location and per product line, which is why one physician joining one practice can generate a dozen separate applications.

Three enrollment tracks behave differently:

• Medicare. Enrollment runs through the Medicare enrollment system and the CMS-855 application family — an individual application, an organization or supplier application, and a reassignment of benefits form that tells Medicare to pay the group rather than the individual. Approval produces a provider identifier tied to that specific enrollment. Medicare also revalidates enrollments on a recurring cycle.
• Medicaid. Process and terminology are set state by state and are not interchangeable between states. One point is federal, though: under 42 CFR 438.602 and 438.608, states that run Medicaid managed care must have their plans' network providers enrolled with the state Medicaid program — including providers who only ever see managed-care patients and never bill fee-for-service. Confirm how your state implements it.
• Commercial plans. The application leads to a participation agreement, a fee schedule and, critically, an effective date. Plans may also close a panel in a given specialty or geography and decline to add a provider at all, regardless of qualifications.

A National Provider Identifier is a prerequisite for all of this, not a substitute for it. Providers get an individual NPI and organizations get an organizational NPI, but holding an NPI grants no billing rights with any plan. Neither does a state license. Enrollment is the step that does.

Contracting: the step that decides what the claim is actually worth

Credentialing and enrollment decide whether you can bill. Contracting decides what the bill is worth, and it is the step practices examine least despite it having the largest long-term effect on revenue.

A participation agreement carries a fee schedule, and that fee schedule — not your charge master — is what the plan will allow. It also carries the terms that determine how hard it is to collect: the timely filing window, the appeal deadlines and how many levels there are, how the plan handles coordination of benefits, what notice either side has to give to terminate, and whether the agreement renews automatically at the same rates.

Three things are worth doing before signing, and all three are far easier before than after:

• Ask for the fee schedule covering the codes you actually bill, not a sample. A rate quoted as a percentage of a published benchmark is not usable until you know which benchmark, which edition of it, and which locality.
• Read the timely filing and appeal windows, then load them into your billing system as payer-specific rules on day one. They vary widely between plans, and they are the deadline your aged A/R will eventually run into.
• Find the renegotiation clause. Many agreements roll over indefinitely at the original rates unless somebody asks. Practices routinely bill for years against a schedule no one has looked at since it was signed.

Contracting is also where most otherwise puzzling underpayments are explained. If claims are paying consistently below expectation and no denial is involved, the answer is usually in the fee schedule rather than in the billing. See payment posting for how contracted rates get checked against what a remittance actually allowed.

Privileging is a third thing, and it is not either of these

Privileging is a facility granting a provider permission to perform specific procedures inside that facility — a hospital, a surgery center. It is granted by the facility's medical staff process, and it defines scope of practice at that site.

Privileging does not enroll anyone with a health plan and does not create a right to bill. A surgeon can hold full privileges at a hospital and still have professional-fee claims denied because the enrollment under the practice's tax ID was never completed. The hospital's own claims are unaffected, which is exactly why the problem goes unnoticed until the practice reconciles its own A/R.

Delegated credentialing, and when a group qualifies for it

Delegated credentialing is an arrangement in which a health plan formally hands the verification work to a provider organization and accepts that organization's credentialing decisions, instead of running each provider through its own process. The plan keeps oversight, audits the delegate, and can take the delegation back.

Where it is in place it changes the arithmetic considerably. New providers are added through the group's own roster cycle rather than waiting in each plan's individual queue, which for a group hiring several providers a year is usually the single largest available reduction in time-to-bill.

It is not free and it is not for everyone. A delegate generally has to demonstrate a credentialing program meeting the plan's standards, a committee that makes and documents decisions, primary source verification performed to those standards, file retention, and a willingness to be audited — typically before delegation is granted and periodically afterward. Smaller practices rarely clear that bar and are usually better served by not trying to.

Two things are worth knowing even if you never pursue it. First, delegation does not delegate contracting or enrollment — the group still has to be contracted, and each provider still has to be loaded into the plan's claims system with an effective date. Second, if you are considering joining a larger group or an IPA, ask whether it holds delegation with your major payers. It materially changes how quickly a new hire starts producing revenue.

The date that decides whether you get paid

The single most valuable piece of information in this entire process is the effective date on each approval. Not the approval date — the effective date. It determines the first date of service the plan will consider in network for that provider.

Two things practices get wrong here:

• Assuming approval is retroactive to the provider's start date. With commercial plans it usually is not. Services rendered before the effective date are commonly processed as out of network or denied outright, and appeals on that basis rarely succeed because the plan is applying its contract correctly.
• Assuming Medicare works the same way. It does not. Under 42 CFR 424.521, physicians, non-physician practitioners and certain other supplier types may bill retrospectively for up to 30 days before the enrollment effective date where circumstances precluded enrolling in advance — or up to 90 days where a presidentially declared disaster under the Stafford Act prevented timely enrollment. The day count is set by federal regulation rather than by individual contractors, but whether a specific enrollment qualifies is determined in the enrollment process, so confirm it with your Medicare Administrative Contractor rather than assuming it.

Get every effective date in writing, and put it into the practice management system as the payer-provider start date before the first claim goes out. An effective date that lives only in someone's inbox is an effective date that will be missed.

