Insurance Credentialing for Therapists Checklist

Dana, an LCSW in a solo office, opened a commercial plan’s welcome packet on a Thursday and still could not tell whether Monday’s session was covered. The packet had a portal login. It did not have an effective date.

That gap is the job of insurance credentialing for therapists. You collect the identifiers a plan asks for, keep a profile a plan can read, and log follow-up until the plan sends a participation agreement you can actually read. Claim submission, denials, and client balances start after that agreement exists. Those steps live on the insurance billing workflow for therapists, not here. Entity setup, lease, and software choice live on how to start a therapy private practice.

Use this insurance credentialing for therapists checklist before you call a plan. Fill every line. A blank line is the one that stalls you later.

Educational resource for licensed US mental-health clinicians. Payer contracts and portal screens change. This is not legal, credentialing, or reimbursement advice. Confirm the current screen and the agreement the plan sends before you rely on a date.

The downloadable sheet is the billing preflight you will want once a plan has sent an agreement you can read. It does not replace the checklist above.

What insurance credentialing for therapists covers

Insurance credentialing for therapists is the work of becoming a participating provider with a commercial plan. It is not claim submission, and it is not Medicare enrollment.

CMS guidance GL-2023-07, issued July 20, 2023, states that HIPAA does not govern health plans’ enrollment practices. 45 CFR § 162.410(a) says a covered health care provider must obtain an NPI from the National Provider System and use that NPI on standard transactions where its provider identifier is required. The same July 2023 letter says that system is now the National Plan and Provider Enumeration System (NPPES). Getting the number is the identifier step. A plan’s decision to contract with you is an enrollment practice. The letter says HIPAA does not govern that practice. It does not print a contract date.

So stop this checklist when the contract is in hand and the effective date is copied. Once that date is written down, move to the billing workflow for eligibility, claims, remits, and denials.

NPI and the taxonomy code you self-select

Start with the identifier the claim will carry later.

CMS GL-2023-07 says NPPES assigns individual health care providers an NPI with entity type code 1, and organization health care providers an NPI with entity type code 2. If you bill under your own name, that is the Type 1 record. If a group or other organization bills, that organization needs its own Type 2 NPI. The same letter says that under 45 CFR § 162.410(a)(1), a covered organization health care provider must obtain an NPI for any subpart that would be a covered health care provider if it were a separate legal entity.

One limit is worth writing on the checklist. 45 CFR § 162.412(b) says a health plan may not require a health care provider that has been assigned an NPI to obtain an additional NPI. The July 2023 CMS letter quotes that sentence, and adds the limit on it: if a subpart already has its own unique NPI, the plan may not require an additional one, but the rule does not prohibit a plan from requiring a subpart that does not have a unique NPI to obtain one as a condition of enrollment. If a portal asks you to apply for a new NPI, stop and ask which provider or subpart the form is about. Do not mint a second number for a provider that already has the NPI the form is asking about.

Taxonomy is the specialty label on that NPI application, not a second license. The National Uniform Claim Committee taxonomy page states, verbatim, that codes “are self-selected by the provider,” that they “are not used to define services rendered, but instead are used to define area of specialty,” and that “scope of licensure is not within the purview of the taxonomy code set.” The same page says the code is a unique alphanumeric code, ten characters in length, structured into Provider Grouping, Classification, and Area of Specialization, and that it is used in HIPAA transactions and on the NPI application for enumeration. NUCC maintains the set. The full list is the online lookup.

Pick the code that matches your education and training. Then use that same ten-character code on the NPI record and in the CAQH specialty fields. A mismatch between those two screens is a follow-up item, not a mystery for the biller to solve in six months.

What CAQH ProView is

CAQH ProView is the old name for the profile plans read. The CAQH Provider Data Portal terms, effective June 6, 2025, call the product the CAQH Provider Data Portal, formerly ProView. DataSpring’s clinician page says CAQH is now DataSpring, and that clinicians and group administrators enter information into the CAQH Provider Data Portal and share it with the plans they authorize.

The May 2026 Provider Data Portal fact sheet says you “Access the DataSpring Provider Data Portal at no charge to providers or office staff.” It also says to manage the profile and upload documentation in one secure location, and to “Authorize health plans to access your information for credentialing, directories, and more.” The June 2026 clinician FAQ says “Providers will not be charged to use the portal. This has not changed.” The same FAQ says DataSpring has a new main website, dataspring.com, but the provider portal has not changed, and that saved links will continue to work or redirect correctly. The fact sheet says to visit dataspring.com to complete your profile, access support, and explore training.

The current documents name four jobs. They do not publish a screen-by-screen script, so this checklist does not invent one.

1. Register, using the instructions on the site. The terms say access is for users who register that way.
2. Complete the profile and upload the documents the portal asks for. The fact sheet names that job. It does not list a universal document set, so do not copy a document list from an older guide onto this checklist.
3. Authorize the plans that should receive the data. The terms say CAQH may share what you submitted with health plans, hospitals, and other organizations to which you affirmatively give access through the authorization process.
4. Attest. The terms say the portal will ask you to submit and attest when you register, and to re-attest on a recurring basis.

You control the permissions. The June 2026 FAQ says you control the information in the profile and provide the permissions that allow DataSpring to make it available to authorized parties for approved workflows, such as credentialing, directory management, and related administrative processes. The terms also say you may authorize practice administrators to input information for you. Input is not the same thing as a plan’s decision to contract.

How often you re-attest

Re-attestation is the maintenance job, and the due date stays on your calendar even if someone else typed the first application.

