The CAQH 120-day attestation cycle — what stalls payer applications and how to keep it from happening

The short answer: CAQH requires re-attestation every 120 days. Miss the window and the profile flips to non-attested — and payers quietly stop processing any application that depends on it. The fix is a standing attestation calendar, not memory.

Every credentialing delay has a story. Most of the ones we see at the commercial-payer layer end the same way: a payer pulled a provider’s CAQH profile, found a stale attestation or a missing field, and quietly set the application aside.

The provider never gets a denial. The practice never gets an email. The application just sits.

This is the cycle that prevents it.

What CAQH actually is

CAQH ProView is the centralized credentialing database used by most U.S. commercial payers. When a payer evaluates a credentialing or recredentialing application, the standard path is:

1. Provider submits a request to join the payer’s network.
2. The payer pulls the provider’s CAQH profile.
3. The payer’s credentialing team verifies the contents against primary sources.
4. If the profile is current, complete, and consistent — the application proceeds.
5. If the profile is stale, incomplete, or inconsistent — the application stalls.

The payer does not always send a status update when step 5 happens. Some do. Many don’t. The application simply doesn’t move.

How often do you have to attest in CAQH?

CAQH requires providers to attest to their profile every 120 days in the CAQH Provider Data Portal. Attestation is the provider’s confirmation that everything in the profile remains accurate. It’s a small action — log in, review, click attest — but it’s the gate that controls whether payers treat the profile as current.

The clock resets each time a provider attests. Miss the 120-day window and the profile flips to “non-attested” status. Payers that pull a non-attested profile will not proceed with the application until the provider attests again.

This is the single most common cause of “stalled” applications we see when we take over a roster from another vendor. The applications aren’t denied. The CAQH profiles just aged out.

The four failure modes we see most

Across years of credentialing work, the same four patterns repeat:

1. The missed 120-day attestation

A provider attested in March. The next deadline is in July. The provider goes on PTO, the front office never reminds them, and the attestation lapses. Every application the payer pulls between July and the next attestation stalls.

Discipline that prevents it: Track every provider’s next attestation date on a single calendar, surface alerts at 30 / 14 / 7 days, and own the reminder — don’t expect the provider to track it.

2. The work-history gap

Payers will not accept a CAQH profile with unexplained gaps in work history. Even a three-month gap between a residency completion and a first attending role needs to be explained — “completing fellowship” or “relocating, not practicing” is enough, but the field has to be populated.

Discipline that prevents it: Audit the work history end-to-end on intake. Fill every month between graduation and present. If there’s a gap, document the reason — explicit beats implicit every time.

3. The expired document upload

Malpractice COIs expire annually. State licenses expire on the state’s cycle. DEA registrations expire every three years. Each of these has a document attached to the CAQH profile. When the document expires, payers treat the CAQH field as expired even if the underlying credential is current.

Discipline that prevents it: Track every document’s expiration date — not just the credential’s expiration date. New COI? New upload to CAQH the same week.

4. The practice-location inconsistency

The CAQH practice locations need to match the practice locations the payer has on file. A practice that moved offices six months ago and never updated CAQH will see new applications stall at every payer that did its homework.

Discipline that prevents it: Treat every practice-location change as a CAQH event. Update CAQH before the new payer applications go out, not after.

The operating cadence that keeps this clean

For a small roster, the discipline above can run on a spreadsheet and good calendar habits. For a roster of more than ten providers, the spreadsheet starts to lie.

Here is the cadence we run on Metolius, regardless of roster size:

• Daily: A queue of providers due for attestation in the next 14 days. Each one gets an outreach with a one-click attestation link.
• Weekly: A document-expiration sweep. Every COI, license, and DEA expiring in the next 60 days surfaces with the document the provider needs to send.
• Monthly: A profile-completeness audit. Every CAQH profile gets a quality check — work history, locations, hospital affiliations, references — and the gaps get worked.
• Quarterly: A payer-pull check. We sample applications across payers and verify the CAQH-pulled state matches what we expect.

Each of these actions is timestamped in Metolius. The practice can see them in real time — they don’t have to ask whether attestations are getting done.

What “stalled application” really costs

A stalled application is not a free delay. The cost compounds:

• Lost in-network billing. Until an application is approved, the provider bills out-of-network or doesn’t bill the payer at all.
• Disrupted patient panel. Patients on that payer can’t see the provider. Some leave; some go out-of-network and create AR risk.
• Recredentialing knock-on. A stalled new application often blocks a related recredentialing — the payer’s queue treats them as related.

For a new attending billing a busy commercial payer, every month of delay is real money. The 120-day attestation cycle, run well, is the cheapest discipline in credentialing and one of the highest-leverage.

What to do this week

If you’re not sure where your roster stands on CAQH:

1. Pull a CAQH attestation report for every provider. The report shows the last attestation date and next deadline.
2. Sort by days remaining. Anyone under 30 days is your immediate work.
3. Schedule the attestations. Set the calendar. Send the reminders. Verify they happen.
4. Audit the documents. Pull every COI, license, DEA upload. Anything expiring in the next 60 days needs a fresh upload.

Run that loop on a 120-day cycle and you will stop seeing applications stall for the CAQH reason.

If you’d rather not run the loop yourself, that’s what we do. Talk to us about credentialing maintenance and we’ll show you the cadence on a working roster — yours or one of ours — inside Metolius.

— Medical Credentialing Services