CAQH Re-Attestation Every 120 Days: The Complete Checklist to Never Miss a Deadline

In This Article

• Why This Checklist Exists
• Understanding the 120-Day Cycle at a Glance
• Phase 1: Pre-Attestation Checklist (30 Days Before Deadline)
• Phase 2: The Complete CAQH Re-Attestation Checklist (Day Of)
• Phase 3: Post-Attestation Verification Checklist
• Quick Reference: Documents You Need Before Every Attestation
• Common Re-Attestation Errors and How to Avoid Them
• Multi-Provider Practice Checklist
• Automation and Reminder System Setup
• Annual CAQH Maintenance Calendar
• When Re-Attestation Alone Is Not Enough
• Putting It All Together

Key Takeaways

• CAQH re-attestation is required every 120 days, and a structured checklist approach reduces attestation errors by eliminating the guesswork from each cycle -- this post gives you the exact checklist to follow, print, and reuse every four months
• The single biggest cause of attestation failures is not logging in late -- it is logging in on time but attesting over stale data because nobody verified documents, addresses, or malpractice policies before clicking "Attest"
• A 30-day pre-attestation preparation window is the difference between a 15-minute attestation and a multi-day scramble to track down expired licenses, lapsed DEA registrations, or outdated practice addresses
• Multi-provider practices need a provider-by-provider tracking grid, not a single calendar reminder, because attestation dates are tied to each provider's last individual attestation -- not a shared organizational deadline
• Every attestation cycle should end with three actions: save the confirmation, set the next 120-day reminder, and verify that at least one participating payer can pull the updated profile successfully

Maria Chen is the credentialing coordinator for a 12-provider orthopedic group in Dallas, Texas. Every 120 days, she is responsible for attesting the CAQH ProView profiles of all 12 surgeons, plus three physician assistants who joined the practice in 2025. That is 15 attestations spread across different calendar dates, because each provider's 120-day clock started on the day they individually completed their last attestation.

In January 2026, Maria attested eight of the 15 profiles on time. She missed the other seven -- not because she forgot, but because she attested the eight profiles she could verify quickly and planned to come back to the remaining seven after tracking down updated malpractice certificates. The certificates took nine days to arrive from the carrier. By then, two of the seven providers had passed their deadlines. Their CAQH profiles went inactive. UnitedHealthcare attempted a routine data pull on one of the inactive profiles during a re-credentialing cycle and flagged the provider for administrative hold. The hold triggered $28,000 in claim denials over five weeks and required 40 hours of staff time to resolve.

Maria is good at her job. She has been doing credentialing for 11 years. But she was working from memory and a spreadsheet with color-coded cells, and she did not have a structured preparation process that started before the attestation deadline arrived. She was reactive instead of proactive.

This checklist is what Maria needed. It is what every credentialing coordinator, office manager, and solo provider needs: a repeatable, step-by-step process that starts 30 days before each attestation deadline and ends with verified confirmation that the cycle is complete. Print it. Bookmark it. Tape it to your monitor. Use it every single cycle.

If you want the full background on what CAQH re-attestation is, why the 120-day cycle exists, and what happens to your network participation when you miss it, read our comprehensive CAQH ProView re-attestation guide. This post assumes you already understand the stakes. It is purely a working checklist -- the document you open when it is time to act.

Why This Checklist Exists

There are two kinds of attestation failures. The first is the obvious one: the provider or coordinator forgets the deadline entirely. The profile goes inactive. Claims get denied. Everyone scrambles.

The second kind is quieter and, in many ways, more damaging. The provider logs into CAQH on time, clicks through every section, attests, and walks away believing everything is fine. But buried in the profile is a malpractice policy that expired six weeks ago. Or a practice location that closed three months back. Or a license number that was reissued by the state board after a routine renewal, and the old number is still listed.

The attestation goes through, because CAQH does not cross-reference your entries against primary sources in real time. You are attesting that the information is accurate. If it is not accurate, you have signed your name to false data -- data that payers rely on for credentialing decisions. When the discrepancy surfaces during a payer's primary source verification cycle, the consequences range from a corrective action request to a credentialing denial to, in serious cases, a fraud referral.

A 2024 analysis by CAQH found that approximately 30 percent of provider profiles contained at least one data element that was inconsistent with primary source records at the time of attestation. The most common inconsistencies were expired malpractice insurance certificates (listed as current), outdated practice addresses, and license numbers that had been reissued during renewal.

This checklist exists to eliminate both failure modes. It ensures you attest on time, and it ensures the data you attest to is actually correct.

Understanding the 120-Day Cycle at a Glance

Before diving into the checklist, here is the timeline you are working with. Your 120-day clock starts on the date of your most recent successful attestation. CAQH sends email reminders at roughly 30 days, 15 days, and 7 days before the deadline, but these reminders go to the email address on file in the CAQH profile -- which may or may not be monitored by the person responsible for completing the attestation.

