When your client is surveyed, agency staff personnel records are the evidence

Before a surveyor has spoken to anyone clinical, the hospital hands over a list of its contracted services. The scope and nature of each one is set out beside it. Your agency is named on that list, and the team asks for the document again during survey activities. It gets produced twice in two days.

Your agency staff personnel records enter later. A surveyor draws a sample of staff personnel records and includes contract and agency staff in it. Nobody at your organization is told the request is coming. Your client answers out of the files your team assembled, on a timetable you did not set. The finding lands on the health system. The evidence comes from your files, and anything traced back to contracted staff becomes a conversation about your contract.

Page 97 puts agency staff personnel records inside the sample

The surveyor working in your client's building has a written instruction that names agency staff. It sits on page 97 of the Joint Commission's Hospital Accreditation Survey Process Guide, the version that took effect on January 1, 2026. The guide runs to 709 pages and it is what the survey team works from.

The instruction is written against the patient rights condition of participation. It reads: "Review a sample of staff personnel records, including contract or agency staff, to determine if the training and demonstration of competency for restraint and seclusion have been completed during orientation and on a periodic basis consistent with hospital policy".

Read the scope first. It covers restraint and seclusion training and nothing wider. Its structure is what should interest you. The sample comes out of personnel records. Contract and agency staff are named inside it, in the surveyor's own text. Two things are being tested: that training was completed, and that competency was demonstrated. Both at orientation, and again periodically after it.

Agency staff personnel records built around receipt cannot answer that. A saved certificate shows a document arrived. The surveyor is asking about completion, demonstration and the dates of both.

Responsibility for contracted services sits with the governing body

The hospital cannot transfer this responsibility to you. It can transfer the work of producing the evidence, and that is what happens. 42 CFR 482.12(e) states: "The governing body must be responsible for services furnished in the hospital whether or not they are furnished under contracts". The same regulation requires a list of every contracted service and safe, effective performance of the contracted work.

The accreditation requirement sitting on top of it is LD.13.03.03. EP 1 requires that "The hospital maintains a list of all contracted services, including the scope and nature of the services provided". EP 2 puts the governing body in charge of all services provided in the hospital, contracted ones included. It has to assess that those services are safe and effective, and act on issues of quality and performance.

One 2026 change reaches your own paperwork. The Leadership chapter was renumbered under Accreditation 360, so any contract, policy or compliance manual drafted before then cites a contracted services standard the current guide does not contain. Most published commentary still uses the old number.

What the survey team is holding by the end of day one

Surveys are unannounced. The team arrives no earlier than 7:45 a.m., enters together, and starts asking for documents straight away. What it collects on arrival is published in advance.

Preliminary planning takes in the contracted services list, department heads and their locations, the organizational chart and a floor plan. It also takes the addresses of off-site locations operating under the same provider number, a list of employees by department, and the medical staff bylaws and rules. During survey activities the team asks again for the organizational chart, twelve months of governing body minutes and the contracted services list. By the end of day one it holds a list of employees with name, position and primary location.

Your placed staff appear nowhere on that employee list. They are accounted for on the contracted services document, and that is where a surveyor works back from when the sample is drawn. The agency staff personnel records inside it are yours. The guide adds that its published list is not exhaustive. Surveyors may ask for further documents at any point to explore or validate what they have seen and heard.

An undated verification cannot be shown to be current

A check you completed properly can still be unusable when your client's surveyor opens the file. What breaks it is what the entry does not say.

NAMSS sets a recency window in its Ideal Credentialing Standards. Primary source verification of the thirteen criteria it lists should be completed inside the 180 days running up to the credentialing decision. NAMSS defines primary source verification as obtaining and verifying a credential directly from the original issuing entity.

The accreditation standards allow a range of methods and are specific about recording the act. Under HR.11.01.03, licensure may be verified by secure electronic communication or by telephone, with one condition attached: "if this verification is documented".

Three fields decide whether the entry holds up. A verification with no date against it cannot be shown to sit inside the 180-day window, however carefully it was done. An entry naming no issuing source is indistinguishable from a copy of a copy. And an entry with no verifier on it cannot be attributed to anybody, including the person who did the work.

When your verification can count as a primary source

This is the part most agency files handle badly, and it decides whether your client can use your evidence or has to produce it again.

NAMSS is direct about the hierarchy. Secondary sources include verification from another facility, or confirmation from a source that itself verified the credential. They are appropriate only where the primary source no longer exists, in line with the organization's policy and its accreditor's standards. NAMSS adds that secondary sources are unacceptable for many data elements.

