How to Get Credentialed With Insurance Companies and Avoid Common Delays

Quick summary

Getting credentialed with insurance companies usually takes 60 to 120 days. Your team collects the provider's credentials and submits them; the payer then verifies each one at the source. After that, a committee votes, and contracting and payer enrollment must still be completed before the provider is billable. Most of the delay starts at a handoff, where a file just sits because nobody specific is holding it. 

Credentialing runs on handoffs

Think about what actually happens to one application. Your team collects the documents, and the provider attests to their CAQH profile. The payer then verifies every credential at the source, and a committee votes on it. After that, a contracting team and a provider data team each take a turn. At each of those steps, a specific person is holding the file.

When a file stalls, it's almost always because whoever has it is waiting on something nobody chased. One missing signature can cost you a whole committee cycle. That's where most of those 60 to 120 days go, and it's the part you can actually do something about.

This guide walks through the insurance credentialing process stage by stage, names who owns each one, and covers the mistakes that push approval past 120 days.

What insurance credentialing covers, and what comes after it

Credentialing means verifying the provider's own qualifications. Identity, education, training, licensure, board certification, work history, malpractice history, and sanctions all get checked against the primary source. That means the licensing board, the school, or the registry itself, not a copy the provider emailed you. The process ends in a credentialing decision.

Two other things happen around it, and payers treat them as separate pieces of work even when they're running on the same calendar.

• Contracting is the participation agreement and the fee schedule. It's what makes the provider in-network and sets what they get paid.
• Payer enrollment registers an already-credentialed provider, and normally the group as well, with the payer so that claims are processed and paid correctly. It's the step that ties the individual NPI to the group TIN and sets up EDI and EFT.

Keeping the three straight matters, because each one has a different owner and a different clock. A provider can clear credentialing and still not be billable because the contract hasn't been countersigned or the roster hasn't loaded. If your team uses the words interchangeably, you'll chase the wrong department when something stalls. We've written a more detailed breakdown of credentialing versus payer enrollment if you want more detail on the distinction.

The insurance credentialing process, stage by stage

The table below is the whole path for one provider at one commercial payer. Read the second column first, because a stage without a named owner is a stage that waits. 

Four of those eight stages happen at the payer, which is why credentialing takes as long as it does. You can't shorten a committee's calendar, but you can make sure a file never waits on your side of a handoff. The four subsections below are where that goes wrong most often.

1. The handoff to the provider

Stage 2 is the only stage a provider has to complete personally, and it's the one your team has the least control over. Payers pull most of an application straight from CAQH, and if a profile hasn't been re-attested in the last 120 days, they can't use it. Your team can chase, prefill, and send reminders, but the attestation itself must come from the provider.

Build the chase into the intake. Ask for the CAQH login and attestation date on day one, alongside the licenses, rather than finding out at week six that the profile has gone dormant. A short provider onboarding checklist shared with the provider up front does more for your timeline than anything you do later.

CAQH rebranded to "DataSpring, powered by CAQH" on June 8, 2026, following a January 2026 conversion from nonprofit to for-profit ownership (12 shareholder companies affiliated with major health plans). Logins, the Provider Data Portal, and the 120-day attestation cycle are all unchanged. "CAQH" is used since that's still what most payer pages call it. 

2. Where the file disappears for a month

Stage 4 is the longest stretch, and it's the one you can't see into. Verifiers query licensing boards, the NPDB, exclusion lists, and previous employers one at a time. Each query takes as long as it takes whoever's on the other end to answer it.

The clock matters here. NCQA's 2025 standards update applies to files processed on or after July 1, 2025. It sets the CRC 10 Element A limit for processing an application and attestation at 120 calendar days. The work history limit under CRC 1 and CRC 6 was also moved to 120 days, per the NCQA policy updates published in November 2025. If a file crosses that line, elements start aging out and get re-verified, which is how a slow application quietly turns into a restarted one.

Running the verifications in parallel, rather than one after another, is the one thing that really shortens this stage. It's also the main argument for automated primary source verification over a manual queue.

3. The committee calendar

Stage 5 runs on a meeting schedule, not on your urgency. A verified file that misses the packet deadline waits for the next meeting, whenever that happens to be. So, ask each payer two questions early on. How often does the committee meet, and how many days before the meeting must the file be complete? Then work back from those dates. Our guide to the credentialing committee process explains what a committee actually reviews once your file is before it.

4. The gap between approved and billable

An approval isn't permission to bill. Stages 6 through 8 still need to be completed, and each belongs to a different team at the payer. The contract has to be countersigned, and the provider has to load it into the payer's system under the correct group TIN and taxonomy. Only then does an effective date come back to you in writing.