Here is how the cycle breaks down in practice:

• Day 0: Attestation completed. 120-day clock starts.
• Day 90 (30 days before deadline): Begin pre-attestation preparation. This is when you gather documents, verify data, and identify anything that has changed since the last cycle.
• Day 105-115 (5-15 days before deadline): Complete the attestation. Do not wait until the last day.
• Day 120: Hard deadline. If you have not attested by end of day, the profile goes inactive the following day.
• Day 121+: Profile is inactive. Payers pulling your data will see an inactive status. Claims submitted against payers who rely on CAQH for re-verification may be denied.

The 30-day preparation window is the key. If you start preparing at Day 90, you have time to request updated documents, chase down references, and resolve discrepancies. If you start at Day 118, you are hoping nothing has changed -- and hope is not a credentialing strategy.

For a full explanation of the 120-day cycle mechanics and what happens when the deadline passes, see our CAQH ProView re-attestation guide.

Phase 1: Pre-Attestation Checklist (30 Days Before Deadline)

This phase is about preparation. Nothing in this phase involves logging into CAQH. It is entirely about making sure you have everything ready so the actual attestation is fast, accurate, and complete.

Administrative Preparation

• Verify the exact attestation deadline date. Log into CAQH ProView or check your tracking system. Do not rely on CAQH email reminders alone -- they sometimes arrive late or go to spam. Write the date on your calendar, your whiteboard, or wherever you track hard deadlines.

• Confirm CAQH login credentials still work. Log in and log out. If the password has expired or been reset, go through the recovery process now -- not on the day of attestation. If a credentialing coordinator handles the account, make sure they still have active authorized access. CAQH periodically requires password changes, and a locked account on attestation day can cost you the deadline.

• Identify the designated attestation owner. Who is completing this attestation? The provider? A credentialing coordinator? An external credentialing service? Confirm that person is available during the attestation window and knows they are responsible. If they are on vacation or leave during the deadline week, reassign now.

• Review the previous attestation notes. If you keep notes from the last cycle (and you should), review them. Were there any issues flagged? Did you make a note to update something next time? Did a payer flag a discrepancy after the last attestation? Address those items first.

Document Gathering

• Request a current malpractice insurance certificate. Contact your malpractice carrier or broker and request a current certificate of insurance showing the policy number, effective dates, coverage limits, and named insured. This is the single most commonly expired document in CAQH profiles. If your policy renewed since the last attestation, you need the new certificate -- not the old one.

• Verify all state medical license statuses. Check every state licensing board website where the provider holds an active license. Confirm the license number, issue date, and expiration date match what is in the CAQH profile. If a license was renewed since the last attestation, the license number may have changed in some states, and the expiration date will have shifted forward. Record the current data.

• Verify DEA registration status. Check the DEA registration certificate or log into the DEA Diversion Control Division website. Confirm the DEA number, schedules authorized, registered address, and expiration date. If the provider practices in multiple states, verify each state's DEA registration separately. Also verify any state-level Controlled Dangerous Substance (CDS) certificates if applicable.

• Confirm board certification status. If the provider holds board certifications, verify the certification status, certifying board, and expiration or recertification date directly with the relevant specialty board. Some boards (ABMS member boards, for example) issue time-limited certificates that require maintenance of certification activities. If a certification expired or the provider completed recertification since the last attestation, gather the updated documentation.

• Check NPI records against NPPES. Search the provider's NPI on the NPPES NPI Registry (npiregistry.cms.hhs.gov). Confirm the NPI number, provider name, practice address, and taxonomy code all match what is in the CAQH profile. If the provider moved to a new practice location or added a taxonomy code, NPPES should reflect the change. If it does not, update NPPES first, then update CAQH -- payers cross-reference both systems.

• Gather any updated W-9 or tax identification documents. If the provider changed practice entities, joined a new group, or there was any change in Tax ID numbers since the last attestation, have the current W-9 available.

Practice and Professional Changes Review

• Document any practice location changes. Has the provider added a new office? Closed a location? Changed addresses? Changed phone numbers or fax numbers? Each practice location in the CAQH profile must be current and accurate, including the physical address, mailing address, phone, fax, office hours, accessibility information, and Tax ID associated with that location.

• Document any hospital affiliation changes. Has the provider gained privileges at a new hospital? Been reappointed at an existing hospital? Lost or voluntarily relinquished privileges anywhere? If any changes occurred, you need the current privilege letters or verification contact information.

• Document any employment or work history changes. Has the provider changed employers, added a part-time position, left a position, or had any gap in clinical activity since the last attestation? The work history section must show a continuous timeline. If there is a gap, you will need to explain it.