The sequence that works

Credentialing and enrollment overlap, but they do not run in an arbitrary order. This sequence prevents most of the rework:

1. Start early. Begin as soon as the offer is signed, not on the start date. Practices are commonly quoted 90 to 120 days for commercial enrollment, and government programs run on their own timelines. Assume it takes longer than quoted.
2. Build the document set once. License, DEA, diploma, board certificate, CV with month-and-year dates and no unexplained gaps, malpractice face sheet, W-9, voided check, driver's license or passport. Nearly every application draws from this same core set, though some add extras — an ownership or disclosure statement, a collaboration or supervision agreement, hospital affiliation letters, references.
3. Confirm identifiers first. Individual NPI, organizational NPI, tax ID, and the exact legal name and service address that will appear on claims. Everything downstream has to match these characters for character.
4. Complete and attest the credentialing profile before submitting commercial applications, and set a calendar reminder for the next attestation.
5. File government applications first. They usually take the longest and are usually the least forgiving about missing pages.
6. Submit commercial plans in parallel, ordered by revenue. The payer that represents the largest share of your collections should be the first commercial application out the door.
7. Log every submission with the date, the confirmation or reference number, the person you spoke to, and a specific next-follow-up date. Applications that are not chased are applications that stop.
8. Capture each effective date in writing and load it into the billing system before the provider's claims start flowing.

What actually delays applications

Delays are rarely mysterious. The recurring causes are the same across practices:

• Mismatched demographics. The address, legal name or tax ID on the application does not match the national provider registry, the credentialing profile, or the W-9. Even a suite number formatted differently can stall a file.
• Unexplained work-history gaps. Widely used credentialing standards require an explanation for any gap of six months or more. Leave one unexplained and the file comes back to you rather than getting resolved for you.
• Expired documents. A malpractice certificate or license that expires mid-review restarts the clock.
• A lapsed attestation on the shared credentialing profile.
• The application that was "never received." Common enough that it should be assumed until a reference number proves otherwise.
• A closed panel. The plan is not reviewing new providers in that specialty or area. Worth knowing on day one rather than on day ninety.
• No owner. The most expensive cause. When credentialing is everybody's job it is nobody's job, and the file waits.

What to do while you wait

You have a provider seeing patients and claims that cannot go out yet. The decision is whether to hold those claims or bill them, and the safe answer is usually to hold, deliberately and with the total tracked.

Two rules keep that decision from becoming a bigger problem:

• Do not submit a claim under a different provider's identifier because that provider is enrolled and the treating provider is not. The claim would misstate who performed the service. Narrow, tightly defined exceptions exist in payer and Medicare rules for certain supervision and coverage arrangements, but they have specific conditions and they are not a workaround for a pending enrollment. Confirm with the payer and with your own compliance advisor before relying on any of them.
• Watch timely filing while you hold. Timely filing limits generally run from the date of service, not from the date enrollment was approved — confirm the trigger date for institutional claims and for secondary or coordination-of-benefits claims, which can differ. Either way, a pending enrollment does not pause the clock, and a hold that outlasts the filing window converts a delay into a write-off. Know each payer's limit and set the escalation date before you reach it.

Track the held dollars as a specific number and report it weekly. It is the clearest measure of what the delay is costing, and it is usually the thing that gets the follow-up prioritized.

It does not end at approval

Both processes are maintenance, not projects.

• Recredentialing comes around on a recurring cycle at most plans — often about every three years — and a missed recredentialing can terminate participation.
• Attestations on the shared credentialing profile expire on their own schedule, independent of any application.
• Licenses, DEA registrations and malpractice policies expire. Track the dates centrally rather than per provider.
• Medicare revalidation arrives on a cycle and has a hard deadline.
• Demographic changes — a new location, a new tax ID, a group merger, a name change — require notification and can require new enrollment. This is the one that surprises practices most, because nothing about the provider changed.

A simple credentialing calendar, owned by one person, prevents nearly all of it.

What to ask before you hand credentialing to someone else

Credentialing is easy to outsource and easy to outsource badly, because the failure is invisible for ninety days and then arrives as a provider who cannot bill. These questions separate a service from a mailbox:

• Who owns each application, by name, and how often is it chased? "We follow up regularly" is not a process. A named owner and a fixed follow-up interval is.
• What do I get to see? Ask for the tracker: every application, its submission date, its confirmation or reference number, its current status, and the next follow-up date. Without that list you cannot tell a stalled file from a slow one.
• Who maintains the credentialing profile and its attestations? A lapsed attestation silently halts every application that depends on it, and no one is notified.
• How do effective dates reach my billing system? This is the question that decides whether the first claims are correct. The answer should be a specific step performed by a specific person, not "we will let you know."
• What happens at recredentialing, revalidation and expiration? If the answer covers only new providers, you are buying half the service.
• What does it cost, and is it separate from billing? Charges may be per application, per provider, per payer, or all three.

That last question is worth asking of us as well. Credentialing is included free with our revenue cycle management, with no per-application or per-payer charge; what is and is not included is set out on pricing.

How Synergy handles credentialing and enrollment

We have been doing this for medical practices since 2005, and provider credentialing is included free with our revenue cycle management service — it is not a separate line item and not an add-on.

We build the document set, complete and maintain the credentialing profile and its attestations, file the government and commercial applications, chase every one of them on a schedule with a named owner, capture each effective date in writing, and load those dates into your billing system so the first claim is correct. Then we keep the calendar: recredentialing, revalidation, expirations and demographic changes.

On the billing side that connects to a 98% clean-claim rate, claims submitted within 24 hours, denials worked within 48 hours, A/R over 120 days held under 10%, and 99% posting accuracy. HIPAA compliant throughout, no long-term contract, a 30-day free trial and a 90-day money-back guarantee.

Related reading: our provider credentialing guide covers the timeline and document set in more depth, credentialing services explains what we handle for you, and reducing claim denials covers what happens after enrollment is in place.

This article is general information about how credentialing and payer enrollment work. It is not legal or compliance advice. Payer rules, state Medicaid requirements and federal regulations differ and change — confirm specifics with each payer, with your Medicare Administrative Contractor, and with your own advisor.