Medical Credentialing Services: What They Cost, How Long They Take, and When to Outsource

Credentialing is the least glamorous part of running a practice and one of the most expensive to get wrong. A physician who starts seeing patients before their payer enrollment is effective generates claims that will be denied, and depending on the plan, some of that revenue is simply not recoverable retroactively. The cost of a delayed enrollment is not the administrative fee. It is the weeks of a provider's schedule that cannot be billed.

This is why medical credentialing services get outsourced more often than almost any other back-office function. The question worth answering carefully is not whether outsourcing works, but what it should cost, how long the work genuinely takes, and where an outside team adds leverage that internal staff cannot.

What credentialing actually includes

People use one word for three distinct processes, and vendors price them differently. Get the vocabulary straight before you compare quotes.

Credentialing proper is the verification of a provider's qualifications: education, training, licensure, board certification, work history, malpractice history, and sanctions checks. The core of it is primary source verification, meaning the verifying organization confirms each credential directly with the issuing source rather than accepting a copy.

Payer enrollment, sometimes called provider enrollment, is the process of getting the verified provider into a health plan's network and its claims system, with a contract, an effective date, and a linkage to the correct group tax ID and practice locations. This is the part that determines whether claims pay.

Privileging is a hospital or facility function: what procedures a provider is permitted to perform in that facility. Separate process, separate committee, separate timeline.

A practice can be fully credentialed and still unable to bill, because enrollment is incomplete. That gap causes more revenue loss than any other credentialing failure.

Realistic timelines in 2026

Ask a vendor how long enrollment takes and a careful one will refuse to give a single number, because the variance is enormous by payer and by state. What follows are working ranges from typical commercial and government processes, not guarantees.

• CAQH ProView profile build and attestation: about one to two weeks, mostly limited by how fast the provider supplies documents.
• Commercial payer enrollment: commonly 60 to 120 days from a clean, complete submission. Some plans move faster; some regional plans and closed panels take considerably longer or decline new providers outright.
• Medicare enrollment via PECOS: often 45 to 90 days, with retroactive billing generally permitted for a limited window before the application receipt date under current rules — confirm the current retroactivity provisions for your enrollment type rather than assuming.
• Medicaid enrollment: highly state-dependent, frequently 60 to 180 days.
• Hospital privileging: typically 90 to 150 days, driven by committee meeting schedules more than by paperwork speed.

The practical planning rule most groups adopt: begin enrollment 120 to 150 days before a provider's intended start date, and do not schedule payer-dependent appointments until effective dates are confirmed in writing. A provider hired with 45 days' notice will have a partially billable first quarter no matter who does the paperwork.

What credentialing services cost

Pricing in this market falls into three shapes, and the right one depends on how often you add providers.

Per-provider, per-payer fees are the most common for small practices, generally landing somewhere in the range of one hundred to two hundred dollars per payer application, with initial full credentialing packages for a single provider across a standard payer panel often quoted in the several-hundred to low-thousands range. Ask exactly which payers are included, because a quote covering six plans and a quote covering fifteen are not comparable.

Monthly per-provider retainers, frequently in the low hundreds of dollars per provider per month, cover ongoing maintenance: CAQH attestations, license and DEA expiration tracking, demographic updates, recredentialing cycles, and roster reconciliation. This model makes sense once you have more than a handful of providers, because maintenance is continuous work and project pricing does not cover it.

Bundled with revenue cycle management, where credentialing is folded into a billing relationship. This can be the best value when it is real capability rather than a checkbox — the advantage is that the team fixing your out-of-network denials is the same team that owns the payer files causing them.

Add-ons that commonly sit outside the base fee: primary source verification packages, NPI registration, CLIA or facility enrollment, out-of-state licensure support, hospital privileging applications, and expedited handling. Get the exclusion list in writing.

The documents that hold everything up

Nearly every delayed application traces back to the same short list. Assemble these before the first submission and the process compresses noticeably.

• Current state license or licenses, plus DEA registration for each state where the provider prescribes.
• Board certification documentation and, where applicable, ECFMG certification.
• Complete work history with month-and-year precision, and written explanations for any gap longer than 30 days.
• Malpractice insurance certificate showing coverage limits and dates, plus claims history.
• Diploma and residency or fellowship completion documentation.
• NPI numbers — both individual (Type 1) and group (Type 2) — with taxonomy codes that match what you intend to bill.
• A completed, attested CAQH ProView profile with current documents uploaded and the correct payers authorized to access it.
• W-9, group practice information, tax ID documentation, and every service location address exactly as it should appear in payer files.
• Hospital affiliations and admitting arrangements, including coverage arrangements if the provider does not admit.