• Review disclosure question answers for any new reportable events. Since the last attestation, has the provider been the subject of any malpractice claims or lawsuits? Any disciplinary actions by a licensing board, hospital, or payer? Any criminal charges or convictions? Any limitations on the ability to practice? If the answer to any disclosure question has changed from "No" to "Yes," the provider must disclose it -- and ideally should consult with a healthcare attorney before the attestation to ensure the disclosure is properly worded.

• Verify professional references are still valid and contactable. Call or email each reference listed in the profile. Confirm they are still at the listed institution, still have the listed phone number and email, and are still willing to serve as a reference. Payers do contact references during credentialing, and an unreachable reference creates a verification failure.

• Collect any new or updated supporting documents. Scan or download current copies of all documents you will need to upload: malpractice certificate, license copies, DEA certificate, board certification certificates, CV or resume, and any explanatory letters for disclosure questions.

Phase 2: The Complete CAQH Re-Attestation Checklist (Day Of)

This is the section-by-section walkthrough of the CAQH ProView profile. CAQH organizes the profile into 14 major sections. During re-attestation, you must review and confirm every section, even if nothing changed. The system will not allow you to attest if any required field is incomplete.

Set aside 15 to 45 minutes per provider, depending on how many changes need to be entered. If you completed Phase 1 thoroughly, most of this should be review-and-confirm.

Before You Start

• Close unnecessary browser tabs and applications. CAQH ProView sessions can time out, and a lost session means re-entering any unsaved changes.

• Have all Phase 1 documents open and accessible -- malpractice certificate, license verifications, DEA certificate, board certification details, reference contact information, and notes on any changes since the last cycle.

• Use a supported browser. CAQH ProView works best in Google Chrome or Microsoft Edge. Older browsers may cause display or saving issues.

Section 1: Personal Information

• Verify the provider's legal name matches the name on their medical license and NPI record. If the provider changed their legal name since the last attestation (marriage, divorce, court order), update it here and update the supporting documents.

• Confirm date of birth is correct. This sounds obvious, but transposed digits are a real issue that gets flagged during primary source verification.

• Verify the Social Security Number is correct. CAQH masks the SSN after entry, so you cannot see the full number once saved. If you suspect an error, you may need to re-enter it.

• Confirm the contact email and phone number are current and monitored. This is where CAQH sends attestation reminders and system notifications.

• Verify the home address is current if CAQH requires it in your profile configuration.

• Check the gender, birth country, and citizenship status fields for accuracy.

Section 2: Professional IDs

• Verify the NPI (Type 1 individual) is correct and matches NPPES records.

• Confirm the CAQH Provider ID is correct.

• Verify the Medicare PTAN (Provider Transaction Access Number) if applicable. If the provider recently enrolled in Medicare or received a new PTAN, update it here.

• Confirm Medicaid provider numbers for each state, if applicable.

• Verify any UPIN or legacy identifiers are correct, if still listed.

Section 3: Education

• Confirm the medical/professional school name is spelled correctly and matches the school's official name.

• Verify graduation dates (month and year) are accurate. Verify the degree type (MD, DO, DPM, DDS, etc.) is correct.

• If the provider completed education at a foreign institution, confirm the school name, country, and any ECFMG certification details are accurate.

• Verify there are no missing educational entries. If the provider completed a second degree or additional education since the last attestation, add it.

Section 4: Professional Training

• Verify each internship entry: institution name, program type, dates (start and end), and completion status.

• Verify each residency entry: institution name, specialty, dates, and completion status. If the provider completed residency at multiple institutions (preliminary year at one, categorical at another), each must be listed separately.

• Verify each fellowship entry: institution name, subspecialty, dates, and completion status.

• Confirm all training dates are contiguous. Gaps between training programs must be explained, just like gaps in work history.

Section 5: Specialties and Board Certifications

• Verify the primary specialty is correct and matches the provider's current scope of practice.

• Verify secondary specialties if any are listed.

• For each board certification, confirm the certifying board name, specialty, initial certification date, and expiration or recertification date. If the provider recertified since the last attestation, update the dates. If a certification expired and the provider did not recertify, update the status to reflect that.

• If the provider is board eligible but not yet certified, confirm the status accurately reflects "board eligible" and not "board certified."

• Verify any additional certifications (ACLS, BLS, PALS, etc.) if listed, including expiration dates.

Section 6: Practice Locations

This is one of the most error-prone sections and one of the most heavily verified by payers.

• List every practice location where the provider currently renders patient care. Each location needs a separate entry.

• For each location, verify the physical street address (not a PO Box), mailing address, phone number, fax number, and office manager or contact person.

