Medical credentialing explained: what it is, how long it takes, what you need

What is credentialing in healthcare?

NCQA calls credentialing the process to “evaluate the academic qualifications and clinical practice history of a provider”. For a Medicare Advantage plan, federal rules list what initial credentialing covers: a written application, signed and dated with the applicant’s attestation; verification of the license or certification from primary sources; disciplinary status; eligibility for payment under Medicare; and site visits as appropriate (42 CFR 422.204(b)(2)(i)).

Three kinds of organizations credential providers:

• Health plans, directly or through a delegate. A Florida HMO must keep “a system for verification and examination of the credentials of each of its providers” and a central file with each physician’s current Florida license (s. 641.495(6), F.S.).
• Medicaid managed care plans, under one state policy: each state “must establish a uniform credentialing and recredentialing policy” (42 CFR 438.214(b)).
• Hospitals, whose medical staff “must examine the credentials of all eligible candidates” before recommending appointment (42 CFR 482.22(a)(2)).

A provider who passes is credentialed by that organization only. Credentialling, with two l’s, is the British spelling of the same process.

How is credentialing different from enrollment and privileging?

Sources: 42 CFR 422.204, 424.502, 424.515, 438.214 and 482.22; AHCA Provider Enrollment Policy (Feb 2026), §6.1; First Coast and plan pages; read Oct 20, 2026.

Enrollment is the government’s own step:

“Enroll/Enrollment means the process that Medicare uses to establish eligibility to submit claims for Medicare-covered items and services, and the process that Medicare uses to establish eligibility to order or certify Medicare-covered items and services.”

For telemedicine, a hospital may rely on a distant-site hospital’s credentialing and privileging decisions through an agreement with that hospital (42 CFR 482.22(a)(3)).

What goes on a physician credentialing checklist?

Cigna and Evernorth publish their document lists, and Humana publishes how long each verification stays valid. NCQA’s windows apply to organizations with its credentialing accreditation.

Sources: Cigna and Evernorth credentialing pages; Humana credentialing policy (28th ed.), pp. 4–5; NCQA credentialing guide (Sept 2025), p. 7; read Oct 20, 2026.

What do NCQA credentialing standards require?

NCQA’s credentialing certification covers 11 items: license to practice; DEA or CDS certification; education and training; board certification status; work history; malpractice claims history; state licensing board sanctions; Medicare and Medicaid sanctions; practitioner application processing; application and attestation content; and ongoing monitoring of sanctions. Between cycles, NCQA-accredited credentialing organizations monitor sanctions, license expirations, complaints and quality issues every month.

How long does credentialing take with each payer?

Most clocks start with a complete file: Humana may return an incomplete application unprocessed, UnitedHealthcare counts from “a completed application and all required information”, and Cigna emails for missing items and closes the application if they never arrive.

Cigna loads an approved provider into its directories and claim systems within about 10 business days. Plan-by-plan filing steps are on our payer enrollment page.

What is delegated credentialing?

In NCQA’s words, delegation happens when an organization “gives another entity the authority to perform an activity” it would otherwise perform, such as credentialing. The plan stays responsible: NCQA holds the delegating organization accountable, requires it to oversee the delegate, and evaluates both the delegate’s work and that oversight. With an NCQA-Certified CVO, the plan is relieved, for the certified elements, of the predelegation evaluation, the semiannual reports, the annual performance evaluation and the annual audit of the CVO’s credentialing files; NCQA still assesses the plan on the timeliness of its credentialing decision.

Why is credentialing important before the first patient?

• Medicare Advantage plans must credential the physicians they contract with and may not employ or contract with anyone excluded from Medicare (42 CFR 422.204(b)(2), (b)(4)); Medicaid plans may not employ or contract with excluded providers either (42 CFR 438.214(d)). Run exclusion checks before you file.
• Florida Medicaid plans may sign a provider while state enrollment is pending, but must terminate the provider immediately if the state says enrollment can’t happen, or once 60 days pass without it, and notify the enrollees affected (SMMC contract, Attachment II, §VII.C.2.e).
• Medicare pays for at most 30 days before the effective date, and only if circumstances kept you from enrolling earlier (42 CFR 424.521(a)(1)).

What you can do today

1. Verify each license at the state’s primary source and keep the dated printout (how to verify a Florida license).
2. Re-attest the DataSpring (CAQH) profile and authorize every plan you will apply to.
3. File Medicare in PECOS as soon as the license, NPI and practice location exist.
4. Send each plan a complete packet and log the date it arrived.
5. Diary the follow-ups: Cigna’s status inbox is PSSCentral@Cigna.com (give your full name and TIN); Florida Blue says to call its Network Management Service Unit after 90 days without word.
6. Put DataSpring’s 120-day re-attestation, each plan’s recredentialing and Medicare’s 5-year revalidation on one calendar.

Advixor’s credentialing service covers the preparation, submission, monitoring and follow-up of credentialing and enrollment applications.