A doctor in a white coat writes notes at a wooden desk by a bright window

Consulting

Clinical Documentation Audits: Medical Necessity, QA and Compliance

Medical necessity documentation is the proof behind every claim: if the record doesn't show why a service was needed, the payer can take the payment back. Missing or insufficient documentation accounted for 65% of Medicare's fee-for-service improper payments in fiscal year 2025. Our quality assurance program reviews your progress notes weekly, trains your staff monthly and monitors documentation deadlines.

The short answer

What should medical necessity documentation include?

Proof that each service was provided, at the level billed, and medically necessary. Florida Medicaid's Rule 59G-1.054 lists what each visit record must show, from the chief complaint and diagnosis to progress reports and the treatment plan; insufficient documentation accounted for 53.0% of Medicare's fee-for-service improper payments in fiscal year 2025. The Advixor Group's quality assurance program reviews your progress notes weekly, trains your staff monthly and monitors documentation deadlines.

SourcesMLN909160Rule 59G-1.054CERT 2025 supplemental data

Two Tests

Medical necessity documentation: the test each payer applies

Medicare pays only for “reasonable and necessary” services (42 U.S.C. 1395y(a)(1)(A)). Florida Medicaid’s definition has five parts, all required:

  1. It is necessary to protect life, prevent significant illness or disability, or relieve severe pain (for patients 21 and older).
  2. It is individualized, consistent with the symptoms or diagnosis, and no more than the patient needs.
  3. It meets accepted professional standards and isn’t experimental.
  4. It is the level of care that can be given safely, and no equally effective treatment that is more conservative or less costly is available statewide.
  5. It isn’t mainly for the convenience of the patient, the caretaker or the provider.

“The fact that a provider has prescribed, recommended, or approved medical or allied care, goods, or services does not, in itself, make such care, goods or services medically necessary or a medical necessity or a covered service.”

Florida Medicaid Definitions Policy (May 2024), §2.83

What Auditors Check

Chart audit checklist: Medicare and Florida Medicaid side by side

A clinical documentation integrity review checks the same items an auditor does.

What the auditor checks Medicare (fee-for-service) Florida Medicaid
Signature The treating practitioner’s Signed and dated, or authenticated by initials or computer entry
Deadline to sign No set deadline; an attestation may resolve a missing signature, except on a required order or when a rule set a date Two business days from the date and time of service
Rubber stamp Not typically accepted; allowed for an author with a documented physical disability Must be initialed
Illegible signature Signature log or attestation, within 20 calendar days of the request (not for CERT) Records must be legible
Late entry Dated, authored and “clearly and permanently denoted” May be considered only if germane, made before notice of the audit and added to a contemporaneous note
Records kept 7 years for orders, certifications, referrals and prescriptions 5 years from the date of service (6 for crossover-only providers)

Sources CMS Program Integrity Manual ch. 3, MLN905364, MLN909160, 42 CFR 424.516(f), Rule 59G-1.054, s. 409.913(21)–(22).

A doctor with a stethoscope types clinical notes on a laptop at a desk

Florida Medicaid

Documentation required for Medicaid in Florida, visit by visit

Unless a coverage policy says otherwise, Rule 59G-1.054 requires each visit record, whatever its format (SOAP or another), to show the chief complaint, the date of service, the services rendered, the diagnosis, tests and results, the history and physical, medications and supplies, progress reports, referrals, follow-up scheduling and the treatment plan (several only as applicable).

You send agencies legible copies of requested records at your own expense.

Behavioral Health

Clinical documentation in behavioral health: treatment plans and therapy notes

For therapy and behavioral health practices, Florida Medicaid’s coverage policies add these checks:

  • The treatment plan sets the amount, frequency and duration of each service for six months, never “as needed” or a date range, with the treating practitioner’s statement that the services are medically necessary.
  • The plan takes effect on the practitioner’s signature, and Medicaid “reimburses for services provided within 45 days of the signature.”
  • The plan is reviewed every six months or after a significant change; without one, an addendum signed by the practitioner and the recipient can add or modify services.
  • Therapy: a daily progress note for each service and proof the service is on the plan. Groups run 2 to 15 participants, and every therapy provider must be employed by or contracted with a community behavioral health agency.

Medicare reviewers may never request psychotherapy notes as HIPAA defines them, but session times, modalities, diagnosis, the treatment plan and progress aren’t psychotherapy notes, even in the same document; if what you send doesn’t show medical necessity, the claim is denied.