• Verify the Tax ID (EIN or SSN) and billing NPI (Type 2 organizational) associated with each practice location. If the provider practices in a group, the group's TIN and Type 2 NPI should be listed -- not the provider's individual SSN and Type 1 NPI (unless they are a solo practitioner billing under their own SSN).

• Verify office hours and days of the week for each location.

• Confirm handicap/ADA accessibility status for each location.

• Verify languages spoken at each location.

• Remove any practice locations where the provider no longer sees patients. An old address that a payer's member directory still points to creates access-to-care complaints and potential network adequacy issues.

• If the provider added a new practice location since the last attestation, enter it with all required details. Do not leave it for "next time."

Section 7: Hospital Affiliations

• Verify each hospital affiliation entry: hospital name, address, department, admitting privileges category (active, courtesy, consulting, provisional), and dates.

• Confirm the current status of each affiliation. If privileges were reappointed since the last attestation, update the appointment and reappointment dates.

• Remove affiliations where the provider no longer holds privileges. Listing privileges you no longer have is a misrepresentation that can trigger credentialing sanctions.

• If the provider gained new hospital privileges since the last attestation, add the entry with the appointment date, privilege category, and hospital details.

Section 8: Professional References

• Verify that all listed references are still practicing and contactable at the listed phone number and address.

• Confirm each reference has a different specialty or practice from the provider, if required by the payers you are credentialing with (some payers require references from different specialties; others do not).

• Confirm references are not family members of the provider.

• If a reference has retired, relocated, or become unreachable, replace them with a current peer reference before attesting. A dead reference creates a credentialing hold.

• Verify that each reference has been a professional colleague for the required duration (most payers want references who have worked with the provider within the past two years).

Section 9: Work History

• Review the entire work history timeline from the end of training to the present day. There should be no unexplained gaps.

• Verify that current employment entries are accurate, including the employer name, start date, position title, and whether the position is full-time or part-time.

• If the provider changed jobs, added a position, or left a position since the last attestation, update the entries and the corresponding dates.

• If there are any gaps of 30 days or more that are not covered by active employment, explain the gap. Acceptable explanations include locum tenens work, sabbatical, medical leave, job search between positions, or personal leave. Unexplained gaps will delay credentialing.

• Verify that the work history matches the CV or resume you have on file. Payers compare the two, and inconsistencies trigger verification requests.

Section 10: Malpractice Insurance

• Verify the insurance carrier name is correct and current.

• Confirm the policy number matches your current certificate of insurance.

• Verify the policy effective dates (start date and expiration date). If your policy renewed since the last attestation, the dates must reflect the current policy period -- not the previous one.

• Confirm the coverage type (occurrence vs. claims-made). If the provider has a claims-made policy with tail coverage, note the tail coverage details.

• Verify the coverage limits (per occurrence and aggregate). Most payers require minimum $1 million per occurrence / $3 million aggregate. If your limits are lower, some payers may flag it.

• Upload the current certificate of insurance as a supporting document. Delete the expired certificate if CAQH still has it attached.

Section 11: Malpractice Claims History

• If the provider has no claims history, confirm the "no claims" attestation is accurate.

• If there are existing claims listed, verify the details of each claim: date of incident, date filed, allegations, settlement amount (if resolved), and current status.

• If a new claim or lawsuit has been filed since the last attestation, add it. Failing to disclose a pending claim is one of the most serious attestation errors a provider can make. It can result in immediate termination from payer networks if discovered during verification.

• If a previously pending claim has been resolved or dismissed since the last attestation, update its status and add the resolution date and outcome.

Section 12: Professional Licenses

• Verify every state license listed is current, active, and in good standing.

• For each license, confirm the license number, state, issue date, and expiration date match the state licensing board's records. If a license was renewed since the last attestation and the state issued a new number or changed the expiration date, update the entry.

• If the provider obtained a new state license since the last attestation (for example, for telemedicine in a new state or for a new practice location), add it.

• If any license is no longer active (voluntarily surrendered, expired and not renewed, or revoked), update the status. Do not leave an inactive license listed as "active."

• Verify the license type is correct (full and unrestricted, limited, temporary, etc.).

Section 13: DEA and CDS Registrations

• Verify each DEA registration: DEA number, registered address, schedules authorized (II-V), and expiration date.

• If the DEA registration was renewed since the last attestation, update the expiration date.

• Confirm the DEA registered address matches a practice location listed in Section 6. A DEA registration for an address where the provider no longer practices creates a mismatch that payers flag during verification.

• If the provider practices in a state that requires a separate Controlled Dangerous Substance (CDS) certificate, verify the CDS number, state, and expiration date.

• If the provider obtained a new DEA registration for a new practice location or state, add it.

• If the provider voluntarily surrendered a DEA registration or allowed one to expire, update the entry accordingly.

