A physician can sign an employment agreement and still not have hospital privileges or the right payer arrangements. Hospital credentialing services help organize and substantiate the information required for a medical staff review with payer enrollment support, if contracted.
For administrators considering outsourcing, the key deciding factors are the scope, accountability, and proof. A good partner supports traceability, exception handling, and reliable handoffs. This article addresses what to buy, what your hospital retains, and the questions that allow you to more easily compare competing offers.
Hospital Credentialing Services: Scope and Deliverables
There should be a clear definition of practitioner types, facilities, verification activities, and administrative tasks in the service agreement. Without this definition, “full service” carries little value.
There is real value to the hospital if evidence is verified to identify a restricted license, unsupported training, and/or concerning practice history. In reviewing this evidence, medical staff can assess the relevant patient-care risk and manageability.
It is important to distinguish medical staff credentialing for physicians and advanced practice providers from employee credentialing for privileged practitioners. Each has different requirements.
Verification and File Preparation
The main service supports collection of the required documents and qualification, resolves discrepancies, and prepares a credentials file for review. Depending on the agreement, this work may include:
- Checks of identity, education, training, licensure and/or relevant certification.
- Clarification of employment history to explain employment gaps.
- Malpractice coverage history, claims, and professional references.
- NPDB queries through the hospital’s or agent’s established access.
- Perform OIG exclusion screening and other applicable sanctions checks. Provide supporting evidence for the specific privileges requested.
Submit a sample file with uploaded certificates. If required, a reviewer can provide a copy of the sample file and uploaded certificates and indicate corresponding requirements, findings, outstanding issues, and the reviewer responsible for the item.
Privileging Administration and Enrollment Support
The vendor can log procedures, fill out privilege forms, manage references, and develop committee paperwork. The recommendation and appointment of the medical staff and the governing body at the hospital will continue to have the responsibility.
In addition, payer enrollment can be added to the agreement. The scope needs to determine who will be doing what, including identifying practitioners, billing entities, facilities, and health plans covered. There can be different processes for hospital enrollment and enrollment of the professional group working in the hospital. These need to be coordinated because Hospital Medical Billing Services use correct provider, group, and location information.
Exclusions need to be included into the agreement as well. There can be other responsibilities, such as license applications, peer reviews, contract negotiations, payer disputes, corrections of the provider directory, and other issues. A clear scope will help to assure the hospital that all tasks have been done.
Credentialing, Privileging, Enrollment, and Contracting
These functions support different decisions. Combining them under a single “approved” status makes it difficult to determine if a clinician is authorized to deliver a particular service and how the associated claim should be handled.
| Function | Main purpose | Evidence administrators should expect |
|---|---|---|
| Credentialing | Evaluate verified qualifications and relevant background | Source verification, findings, reviewed disclosures, and resolved exceptions |
| Privileging | Authorize specific clinical services within the hospital | Documented hospital approval and the applicable privilege delineation |
| Payer enrollment | Establish required provider and billing relationships in payer systems | Enrollment confirmation for the practitioner, entity, and location concerned |
| Contracting | Establish network participation and contractual payment terms | Executed agreement or applicable participation documentation and confirmed payer records |
An illustrative example: a cardiologist has hospital privileges, but the commercial payer has not linked the clinician to the employed group’s billing entity. The medical staff approval doesn’t resolve that payer issue. Billing needs the correct participation and enrollment evidence for the claim concerned.
CAQH profile completion, an NPI, electronic claims access, EFT, and ERA setup each serve administrative purposes. None independently proves network participation. The relevant payer and contract requirements still apply.
Build a shared record that distinguishes clinical authorization, network participation, enrollment, and claims configuration. Scheduling and billing teams need an understandable disposition for their own work, with supporting detail available to authorized staff.
Step by Step Process of Hospital Credentialing
The credentialing process requires the collection and review of a practitioner’s documentation and references. This documentation is synthesized, evaluated and validated by the hospital credentialing reviewer. The process should show exceptions and demonstrate a clear rationale for the outcome.
