Work the provider credentialing timeline backward from the start date

A start date gets agreed in a meeting nobody from credentialing was in. Recruiting has a signed offer and the date lands on March 1. The provider credentialing timeline that decides whether that physician can treat patients and be paid for it on March 1 started somewhere else, on a date nobody in that room set.

Two sequences run from there. One ends with the governing body granting privileges, the other with a Medicare billing effective date. They have different owners and different failure modes, and the start date only holds once both have cleared.

90 to 180 days, and the clock starts at a complete application

MGMA puts credential verification and approval at 90 to 180 days from the submission of a provider application. Work backward from March 1 on the slower end of that range and the application has to be complete and submitted by early September.

Every provider credentialing timeline runs from a complete application, which is a later date than the signed offer and one that onboarding trackers often do not record. Trackers tend to hold the offer date and the start date, with nothing in between.

Privileging then moves through two bodies in sequence. Joint Commission standard MS.17.01.03 requires the hospital to verify in writing and from the primary source whenever feasible, or through a credentials verification organization, the applicant's current licensure at the time of initial granting, renewal and revision of privileges and at the time of license expiration. Relevant training and current competence are verified the same way, without those timing triggers attached. The standard also requires the medical staff to examine each candidate's credentials and recommend to the governing body, which is the body that appoints, mapping to the Medicare Condition of Participation at 42 CFR 482.22(a)(2).

Where the governing body meets monthly, a file that misses the packet deadline waits for the next meeting, and that interval rarely appears on a plan that treats credentialing as one line item.

Primary source verification has a shelf life

NCQA sets how recent each verification must be at the credentialing decision, and the window differs by element and by program. Under Credentialing Accreditation, license to practice, work history and the application attestation hold for 180 days, while board certification, malpractice history, sanctions and exclusions hold for 120. Under Credentialing Certification those tighten to 90 days, with work history and attestation at 120.

A stalled file expires from the inside. A wait on one outstanding peer reference can push malpractice history past its 120-day window, and the re-pull starts from scratch.

The provider feels that before your team does. Someone who sent a training certificate in September is asked for it again in December, having already answered the same questions for another organization that quarter.

CMS stops the enrollment clock for data quality problems

Medicare enrollment runs on its own track. CMS requires its Medicare Administrative Contractors to process 95 percent of electronic CMS-855 initial applications needing no site visit, development or fingerprinting within 15 calendar days of receipt, and 100 percent within 50. Where a site visit, development or fingerprinting is required, that becomes 95 percent within 50 days and 100 percent within 85.

The stoppage rules decide the actual date, and they sit further down the same manual. Under the Medicare Program Integrity Manual the clock pauses on referral to the OIG or a Unified Program Integrity Contractor, on referral to NPPES to correct provider data, on referral to the Social Security Administration or the IRS to resolve a number discrepancy, and, where fingerprints are required, from the request until results come back.

Every stoppage there except the integrity referral is a data quality problem: a name that does not match NPPES, or a fingerprint appointment nobody booked. All of them can be resolved before filing, and after filing the correction runs on the contractor's schedule.

Your billing effective date is set by the day you filed

Under 42 CFR 424.520(d), the effective date of Medicare billing privileges for physicians, non-physician practitioners and their organizations is the later of the filing date of an enrollment application a contractor subsequently approved, or the date the provider first began furnishing services at the new practice location. The filing date is the date the contractor received it.

42 CFR 424.521(a)(1) allows retrospective billing for up to 30 days before that effective date where circumstances precluded enrollment in advance. Ninety days is available only after a Presidentially declared disaster under the Stafford Act.

CMS publishes a worked example. A physician starts at an office on March 1, the CMS-855I is filed on May 1 and approved on June 1. The effective date of billing privileges is May 1, the filing date, and the retrospective billing date is April 1. In CMS's own words, "claims submitted for services provided before April 1 will not be paid".

The physician worked and charted through March, and the filing date put those claims outside the retrospective window.

What a one-day delay is worth

MGMA, citing a 2019 Merritt Hawkins survey, puts the cost of a one-day delay in provider onboarding to a medical group at $10,122. MGMA published that in August 2021 and the survey behind it is from 2019, so treat it as an order of magnitude rather than a current rate. On that arithmetic a provider credentialing timeline running 30 days long reaches six figures.

A second loss sits in the regulation itself. Care furnished more than 30 days before the Medicare enrollment effective date cannot be billed, under 42 CFR 424.521(a)(1)(i).

Every temporary privileges application triggers its own NPDB query

Temporary privileges are the mechanism medical staff offices reach for when a start date arrives ahead of the file. The Joint Commission sets requirements for them at MS.17.04.01 under the standards effective January 1, 2026.

They carry a cost that compounds in staffing models. Under 45 CFR 60.17(a) a hospital must query the NPDB whenever a practitioner applies for a position on its medical staff or for clinical privileges, and every two years after that. The NPDB Guidebook applies that to temporary privileges specifically, and its own example is a practitioner applying for temporary privileges four times in one year, which generates four mandatory queries. The Guidebook says the same applies each time a locum tenens practitioner applies.

Under 45 CFR 60.17(b) a hospital that does not query is presumed to know anything the NPDB holds on that practitioner, and NPDB warns the failure may hand that information to a malpractice plaintiff's attorney.

Where surveyors found the gaps between May 2024 and May 2025

Across Joint Commission hospital surveys between May 2024 and May 2025, compliance with medical staff bylaws produced 355 scored opportunities for improvement. Ongoing professional practice evaluation produced more than 200. Focused professional practice evaluation and practicing within the scope of privileges both ranked in the top five.

Those findings cluster on the steps that get squeezed when a file is late: the recommendation the bylaws require, and the evaluation that should follow a newly granted privilege.

One note for anyone auditing their own documentation this year. Every standard in the Joint Commission Medical Staff chapter was renumbered effective January 1, 2026 under Accreditation 360: primary source verification is now MS.17.01.03 and temporary privileges is MS.17.04.01. The focused professional practice evaluation standard that produced those survey findings is now MS.18.02.01. The substance is unchanged, so policies and audit tools still carrying pre-2026 numbering point at standards that no longer exist.

Building the provider credentialing timeline backward from the start date

MGMA's 90 to 180 days sits outside your control, and so does the contractor's processing queue. The interval you can measure is the one inside your own office: the days between the signed offer and a complete application, and the days a verification request sits unsent.

Credentially runs automated primary source verification and real-time compliance monitoring with daily re-checks and expiration alerts, so a document approaching its expiration date is flagged before the file reaches committee. Candidates upload documents from a phone through a self-service portal, OCR verification reads them on receipt, references are chased automatically, and configurable role-specific workflows keep a nurse practitioner's sequence separate from a surgeon's.

Health Carousel doubled its credentialing output without expanding the team. Average credentialing time went from 15 to 20 business days down to 10, and audit time from weeks to one day. Compressing that internal interval moves both filings earlier, because the same document set and the same internal queue feed the credentialing packet and the CMS-855. At brand level Credentially describes onboarding compressing from an industry average of 60 days to as few as 5, where the 5 days covers the steps the platform manages and third-party verifications run in parallel.

Take the last three providers who started late and rebuild the provider credentialing timeline for each, starting with the day the complete application arrived and the day the CMS-855 was filed, and set both against the date in the offer letter. The ROI calculator prices those gaps on your own volumes, and the primary source verification page covers what gets verified and how the evidence is held for survey.