Getting into a payer network is the visible milestone. Staying in it is the part nobody budgets time for. Provider recredentialing is the recurring re-verification cycle that keeps a practice’s contracts active, and it runs on a fixed clock whether or not anyone at the practice is watching it. Miss the window and the consequence is not a warning letter — it is a lapse in network status, a stalled claims queue, and patients quietly redirected to someone else on the plan’s directory. For a practice already stretched across billing, scheduling, and patient care, recredentialing rarely gets the standing calendar entry it needs — until the day it turns into an urgent problem.
Recredentialing Is Not a Repeat of Initial Credentialing
Initial credentialing is a one-time gate: a payer or hospital verifies a provider’s license, education, training, and history before granting network participation or privileges. Recredentialing is different in purpose even though the document list overlaps. It is a periodic audit that confirms nothing material has changed — no lapsed license, no new malpractice claim, no sanction, no gap in coverage — and that the provider’s file is still accurate enough for a payer or hospital to keep relying on it. The National Committee for Quality Assurance (NCQA), whose standards most commercial payers and health plans build their credentialing programs around, requires recredentialing on a fixed and documented cycle rather than an as-needed basis, which is what makes it a maintenance obligation rather than a project.
The 36-Month Clock, and Why the Real Deadline Is Earlier
Under NCQA standards, recredentialing generally comes due every 36 months from a provider’s last approval date. That sounds like a long runway, but the effective deadline is much tighter: the re-verification process is meant to begin 90 to 120 days before the expiration date, to leave enough time for primary-source verification and committee review before the old approval lapses. A practice that starts gathering documents the week the cycle notice arrives is already behind. NCQA also tightened the standard further as of July 1, 2025, adding a requirement for monthly monitoring of providers between full recredentialing cycles — ongoing checks on license status and expiration, plus screening against federal exclusion lists such as the OIG’s List of Excluded Individuals/Entities (LEIE) and SAM.gov. In practice, recredentialing has shifted from a once-every-three-years event to a continuously monitored status that happens to culminate in a full review every 36 months.
The CAQH Attestation Trap
Separately from the payer-side recredentialing cycle, most practices maintain a profile in CAQH ProView, the credentialing data repository the majority of health plans pull from instead of collecting documents independently. That profile does not stay valid indefinitely. Providers must re-attest to their CAQH profile at least every 120 days to keep it active, and because the consequence of missing that window is easy to underestimate, it is one of the most common ways recredentialing quietly breaks. An expired CAQH attestation does not just sit there waiting — it can delay new enrollments and renewals in progress, and with some payers it can lead to termination of participation rather than a simple pause. Because the 120-day cycle runs independently of a practice’s own 36-month recredentialing calendar, it is easy for the two to fall out of sync, and the CAQH deadline is the one that tends to get missed first since nothing about it looks urgent until it has already lapsed.
What Actually Gets Re-Verified
Recredentialing reviews cover more ground than most administrative staff expect. The table below breaks the typical scope into what changes often versus what payers check mainly to confirm nothing has changed.
| Category | What Gets Checked | Why It Matters |
|---|---|---|
| Licensure & DEA/CDS | Current state license and DEA or Controlled Dangerous Substances registration | Most likely items to have lapsed, restricted, or changed state |
| Malpractice coverage | Active insurance plus claim history since the last cycle | New claims or coverage gaps can affect network standing |
| Board certification & education | Certification status and training records | Confirms the original credentialing basis still holds |
| Identifiers & privileges | NPI number, work history, hospital admitting privileges | Verifies the provider record is still accurate and current |
| Sanctions & exclusions | State licensure actions, Medicare/Medicaid sanctions, OIG and SAM.gov exclusion checks | A single unresolved sanction can halt the entire cycle |
Building a System That Doesn’t Rely on Memory
The practices that get caught by recredentialing are rarely disorganized — they are simply relying on a single person to remember a date that sits 36 months out. A more durable approach treats recredentialing as infrastructure, not a task:
- Track every payer’s cycle date separately. Each contract has its own 36-month clock, and they rarely line up.
- Calendar the 90–120 day pre-deadline window, not the expiration date itself, as the actual trigger for action.
- Set the CAQH re-attestation reminder on a shorter interval than the 120-day requirement, so a single delay does not turn into a lapse.
- Keep primary-source documents — license, DEA, malpractice declarations page — refreshed year-round rather than hunted down under deadline pressure.
- Treat monthly sanction and exclusion monitoring as ongoing, not something addressed only at recredentialing time, in line with NCQA’s current standard.
Recredentialing is unglamorous work, but it is the maintenance layer that keeps a practice’s network revenue flowing without interruption. For practices that would rather hand this off than build the tracking system in-house, connecting with a vendor who specializes in credentialing and enrollment operations — someone whose job is watching these cycles for a living — is often the more reliable path than adding one more spreadsheet to a busy front office.