There is a route through, and it is narrower than it looks. A note to HR.11.01.03 states that a primary verification source may designate another agency to communicate credentials information, and that the designated agency can then be used as a primary source. An external credentials verification organization may also be used where it meets the guidelines in the guide's glossary. The note turns on designation by the issuing source. Who employs the person doing the checking has no bearing on it, so this is not a general permission for staffing agencies.

In practice, this means the category of each verification has to be visible in your record. Where your file does not show which category applies, a health system under time pressure runs the verification again. That leaves a note on their side saying your file did not answer the question.

Logging it so someone else can use it

For every person you place, agency staff personnel records need the requirement set that applies to that client and that role. Against each item in that set, they need the evidence held. Each entry then carries three fields: the source, the date it was completed and the person who completed it. The record also has to come out filtered by client, by name and by date, because that is the shape the request arrives in.

Credentially has been working on that since 2017. Verification checks are configurable into a requirement set per client and per role. A hospital asking for an extra competency record on top of your standard pack is configured once, then applied to everyone you place there. Uploaded documents are classified and the data extracted, including handwritten text. Primary source verification stores the issuing source and the completion date against the person. The activity trail underneath records who took each action and when, including electronic signatures and completed PDF forms. Audit reporting reads from that trail, so a request for a named group at a named client resolves to a filter and an export. Role-based access control sets who inside your organization can see or change any of it.

The sample includes eight nurses your agency placed

On day two of the survey the sample lands, and it includes eight nurses your agency placed across two units. The health system's coordinator emails your compliance inbox at 11 a.m. asking for orientation completion, periodic competency records and current license verification for all eight. Worked from a maintained record, that is three steps: filter to the client, filter to the eight names, export. Each line carries the requirement, the evidence held against it, the completion date, the issuing source and the person who did the work. Three of the eight were onboarded by a coordinator who left in March. Their entries read exactly like the other five, because the detail went into the record when the check was done. The export goes back inside the hour, in the format the coordinator hands to the surveyor.

Where the entries only show that a certificate arrived and was saved, the same email takes the rest of the day. Your team searches shared drives and mailboxes, rebuilds what it can, and sends nineteen separate PDFs at 6 p.m. The coordinator assembles a summary by hand while the survey is still running.

The clauses in the survey guide are the clauses in your next contract

Contracted services sit inside the hospital's quality assessment and performance improvement program, and the guide's evaluation tool is specific about what that looks like on paper. Documentation has to show participation by all contracted services. Written contracts have to include QAPI requirements and the roles and responsibilities of the contractor.

Surveyors are told to ask for evidence that the contractor is actively involved. They check whether the governing body, medical staff and administrative officials periodically review quality data from the contractor, and whether that data shows positive outcomes for the services provided.

Three documents go alongside those answers: the current list of contracted services with the scope and nature of each, the procedures for assessing their quality and effectiveness, and a QAPI plan covering every contracted service.

A health system that has been asked those questions writes the answers into its agreements. Four items are already specified: QAPI requirements in the contract, the contractor's roles and responsibilities defined, quality data reaching the governing body on a stated schedule, and evidence that the contractor took part. Expect them in your next master services agreement, with a turnaround time on file production attached alongside. What a client asks for at renewal is what its surveyor asked for last time.

References

1. Joint Commission, Hospital Accreditation Survey Process Guide, copyright 2026, changes effective January 1, 2026, 709 pages. Source of the page 97 personnel record instruction, which is written against 42 CFR 482.13(f)(4); LD.13.03.03 EP 1 and EP 2; the 42 CFR 482.12(e) text; the unannounced survey and 7:45 a.m. arrival; the preliminary and survey activity document lists; HR.11.01.03 and its notes; and the performance improvement evaluation tool on contracted services. https://digitalassets.jointcommission.org/api/public/content/64731897e3d94ca69e54042c2e27d9c6?v=19446f24 (retrieved August 23, 2026)
2. 42 CFR 482.12, Condition of participation: Governing body, including 482.12(e), Contracted Services. https://www.govinfo.gov/content/pkg/CFR-2024-title42-vol5/xml/CFR-2024-title42-vol5-sec482-12.xml (retrieved August 5, 2026; text also quoted in the 2026 Survey Process Guide and verified August 23, 2026)
3. 42 CFR 482.13, Condition of participation: Patient's rights, and specifically 482.13(f)(4), the subsection the page 97 surveyor instruction is written against. https://www.ecfr.gov/current/title-42/section-482.13 (eCFR, title 42 issue date August 13, 2026)
4. NAMSS, The Ideal Credentialing Standards for Initial-Practitioner Applicants, February 2025. Source of the 180-day primary source verification window and the primary and secondary source definitions. https://www.namss.org/Portals/0/NAMSS_1506450-25_ICS-Document-Update-4.pdf (retrieved August 23, 2026)