Get that effective date in writing every time, then hand it to billing before the provider sees a patient. Most retroactive billing fights start with a verbal date nobody wrote down. Once the provider is live, the recredentialing clock starts on the credentialing decision date, so log it the day it arrives.

Insurance credentialing mistakes that delay approval

None of the mistakes below are complicated, which is exactly why they're worth catching. Each one costs you a committee cycle or a full resubmission.

1. Missing required state licenses

State licensure determines a provider's ability to practice in a specific region. Your credentialing application is contingent on active, valid licensure, and payers will not process applications without it.

This issue often arises when providers need to renew licenses before they expire or obtain licenses in new states where they intend to practice. It can also result from overlooking specific state requirements, such as additional certifications or continuing education credits.

Your credentialing application will immediately be denied if your licenses are missing or expired.

Payers won't start verification against an expired or missing license, so the file never even gets going. On a multi-state roster, that's often the first domino, because one lagging state license holds up every payer application that names that state.

How to avoid

• Use a license tracking system to monitor expiration dates and alert you in advance
• Confirm state-specific requirements well before starting the credentialing process
• Create a centralized compliance calendar for multi-state licensure renewals

2. An outdated CAQH profile or a lapsed attestation

The Council for Affordable Quality Healthcare (CAQH) profile is a central repository of provider information. Payers use this data to verify credentials and approve applications.

An outdated CAQH profile can lead to delays or denials because discrepancies between the profile and the submitted application raise red flags for payers.

Errors in the CAQH profile can occur when profiles are not updated regularly, such as when a provider changes practice locations, adds certifications, or renews licenses. It can also happen when a provider forgets to re-attest their profiles every 120 days, a CAQH requirement to keep the profile active.

A lapsed attestation is the harsher version of the same problem. The profile goes inactive; the payer can't pull a current file, and the application stops until the provider signs in and attests again. Nobody on your team can do it for them. That's why this one shows up even on rosters where the credentialing team does everything else right.

How to avoid

• Update your CAQH profile quarterly, even if no changes have occurred
• Set calendar reminders to complete mandatory re-attestations every 120 days
• Review the profile thoroughly before submitting any applications to payers
• Capture each provider's attestation date at intake and track it the way you track a license expiration

3. Incomplete practice information

Practice details, such as addresses, phone numbers, and Tax Identification Numbers (TINs), are important in credentialing. Errors in this information can occur due to oversight.

For instance, a practice might move to a new location but must remember to update its credentialing applications or CAQH profile address. Similarly, phone numbers or fax lines might change, leading to miscommunication with payers during the credentialing process. Another common scenario is entering the wrong Tax Identification Number (TIN). This can be caused by simple typographical mistakes or confusion when a practice has multiple TINs.

The delay comes from the mismatch, not from the error itself. Payers compare the application against CAQH and NPPES, and any differing fields are kicked back for clarification. So run an NPI lookup on every provider before you submit, and check that the practice address and taxonomy match what you're about to send. 

How to avoid

• Cross-check all practice details for accuracy before submitting applications
• Maintain a centralized document with up-to-date practice information for quick reference
• Assign a staff member to verify information consistency across all applications

4. Wrong taxonomy codes

Taxonomy codes classify providers by their specialty and area of expertise. Using an incorrect taxonomy code can result in misclassification, leading payers to assign incorrect reimbursement rates or deny claims entirely.

These errors occur when providers or staff are unfamiliar with the specific codes required for a specialty or when outdated codes are used. A mismatch between taxonomy codes and the provider's credentials also raises compliance concerns for payers.

If taxonomy code errors are not identified early, they can impact claims processing and lead to revenue discrepancies.

How to avoid

• Reference payer-specific guidelines to ensure taxonomy codes align with their requirements
• Use a credentialing management system to standardize and validate codes
• Review taxonomy codes regularly to confirm they reflect the provider's current specialty

5. Unsigned or non-compliant documentation

Non-compliant documentation involves incomplete or improperly formatted forms and documents. Common errors include missing signatures, outdated liability insurance certificates, or incomplete primary source verifications.

These errors often occur when staff rush to meet submission deadlines without thoroughly reviewing the application package.

The specific ones that come back most often are:

• Submitting expired certificates
• Omitting liability insurance details
• Providing inconsistent information across forms
• Providing incorrect National Provider Identifier (NPI) linkage to providers and practice locations
• Submitting unsigned applications

Applications with expired certificates or inactive liability insurance are automatically denied. Inconsistent information, such as mismatched names or addresses, can further delay the process, as payers may require additional verification.

Many payers also require proof of active malpractice insurance with minimum coverage levels. If not addressed promptly, these issues can disrupt a provider's ability to deliver care and generate revenue.

