CAQH Reattestation Checklist: Keep Provider Data Ready for Payers
A CAQH reattestation checklist for profile review, document updates, authorization settings, discrepancy resolution, attestation proof, and ongoing data governance.

On this page: Direct answer
Direct answer
CAQH reattestation checklist: what operators need to know
A CAQH reattestation checklist for profile review, document updates, authorization settings, discrepancy resolution, attestation proof, and ongoing data governance. Assign a provider record owner and begin before the attestation becomes urgent. Compare the CAQH profile against primary organizational sources, not last cycle's copy.
CAQH reattestation is more than clicking through a reminder. It is a recurring data reconciliation: confirm that the provider's profile, practice locations, licenses, insurance, work history, disclosures, documents, and payer authorizations match current organizational records.
Portal screens and requirements change. Follow the current CAQH Provider Data Portal guide and in-product instructions. This checklist focuses on the operational control around the profile.
Key takeaways
The short version
- Assign a provider record owner and begin before the attestation becomes urgent.
- Compare the CAQH profile against primary organizational sources, not last cycle's copy.
- Update expiring documents and resolve section-level errors before attesting.
- Review which organizations are authorized to access the profile.
- Save completion evidence and propagate material changes to payer, roster, directory, and billing workflows.
1. Prepare the source packet
- Current legal/professional name and contact information
- Practice locations, phone, hours, accepting-patient, accessibility, and telehealth fields
- Active licenses, certifications, registrations, and expiration dates
- Current professional liability policy and coverage document
- Employment, work history, education, training, and affiliations
- Specialties, taxonomy, populations, services, and languages
- Current disclosures and explanations where required
2. Review profile sections against governed data
Use the provider's current HR, credentialing, legal-entity, insurance, and location sources. Record discrepancies before editing so downstream systems can be corrected too. A CAQH update that does not reach payer rosters or directories can leave the organization with inconsistent data.
Pay special attention to addresses, location status, contact routing, hospital affiliations when relevant, gaps in work history, license status, and dates. Small differences can create payer follow-up or delay when they conflict with an application.
Define who may prepare changes and who may attest. Shared credentials weaken accountability and make offboarding difficult. Use named accounts, current authorization, and an internal approval record that shows what changed, which source supported it, and who confirmed the final profile.
If a discrepancy cannot be resolved before the due date, document the escalation, responsible source owner, and downstream applications that may need correction after attestation.
3. Validate documents and authorizations
| Control | Check | Evidence |
|---|---|---|
| Currency | Document is current and expiration captured | Source file and expiration date |
| Identity | Name and identifiers match the profile | Reconciled provider record |
| Legibility | All pages readable and correctly oriented | Previewed upload |
| Type | Correct document category and version | Portal status |
| Authorization | Intended organizations can access data | Authorization settings record |

4. Review, attest, and preserve proof
- 01
Clear errors
Resolve required-section warnings and incomplete fields.
- 02
Provider review
Route the current profile and disclosures for provider confirmation when required by policy.
- 03
Attest
Use the authorized account and follow current portal instructions.
- 04
Capture evidence
Store attestation date, status, confirmation, profile identifier, and responsible person.
- 05
Set the next control
Create the next review trigger based on current CAQH requirements and earlier document expirations.
5. Propagate material changes
- Payer credentialing and demographic-update workflows
- Group rosters and network/product records
- Provider directories and patient-facing listings
- Medicare/Medicaid enrollment when applicable
- Billing, rendering, pay-to, and location configuration
- EHR, scheduling, HR, compliance, and insurance records
Common questions
Answers before you build.
What is CAQH reattestation?+
It is the process of reviewing provider profile information and confirming through the CAQH Provider Data Portal that the information is complete and accurate under current portal requirements.
How often is CAQH reattestation required?+
Follow the current CAQH portal status, notifications, and user guide. Do not rely on an old static interval because requirements and account circumstances can change.
What should be checked before attesting?+
Review identity, contact and locations, licenses, insurance, work history, education, specialties, disclosures, documents, errors, and organization access authorizations against current source records.
Does updating CAQH update every payer automatically?+
Do not assume it does. Payers may use different refresh schedules or require separate roster, demographic, enrollment, contract, or portal updates.
Practical closeout
Use this operator checklist.
- Assign a provider record owner and begin before the attestation becomes urgent.
- Compare the CAQH profile against primary organizational sources, not last cycle's copy.
- Update expiring documents and resolve section-level errors before attesting.
- Review which organizations are authorized to access the profile.
- Save completion evidence and propagate material changes to payer, roster, directory, and billing workflows.
Continue through the cluster
Verified customer case studies are added only with customer permission and supporting evidence; none is implied by these operational examples.
Sources & methodology
Trace the operational claims.
Marsa Health Editorial reviewed the primary and research sources below on July 22, 2026. We translate them into workflow controls, distinguish proposals from final rules, and flag where plan, program, state, contract, or clinical requirements vary.
- 01CAQH Provider Data Portal user guide CAQHProvider profile, document, authorization, and attestation workflow guidance.Accessed or rechecked July 22, 2026
- 02National Provider Identifier FAQs Centers for Medicare & Medicaid ServicesOfficial NPI guidance and identifier basics.Accessed or rechecked July 22, 2026
- 03Minimum Necessary Requirement U.S. Department of Health and Human ServicesHIPAA guidance on limiting uses, disclosures, and requests for protected health information when the standard applies.Accessed or rechecked July 22, 2026
- 04Disclosures for Treatment, Payment, and Health Care Operations U.S. Department of Health and Human ServicesHIPAA guidance relevant to payment operations, role-based access, and the minimum-necessary standard.Accessed or rechecked July 22, 2026
- 05PECOS enrollment applications Centers for Medicare & Medicaid ServicesOfficial Medicare enrollment application and PECOS guidance.Accessed or rechecked July 22, 2026
- 06Medicare revalidations Centers for Medicare & Medicaid ServicesCurrent Medicare enrollment revalidation process and due-date guidance.Accessed or rechecked July 22, 2026
Organizational author. Editorial review covers source accuracy, search intent, workflow boundaries, and human-oversight requirements. This material is educational and does not provide clinical, legal, coding, or coverage advice.
No named clinical or legal expert reviewer is attributed to this version. Marsa Health does not invent reviewer credentials.
Read our editorial methodRevision history
What changed and when
July 22, 2026
Initial publication, source review, and operational editing.