CAQH Attestation: How It Works, re-attestation Steps, and What to Do If It Expired

If you’ve ever been told to “just update your CAQH,” you’re not alone. Most providers find the portal’s requirements confusing, yet between juggling licenses and payer enrollments, CAQH attestation is the single most important administrative task for your revenue cycle. In 2026, with the move toward automated primary source verification, a lapsed profile is the fastest way to trigger a “Network Drop” or a complete suspension of reimbursements.

This guide serves as your operational manual for managing CAQH provider attestation, completing the CAQH re-attestation cycle, and fixing an CAQH attestation expired status before it halts your insurance payments. Whether you are navigating the CAQH attestation page for the first time or trying to resolve a complex credentialing delay, understanding the nuances of the CAQH system is critical for practice stability.

CAQH Attestation: What It Is (and Why It Exists)

CAQH attestation is a provider’s formal, legal confirmation that all professional and demographic information within their CAQH CAQH profile is accurate, current, and complete. In the high-stakes modern healthcare environment of 2026, this is far more than a simple administrative check-box exercise; it is a critical component of provider contracting and maintaining your professional standing with insurance networks. Think of it as “signing off” on your digital credentialing file so insurance payers can trust the data they pull for their directories and internal payment systems. Without this explicit confirmation, your professional identity remains in a state of data limbo, effectively locked away from the payers who must verify your credentials before authorizing any reimbursement.

The Council for Affordable Quality Healthcare (CAQH) created the CAQH database to serve as a centralized hub for the industry, specifically designed to eliminate the exhausting administrative burden of traditional, manual credentialing. Instead of sending repetitive, 40-page paper applications to dozens of different insurance companies, you maintain one centralized, high-fidelity profile. For that profile to remain valid for provider enrollment services, the attestation CAQH status must remain active and fully verified.

If the data is not attested, the information is considered “unverified” by payer systems. In today’s increasingly automated environment, payers will generally refuse to process claims, update your directory information, or include you in new network opportunities if your status has lapsed. Essentially, CAQH provider attestation is the indispensable bridge between your hard-earned professional qualifications and your practice’s ability to receive timely payment. It transforms your raw data into actionable, trustworthy information that fuels the entire healthcare revenue cycle.

What Exactly Is CAQH?

CAQH, or the Council for Affordable Quality Healthcare, is a high-level non-profit alliance consisting of the nation’s leading health plans and professional trade associations. Their primary mission is to catalyze industry-wide collaboration to streamline the complex business of healthcare administration and reduce operational friction. The cornerstone of this initiative is the CAQH platform, which has evolved into the definitive industry standard for credentialing services across the United States. CAQH acts as a secure, digital vault that stores your comprehensive work history, board certifications, and malpractice insurance details in a centralized, encrypted environment. This sensitive data is only accessible to the specific insurance carriers you explicitly authorize through the portal. By utilizing this “single source of truth,” the healthcare system significantly reduces administrative waste and redundant paperwork, though it shifts the vital responsibility for real-time data accuracy directly onto the provider’s shoulders. 

CAQH re-attestation: What It Means (and How It’s Different From Attestation)

While the terms are often used interchangeably by busy office staff, CAQH re-attestation refers to the specific, recurring cycle of periodic data verification required by the Council for Affordable Quality Healthcare. It is crucial for administrative success to distinguish this from the initial CAQH attestation, which typically occurs when you first establish a CAQH profile or make a significant data update—such as adding a new practice location, changing a tax ID, or updating malpractice coverage. re-attestation, by contrast, is a strictly scheduled maintenance requirement. Even if your professional information has not changed a single digit in several months, you are still legally required to perform a CAQH re-attestation to confirm that the existing static information remains accurate and current.

Understanding what does re-attestation mean in the context of 2026 healthcare operations is vital for avoiding unexpected, and often costly, gaps in your insurance enrollment. While a standard attestation is often proactive—triggered by an active change you’ve made—re-attestation is purely maintenance-based, acting as a periodic “handshake” with the system to confirm everything is still correct. Many providers fall into the dangerous trap of assuming that if their medical license or DEA registration hasn’t expired, they have no reason to log into the portal. This is a common operational mistake that frequently leads to an “Inactive” profile status. Once a profile becomes inactive, it can take weeks of manual intervention to rectify with certain insurance payers, during which time your practice may be dropped from provider directories or face significant claim denials. By staying ahead of the CAQH re-attestation window, you ensure your data is always “payer-ready,” supporting a seamless payer contract management workflow that protects your practice’s revenue cycle from unnecessary interruptions.

How Often Do You Need to Re-Attest CAQH?