The same gaps show up again when a payer audits you later, so a clean submission file now saves you an argument in eighteen months. Our breakdown of what payers look at during credentialing audits goes through the most common items.

How to avoid

• Use a compliance checklist tailored to each payer's requirements
• Assign a dedicated reviewer to audit documentation for errors before submission
• Maintain templates of frequently required documents to ensure consistency
• Set reminders for certificate renewals to avoid rejections
• Verify that the NPI is linked correctly to each provider and practice location

6. Applying to a panel that's already closed

Insurance panels periodically close to new providers when their network reaches capacity. Applying to a closed panel wastes time and resources, as applications are typically denied.

This issue arises when practices fail to stay informed about payer updates and network status.

How to avoid

• Regularly check payer websites or contact representatives to confirm panel status
• Build relationships with payer network coordinators for timely updates
• Keep a list of open and closed panels to prioritize applications

7. Missed effective dates, and assuming approval means you can bill

Credentialing approvals have specific effective dates that dictate when providers can begin billing payers.

Missing these dates can lead to serious revenue loss, as providers risk claim denials and out-of-network billing disputes.

Retroactive billing refers to submitting claims for reimbursement for services provided before a healthcare provider's credentialing or contract with an insurance payer is fully approved. It allows providers to be compensated for services rendered between the initial credentialing application and its final approval. Without proper retroactive billing, practices may forfeit reimbursement for services provided before credentialing was finalized.

Retroactive windows vary by payer, and some payers don't offer one at all. So get each payer's policy in writing before a provider starts seeing patients under that plan. Log the services rendered during the wait too, so you can submit them the day approval comes through.

How to avoid

• Confirm effective dates with payers in writing
• Train billing staff to track and align claims with credentialing timelines
• Maintain clear communication between credentialing and billing teams
• Familiarize yourself with each payer's retroactive billing policy
• Document all services rendered during the credentialing process
• Submit claims promptly once approval is granted

8. Stale PECOS data and the wrong Medicare or Medicaid enrollment type

Credentialing with government programs comes with its own set of challenges. If errors go uncorrected, providers face delays in Medicare enrollment, leading to missed billing opportunities and patient dissatisfaction.

Government programs run on their own track, and it's worth being clear about one thing before we get into it. PECOS is an enrollment system rather than a credentialing one, so nothing in this section replaces the verification work above.

The Provider Enrollment, Chain, and Ownership System (PECOS) is where Medicare enrollment actually happens. Some common errors in PECOS enrollment details, such as incorrect practice addresses or provider names, can delay applications.

Both programs revalidate on a five-year cycle. Under 42 CFR 424.515, Medicare providers and suppliers other than DMEPOS suppliers must resubmit and recertify their enrollment information every 5 years. DMEPOS suppliers are on a 3-year cycle. State Medicaid agencies must revalidate the enrollment of all providers, regardless of provider type, at least every 5 years under 42 CFR 455.414. Missing either deadline stops your claims.

One form change still trips teams up. Reassignment of benefits used to be collected on the CMS-855R, and that form is gone. MACs began accepting the revised CMS-855I (05/23) on September 1, 2023, and reassignment data moved onto the CMS-855I. Anything submitted on the old form was returned from November 1, 2023.

Medicare and Medicaid offer various enrollment types based on a provider's specialty and role. Enrollment types include:

• Group
• Facility
• Billing individual
• Individuals within a group, atypical, and ordering/prescribing/referring

Choosing the wrong type can delay or invalidate the credentialing process. This issue arises when staff members unfamiliar with the requirements select an inappropriate enrollment category. The result is a lengthy appeals process, during which providers may be unable to bill for services.

How to avoid

• Double-check PECOS enrollment data before submission, and look up the current record rather than trusting your own file
• Update the system promptly when provider or practice details change
• Use the PECOS online checklist to verify the completeness of your application
• Research enrollment types thoroughly on Medicare and Medicaid portals
• Verify that the selected enrollment type matches the provider's specialty
• Run OIG LEIE exclusion checks monthly, because an exclusion hit undoes everything else

9. Nobody's actually holding the file

The other eight mistakes are all symptoms of this one. When credentialing goes to whoever has capacity that week, payer requests pile up in a shared inbox, and nothing has an owner. A request for one missing signature can then sit there for three weeks before anyone notices.

Fix it by naming an owner per stage, not per provider. Somebody owns intake, somebody owns submission, somebody owns payer correspondence, and somebody owns effective dates. Then give every file a status that maps to the eight stages above, so "in progress" is no longer a status anyone can hide behind.

The other half of the fix is visibility. A spreadsheet tells you where a file was the last time it was updated, which isn't necessarily where it is now. Shared dashboards, automated deadline alerts and a single inbox for payer correspondence remove most of the guesswork, and credentialing automation removes the rest.