In-house versus outsourced

Keeping credentialing in-house is defensible when you rarely add providers, contract with a small and stable payer panel, and have an experienced coordinator who owns the calendar. Institutional knowledge of your specific payers is genuinely valuable, and it walks out the door when that coordinator leaves.

Outsourcing tends to win when you are hiring regularly, expanding into new states or new plans, running multiple locations or tax IDs, or when your current process is reactive — meaning you learn a credential expired because a claim denied. It also wins when the cost of the alternative is measured properly: a provider idle for six weeks costs far more than a year of credentialing fees.

A hybrid model works well for mid-size groups. Keep an internal owner who holds the master roster, the calendar, and the relationships, and buy the application labor and follow-up. The failure mode of full outsourcing is diffusion of responsibility — nobody internal knows the status until something breaks — and a named internal owner prevents it.

How to evaluate a credentialing partner

The questions below expose capability quickly, because they cannot be answered well without having done the work.

• What is your average days-to-approval by payer type, and can you show it for the last twelve months in my state?
• How often do you follow up on a pending application, and through what channel — portal, phone, or payer representative? Weekly follow-up with logged contacts is the standard that matters.
• Who is my named coordinator, and what is their provider caseload?
• How do you track expirables — licenses, DEA, malpractice, board certification, CAQH attestation — and what does the alert schedule look like?
• Do you handle recredentialing automatically, or is it a separately triggered project?
• How do you reconcile payer rosters, and how frequently? Roster drift is a leading cause of mysterious out-of-network denials for providers who were enrolled correctly a year ago.
• What reporting will I receive, and does it show application status by provider and payer with dates?

Where credentialing projects go wrong

The gap between a well-run and a poorly run enrollment is rarely skill. It is follow-up discipline and a handful of avoidable mistakes that repeat across practices of every size.

Submitting incomplete applications is the most common. Payers do not usually reject an incomplete application; they set it aside and request more information, and the clock effectively restarts. A single unexplained 45-day work-history gap can cost six weeks. Review every application against a checklist before it goes out, not after it comes back.

Treating submission as completion is the second. An application that is submitted and not followed up on can sit in a queue indefinitely. The practices with the fastest approvals are the ones calling every week with the application reference number and logging who they spoke to and what was said. That log is also what lets you escalate credibly when a plan claims it never received anything.

Letting CAQH go stale is the third. Providers must re-attest periodically, and an expired attestation quietly blocks payers from pulling current data — which surfaces later as a mysteriously stalled application. Documents uploaded to CAQH also expire on their own schedule; a current profile with an expired malpractice certificate attached is not a current profile.

Mismatched data between systems is the fourth and the hardest to see. The address on the W-9, the address in PECOS, the address on the payer application, and the address on the claim must agree. Taxonomy codes must match between NPPES and the payer file. Small inconsistencies produce denials months later that look like anything except a data mismatch.

Finally, scheduling patients before effective dates are confirmed. It is an understandable pressure — a new provider is expensive to keep idle — but claims submitted before an effective date generally do not pay, and depending on the plan and state, some cannot be recovered retroactively at all. Confirm dates in writing, then build the schedule.

Recredentialing is the part everyone forgets

Initial enrollment gets attention because a new hire is visible. Recredentialing is invisible until it fails. Most payers re-verify providers on a roughly three-year cycle, CAQH requires re-attestation several times a year, and licenses, DEA registrations, and malpractice policies all expire on their own independent schedules.

Missing a recredentialing deadline can drop a provider from a network, and reinstatement is often slower than the original enrollment. Meanwhile, claims deny as out of network and patients receive surprise balances, which is a service problem on top of a revenue problem.

The fix is unglamorous: a single master calendar containing every expirable for every provider, with alerts at 180, 120, 90, and 30 days, and a named owner for each item. Whether that calendar lives with your staff or a partner matters far less than whether it exists and is reviewed monthly.

The decision, in one paragraph

Estimate the daily collections of one provider in your practice. Multiply by the number of business days you would lose to a delayed start — thirty is a conservative figure for a poorly managed enrollment. Compare that to a year of credentialing service fees. For most practices the comparison is not close, which is why the real question is rarely whether to get help, but whether the help you hire tracks expirables, follows up weekly, and reports status in a form you can read without asking.