Navigating the CAQH attestation page can be a tedious and technically demanding task, yet it remains the cornerstone of modern practice administration. In the healthcare landscape of 2026, the complexity of these portals has increased as insurance carriers move toward real-time data integration. Successfully completing your CAQH CAQH re-attestation is no longer just about clicking a button; it is about managing a sophisticated digital identity that serves as the foundation for all your credentialing needs and fits into your credentialing process. When a provider logs into the portal, they are essentially conducting a high-level audit of their professional standing. If this audit is performed haphazardly, it can trigger a ripple effect of administrative errors that compromise your ability to see patients and receive timely reimbursements.

The process of moving through the CAQH attestation page requires a methodical approach that aligns with your broader payer contract management services. Every piece of data you confirm—from practice hours and telehealth capabilities to complicated disclosure questions regarding malpractice history—is cross-referenced by payers against national databases. In 2026, many of these checks are automated, meaning that even a minor discrepancy between your CAQH profile and your state licensing board records can lead to an immediate “Incomplete” status. This status prevents payers from pulling your file, effectively stalling your enrollment in new networks or causing a lapse in existing contracts.

To ensure a seamless workflow, you must treat the CAQH CAQH re-attestation as an operational checkpoint rather than a nuisance. By following a structured workflow, you transform a potentially frustrating administrative burden into a strategic advantage. A clean, fully attested profile signals to insurance carriers that your practice is professional, organized, and compliant with the latest industry standards. This level of data integrity is essential for maintaining robust revenue cycles and ensuring that your credentialing services are never hindered by preventable data gaps. Approaching the portal with this mindset allows you to maintain control over your professional data, ensuring that the “source of truth” for your practice remains accurate, active, and fully optimized for payer access.

Step-by-Step: How to Complete CAQH Attestation in CAQH

To get your CAQH CAQH re-attestation finished quickly, you need to ensure your data is 100% complete before the system will even show you the final “Sign” button.

Below is the high level workflow to get through the portal efficiently.

How to Complete CAQH Attestation

1. Access the Portal: Go to the CAQH credentialing login and enter your credentials. Use the password reset immediately if you are unsure of your login to avoid a lockout.
2. Identify Required Actions: On your main dashboard, look for the status message. If it says “Re-attestation Due,” click the link to begin the review.
3. Audit Your Profile: Navigate through each section (Personal, Professional, Education) via the sidebar. Update any expired documents like state licenses or malpractice insurance.
4. Resolve System Flags: Check for red “Error” icons or yellow “Warning” flags. You must resolve all red errors before the attestation link becomes active.
5. Navigate to Attestation: Once your profile is 100% complete, click on the “Attest” tab in the primary navigation menu.
6. Review and Submit: On the final CAQH attestation page, review the summary of your data. Scroll to the bottom, authorize the release of information, and click “Submit.”

Detailed Guide: Where to Click

The Initial Login

Navigate to the provider portal. If you haven’t logged in recently, the system might prompt you to verify your email or phone number via multi-factor authentication.

• Where to click: The main Login button on the CAQH landing page.

The Data Review

You cannot skip this. The system requires you to touch each section to ensure the data is still “Current.”

• Where to click: Use the “Profile” or “Data Modules” sidebar. Look for the “Review All” feature if it is available, which allows you to scroll through your entire file in one view.

Handling Expired Documents

If your insurance or license has expired since your last login, the “Attest” button will be greyed out.

• Where to click: Click the “Documents” tab to upload a fresh PDF of your COI (Certificate of Insurance) or new state license.

The Final Submission

This is the most important part of the process.

• Where to click: Once all sections have a green checkmark, go to the CAQH attestation page. After checking the legal disclaimer box, the “Submit” button will turn blue or green. Click it and wait for the “Success” confirmation screen.

Before You Attest (Quick Checklist)

Completing a pre-attestation audit is essential to prevent your file from being flagged for manual intervention. Follow these critical steps before finalizing your submission:

1. Verify State Medical Licensure: You must never click the final “Attest” button until you have confirmed that your State Medical License is current. Ensure the expiration date in the portal hasn’t passed and that your standing remains “Active” with the board.
2. Validate Malpractice Insurance (COI): Confirm that the policy period reflected in your CAQH profile matches your current Certificate of Insurance exactly. Discrepancies here are a leading cause of credentialing delays.
3. Update DEA and CDS Certificates: Ensure these registrations are updated and reflect your current practice address, particularly if you have recently relocated or expanded your service locations.
4. Audit Practice Location Data: Perform a deep dive into your practice profiles to confirm that phone numbers, “remit to” addresses, and specific office hours are accurate for every site.
5. Review Supporting Documentation: Ensure all digital uploads are legible and current. Attesting with expired documents can stall your provider enrollment for several weeks, creating unnecessary administrative bottlenecks.

