Mastering the 120-Day CAQH Attestation Cycle to Protect Practice Revenue

:::info Quick answer CAQH attestation is the mandatory process where a healthcare provider confirms their CAQH ProView profile data is accurate. You must complete a CAQH attestation every 120 days. Failing to re-attest freezes credentialing applications and causes commercial payers to drop providers from active in-network directories, halting claim payments. :::

If you process medical claims for a living, you already know the sinking feeling of seeing a bulk batch of claims deny for out-of-network status, only to discover the provider's network contract lapsed because someone forgot to click a single button. That button is the CAQH attestation.

The Council for Affordable Quality Healthcare (CAQH) ProView database is the central credentialing clearinghouse for the vast majority of US commercial payers. UnitedHealthcare, Aetna, Cigna, and most regional Blue Cross Blue Shield plans pull data directly from CAQH to verify that your doctors have active medical licenses, valid malpractice insurance, and current DEA certificates.

But setting up a profile once is not enough. You have to actively maintain it. A successful CAQH attestation resets a strict 120-day countdown clock. If you hit day 121 without re-attesting, the profile locks. Payers cannot pull your data. Credentialing stalls. Eventually, active providers get booted from payer directories, and your clean claims start hitting the floor with PR-242 (Services not provided by network/primary care providers) or CO-16 denials.

Here is how to build a foolproof system to manage these cycles, handle expired documents, and keep your practice's cash flow moving in 2026.

The 120-Day Clock: How ProView Dictates Your Cash Flow

Commercial payers hate manual data entry just as much as you do. Instead of asking providers to submit paper credentialing applications, payers use automated API pulls from CAQH ProView to update their internal systems.

This system only works if the payers trust the data in CAQH. To enforce accuracy, CAQH mandates a re-attestation every 120 days. When you attest, you are legally declaring that every piece of information in the profile—from the practice's billing address to the provider's hospital privileges—is current and accurate.

The 2026 Directory Mandate Pressure

Historically, missing an attestation deadline by a week or two might slide under the radar. That leniency is gone. As of September 2026, the ongoing enforcement of the No Surprises Act has forced health plans to strictly audit their provider directories. CMS actively penalizes payers for maintaining "ghost networks" filled with inaccurate provider data.

To avoid fines, payers have aggressively tightened their integration with CAQH. If an attestation lapses, algorithms at Aetna and UHC automatically flag the provider for directory suppression. Once suppressed in the directory, the claims adjudication system treats the provider as out-of-network. You will spend hours on hold with provider relations trying to retroactively appeal out-of-network claim denials, all because a 120-day deadline slipped through the cracks.

A Step-by-Step Guide to the 2026 CAQH Attestation Workflow

Managing a CAQH profile requires treating it like an active administrative asset, not a set-it-and-forget-it web form. Here is the exact workflow you should follow to handle a re-attestation.

Phase 1: The Pre-Attestation Document Audit

Never log into CAQH ProView without your updated documents already sitting in a desktop folder. If you try to find documents on the fly, the system will time out, and you will lose your progress.

Before you initiate the attestation, audit the provider's primary source documents. Check the expiration dates on everything currently uploaded to the profile. If the provider's medical license expires next month, do not attest with the old license. Get the renewed license from the state medical board first. If you attest with a document that expires in five days, payers pulling your file on day six will reject the credentialing application.

Gather high-quality PDFs of the following items:

• State medical licenses (all active states)
• Current DEA registration certificate
• State controlled substance registrations (CSR/CDS)
• Current Certificate of Insurance (COI) for professional liability/malpractice
• Board certification documents

Phase 2: Updating the ProView Data Core

Log in using the Practice Manager module if you handle multiple providers, or directly via the provider's ProView ID. Navigate through the core data sections. Pay close attention to the practice locations.

A massive pain point for billers is address formatting. The primary practice address in CAQH must match the address on your W-9, and it must match the service facility location (Box 32 on the CMS-1500) exactly. If CAQH says "Suite 100" and your claims say "Ste 100," older payer legacy systems will sometimes generate a mismatch error and delay enrollment.

Review the hospital privileges section. If the provider left a hospital staff, remove the privilege. Payers verify hospital affiliations during re-credentialing, and phantom privileges will cause the file to fail committee review.

Phase 3: Executing the Attestation and Forcing Payer Updates

Once the data is clean and the new PDFs are uploaded, you reach the final screen. You must read the global authorization and click the "Attest" button.

However, clicking attest is only half the job. You must ensure payers have permission to see the data. Navigate to the "Authorize" tab. You can choose to authorize all participating health plans (highly recommended for private practice) or select specific payers manually. If a specific payer is not authorized in this tab, they cannot see your freshly attested profile, and your credentialing application with them will die in a pending status.

The Documents You Need (and Why They Cause Delays)

The CAQH system is notoriously picky about documentation. A blurry PDF or a missing signature will trigger an automatic rejection from the payer's credentialing team, even if CAQH technically accepts the file upload.

Here is a breakdown of the core documents, their typical cadences, and the specific traps you need to avoid.

Malpractice Insurance Gaps

The absolute fastest way to fail credentialing is a malpractice coverage gap. Your Certificate of Insurance must clearly state the effective date and the expiration date. If your practice recently changed carriers, you must upload the new policy AND the tail coverage document from the previous carrier to prove continuous coverage. If CAQH shows a three-day gap in liability coverage between policies, Aetna and Cigna will flag the file for medical director review, adding up to 45 days to your enrollment timeline.