Section 14: Disclosure Questions

• Read every disclosure question carefully. Do not click "No" reflexively. The disclosure section covers criminal history, disciplinary actions, license restrictions, malpractice claims, substance abuse, physical and mental health conditions affecting the ability to practice, Medicare/Medicaid sanctions, and hospital privilege revocations.

• If the answer to any question has changed from "No" to "Yes" since the last attestation, update the answer and provide a complete explanation. Attach supporting documentation if available (board order, settlement agreement, completion certificate for treatment program, etc.).

• If all answers remain "No," confirm each one individually. Do not bulk-skip.

• Cross-reference disclosure answers with the malpractice claims history section. If Section 11 lists a new claim, the relevant disclosure question in Section 14 should also reflect it. Inconsistencies between sections are a red flag for payer credentialing committees.

Final Attestation

• CAQH will display a summary page showing all sections and their completion status. Review the summary. Every section should show "Complete."

• If any section shows "Incomplete" or "Needs Review," go back and address the flagged fields before attesting. Do not attest with incomplete sections -- the attestation may fail, or payers may see the incomplete data.

• Read the attestation statement in full. You are signing under penalty of perjury (or an equivalent legal affirmation) that the information in the profile is true, accurate, and complete to the best of your knowledge.

• Click "Attest." Note the exact date and time.

Phase 3: Post-Attestation Verification Checklist

The attestation click is not the finish line. These post-attestation steps take five minutes and can save you from discovering a problem weeks later when a payer flags it.

• Save or screenshot the attestation confirmation page. CAQH displays a confirmation with the attestation date. Save it as a PDF or screenshot. This is your proof of timely attestation if a payer later claims your profile was inactive.

• Record the attestation date in your tracking system. Whatever you use -- credentialing software, spreadsheet, calendar, or a platform like PayerReady -- log the attestation completion date immediately.

• Calculate and set the next 120-day deadline reminder. Count 120 days from the attestation date. Set a reminder for 30 days before that date (Day 90) to begin Phase 1 preparation for the next cycle. Set a second reminder for 7 days before the deadline as a hard backup. Do this now, while the date is in front of you.

• Notify the credentialing coordinator, office manager, or billing team that the attestation is complete. If the provider completes their own attestation, they should notify whoever manages credentialing at the practice. If the coordinator does it, they should notify the provider and the billing team. Everyone who touches payer enrollment or claims submission should know the profile is current.

• Verify at least one payer can access the updated profile. Log into a payer's provider portal (UnitedHealthcare, Aetna, Cigna, or your highest-volume payer) and check the provider's credentialing status. Alternatively, contact the payer's provider relations line and confirm they can pull a current, active CAQH profile. This step catches a rare but real failure: attestation completes in CAQH, but the data does not propagate to participating payers due to a system lag or configuration issue.

• File all supporting documents used during this attestation cycle in your credentialing file (physical or digital). You will need them again at the next cycle for comparison, and you will need them if a payer requests primary source documentation.

Quick Reference: Documents You Need Before Every Attestation

Print this table and keep it in your credentialing folder. Before every attestation cycle, gather every item on this list.

Common Re-Attestation Errors and How to Avoid Them

After reviewing thousands of CAQH profiles over the years, certain errors show up again and again. These are the mistakes that cause claim denials, credentialing delays, and network termination actions -- and every one of them is preventable with this checklist.

Error 1: Attesting Over an Expired Malpractice Certificate

What happens: The provider's malpractice policy renewed, but the CAQH profile still shows the old policy dates and the old certificate PDF. The provider attests, confirming the information is accurate. Three weeks later, a payer pulls the profile and sees that the malpractice policy on file expired two months ago. The payer places the provider on hold pending verification of current coverage.

How to avoid it: Phase 1 of this checklist requires requesting a current malpractice certificate 30 days before attestation. Upload the new certificate and update the policy dates in Section 10 before attesting.

Error 2: Leaving a Closed Practice Location in the Profile

What happens: The provider stopped seeing patients at a satellite office six months ago, but nobody removed the location from the CAQH profile. Payers include the address in their member directories. Patients call the number and get a disconnected line. The payer receives access-to-care complaints and initiates a directory accuracy review that flags the provider.

How to avoid it: Phase 1 includes a practice location review. If a location closed, remove it from Section 6 during the attestation.

Error 3: Stale Professional References

What happens: One of the listed references retired eight months ago. The phone number goes to a disconnected line. A payer's credentialing verification organization (CVO) attempts to contact the reference and fails. The provider's credentialing application is delayed by 30-45 days while a new reference is substituted and contacted.

How to avoid it: Phase 1 requires calling or emailing every reference to confirm they are reachable. Replace any reference who has retired, moved, or changed contact information.