1. Define the facility and practitioner assignment
The hospital, practitioner category, requested privileges and applicable bylaws are defined. The contact at the hospital responsible for clinical questions and the vendor contact responsible for file processing are defined. For a health system, determine what can be shared appropriately and what approvals need to remain specific to an entity.
2. Collect a complete, internally consistent application
The application, professional history, disclosures, licenses, insurance and privilege request are reviewed and reconciled. Any missing information should be requested in a consolidated, clear format, so the practitioner is only required to respond to one request.
This completeness check should also review for inconsistency. An application may describe a procedure that is not documented in the training or activity logs.
3. Perform primary source verification
The required credentials should be verified through the originating source, an approved agent, or an acceptable verification pathway in accordance with the standards. Source documents and verification records should be retained as required by the hospital policies and accrediting agency.
A state licensing board record can confirm license status and restrictions. A practitioner-supplied license copy serves a different evidentiary function and cannot, by itself, serve as required primary source verification.
4. Review discrepancies and concerning findings
The licensing department should have a designated reviewer to handle all concerns regarding employment history, adverse findings, malpractice disclosures, and questions concerning the practitioner’s competence to practice. The reviewer should evaluate and document the supporting evidence and his or her findings.
Clearly document malpractice claims and adverse findings. Provide a copy of the evidence to administrative staff who will evaluate and flag the evidence for the clinical governance review process. The staff should collect and provide the evidence, but the clinical governance and review process should determine if the adverse finding is supported and whether it should be considered when rendering a decision.
5. Assemble the approval packet
Provide a detailed summary of your qualifications and evidence in support of the requested privileges. Identify the chain of command and processes to be followed for review of the qualifications and documentation and privileges requested.
The packet should make clear which issues are resolved versus which are still concerns. Committee members should not have to piece together an applicant’s status from disconnected emails and attachments.
6. Communicate authorization and billing status
Record the hospital’s determination, scope, and constraints and required evaluations. Send scheduling, clinical operations, and billing only the information relevant to their function.
If work for a payer is included, retain separate confirmation of enrollment and/or participation. An approval email without specifics about the entity, the service location, and the authorization creates uncertainty.
7. Transfer the file to maintenance controls
Assign responsibility for changes in licensure, professional liability, sanction findings, reappointment, payer updates, and changes in privileges. Confirm the system can route a change to the person who is authorized to act on it.
The completed file should support an audit without requiring staff to look for missing information in individual’s email inbox.
Clarify Your Credentialing Scope
Go through your facility, practitioner composition, and authorization process in order to determine what kind of verification and enrollment services your staff will need.
Compliance Standards and Accountability for Hospitals
Compliance will be dependent upon the policies of the hospital, its accreditation standards, by-laws for the medical staff, state law, and any payer delegations agreements. The vendor needs to clarify what requirements apply to the activities being contracted and their relationship to the hospital’s revenue cycle management systems.
CMS and Medical Staff Governance
CMS Hospital Conditions of Participation stipulate the duties of the governing body and the organized medical staff. The medical staff review prospective members’ and staff’s qualifications and recommend to the governing body.
CMS also states that character, competence, training, experience, and judgment are selection criteria. Staff membership and privileges cannot be determined by specialty certification alone. An outside service can support the evidence and administration, while the hospital retains its required governance role.
The Joint Commission and Primary Source Evidence
The Joint Commission stipulates that medical staff members must provide evidence of their training and competence. The Joint Commission differentiates documentation of evidence from merely having a license on file.
Assess the vendor’s records of verification against your standards and determine that the source, verifier, result, and required audit are documented. Clinical privileges are governance decisions of the hospital.
NCQA and credentials verification organizations
NCQA differentiates a full-scope Credentialing Accreditation from a Credentialing Certification focused on verification activities. It is important to differentiate a Credentials Verification Organization (CVO) from other administrative services vendors.