Address Validation and the NPPES Registry

Your CAQH profile does not exist in a vacuum. Payer credentialing algorithms bounce your CAQH data against the CMS National Plan and Provider Enumeration System (NPPES) registry.

If you update a provider's practice address in CAQH, you must also log into the NPI registry and update it there. If the NPI registry shows an old address and CAQH shows a new one, the discrepancy will trigger a manual review flag. Always sync your CAQH updates with your NPPES updates on the exact same day.

Managing Re-Attestation Across Group Practices

Handling CAQH for a solo practitioner is a minor administrative chore. Handling it for a 45-provider multi-specialty group is a full-time logistical operation.

The Roster Problem

When a provider joins a group practice, the biller or credentialing coordinator must link the provider's individual CAQH profile to the group's Tax ID (TIN) and billing NPI.

The mistake practice managers make is creating duplicate CAQH profiles. A provider should only ever have one CAQH ProView ID over their entire career. If you hire a physician out of residency, they likely started a profile during their hospital rotations. Do not create a new one. Recover the existing login, update the practice locations to reflect your clinic, and execute the attestation.

Using Practice Manager Logins Effectively

Do not rely on doctors to forward you automated reminder emails. CAQH sends notifications at 30 days, 15 days, and 5 days prior to the attestation deadline. If those emails go to a physician's junk folder, the profile will expire.

Instead, utilize the CAQH Practice Manager module. This allows a credentialing coordinator to link multiple provider profiles under a single administrative dashboard.

To build a bulletproof system:

• Create a shared credentialing email alias (e.g., credentialing@yourpractice.com) and set it as the primary contact email in every provider's CAQH profile.
• Set up an independent practice calendar in Outlook or Google Calendar dedicated solely to credentialing deadlines.
• Log into the Practice Manager dashboard on the 1st and 15th of every month.
• Filter the roster by "Attestation Due < 30 days" and immediately process those files.
• Never let a provider drop below the 15-day mark. If a document is missing and takes two weeks to arrive from a state board, a 15-day buffer saves your network status.

Delegated Credentialing vs. Standard CAQH

If your group has grown large enough to negotiate delegated credentialing contracts with payers, your CAQH reliance shifts. Under delegated credentialing, the payer trusts your internal credentialing committee to vet providers. You submit a monthly roster directly to the payer, bypassing the individual application process.

However, even if you are delegated, most NCQA-accredited health plans still require you to maintain active CAQH profiles for your providers as a secondary data source. Do not let CAQH maintenance slip just because you secured a delegated contract.

Troubleshooting Common CAQH ProView Errors

Even with a perfect calendar, you will run into system glitches and payer miscommunications. Here is how to fix the most common roadblocks.

Error: "The payer cannot find my profile"

You submitted a network enrollment application to UnitedHealthcare. Three weeks later, UHC sends a letter stating they are closing the file because they cannot locate the provider in CAQH.

This happens for three reasons:

1. Authorization Failure: You failed to authorize UHC in the "Authorize" tab. Go back, check the box for UHC, and re-attest.
2. ID Mismatch: You put the wrong CAQH ID number on the payer's application form. Verify the ID number matches exactly.
3. Data Lock: The profile is not in an "Attested" status. If a single required field is blank, CAQH saves the profile as a draft but does not transmit it to payers. You must complete the missing field and hit the final attest button.

Error: The Expired Document Loop

You upload a new malpractice COI that expires in 2027. You attest. The next day, CAQH emails you saying a document is expired.

This usually occurs when you upload a new document but fail to delete the old one. CAQH reads the metadata of the oldest file attached to that document category. Go into the document repository, permanently delete the expired 2025 COI, ensure only the 2027 COI is present, and re-attest.

The Final Word on Directory Accuracy

Treat the CAQH database with the same operational respect you give your clearinghouse or your EMR system. Accurate credentialing data is the bedrock of revenue cycle management. If you master the 120-day CAQH attestation cycle, you eliminate the single most frustrating source of administrative claim denials and protect your practice's bottom line.

Frequently asked questions

What is a CAQH attestation?

A CAQH attestation is a mandatory digital declaration made every 120 days by a healthcare provider (or their credentialing proxy) confirming that all demographic, educational, and credentialing data within their CAQH ProView profile is accurate and up to date.

What happens if I miss the 120-day CAQH attestation deadline?

If you fail to attest every 120 days, your CAQH profile locks. Payers will not be able to pull your data for credentialing or re-credentialing. This quickly leads to removal from active in-network provider directories and causes out-of-network claim denials.

Can a practice manager complete a CAQH attestation for a physician?

Yes. Medical practices can use the CAQH Practice Manager portal to link multiple providers to a single administrative dashboard. The practice manager or credentialing coordinator can update documents and attest on behalf of the providers.

How do I fix a missing provider profile error from a payer?

If a payer claims they cannot see your CAQH profile, log in and verify three things: your profile is currently in 'Attested' status, the specific payer is checked in the 'Authorize' tab, and you have provided the payer with the correct CAQH ID number.

Does my CAQH address need to match my NPPES NPI registry address?

Yes. Payer credentialing algorithms cross-reference your CAQH data with the federal NPPES registry. If the primary practice addresses do not match exactly, payers will often flag the credentialing application for manual review, delaying network enrollment.