How to avoid

• Use shared digital dashboards that provide real-time updates on application statuses
• Designate a dedicated team or individual to handle payer communications
• Create a shared email inbox or portal for all credentialing-related communications
• Develop a standardized checklist of required documents for each payer
• Conduct regular internal audits to identify and resolve compliance gaps
• Provide training for all staff involved in credentialing, especially new hires

Where we fit

Assured is an AI-native provider network management platform, and we're an NCQA-certified Credentials Verification Organization. Everything above is the process as it runs today. We built our product around the idea that four of those eight stages don't have to take this long.

Our credentialing product page shows a turnaround time of less than 2 days, compared to a baseline of over 60 days. That's our own reported number, measured on our own book of business. Set it against the 60 to 120 days a manual process typically takes. The difference comes down to running the verifications in parallel instead of in a queue.

Four things happen on our side.

• Flexible data collection: import from CAQH, NPPES, DEA, and state medical boards, or use our customizable forms
• Primary source verification: automated PSVs that run in parallel and escalate any potential issues to your team
• Committee-ready credentialing files: standardized digital packets to pass on to your committee
• Ongoing monitoring: automated tracking of credential expirations and monthly exclusion checks across Medicare, Medicaid, and OIG databases

We verify against more than 2,000 primary sources, including medical schools, residency programs, state licensing boards, the AMA, ECFMG, DEA, and previous employers. We cover licensing and credentialing in all 50 states. Renewals kick off automatically 60 days before an expiration date, so the recredentialing clock doesn't sneak up on you.

If you're at the point where individual applications no longer make sense, delegation is the next step. Delegation means payers trust you to credential providers on their behalf, and once delegated, you submit monthly rosters instead of individual applications. We've written up what a delegation-ready program looks like if that's where you're headed.

Birches Health used us to get providers seeing patients in under a month and expanded across 40 states. Tono Health got board-certified dermatologists credentialed and in-network within weeks, not months. Both are their own accounts of the result, and you can read more of them on our customers' page.

If you do need cost figures, we've published a sourced breakdown of the cost to credential a healthcare provider.

See Where Your Credentialing Files Are Actually Stuck

Take the eight stages above and write a name next to each one. That's the whole exercise, and it'll tell you within an afternoon where your files are actually sitting. Most teams find the same two gaps. One is the CAQH attestation nobody chases, and the other is the payer request that arrives in an inbox with no owner.

Then start measuring it. Log every file against a stage and track the date it entered that stage. After a few weeks, you'll see exactly which handoff is costing you the most time.

If you'd rather not run four of those stages by hand, book a demo, and we'll show you exactly what parallel verification does for your 60- to 120-day window and how payer enrollment and network management pick up right where credentialing leaves off.

Frequently Asked Questions

1. How long does it take to get credentialed with insurance companies?

Plan on 60 to 120 days per payer once you've submitted the application. Most of that window is spent on primary source verification and waiting for the credentialing committee's next meeting. Multi-state rosters take longer because every state license must be active before a payer will begin verifying the file.

2. Can you bill for services before credentialing is approved?

Not safely. Claims submitted before the effective date tend to be denied or paid at out-of-network rates. Some payers allow retroactive billing back to the application date, some back to the approval date, and some don't allow it at all. Get each payer's policy in writing before anyone sees a patient.

3. Do you have to credential each provider with every payer separately?

Yes, unless you're delegated. Every payer makes its own credentialing decision, so the same provider goes through the same verification at each one. Under a delegated credentialing agreement, the payer trusts you to credential on its behalf, and you submit monthly rosters instead of individual applications.

4. What's the difference between insurance credentialing and payer enrollment?

Credentialing verifies the provider's qualifications with the primary source and concludes with a committee decision. Payer enrollment comes afterward and registers the credentialed provider, and usually the group, with the payer so that claims route and pay correctly. Contracting comes between the two and sets the participation agreement and the fee schedule.

5. What documents do insurance companies ask for during credentialing?

Expect a current CV with a month-by-month work history, all active state licenses, DEA registration, and board certifications. You'll also need a malpractice face sheet with current coverage limits, individual and group NPIs, a W-9 with the group TIN, and government ID. Payers pull most of it from CAQH, so the profile has to match what you submit.

6. Why do insurance credentialing applications get delayed?

Usually because nobody's holding the file. A payer requests a missing signature; the request lands in a shared inbox, and the file sits there until someone notices. Lapsed CAQH attestations, expired licenses, and mismatched practice addresses account for most of the rest. None of it is complicated, which is why a named owner per stage fixes so much of it.