.png)
Multi-state telehealth credentialing is one of the operational duties that slows down many virtual care companies as soon as they start expanding across state lines. For most organizations, credentialing still takes about 60 to 120 days per provider per payor. You will even encounter further delays due to licensure, primary source verification, NCQA requirements, and payor enrollment.
This guide will show you how to structure your credentialing and licensing process, including how to clean provider data before submission, compress verification timelines, launch payor enrollment in parallel, and decide when to use delegated credentialing.
Before You Start: Licensure, Credentialing, and Payor Enrollment Are Different Workstreams
One of the most common operational mistakes in telehealth expansion happens before a single application is submitted. The mistake is treating licensure, credentialing, and payor enrollment as a single, continuous process. They are not.
In practice, they are separate workstreams with different requirements, timelines, and governing bodies.
Licensure
Licensure refers to the legal authority for a provider to practice in the state where the patient is physically located during the visit. This is the threshold legal requirement. If the provider is not licensed or otherwise legally authorized in that state, nothing else can proceed.
No credentialing application or payor enrollment submission will move forward without it.
In a multi-state telehealth setup, this becomes more complex because each state has its own licensing board, requirements, timelines, and renewal cycles. Some providers may qualify for faster pathways through an interstate licensure compact, while others will still need to go through full state-by-state applications, which can add weeks or months to your expansion timeline.
Credentialing
Credentialing is the qualification review process. Health plans and healthcare organizations confirm that a provider meets professional and regulatory standards. This includes primary source verification of education, training, licensure, board certification, malpractice history, and sanctions.
In many organizations, a credentialing committee also reviews the file before final approval.
Each data point has to be verified directly from the source. That means checking multiple databases, boards, and institutions for every single provider. When you are managing this across dozens or hundreds of providers, it is easy for small data issues to create delays. Incomplete profiles, expired attestations, or inconsistencies in work history are some of the most common reasons applications get held up.
Payor Enrollment
Payor enrollment places the provider inside a specific insurance network's claims system. A provider can be fully credentialed and still not be able to generate revenue because they are not yet enrolled with the payor. Each payor has its own process, portal, requirements, and timelines, which can vary widely depending on the network and the state.
Managing submissions, tracking statuses, and following up can be challenging when operating across various states and payors, as organizations must contend with numerous disparate systems.
If enrollment is not started early enough, it creates a gap where providers are ready to work but unable to bill.
Delegation
Delegation involves a contractual arrangement where a payor allows an organization to credential providers on its behalf. Instead of submitting individual applications for every provider to every payor, organizations can submit provider rosters under an approved process.
This reduces the number of individual submissions and can significantly improve timelines once it is in place.
However, delegation is not a shortcut. It requires a structured credentialing program, documented processes, and ongoing compliance. Payors will typically review your systems, policies, and sample provider files before granting delegation.
What Determines Whether a Telehealth Provider Can See Patients in a New State?
A provider must be licensed or otherwise legally authorized to practice in the state where the patient is physically located at the time of the virtual visit. This is the rule.
But legal authorization does not always mean a full state license. Depending on the state, it may come through a temporary practice law, reciprocity, a licensure compact, or a telehealth registration pathway. Before each visit, providers should confirm where the patient is located and ensure they are authorized to practice there.
This becomes the baseline constraint for how you plan expansion, sequence credentialing, structure malpractice coverage, and prepare for reimbursement. It directly affects how fast you can enter new markets and start billing.
Here is an example of the variables involved:
If each credentialing event takes 90 to 120 days and is handled manually and sequentially, the timelines will stretch out in a way that is difficult to sustain. If credentialing feels like it is holding back your growth, it usually is not just a staffing problem. It is a sequencing and infrastructure problem.
How Do You Get Providers Licensed Across Multiple States?
Interstate Medical Licensure Compact (IMLC)
The Interstate Medical Licensure Compact currently includes 44 member jurisdictions, comprising 42 states, Washington D.C., and Guam. The compact is a technology-enabled expedited pathway to individual state licenses. There is no "IMLC license." Physicians apply through the IMLC portal using their State of Principal License, and from there they can obtain individual licenses in other participating states much faster than going state by state.
To qualify, physicians need a clean license, no disciplinary history, and active board certification.
Traditional state-by-state licensure can take 4 to 6 months per state. With IMLC, that timeline is reduced to weeks in many cases.
One important note is Michigan. Its participation is tied to a sunset provision, with March 28, 2026, as an important date if reenactment legislation does not pass. If you have providers seeing patients in Michigan through IMLC pathways, it is worth building a contingency plan.