Medicare Audits

Medical record audit by Medicare: CERT and Targeted Probe and Educate

CERT reviews a random sample of fee-for-service claims each year. For fiscal year 2025 it found 6.55% of payments improper, $28.83 billion, and 8.44% for Part B providers. Among Part B provider types, psychiatry ran 13.3% (60 claims), nurse practitioners 7.2% (835 claims).

“Insufficient” means the reviewer couldn’t tell whether a service was provided, at the level billed, or medically necessary (MLN909160).

Your MAC runs Targeted Probe and Educate (TPE) for providers with high error rates or unusual billing: generally 20 to 40 claims a round, with education after each. Problems that persist after 3 rounds go to CMS, which may order 100% prepayment review, extrapolation or a Recovery Auditor referral. Low billers get rounds of fewer than 20 claims, up to three.

Medicare fee-for-service improper payments in FY 2025, share by error type
Insufficient documentation53.0%
Medical necessity15.3%
No documentation12.0%
Incorrect coding11.1%
Other8.5%

Source CMS, 2025 Medicare Fee-for-Service Supplemental Improper Payment Data, Table A3.

After a Finding

Compliance documentation after a finding: extrapolation, refunds and self-audits

  • 60 daysto report and return a Medicare overpayment you identify.
  • 180 daysthe longest a timely, good-faith investigation can suspend that deadline.
  • 6 yearsthe lookback period.

Source 42 CFR 401.305.

AHCA’s self-audit guidance asks for claim-by-claim detail, and repaying on its terms is the condition for amnesty from sanctions, though further review or enforcement stays possible. Ask your attorney whether and how to disclose.

AHCA’s Medicaid Program Integrity office validated 333 self-disclosures worth $385,579 in FY 2024–25. On June 12, 2026, the state announced more claims monitoring and a revalidation of every active Florida Medicaid provider.

We also prepare Medicaid self-audits and Medicare refunds, working alongside your attorney.

Our Program

Quality assurance in healthcare: our weekly and monthly program

Our Clinical Documentation and Quality Assurance Program is part of our healthcare consulting for medical and behavioral health practices.

Each audit samples your records and claims, checks them against the payer’s rules, reports the patterns, trains your clinicians and re-audits.

The sample size, the look-back period and the payer rules are set for your practice before the first audit, and the fee and turnaround are quoted in writing after we go over your needs.

Quality assurance program

The program includes:

  • Weekly review of progress notes
  • Monthly training by employee classification and identified needs (HR and staff training)
  • Monthly supervision meetings with the clinical director
  • Monitoring of caseloads and documentation deadlines
  • Weekly curriculum review and maintenance, where it applies
Book a consultation

Quick answers

Medical necessity documentation: audits, signatures and QA

Audit deadlines, who signs notes drafted by a scribe or an AI tool, a departed clinician's notes and what to ask a quality assurance company. Ask about your own records in a consultation.

Two doctors in white coats review a patient chart together on a tablet
How do I prepare for a chart audit?
Meet the deadline: 45 calendar days for a MAC, RAC, SMRC or CERT request and 30 for a UPIC, after which the claims can be denied (42 CFR 405.903(b)–(c) and 405.929(b)–(c) set the days; 405.930 the denial). Send every record that supports the claim, including the note that ordered the service.
Do notes drafted by a scribe or an AI tool need the clinician's signature?
CMS doesn't require the scribe to sign; the treating practitioner's signature affirms the note documents the care, and CMS requires the same concurrence when AI transcribes the entries (Program Integrity Manual ch. 3, §3.3.2.4).
Can another clinician sign or attest a note for a provider who left?
Medicare reviewers consider only attestations signed and dated by the author of the entry, and CMS says one member of a group should not sign for another, in the record or in an attestation; an attestation also can't "backdate" a plan of care that had to be signed first (Program Integrity Manual ch. 3, §3.3.2.4). Ask your attorney how to handle a departed clinician's unsigned notes.
What should we ask a quality assurance company before we hire one?
Which payer rules it audits against, how many records per clinician and how far back, whether a licensed clinician reviews medical necessity, and whether it trains your staff on what it finds.
Why does documentation matter so much if we did provide the care?
Florida Medicaid bases an overpayment solely on contemporaneous records, and you can't contest it with records you didn't furnish when asked during the audit (s. 409.913(21)–(22), F.S.).

Talk to an advisor

You care for patients. Who’s taking care of the business?

Tell us where your practice is today. We will tell you what we would do first.

Official sources

Read Oct 19, 2026, except the three marked Oct 17.