CAQH requires every provider to re-attest their profile data every 120 days. When attestation lapses, the profile goes inactive. Payers that pull credentialing data from CAQH cannot verify the provider. New enrollment applications stall. Re credentialing timelines stretch. Claims continue going out under a provider whose CAQH profile no longer supports their participation. If you track this deadline in a spreadsheet, you will miss it. Not maybe. Will.
That is the operational reality for billing companies managing credentialing across 20, 50, or 100 providers. The 120-day cycle is short, relentless, and unforgiving. And CAQH is just one of at least four expiration clocks your team must manage. State licenses renew on their own cycle. DEA certificates expire every three years. Malpractice insurance renews annually or biannually depending on the carrier and state. Each one carries its own deadline, its own renewal process, and its own consequence for missing it.
After 18 years consulting in the RCM industry, the single most common credentialing failure I see in billing companies with 1 to 50 employees is missed expiration dates. Not because the team is careless. Because they are managing dozens of overlapping deadlines across multiple providers, multiple document types, and multiple payers using tools that were not designed for the job.
Why 120 Days Is the Hardest Deadline to Track
Annual renewals are easy to remember. Something that renews every January is on your radar because it aligns with natural planning cycles. A three-year DEA renewal is far out that you can calendar it and forget it for two years.
120 days break every natural planning rhythm. It does not align with calendar quarters. It does not align with fiscal years. It does not align with any other credentialing cycle. A provider who attests on January 15 is due again on May 15. Their next attestation after that falls on September 12. The one after that, January 10. The dates shift every cycle. There is no pattern your brain can lock onto.
Multiply that by 30 providers and you get 30 independents 120-day cycles, each moving on its own timeline, each with a different next due date, each carrying the same consequence if missed: inactive profile, stalled enrollment, credentialing gaps that create claim denials.
A spreadsheet can record these dates. That is not a credentialing system. That is a list. It cannot send you an alert at the right time. It cannot escalate when nobody acts on the first reminder. It cannot tell you which providers are 14 days from lapse, and which are 90 days out. It shows you a grid of dates. It does not manage a process.
The Reminder Ladder That Actually Works
Expiration management done right runs on a structured reminder ladder, not a single alert. The cadence we apply for at HARRIS CareTracker follows a 120, 90, 60, 30, 14, 7, and 1 day escalation schedule.
At 120 days, the initial notification fires. This is an awareness alert. No action is required yet, but the clock is visible. The credentialing coordinator knows the attestation cycle is starting.
At 90 days, a follow-up notification goes to the credentialing coordinator and the provider. If the provider needs to update information before re-attestation, this is the window to do it without time pressure.
At 60 days, the alert escalates. If no action has been taken, this notification goes to the credentialing manager or the billing company owner. Two months of lead time is still comfortable. Below this, comfort disappears.
At 30 days, the alert becomes a priority action item. One month until lapse. If the provider has not re-attested and the team has not initiated the process, this is the last window where normal workflow can handle it.
At 14 days, the alert goes red. Two weeks. This is the point where a missed CAQH attestation starts affecting active enrollment processes and payer verifications. Anything in progress that depends on an active CAQH profile is now at risk.
At 7 days, the alert reaches everyone who needs to know. The provider. The credentialing coordinator. The billing manager. The practice administrator. Seven days is not sufficient time to fix a problem that should not exist.
At 1 day, the final alert fires. Tomorrow the profile goes inactive. If nobody acted on the previous six alerts, this is the last chance before downstream damage begins.
This same ladder applies to every expiration your team tracks. State license renewals. DEA certificates. Malpractice insurance. Payer re-credentialing deadlines. Each document type carries its own cycle length, but the escalation sequence is identical: start early, increase urgency over time, escalate to additional stakeholders as the deadline approaches.
Why This Must Be a System, not a Calendar
The difference between tracking expirations and managing expirations is the difference between knowing a deadline exists and guaranteeing it gets met.
A calendar entry or a spreadsheet row tells you the date. It does not tell you the status. Has the provider been notified? Did they respond? Is the renewal in process? Is the document uploaded? Has the payer been notified? Is the profile verified as active?
Expiration management as a system tracks the full lifecycle: notification sent, provider responded, renewal initiated, document received, document verified, profile updated, payer confirmation received. Each step is logged. Each step has an owner. Each step carries a deadline within the larger deadline.
At HARRIS CareTracker, credentialing expiration management is built into the platform as a workflow, not a list of dates. Automated alerts fire at each stage of the reminder ladder. Status tracking shows where every provider stands on every expiration type from a single dashboard. Escalation rules push unresolved items to the next level of management automatically.
The billing companies running this as a system catch every expiration before it lapses. The ones running it in a spreadsheet catch most of them most of the time, which sounds fine until you calculate the cost of the ones they miss. One lapsed CAQH attestation affecting three payer relationships across 45 days of claims creates a denial and rework volume that dwarfs the cost of the system that would prevent it.
Math on a Single Missed Attestation
Walk through the numbers on one provider with one missed CAQH attestation.
The profile goes inactive on day 121. Two payers that rely on CAQH data for credentialing verification cannot confirm the provider’s status. New patient authorizations from those payers’ stalls. Claims continue going out because the billing team does not know the profile lapsed. After 30 days, the players flagged the provider as non-verified. Claims start getting denied. Your team spends two to three weeks figuring out why.
During that window, the provider saw an average of 15 patients per week across two payers. That is roughly 90 to 120 claims affected. At $25 to $118 per reworked claim, the administrative cost alone runs from $2,250 to $14,000. And that assumes you catch it within 45 days. If it goes for 90 days, double the exposure.
For a billing company running on 2 to 4% margins, one missed CAQH attestation for one provider can erase an entire month of profit on that account.
A structured expiration management system costs less than a single missed deadline. That is math. And it is not close.
What expiration dates are you tracking in a spreadsheet right now that should be running on automated alerts?
Follow for more on revenue cycle management, medical billing workflow, claim denial management, and credentialing operations, and building billing companies that do not lose revenue to missed deadlines.
Frequently Asked Questions
Why does CAQH require re attestation every 120 days?
What happens when a CAQH profile goes inactive?
How does the reminder ladder apply to non CAQH expirations?
Can a billing company manage credentialing expirations without dedicated software?
How does HARRIS CareTracker handle credentialing expiration management?
About the Author
Thomas Koehl is a 30 year health technology veteran and currently Director of Marketing at Harris CareTracker. Prior leadership roles at QRS Healthcare Solutions focused on supporting revenue cycle management partners. Following Hurricane Katrina, he served as Director of a large New Orleans medical clinic that delivered care to over 32,000 patients. Koehl has testified before the U.S. House Committee on Energy and Commerce as an expert witness on disaster healthcare delivery. He also volunteers as COO of International Medical Alliance, a nonprofit providing free medical care to impoverished communities in developing countries. He writes about the business, strategy, and human side of health technology for the practitioners and leaders living it day to day.
Follow me here for more breakdowns, and follow HARRIS CareTracker for product updates and resources.