Submit Attestation (Numbered Steps)

1. Login to CAQH: Access the portal using your 8-digit CAQH ID. If you are a practice manager, you may use the Groups Module for bulk profile oversight.
2. Audit the “Status” Column: Before navigating to the attestation tab, look for any sections marked “Incomplete” or “Expired” in the sidebar. These must be resolved first.
3. Update Professional History: Ensure there are no gaps in your work history longer than 30 days. If a gap exists (e.g., for maternity leave or travel), you must provide a brief explanation.
4. Authorize Your Payers: Navigate to the “Authorize” tab. Even a completed profile is useless if you haven’t granted your specific insurance carriers permission to view the data.
5. Submit and Confirm: Once all errors are cleared, move to the “Attest” tab. You will be asked to review your summary, answer the final background questions, and provide your electronic signature.

CAQH Attestation Questions: What Providers Get Stuck On

During the final phase of the digital credentialing process, you will encounter a series of mandatory disclosure queries known formally as the CAQH attestation questions. These are not merely administrative formalities; they are legally binding declarations regarding your professional history and clinical conduct. In 2026, the complexity of these modules has increased as CAQH has implemented state-specific logic. This means a provider practicing in Florida may face a entirely different set of disclosure requirements than a colleague in California, as the system now pulls from local regulatory board standards.

Getting stuck on these questions is a common hurdle for many practices because the legal phrasing can be exceptionally dense and nuanced. These queries typically probe into sensitive professional areas where any lack of transparency can trigger an immediate audit. Key categories that require meticulous attention include:

• Work History Gaps: Any period exceeding 30 days where you were not actively practicing medicine must be accounted for with a specific explanation. Failing to document these gaps accurately is a major “red flag” during a credentialing services review.
• Sanctions and Exclusions: You are required to disclose any past, current, or pending actions related to Medicare, Medicaid, or other federal healthcare programs.
• Hospital Privileges: The system requires clarity on whether your privileges have ever been voluntarily or involuntarily terminated, suspended, or restricted.
• Malpractice Claims and Settlements: Providers often struggle with how to report settled claims. It is essential to be fully transparent here, as insurance payers will invariably cross-reference your answers with the National Practitioner Data Bank (NPDB) and your previous provider contracting records.
• Practice Locations and Disclosure of Ownership: You must confirm the legal structure of your practice and disclose any financial interests that could impact your enrollment.

By approaching these CAQH attestation questions with precision and honesty, you protect your practice from the “Network Drops” that occur when a payer detects a discrepancy between your CAQH profile and secondary verification sources.

Fast Rules to Avoid Errors on Attestation Questions

To maintain a high standard of data integrity and ensure your provider enrollment proceeds without delay, you must adhere to several strict operational rules when answering disclosure queries. First and foremost, always be perfectly consistent with your dates; the chronological history listed in your CAQH provider attestation must match your professional CV and your state board records exactly. Second, never leave any fields blank. CAQH’s current system logic is designed to identify “incomplete” data profiles; if a question does not apply to your specific situation, you must explicitly select the “No” or “N/A” option to satisfy the system requirements. Finally, always update your profile data such as new malpractice certificates or license renewals before you begin the final attestation steps. If the system detects a logical inconsistency between your profile data and your answers to the background questions, it will block your submission, potentially leading to a lapse in your active status.

CAQH Attestation Expired: What It Means + How to Fix It

When your status shows as CAQH attestation expired, it means your digital profile is effectively invisible to the insurance companies you participate with. Most payers pull data from CAQH every 90 to 120 days to verify that your credentials are still valid. If that attestation window closes, your account is flagged as “Inactive” or “Expired.”

Operationally, an expired status is a serious bottleneck. Payers cannot pull your current malpractice insurance or state license data, which often leads to pending claims or a total pause in reimbursements. In some cases, a provider might even be removed from the online directory, causing patients to think you are out of network.

Recovery Action Plan

Follow these direct steps to restore your status:

1. Access the CAQH Portal: Log in using your primary CAQH credentialing login. If you have forgotten your credentials, use the automated recovery tools rather than calling support to save time.
2. Identify Expired Credentials: The system usually blocks attestation if your State License, DEA, or Malpractice COI dates are in the past. Upload the newest versions of these documents immediately.
3. Review Every Module: You must click through each section of your profile. Even if your office address and phone number are the same, the system requires manual confirmation that the data is still accurate.
4. Check for Data Gaps: Look at the sidebar for any red “Error” icons. You must resolve these specific data points before the “Attest” button becomes functional.
5. Finalize on the CAQH Attestation Page: Once your progress reaches 100 percent, navigate to the CAQH attestation page. Scroll through the full summary, check the legal authorization box, and click “Submit.”