Error 4: Mismatched License Numbers After Renewal

What happens: The state licensing board issued a new license number upon renewal (some states do this; most do not, but it catches people off guard when it happens). The CAQH profile still shows the old number. The payer's CVO verifies the license with the state board and finds the old number is no longer active. This triggers a credentialing hold or an additional verification step.

How to avoid it: Phase 1 requires verifying every license number directly with the state board website. If the number changed, update it in CAQH before attesting.

Error 5: Inconsistent Disclosure Answers

What happens: The provider had a malpractice claim filed against them four months ago and disclosed it in Section 11 (Claims History) but forgot to update the corresponding disclosure question in Section 14 from "No" to "Yes." The payer's credentialing committee reviews the profile and finds the inconsistency. At best, it triggers a request for clarification. At worst, it raises questions about the provider's candor, which is a credentialing red flag.

How to avoid it: Phase 2 explicitly instructs you to cross-reference Section 11 and Section 14 for consistency. Any new claim in Section 11 must be reflected in Section 14.

Error 6: Forgetting to Attest After Making Updates

What happens: The credentialing coordinator logs into CAQH, updates three sections, saves the changes, and closes the browser -- without clicking the "Attest" button. The profile data is updated, but the attestation date is not refreshed. The 120-day clock keeps running from the previous attestation date, and the profile eventually goes inactive even though someone was recently in the system.

How to avoid it: Phase 2 ends with the explicit "Click Attest" step. Do not close CAQH until you see the confirmation page showing the new attestation date.

Error 7: Using the Wrong Tax ID for a Practice Location

What happens: The provider recently moved from one group practice to another. The new group's Tax ID should be associated with the new practice location in CAQH. But the coordinator enters the provider's SSN or the old group's TIN by mistake. Claims submitted under the correct TIN do not match the CAQH profile, causing payer verification failures and claim denials.

How to avoid it: Phase 1 includes verifying W-9 and tax documentation. Phase 2's practice location review (Section 6) includes confirming the TIN for each location.

Multi-Provider Practice Checklist

If you manage CAQH profiles for more than one provider, the logistics compound quickly. Five providers means five different attestation deadlines, five sets of documents to gather, and five opportunities for something to slip through the cracks. Here is how to manage it at scale.

For Practices with 2-5 Providers

• Create a provider tracking grid with columns for: provider name, CAQH ID, last attestation date, next deadline date, Phase 1 start date, and status (Not Started / In Progress / Complete / Overdue).

• Align attestation windows where possible. If two providers' deadlines are within a week of each other, attest them on the same day. You cannot change the 120-day cycle, but you can control when within the window you complete the attestation. If Provider A is due on March 15 and Provider B is due on March 20, attest both on March 12. Their next deadlines will then be within a few days of each other, making future cycles easier to batch.

• Keep a single document repository with folders for each provider containing their current malpractice certificate, license copies, DEA certificates, and CV. Update the folder at every cycle.

For Practices with 6-20 Providers

• Use credentialing tracking software or a platform like PayerReady to automate deadline tracking and reminders. A spreadsheet works for five providers. It breaks down at 15.

• Assign each provider to a Phase 1 preparation batch. Group providers whose deadlines fall in the same month. Prepare the entire batch at once during the first week of that month, then attest them all during the second week.

• Designate a backup attestation owner. If your credentialing coordinator is sick or on vacation during a deadline week, someone else must be able to complete the attestation. That person needs CAQH login credentials, access to provider documents, and a copy of this checklist.

• Conduct a monthly credentialing meeting (15 minutes is enough) to review the tracking grid, identify upcoming deadlines, and flag any providers with document expirations or practice changes that need to be addressed before their next attestation.

For Practices with 20+ Providers

• Implement a formal credentialing management system with automated reminders, document expiration tracking, and attestation status dashboards. At this scale, manual tracking is a liability.

• Stagger attestation dates deliberately. You do not want 20 providers all coming due in the same week. When onboarding new providers, complete their initial attestation at staggered intervals so the deadlines spread across the calendar.

• Create standard operating procedures (SOPs) for the attestation process that any credentialing staff member can follow. This checklist is a good foundation. Customize it with your practice-specific details: who provides malpractice certificates, where documents are stored, who needs to be notified after attestation.

• Track attestation metrics. Monitor on-time attestation rates, common errors by provider, average time to complete each attestation, and document expiration trends. These metrics help you identify process improvements and justify staffing or technology investments.

• Consider delegating to a credentialing service. Practices with 20+ providers often find that the cost of an external credentialing service (typically $150-$300 per provider per month) is less than the fully loaded cost of the internal staff time required to manage attestations, plus the risk exposure from missed deadlines. Our credentialing solutions page explains how managed services handle the attestation cycle end-to-end.

For a deeper dive into tracking re-credentialing deadlines across a multi-provider organization, see our re-credentialing deadline tracking guide.