Verification of Certification
A provider may say it is certified, but that doesn’t verify the legal entity, standing, or covered activities. Following NCQA standards or being certified, accredited, or otherwise authorized to act on behalf of a hospital to make privileging decisions are separate and distinct matters.
NPDB, Exclusions, and Confidentiality
Hospitals have mandatory NPDB query obligations. Properly designated authorized agents may query on a hospital’s behalf, provided registration and an agreement are in place. Query responses are confidential and may not be shared.
OIG’s List of Excluded Individuals/Entities is a separate concern from the NPDB. Resolving identity conflicts is required.
When dealing with a credentialing file, remember the file contains sensitive personal information, and access controls, encryption, and subcontractor access should be addressed.
Turnaround Depends on the Approval Path
Hospital Credentialing depends on a number of factors including: completion of the application, verification responses, professional and clinical reviews, and hospital approval. Payer enrollment adds another approval path.
Processes outside of a vendor’s control should be addressed by that vendor. Ask vendors to define the starting point of their turnaround measures, to facilitate a fair comparison.
Please provide the median and upper-percentile results. Also include sample size, exclusions, and unresolved files. A measure based on only completed files may conceal potentially difficult applications that are still pending.
Typical avoidable blockers include missing disclosures, unreachable references, inconsistent provider identifiers, unsupported privilege requests, and unclear ownership of follow-up. Blockers should be reported with an action taken and the condition under which they were escalated.
For example, a surgeon’s file may be pending verification, but an authorization decision for the surgical procedure has been made and is being held up by clinical review. Additional payer follow-up will not resolve the issue, and the file requires the attention of the clinical reviewer.
Temporarily granted medical staff privileges also require review by the hospital and the health care service organization in which the surgeon provides professional services. A vendor cannot provide this as a workaround for an unresolved application. Assess the impact and the service provided by the administrative work done to expedite a decision.
Re-Credentialing, Competence, and Provider Changes
For re-credentialing, tie maintenance to the relevant contract, accreditor, regulator, or hospital policy. The record should show the action taken, the evidence supporting the action, and the pathway and effect of the action on an unresolved item.
beyond maintenance of the record, competence assessment requires review of focused professional practice evaluations (FPPEs) for recently requested privileges and address concerns identified in previously granted privileges as part of ongoing professional practice evaluation (OPPE).
A vendor can organize the associated information and route exceptions. Hospital clinical leaders interpret the evidence and make the appropriate decisions. A valid certificate doesn’t answer every question about a practitioner’s performance in a given service.
Changes in name, location, group affiliation, scope of practice or liability coverage require a defined handoff. For example, adding a clinician to a satellite location may result in the clinician having a complete record in the personnel system while the location association remains unresolved. A shared change request should identify all affected systems and the confirmation required for closure.
CVO Software, Delegation, and Data Ownership
Credentialing technology should preserve and present evidence of work performed, and make the status of the work apparent. A portal is helpful if reviewers can trace conclusions to the underlying verification and exception record.
Test workflow with realistic exceptions
Evaluate the workflow to route exceptions, make decisions about license restrictions and other conditions or limitations of privilege, and decide on conflicting information, unresolved references, and provider-to-location associations. Review who receives the task, who can change the status of the task, and what remains in the audit record.
Also evaluate exports and permissions. Confirm the hospital can retrieve its records, and verification and unresolved work history under the terms of the contract.
Interfaces should define which system owns a provider’s identity, privilege, location, and payer information. Whenever there is a conflict, there should be a clear way to see which system is correct. Merely copying data between systems will not ensure accuracy.
Differentiate verification support from delegated authority
Delegated Credentialing refers to an agreement wherein certain credentialing functions are assigned to a different organization. If a payer agreement requires a delegation assessment, it is the responsible party for the defined responsibilities, reporting, oversight, and corrective actions, based on the applicable standard and contract.
Purchasing verification services does not mean payer delegation. Likewise, a CVO contract does not grant the vendor the right to access the NPDB or to act upon hospital privileging. Request the vendor to cite the authorization for each of the functions it wishes to perform.
