What Is Credentialing In Healthcare?

PayrHealth · Updated November 2026

Credentialing in healthcare is the process of verifying that a provider is qualified to deliver care: that their license, education, training, board certification, work history and malpractice record are what they claim, confirmed with the original source. Hospitals credential providers before granting privileges, and health insurance payors credential them before letting them treat members in network.

Credentialing protects patients by making sure only qualified professionals provide care. It is also the first step to putting a new physician to work, and a condition of nearly every payor contract: a payor sets credentialing requirements a provider must meet before it will pay for their services. This guide covers what credentialing means, how it works, how it differs from privileging and enrollment, and the terms you will run into along the way.

What does credentialing mean in healthcare?

The definition of credentialing is simple: confirming a person’s credentials. In healthcare it means a structured review of a provider’s qualifications, checked against primary sources such as the medical school, the licensing board, the certifying board and past employers, then approved by a committee or governing body. The process sets a minimum bar for licensure, clinical experience and training, and flags any disciplinary or malpractice history that needs review.

It is rigorous on purpose, and it takes time: anywhere from several weeks to several months. Much of it is still manual, which makes organization and quality control essential.

Why is credentialing important?

• Patient safety. Verifying qualifications at the source keeps unqualified or sanctioned providers away from patients and reduces the risk of errors.
• Payment. Payors won’t pay a provider they haven’t credentialed. Without it, claims are denied or paid out of network.
• Compliance and liability. Credentialing is required by CMS for Medicare and Medicaid, by state law, and by accreditors such as NCQA and The Joint Commission. Weak credentialing can expose an organization to liability if a provider it should have screened causes harm.
• Trust. Patients, payors and referring physicians rely on the fact that a credentialed provider has been checked.

Types of credentialing

The word covers three related processes that are often confused:

• Credentialing: Hospitals, health systems, groups and payors. Whether the provider is qualified.
• Privileging: Hospitals and facilities. Which specific services the provider may perform there.
• Payor enrollment: Health insurance payors and government programs. Whether, and on what terms, the payor will pay the provider.

A physician joining a hospital-based group might go through all three: hospital credentialing and privileging, then credentialing and enrollment with each payor. For more on the payor side, see Payor Enrollment vs. Provider Credentialing.

Credentialing and licensed independent practitioners

You will often see the term LIP, or licensed independent practitioner: someone permitted by law, and by the organization, to provide care without direction or supervision, within the scope of their license and the privileges they have been granted. State licensing boards define who qualifies, and the organization’s medical staff verifies it.

The rules vary by state. Physicians are LIPs everywhere. For nurse practitioners, more than half of states grant full practice authority, while the rest require some form of physician collaboration or supervision. Check the American Association of Nurse Practitioners’ state practice map for current status. State law is only half the answer: even where a nurse practitioner or physician assistant can legally practice without supervision, some health plans still require a supervising or collaborating physician before they will contract with that provider.

How the provider credentialing process works

Credentialing a provider means collecting their information, verifying it at the source, and having it reviewed and approved. It usually takes a team: credentialing specialists, medical staff office staff and a credentialing committee.

Common information requested on a credentialing application:

• Name, date of birth, mailing address and other personal details
• Social Security number and citizenship information
• Immunization and tuberculosis testing records, for facility privileges
• DEA and state controlled substance registrations
• A recent photograph, for some facilities
• A current CV and full work history
• Medical school, residency and other training records
• Licenses and specialties
• National Provider Identifier (NPI)
• Board certification
• Hospital and medical group affiliations
• Sanctions or disciplinary actions
• Malpractice claims history and proof of professional liability insurance
• Continuing medical education documentation
• Peer and professional references

The organization gathers this information, checks it directly with licensing boards, certifying boards, the National Practitioner Data Bank and other sources, and sends the file to its committee or governing body. Once approved, the provider receives the credential and, in a facility, a defined set of privileges, often documented in an official letter, a badge or an ID card.

For the step-by-step version on the payor side, see 7 Key Steps In Provider Credentialing.

Credentials verification organizations

Credentialing is tedious, and cutting corners is not an option. Many organizations use a credentials verification organization, or CVO: a third party that collects and verifies credentials on their behalf. A CVO can often complete verification faster and more consistently than an in-house coordinator who also juggles other work. Health plans that use a CVO still make the final credentialing decision. See Pros and Cons of Outsourcing Credentialing Services.

Privileges

When a facility credentials a provider, it also grants privileges: a defined set of services that provider may perform there, based on their training, their demonstrated competence and what the facility can support. Some specialties require proctoring before privileges are granted. A surgeon licensed to perform heart surgery can’t be privileged for it at a facility that can’t support it. Medical staff bylaws set the minimum credentialing and privileging requirements.