Automation and Reminder System Setup

A checklist is only as good as the system that triggers you to use it. If you rely on CAQH's email reminders alone, you are one spam filter away from a missed deadline. Here is how to build a reliable reminder system.

Calendar-Based Reminders (Minimum Viable System)

This is the bare minimum. It works for solo providers and very small practices.

• Set a recurring calendar event for each provider's Phase 1 start date (30 days before the attestation deadline). Title it: "[Provider Name] CAQH Phase 1 - Gather Documents." Set it to repeat every 120 days. Include this checklist URL or a link to your saved copy in the calendar event notes.

• Set a second calendar event for each provider's attestation target date (7-10 days before the deadline). Title it: "[Provider Name] CAQH Attestation Due." Repeat every 120 days.

• Set a third calendar event on the actual deadline date as a hard backstop. Title it: "FINAL - [Provider Name] CAQH Deadline Today." This is the emergency reminder that fires if you missed the first two.

• Share the calendar events with every person involved in the attestation process (provider, coordinator, office manager, biller). Multiple eyes reduce the chance of everyone assuming someone else handled it.

Email or Task Management Reminders (Better)

If your practice uses a task management tool (Asana, Monday.com, Trello, Microsoft Planner, or similar), set up attestation tasks with due dates and assigned owners.

• Create a task template for each attestation cycle that includes every item from Phases 1, 2, and 3. Duplicate the template at the start of each cycle.

• Assign the Phase 1 task to the credentialing coordinator with a due date 30 days before the attestation deadline.

• Assign the Phase 2 task (attestation itself) to the designated attestation owner with a due date 7 days before the deadline.

• Assign the Phase 3 task (post-attestation verification) as a follow-up due the day after attestation.

Credentialing Software Automation (Best)

Purpose-built credentialing platforms automate the entire reminder cycle and add features that calendars and task managers cannot replicate.

• Configure automated deadline alerts at 60, 30, 15, and 7 days before each provider's attestation deadline. The best platforms send alerts to multiple recipients (coordinator, provider, office manager) via email and in-app notification.

• Enable document expiration tracking. The platform monitors the expiration dates of licenses, DEA registrations, malpractice policies, and board certifications, and alerts you when a document is approaching expiration -- even outside the attestation cycle. This means you are never caught off guard during Phase 1 document gathering.

• Use the platform's attestation status dashboard to see, at a glance, which providers are current, which are approaching their deadline, and which are overdue. This is essential for practices with more than five providers.

• Set up a compliance monitoring dashboard that integrates CAQH attestation tracking with license monitoring, payer re-credentialing deadlines, and document management. A unified view eliminates the silos that cause things to slip through the cracks.

Annual CAQH Maintenance Calendar

Because the CAQH re-attestation cycle is 120 days, each provider completes three attestation cycles per year. Here is what that looks like mapped to a 12-month calendar, assuming the first attestation of the year falls in January.

Cycle 1: January Attestation

• Phase 1 preparation: Early December (prior year)
• Attestation target: First or second week of January
• Next deadline: Early May (120 days later)

Cycle 2: May Attestation

• Phase 1 preparation: Early April
• Attestation target: First or second week of May
• Next deadline: Early September (120 days later)

Cycle 3: September Attestation

• Phase 1 preparation: Early August
• Attestation target: First or second week of September
• Next deadline: Early January (next year -- and the cycle repeats)

Overlaying Other Credentialing Deadlines

Your CAQH attestation does not exist in a vacuum. Map these related deadlines onto the same calendar:

• State license renewal dates. Most states renew medical licenses every 1-3 years. If a renewal falls within 30 days of a CAQH attestation, renew the license first, then update CAQH during the attestation.

• DEA registration renewal date. DEA registrations renew every 3 years. The renewal notice arrives approximately 60 days before expiration. If the renewal falls near an attestation cycle, complete the DEA renewal first.

• Malpractice policy renewal date. Most policies renew annually. Request the new certificate immediately upon renewal so it is on hand for the next attestation.

• Board certification recertification dates. These are less frequent (every 6-10 years) but critical when they occur.

• Payer re-credentialing deadlines. Most payers re-credential providers every 36 months. These deadlines are separate from CAQH attestation but rely on current CAQH data. If a payer re-credentialing cycle falls near a CAQH attestation, complete the attestation first so the payer pulls current data.

• Hospital reappointment dates. Typically every 2 years. Update the hospital affiliations section in CAQH after each reappointment.

The value of mapping all these deadlines onto a single calendar is that you can see the interaction between them. A CAQH attestation that falls one week after a license renewal requires a different preparation sequence than one that falls three months after. The annual calendar gives you that visibility.

For comprehensive deadline management across all credentialing touchpoints, see our CAQH profile setup and management guide.