There are separate regulations for reliance arrangements for telemedicine services. Certain qualifying hospitals are allowed to rely on specified distant site credentialing and privileging, under certain conditions, as established by CMS. While this may give the appearance of an exemption from the conditions of participating status, in fact, an assessment of these conditions is required.
Costs and a Defensible ROI Calculation
The pricing of medical credentialing services might be based on the application, provider, facility, or package of the defined services. In addition, some companies might have a retainer arrangement for the agreed workload while charging differently for any extra activity not covered in the agreement. Therefore, the low pricing might not necessarily mean reduced costs if other significant activities are not covered.
Request that each potential vendor bids for pricing the same provider and facility list. This way, you will get the cost of primary source verification, hospital application assistance, payer enrollment, maintenance, and delegated credentialing. In addition, request charges for source access, NPDB checks, data conversion, software, additional facilities, and inherited file cleanup.
It should be noted that the application’s complexity will influence the cost quote. For instance, when a provider requests special privileges, he/she might need additional training documentation, procedure documentation, or other relevant documentation before the hospital makes its decision.
Financial results attributed to the investment should be used to assess the ROI
ROI = (documented financial benefit – total added service cost) / total added service cost
For the illustrative example cohort, documented reduction of rework and replacement coverage expense was verified to be $12,000. Added vendor, implementation, and retained oversight costs, were $8,000. Net benefit was $4,000 resulting in 50% ROI for the comparison made.
The aforementioned figures are purely exemplary. Use your hospital’s actual data with comparable workloads and standard costs. Release of staff capacity should be considered a cash savings only if it reduces expense; otherwise it should be considered available capacity.
For revenue effects, separate receivables due from delayed collections from uncollectible accounts. Correcting an enrollment issue may allow processing of qualified claims, but this does not necessarily mean each charge is newly generated revenue. Coverage, authorization, coding, and/or documentation may impact adjustment and processing of payment.
Tone, style and grammatical errors have been fixed. Spelling and punctuation errors remain to preserve the author’s voice.
In-House Versus Outsourced Credentialing
The right model depends on application volume, specialty mix, staff capacity, and the hospital’s ability to supervise the work. An outside partner can supply processing capacity or verification expertise, but the hospital still needs an accountable internal owner.
| Decision factor | In-house model | Outsourced or hybrid model |
|---|---|---|
| Local knowledge | Direct access to department leaders and bylaws | Requires a documented hospital-specific workflow |
| Staffing capacity | Hospital manages recruitment, coverage, and workload | Contract defines capacity, coverage, and escalation |
| Verification work | Hospital maintains source access and quality controls | Vendor performs specified checks; hospital evaluates deliverables |
| Governance | Hospital retains clinical and appointment responsibilities | Hospital retains those responsibilities and oversees contracted work |
| Technology and data | Hospital manages its systems and integrations | Contract must address access, integration, ownership, and exports |
| Cost visibility | Include staffing, systems, source fees, and overhead | Include fees, implementation, retained oversight, and excluded work |
A hybrid arrangement may suit a hospital with experienced medical staff leadership and limited processing capacity. The hospital can retain committee coordination and clinical escalation while contracting for defined verification or application tasks.
Outsourcing is less useful if both parties keep duplicate records or leave exceptions unassigned. A named hospital owner, accepted file standards, and a shared issue-resolution process make the model workable.
Choosing a Provider for Hospital Credentialing Services
Select a partner by examining work products and operating controls. General claims about speed or nationwide coverage offer limited evidence of suitability for your hospital’s requirements.
Request an anonymized completed file, a status report containing unresolved cases, and references from organizations with a comparable facility and practitioner mix. Discuss how the proposed team handles clinical concerns, incomplete source responses, and disagreements about file completeness.
Use these questions to make proposals comparable:
- Which activities, facilities, practitioner types, and payer relationships are included?
- Which named roles perform processing, quality review, and escalation?
- What evidence supports accreditation, certification, security, and performance claims?
- How are disputed findings and incomplete files routed for resolution?