Nurse Licensure Compact (NLC)
The Nurse Licensure Compact includes 43 member jurisdictions. It allows RNs and LPN/VNs to hold one multistate license that covers all participating states, removing the need for multiple individual applications in compact states. The NLC does not cover APRNs or nurse practitioners. APRNs generally still need separate licensure in each state where they practice, unless a specific exception applies.
This is one of the most commonly misunderstood parts of multi-state telehealth licensure.
What About Nurse Practitioners?
Nurse practitioners are essential to providing telehealth services, particularly in primary and behavioral health, but the NLC does not extend to APRN licensure. For nurse practitioners, licensure is still handled state by state in most cases, which means treating APRN licensure as its own track. For most telehealth companies, this requires starting applications 4 to 6 months before launching in a new state.
If NPs make up a large part of your provider network, expect this to become one of the longest lead-time items in your expansion plan.
PSYPACT
PSYPACT allows licensed psychologists to provide telepsychology services across participating jurisdictions. For telehealth companies with behavioral health services, this reduces the need for individual state licenses in each participating state and creates a more flexible model for serving patients across state lines.
Other Compacts
Several other compacts are becoming relevant as telehealth expands into different specialties. The Counseling Compact supports licensed professional counselors. The Social Work Licensure Compact applies to licensed clinical social workers and continues to expand. The Physician Assistant Licensure Compact allows PAs to practice across participating states.
The Physical Therapy Compact covers physical therapists and physical therapist assistants.
Recommended Sequencing
Step 1: Map each provider type to the applicable licensure pathway. Do not assume all providers can use compacts.
Step 2: Start compact-eligible physicians through IMLC, RNs and LPNs through NLC, and psychologists through PSYPACT.
Step 3: Build separate licensure plans for APRNs, nurse practitioners, and any provider types not covered by compacts. These require state-by-state applications.
Step 4: Submit non-compact state applications in parallel, prioritizing based on revenue opportunity and launch timelines.
Step 5: As soon as a provider is legally ready in a state, start credentialing and payor enrollment for that state. Do not wait for all states to be completed.
Licensure Pathways Overview
How Do You Scale Provider Credentialing Without Slowing Down Growth?
Step 1: Clean Foundation Data Before Submitting Anything (Saves 2 to 4 Weeks)
"Incomplete" is the most common reason applications get rejected or stalled. Before anything is submitted, provider data needs to be clean, complete, and consistent across all systems.
CAQH ProView should be 100 percent complete and current. Re-attestation is required every 120 days, and most commercial payors will not open an application if the profile is not fully attested. NPI records must be accurate in NPPES, including the correct practice address and taxonomy code. State licenses must be active with enough time before expiration.
Board certifications need to be current and verifiable. Malpractice insurance must include a face sheet that matches the application dates and coverage levels being submitted.
For controlled-substance prescribing, DEA guidance generally requires practitioners to be registered in the patient's state unless an exception applies. Multi-state telehealth workflows involving controlled substances should be reviewed with counsel and operationalized state by state.
NOTE: CAQH currency is a provider data hygiene requirement. NCQA verification windows are a separate compliance framework. They are not the same thing.
Manually validating CAQH completeness for 50 or more providers is effectively a full-time job. One person can realistically validate 3 to 5 profiles per day. At 50 providers, that is 10 to 15 business days before a single application is submitted. Many organizations lose 60+ hours per week of manual admin work just trying to validate provider data before submission.
With automation, platforms that integrate with CAQH, NPPES, and state medical boards can flag gaps before submission and auto-fill verified data. What takes days per provider manually can be reduced to minutes.
Step 2: Primary Source Verification at Scale
NCQA requires verification across multiple areas including education, training, licensure, board certification, malpractice history, work history, DEA registration, and sanctions from sources such as OIG LEIE, SAM.gov, NPDB, and state exclusion lists.
Each provider requires verification from 15 to 20 sources. Handled manually and sequentially, that means roughly 100 days to verify a single provider. For 50 providers, you are looking at 1,000 individual verifications.
Under the 2025 and 2026 NCQA standards, verification windows are tighter than ever:
Automated PSV compresses this significantly:
Building integrations across 1,000 or more primary sources costs between $50K and $150K+ annually, and many sources do not offer public APIs. It only makes economic sense at 500+ providers annually. For most telehealth companies, partnering with an NCQA-certified CVO is the faster and more cost-effective path. Assured verifies across 2,000+ primary sources simultaneously, enabling credentialing in 48 hours rather than the usual 60+ days, and saves between $4,200 to $5,800 per provider annually.