When Re-Attestation Alone Is Not Enough

The 120-day attestation cycle is a minimum requirement, not a maximum. There are situations where you need to update your CAQH profile between attestation cycles, and waiting until the next scheduled attestation to make the change can cause real problems.

Changes That Require Immediate CAQH Updates

Practice location changes. If the provider opens a new office, closes an existing office, or changes addresses, update CAQH immediately -- not at the next attestation. Payers pull CAQH data continuously, not just during credentialing cycles. A payer that pulls your profile to update their member directory will get the old address if you have not updated CAQH, and patients will be directed to the wrong location.

Malpractice insurance changes. If the provider switches carriers, changes coverage limits, or has a lapse in coverage (even a brief one), update CAQH within days. A payer that discovers a coverage gap during a routine data pull may initiate a network termination review before you have a chance to explain that the new policy was in place the entire time.

New malpractice claims or legal actions. If a new claim is filed, update CAQH within 30 days. Do not wait for the next attestation. Disclosure obligations run continuously, not on a 120-day cycle.

License status changes. If a license is suspended, restricted, revoked, or if the provider receives a disciplinary action from a state board, update CAQH immediately. Failing to disclose a license action is grounds for immediate termination from virtually every payer network.

Name changes. If the provider legally changes their name, update CAQH and all payer records promptly. A name mismatch between CAQH, the state license, and the NPI record will stall credentialing processes across every payer.

Employment changes. If the provider leaves a group practice and joins another, update the practice location, Tax ID, billing NPI, and work history sections in CAQH immediately. The old group should not remain associated with the provider in the CAQH profile.

How to Handle Mid-Cycle Updates

When you update your CAQH profile between attestations, the process is straightforward:

1. Log into CAQH ProView.
2. Navigate to the relevant section.
3. Make the changes.
4. Save the changes.
5. Re-attest. This is the step people miss. Making changes and saving them does not reset your attestation date or confirm the updated information. You must click "Attest" after saving changes for the updates to take effect in the system and for payers to see the new data. Re-attesting also resets your 120-day clock, which is a bonus -- it gives you a full 120 days from the update, not from your previous attestation.

One important note: if you re-attest mid-cycle, your Phase 1 preparation for the next cycle should be based on the new attestation date, not the old one. Update your calendar reminders and tracking system to reflect the new 120-day deadline.

CAQH DirectAssure is a related product that some payers use to manage ongoing data monitoring. If your payers participate in DirectAssure, mid-cycle updates in CAQH ProView are even more critical, because DirectAssure may flag data discrepancies between attestation cycles.

Putting It All Together

The CAQH re-attestation process is not difficult. It is repetitive, detail-oriented, and unforgiving of mistakes -- which makes it the perfect candidate for a structured checklist.

Here is the executive summary of the entire process:

30 days before the deadline: Start Phase 1. Gather documents, verify data, identify changes, confirm references, and ensure you have everything you need to attest accurately.

7-10 days before the deadline: Complete Phase 2. Log into CAQH, review all 14 sections against your gathered documents, make any necessary updates, and attest.

Immediately after attestation: Complete Phase 3. Save the confirmation, set the next 120-day reminder, notify your team, and verify at least one payer can access the updated profile.

Between cycles: Update CAQH immediately if anything changes -- practice locations, malpractice coverage, licenses, claims, employment, or personal information. Re-attest after making changes.

Maria Chen, the credentialing coordinator from Dallas who we met at the beginning of this article, adopted a version of this checklist after the UnitedHealthcare incident. She batches her 15 providers into three groups of five based on their attestation dates, starts Phase 1 preparation on the first business day of each month, and completes all attestations within the first two weeks. She has not missed an attestation in the ten months since implementing the system. Her total time spent on CAQH attestation dropped from roughly 12 hours per cycle (scrambling at the deadline) to about 6 hours per cycle (organized preparation and execution). More importantly, the data accuracy of her providers' profiles improved measurably -- she caught four expired malpractice certificates and two stale practice locations during Phase 1 preparation that she would previously have attested over without noticing.

The checklist works because it separates preparation from execution. It forces you to do the hard part -- gathering and verifying documents -- when you still have time to track things down, rather than on the day of the deadline when every missing document becomes an emergency.

Print this checklist. Save it as a template. Customize it for your practice. Use it every single cycle. And if you want to eliminate the manual tracking entirely, explore how PayerReady's compliance monitoring tools can automate the reminders, document tracking, and deadline management so you can focus on the attestation itself rather than the logistics around it.

Your CAQH profile is the foundation of your payer enrollment. Every commercial payer in the country pulls data from it. Every credentialing decision starts with it. And every 120 days, you are responsible for confirming that every data point in it is accurate and current. This checklist makes sure you do exactly that -- correctly, completely, and on time.