- Which service measures include stalled or withdrawn applications?
- Who controls the records, access permissions, and subcontractor arrangements?
- What deliverables, fees, and exit assistance does the contract guarantee?
Where vendor staff hold relevant credentials, such as CPCS or CPMSM, verify those credentials and their assigned responsibilities. Individual certification adds useful evidence of knowledge; you also need proof that the team’s actual workflow meets the contracted requirements.
A limited pilot can make the decision more concrete. Define file acceptance criteria, exception handling, reporting, and hospital responsibilities. Evaluate accuracy and visibility alongside processing performance.
Selecting a Hospital Credentialing Partner
Look for specific deliverables and operating limits in prospective partner offerings. Generalized statements about speed and nationwide coverage don’t provide evidence suitable to your hospital’s needs.
Ask for a sample completed file, status report of cases in process, and references from organizations with the same type of practitioners and facilities. Find out how the partner staff resolves clinical issues and completeness concerns regarding the files.
Ask the following questions to help determine equivalencies between vendors:
- What services are performed by staff members of what title?
- What are the staffing levels for quality review, processing, and case resolution?
- What evidence supports the vendor’s claims of accreditation and certifications?
- What are the policies and procedures for addressing unsubstantiated findings?
- What services are provided for withdrawn and/or stalled applications?
- What are the service and staffing levels for case resolution, records management, and subcontracting?
- What are the provisions of the contract, services, fees, and exit support?
- When staff members of a vendor have the CPCS and/or CPMSM credential, verify the staff credentials and what services they will perform. Individual certification is useful, but you also have to check if the contract staff is performing as required.
Prior authorization may be needed for a short term pilot project. Define file acceptance criteria, what exceptions will be handled, reporting requirements, and the hospital’s responsibilities. Test the partner’s processing against your hospital’s needs for timeliness and accuracy.
Support Your Hospital Needs Compared To
Describe your hospital’s structure, its practitioners, and credentialing problems to get a proposal that clearly states deliverables and accountability.
Frequently Asked Questions
What do hospital credentialing services include?
Typical services include application collection, primary source verification, reference coordination, discrepancy tracking, and preparation of medical staff review files. Payer enrollment, maintenance, and privileging administration may be separate services. The written scope should identify the facilities, practitioners, checks, and deliverables included.
How long does hospital credentialing take?
Turnaround depends on application completeness, source and reference responses, clinical review, and hospital approval. Payer enrollment follows its own requirements. Ask for results from comparable files and the exact start, stop, and exclusion rules used to calculate the vendor’s measure.
Can a hospital outsource credentialing and privileging?
A hospital can contract for verification and administrative support. Its organized medical staff and governing body retain their applicable recommendation, appointment, and clinical authorization responsibilities. The contract should distinguish processing tasks from hospital decisions and identify the oversight required for each delegated or contracted activity.
Is a CVO the same as a payer enrollment company?
A CVO verifies practitioner credentials. An enrollment company prepares and manages payer registration work. One business can offer both, but the functions have different deliverables. Confirm the verification scope, enrollment responsibilities, certification claims, and authority assigned under each agreement.
Can a physician bill insurers with hospital privileges?
Hospital privileges alone do not establish payer enrollment, network participation, or a correct billing relationship. Billing must confirm the applicable payer, entity, practitioner, location, and contract requirements. Coverage, authorization, coding, and documentation rules also apply to the services being billed.
What affects the cost of outsourced hospital credentialing?
Cost depends on practitioner and facility volume, file complexity, source fees, software, payer work, maintenance, and contracted oversight. Compare itemized quotes built from the same roster and deliverables. Include the hospital’s retained work and any implementation or exit charges in the financial assessment.
An Understandable Scope Leads to Better Decisions
The most successful hospital credentialing providers ensure that the administrator has traceable evidence, explicit obligations, and an understandable picture of what is not completed. Assess potential partners based on these criteria and the actual needs of the hospital. A clearly defined agreement will enable decision making by the medical personnel and billing transitions.