Step 3: Payor Enrollment Sequenced in Parallel, Not After Credentialing
A common mistake is treating payor enrollment as something that starts after credentialing is completed. As soon as a provider is licensed or legally ready in a state and their credentialing file is ready for submission, begin payor enrollment for that state. There is no need to wait for every state to be completed.
Another overlooked factor is payor panel status. Some panels are closed in specific states, and submitting to a closed panel results in delays unrelated to credentialing quality. One customer submitted 60 applications: 50 were approved while 10 were delayed solely due to panel closures. Assured produces payor-ready rosters, tracks enrollment status in real time, and supports organizations in achieving the highest first-pass approval rates.
By running enrollment in parallel, organizations can get in-network 30% faster. Without it, credentialing delays can stall billing by 45+ days.
Step 4: Ongoing Monitoring Across Every State
Credentialing does not end once a provider is approved. The 2025 NCQA updates require organizations to review sanctions, exclusions, limitations, and expiration data at least monthly, or within 30 calendar days of a new alert. Monitoring now applies across all practitioners, and findings must be escalated to a peer-review body.
A provider licensed in 15 states has 15 renewal cycles, multiple DEA registrations, and exposure across all jurisdictions. Missing one license expiration date can result in claim denials and audit issues. With automated network management, issues are detected 22 days earlier than manual processes, sanctions are flagged within 24 hours, and renewals are initiated automatically 60 days pre-expiration, saving $7,200 in revenue per provider.
What Is Credentialing by Proxy and When Can Telehealth Companies Use It?
CMS allows hospitals and Critical Access Hospitals to rely on the credentialing and privileging decisions of a distant-site hospital or telemedicine entity through a written agreement. The requirements:
- The distant-site practitioner must be privileged at the distant site
- The practitioner must hold a license recognized by the state where the originating hospital is located
- The originating hospital must maintain internal review responsibilities
- For CAHs, the originating site must share performance information back to the distant-site entity, including adverse events and complaints
The regulatory basis: hospitals under 42 CFR 482.22, Critical Access Hospitals under 42 CFR 485.616.
Not all facilities allow proxy credentialing, and some states restrict it by law. Check hospital bylaws before committing to this pathway. Credentialing by proxy reduces administrative burden but does not remove oversight. The originating site remains responsible for ensuring providers meet standards.
When Should a Telehealth Company Pursue Delegated Credentialing?
Delegated credentialing is a contractual arrangement in which a payor grants your organization authority to credential providers on its behalf via roster submissions rather than individual applications. Payors process roster additions within 30 days once delegation is in place.
Delegation and NCQA status are separate things. Delegation is a payor contract. Working with an NCQA-certified CVO makes it easier for payors to evaluate your process during the audit phase, and if you are pursuing NCQA Health Plan Accreditation, CVO-verified PSV can grant automatic credit that accelerates delegation discussions.
Delegated credentialing reduces enrollment timelines from 90 to 120 days to around 30 days. For an organization onboarding 10 providers per month across 5 payors, that replaces 50 individual enrollment events taking 90+ days each with 5 monthly roster submissions processed in about 30 days.
Signs you should start preparing now:
- Approaching or exceeding 100 practitioners
- Providers licensed across multiple states
- Targeting 5 or more payors for network participation
- Credentialing delays already affecting growth or revenue
What the process looks like:
- Build a compliant credentialing program with documented policies and procedures
- Establish a credentialing committee and hold at least 3 monthly meetings with recorded minutes
- Request delegated credentialing from target payors
- Pass a pre-delegation audit covering policies, committee records, provider roster, monitoring logs, and a sample of provider files
- Sign a Delegated Credentialing Agreement
- Submit monthly rosters in the required payor format
- Complete quarterly reporting and prepare for annual audits
Most agreements take 6 to 12 months from initial request to signed contract. Start before you need it.
Assured supports delegation readiness by setting up credentialing policies and procedures, recommending committee structures, providing meeting minute templates, generating payor-ready rosters, and supplying sub-delegation oversight documentation.
The CVO handles provider data collection, PSV, and ongoing monitoring. Your organization handles committee meetings, credentialing decisions, payor relationships, and annual policy reviews.
Book a demo to see how it works for your telehealth operation.
FAQ
1. We already have a credentialing coordinator. Why do we need software or a CVO?
A credentialing coordinator working manually can handle roughly 30 providers per year at full capacity. That ceiling does not scale with your growth. Beyond 30 providers, you are not choosing between a person and software. You are choosing between building infrastructure now or hiring additional staff repeatedly as you expand, each of whom hits the same ceiling.