Credential renewals

Credentialing is not set and forget. Hospitals reappoint and re-privilege their medical staff on a fixed cycle set by their bylaws and accreditor, commonly every two to three years. Health plans following NCQA standards recredential every 36 months, Medicare revalidates enrollment every five years, and the CAQH profile most payors use must be re-attested every 120 days.

Credentialing best practices

• Know your state’s rules. States differ on how quickly credentialing must be completed, how providers are credentialed across state lines, how credentials transfer between facilities, and how telehealth providers are credentialed.
• Master the CAQH profile. Most commercial payors credential from the CAQH Provider Data Portal. CAQH became a for-profit company in January 2026 and rebranded as DataSpring, powered by CAQH, in June 2026; it holds more than 4.8 million provider records. A complete, current profile makes credentialing and recredentialing much easier. See How to Complete Your CAQH Profile.
• Link start dates to paperwork. Many organizations tie a new provider’s start date to submission of a complete credentialing file, which keeps the process moving.
• Track every expiration. Licenses, DEA registrations, board certifications and malpractice certificates all expire on their own schedules.

Common credentialing errors to avoid

• Outdated provider information. Some items are time-sensitive. A file can be two months in when one outdated item, such as an unreported malpractice claim or disciplinary action, stops it. Check everything before submission.
• Missing primary source verifications. Providers sometimes can’t find original certificates or records and send secondary sources instead. Those cause more delays and may be inaccurate.
• Inconsistent data. Names, addresses and identifiers that don’t match across the application, CAQH and the NPI registry.

For more, see The 7 Most Common Challenges in Physician Credentialing.

Credentialing glossary

• Credentialing (spelled with one l in American English): verifying a provider’s qualifications at the source.
• Recredentialing: repeating credentialing on a fixed cycle, every 36 months for most health plans.
• Privileging: a facility’s grant of specific clinical services a provider may perform there.
• Payor enrollment: setting a provider up to bill a payor and be paid, ending in an effective date.
• Primary source verification: confirming a credential directly with the organization that issued it.
• Credentialing committee: the payor’s or facility’s body that approves or denies credentialing.
• CVO: a credentials verification organization that verifies credentials for others.
• Delegated credentialing: an arrangement in which a payor lets a provider organization credential its own providers.
• CAQH Provider Data Portal: the shared profile most commercial payors use, formerly called CAQH ProView.
• Attestation: the provider’s confirmation that their CAQH data is accurate, required every 120 days.
• NPDB: the National Practitioner Data Bank, a federal record of malpractice payments and adverse actions.
• NPI: National Provider Identifier; Type 1 for individuals, Type 2 for organizations.
• Taxonomy code: the code that identifies a provider’s type and specialty on the NPI record.
• PECOS: Medicare’s online enrollment system.
• Revalidation: Medicare’s re-review of enrollment, every five years for most providers.
• Effective date: the date a payor starts paying a provider in network.
• Participation agreement: the payor contract that sets rates and terms for an enrolled provider.
• LIP: licensed independent practitioner.
• Network adequacy: the requirement that a plan have enough providers to serve its members; the basis for getting into a closed network.

Frequently asked questions

What is credentialing?

Verifying a provider’s license, education, training, certification, work history and malpractice record with the original sources, then approving them through a committee.

What is the difference between credentialing and privileging?

Credentialing decides whether a provider is qualified. Privileging decides which services that provider may perform at a specific facility.

Why is credentialing important?

It protects patients, is required for payment by payors and government programs, and keeps organizations compliant with state, federal and accreditation rules.

How long does credentialing take?

Several weeks to several months. With payors, plan on 60 to 150 days per payor. See how long credentialing takes.

How often are providers recredentialed?

Most health plans recredential every 36 months; hospitals reappoint on a cycle set by their bylaws, commonly every two to three years.

Credentialing and payor contracts with PayrHealth

Every payor contract sets credentialing requirements your providers must meet to be paid, and some set them in ways that work against you. PayrHealth’s credentialing team enrolls clinicians, groups and facilities with commercial payors, Medicare, Medicaid and Medicare Advantage plans and keeps them enrolled. See our credentialing services.

Once you’re credentialed, compare what your contracts pay with the best-paid quarter of practices like yours, for the same codes, in your market. See if you qualify for a free rate review.

Read next

• 7 Key Steps In Provider Credentialing
• Payor Enrollment vs. Provider Credentialing
• The 7 Most Common Challenges in Physician Credentialing

Sources

• American Association of Nurse Practitioners, State Practice Environment map: aanp.org
• Blue Cross and Blue Shield of Vermont, notice of credentialing policy changes aligned to 2025 NCQA standards, May 2025: bluecrossvt.org
• DataSpring, "CAQH Rebrands as DataSpring," June 8, 2026: globenewswire.com
• ADA News, "What to know about CAQH change to DataSpring, powered by CAQH," June 2026: adanews.ada.org
• CAQH, provider guide to re-attesting every 120 days: caqh.org
• 42 CFR 424.515, Medicare revalidation: ecfr.gov