The portal terms, effective June 6, 2025, state that the portal will ask you “to submit and attest to or confirm User Submitted Data that you provide upon registration with the Site, and to maintain and re-attest to or re-confirm that data on a recurring basis.” The clinician page describes profiles as “actively maintained on a 120-day attestation cycle.” The May 2026 fact sheet says, separately, to “Update your profile quarterly to reduce telephone and email requests from plans.” Those are two different sentences in two different documents. None of those pages states an Illinois exception.

Put the last attest date on the checklist the day you click Attest. Next to it, copy the next due date the portal shows. Do not add a number of days yourself. If the portal date and the fact sheet’s quarterly reminder disagree, this checklist uses the date on the attest screen. That preference is the checklist, not a sentence in either document. A reminder email, if one arrives, is about the profile. It is not a plan’s decision to contract with you.

Payer application steps you actually control

Completing the profile does not file an application with every plan you hope to join.

The terms say that in some cases a health plan requires you to use the portal as a condition of working with them, and that “This condition is imposed by the participating organization and not by CAQH.” Questions about that requirement go to the plan. The terms also say you designate the organizations that receive your data.

That is the application sequence you can run without a service. It is a checklist, not a timeline those documents publish.

1. Finish the profile and attest.
2. Authorize the plans you want to receive the data. Record the date.
3. Contact each plan and ask what else it wants beyond the profile. Some plans still send their own packet. Record the date, the name, and any reference number.
4. Log every reply until a participation agreement arrives, or until the plan says no.

Do not invent a universal wait. The portal terms and the May 2026 fact sheet do not publish one decision timeline for every commercial plan. The log is how you notice a stall. A service does not know the answer either until the plan says it.

The follow-up log

The log is four columns, and it is where insurance credentialing for therapists stops being a form and becomes a calendar. If a call does not produce a next date, the call did not finish.

Dana’s sheet below is a filled example of the fields, not a typical wait and not a real plan’s reply.

Three rules keep the log useful. They are checklist practice, not a payer rule.

• One row per contact, including “no one answered.”
• The next date is a calendar entry the day you hang up, not a note you will get to later.
• If the same plan gives you the same non-answer three times, that is the moment to ask for a supervisor or to decide the plan is not worth the slot. It is not the moment to start over with a new NPI.

Hiring a credentialing service is the wrong first move when you have a license path, one or two target plans, and an afternoon for the profile. The terms say the portal will ask you to attest, and that you may authorize practice administrators to input information. A service can place calls. It does not replace the due date you copy from the portal, and it does not make a plan answer faster than the log already shows. Use the log for a month. If a named plan will not return a status after you have recorded the authorize date and the contact date, then a caller with a script is a reasonable next hire. That is a staffing choice, not a directory of vendors.

What the contract has to tell you

On this checklist, you are done with a plan when you can point to a participation agreement and an effective date you copied from it. The agreement you file on this checklist is the document the plan sends.

When the agreement arrives, copy two things before you celebrate.

Contract and fee schedule

Write the agreement date and the fee-schedule version or attachment name. If the schedule is a separate PDF, save it next to the agreement and note the file date. Allowed amounts for the services you actually deliver belong in that note. If the schedule does not list the services you deliver, ask the plan before you assume a rate.

Effective-date check

Copy the date printed on the agreement. Next to it, write the first date of service you intend to ask about. If the agreement’s date line is blank, or if the packet never names a date, email the plan and ask which date of service the agreement covers. Don’t guess. A welcome email with a portal login is not that date. Dana’s Thursday packet failed this check, which is why Monday was still an open question.

CMS GL-2023-07 says HIPAA does not govern health plans’ enrollment practices. That sentence does not set one effective date for every commercial plan, and this page does not claim that no other federal rule exists. Your protection on this checklist is the written date from the plan, stored on the checklist, before you treat a session as covered. This page does not tell you when to submit a claim.

After the date is written down

Two handoffs, and then you stop.

If you are still choosing an entity, a lease, or practice software, that work belongs on the private-practice startup guide. Credentialing assumes you can already identify the clinician and the practice location the plan will list. Software does not contact the plan for you. A shortlist such as the best EHR for private practice is a buying decision, not a paneling decision.

If the effective date is filled in and the fee schedule is saved, the next operating loop is billing: eligibility before the session, a clean claim, a remit, a denial owner. Use the billing guide for that loop, and the preflight worksheet if you want it on paper. If you want the console open beside this checklist, start a free trial.

A closing pass before you call the first plan

• Type 1 or Type 2 NPI matches who will bill, and you did not apply for a second NPI to please a form
• The ten-character taxonomy on NPPES matches the specialty on the CAQH profile
• Profile attested, documents the portal asked for uploaded, CAQH ID written down
• Next re-attest date is the date the portal shows, written on the calendar the day you attest
• Each target plan was contacted directly, and the contact date is in the log
• Authorization was saved, and that date is in the log
• Follow-up log has a next date for every open plan
• Agreement date, fee-schedule version, and effective date are copied, or you have a written question out to the plan about the blank date

That is insurance credentialing for therapists with the three jobs kept apart. The portal does not charge providers. The due date is the one the portal shows. On this checklist, the agreement you file is the one the plan sends. The log is how you can tell which of those is actually stuck.

References

• Centers for Medicare & Medicaid Services, Office of Burden Reduction and Health Informatics. Guidance on National Provider Identifier (NPI) Enumeration, GL-2023-07, July 20, 2023.
• 45 CFR § 162.410, Implementation specifications: Health care providers.
• 45 CFR § 162.412, Implementation specifications: Health plans.
• National Uniform Claim Committee. Health Care Provider Taxonomy.
• National Uniform Claim Committee. Health Care Provider Taxonomy code set lookup.
• DataSpring. CAQH Provider Data Portal terms of service, effective June 6, 2025.
• DataSpring. For clinicians.
• DataSpring. Provider Data Portal fact sheet, May 2026.
• DataSpring. Clinician Q&A, June 2026.