The compounding problem is multi-state exposure: every new state adds renewal cycles, exclusion monitoring, and re-attestation requirements that multiply across your entire provider roster, not just new hires.
2. We're only in two states right now. Is investing in credentialing infrastructure premature?
The 6 to 12 months it takes to establish a delegation agreement means the right time to start is before you need it. If you wait until credentialing delays are visibly hurting revenue, you are already 6 to 12 months behind. The same applies to NCQA CVO certification, which payors look for during delegation audits.
Building compliant infrastructure at 30 providers is significantly less disruptive than retrofitting it at 100.
3. If we run enrollment in parallel with credentialing and the credentialing gets rejected, do we lose that time?
Not necessarily, but it depends on why it was rejected. If the rejection is a data error on the credentialing file, the enrollment submission is usually unaffected and can proceed once the credentialing issue is resolved. If the provider is rejected outright for a substantive reason such as a sanctions finding or licensure gap, the enrollment will need to be withdrawn.
This is why clean foundation data before any submission is the highest-leverage step in the process: it prevents the scenario where a parallel workflow collapses because of a preventable data issue.
4. You mention panel closures as a risk, but how do we check panel status before submitting?
Payors do not publish real-time panel status in a standardized way, and closed panels are often discovered only after a submission sits without movement. The most direct fix is to call the payor's provider relations line before submitting and ask explicitly whether the panel is open in that state for that specialty. It takes a few minutes and prevents weeks of wasted processing time.
Beyond that, track panel status as part of your enrollment workflow, treat any application that goes 30+ days without acknowledgment as a signal to follow up directly, and use enrollment tracking software that flags stalled submissions. Submitting blind across all payors is how organizations end up with the scenario described in this guide: 10 out of 60 applications delayed for reasons that had nothing to do with credentialing quality.
5. Delegation takes 6 to 12 months to set up, but credentialing delays are already hurting us. What do we do in the gap?
Focus on two things. First, compress PSV timelines by moving to an NCQA-certified CVO if you have not already. The payor processing window is outside your control, but getting a clean, complete file to the payor faster reduces total elapsed time.
Second, use the gap period to build the infrastructure delegation requires: documented policies, credentialing committee meetings with recorded minutes, and monthly monitoring logs. By the time delegation agreements are signed, you should already be operating as if they are in place.
Organizations that wait until delegation is approved to build compliant processes end up delaying the first roster submission anyway.
6. Is NCQA CVO certification actually required to get delegation, or just helpful?
It is not a hard requirement, but the practical difference matters. Payors conducting pre-delegation audits are evaluating whether your credentialing process is trustworthy enough for them to hand over authority. NCQA CVO certification is the most recognized third-party signal that your PSV process meets a defined standard.
Without it, you are asking the payor to evaluate your internal processes from scratch, which makes audits longer and outcomes less predictable.
For payors that already accept NCQA-certified CVO verification, certification can also grant automatic credit during Health Plan Accreditation reviews, which directly accelerates the delegation discussion.
7. Does the recredentialing clock reset per state or per provider?
Per provider, not per state. The 36-month recredentialing cycle applies to the provider's file as a whole, but each state has its own license renewal schedule that does not align with that cycle.
A provider licensed in 10 states could have 10 different license expiration dates, each triggering its own renewal requirement, all of which need to be current when the 36-month review happens.
This is why monthly license expiration tracking across all active states is a compliance requirement under the 2025 NCQA standards, not just a best practice.
8. For controlled substance prescribing across multiple states, what does DEA registration require operationally?
DEA guidance generally requires a practitioner to hold a registration in the state where the patient is located at the time of the visit, unless a specific exception applies. For a telehealth company operating across 10 states, a prescribing provider may need up to 10 separate DEA registrations, each with its own renewal cycle and fee. Operationally, DEA registration status needs to be tracked per provider per state, not as a single credential, and factored into your expansion sequencing before providers start seeing patients in a new state.
What qualifies as an exception varies and should be reviewed with counsel before operationalizing any prescribing workflow.
9. If we use Assured as our CVO, who owns the credentialing committee and the payor relationships?
Your organization does. Assured handles provider data collection, primary source verification, committee-ready credentialing packets, ongoing monitoring, and roster production. Your team is responsible for holding credentialing committee meetings, making credentialing decisions, maintaining payor relationships, and managing annual CVO audits and policy reviews.
The CVO removes the verification and data management burden, but the governance layer stays with your organization. This is also what payors look for during a delegation audit: they want to confirm that a human governance structure exists on your side, not just that a CVO is doing the verification work.
.svg)