Ops Note: After submitting, download your Attestation Counterpart PDF. If you have claims being held, you may need to send this proof of compliance to your provider relations representative at the insurance company to trigger a manual review.

Signs Your Attestation Is Expired or Inactive

Identifying a lapse early is critical, as automated CAQH notifications are frequently intercepted by organizational spam filters. You should monitor for these specific operational red flags:

• Dashboard Status Indicators: Your primary CAQH portal display shows “Inactive” or “Expired” in prominent red text, indicating your data is no longer being distributed.
• Urgent Payer Inquiries: A health plan contact or representative specifically requests a “current CAQH profile” to proceed with a pending claim or provider enrollment application.
• Credentialing Stagnation: You experience sudden, unexplained delays in credentialing services when trying to add new clinicians or practice locations to your existing contracts.
• Revenue Cycle Disruption: Your billing reports show an uptick in “Provider Not Credentialed” denials, signifying that payers have flagged your credentials as unverified in their adjudication systems.

Fix-It Checklist (Do This in Order)

If your profile has lapsed, follow this prioritized recovery sequence to restore your credentials and stabilize your revenue cycle:

1. Log in to CAQH: Log in and identify the specific data deficiency that triggered the expiration. In most cases, the system has flagged a lapsed state license or an outdated malpractice COI.
2. Update Documentation: Upload high-resolution, clear copies of your new documents. It is critical that the expiration dates you enter manually into the portal match the text on the documents exactly to pass automated validation.
3. Complete the Re-Attestation: Navigate to the “Attest” tab and finalize the submission. Many administrators mistakenly believe uploading a document is sufficient; however, you must click the final “Attest” button to refresh your timestamp and move back to “Active” status.
4. Confirm Payer Visibility and Access: Once active, verify your “Authorize” tab. Ensure your health plans still have explicit permission to pull your updated file for payer contract management purposes.

CAQH Attestation and Release Form (and “Blank Attestation Form” Searches)

As we move further into 2026, many providers and administrative staff still find themselves searching for a blank CAQH attestation form to satisfy payer requests. However, it is essential to clarify that the CAQH process has become almost entirely paperless. Searching for a physical form to fill out by hand is often a remnant of older credentialing workflows that no longer apply to the modern CAQH ecosystem. Instead of a physical document, your “form” is actually a digital dataset that you confirm through an electronic signature.

The core of this process is the CAQH attestation and release form, which is a legal document integrated directly into the online portal. This form serves two primary purposes: first, it certifies that the information you provided is true and accurate; second, it grants legal permission for CAQH to “release” that data to the health plans you have authorized. Without a signed CAQH attestation release form, your profile essentially sits in a vacuum completed but inaccessible to the insurance companies that need to verify your credentials for payment.

Do You Need a Blank CAQH Attestation Form?

The short answer is: typically, no. If a payer or a hospital credentialing department asks you for a blank CAQH attestation form, they are usually using outdated terminology. What they actually require is for you to log in to the CAQH portal, complete the data entry, and then download the “Attestation Summary” PDF that the system generates after you have electronically signed. This PDF acts as the “proof” of your attestation. If you are struggling with this digital transition, our provider enrollment services can help you navigate these portal requirements and ensure your documentation is accepted the first time.

When a Release Form Comes Up (What It Usually Means)

When the term “release form” is mentioned in a professional context today, it almost always refers to the “Authorization, Attestation, and Release” module within the CAQH portal. This module acts as the legal “gatekeeper” of your professional data, dictating which entities have permission to access your sensitive credentials. In 2026, most states and insurance payers accept the electronic signature provided within the CAQH portal as legally binding for all provider enrollment activities.

However, some specific state Medicaid programs or niche workers’ compensation panels still operate on legacy systems that require a traditional “wet signature” on a printed version of the CAQH attestation and release form. In these rare cases, you must navigate to the “Documents” tab, print the state-specific template, sign it manually, and re-upload the scanned version to the portal. Regardless of whether the signature is digital or physical, this authorization is the only way to grant payers the necessary access to pull your file for credentialing or re-credentialing purposes.

Why CAQH Attestation Matters (Credentialing Speed + Getting Paid)

In the high-stakes world of provider contracting, your CAQH profile isn’t just a digital resume it’s the foundational Source of Truth. Think of it as the “green light” that tells insurance networks you are legitimate, licensed, and ready to be reimbursed.

When your attestation is current, the credentialing process moves silently in the background. However, the moment that 120-day window closes without an update, the system doesn’t just pause; it breaks. Because most major payers sync with CAQH every 90 to 120 days, a lapsed profile triggers a Real-World Chain Reaction that can paralyze a practice’s financial health.

The Real-World Chain Reaction

When your attestation expires, the fallout happens fast:

• Profile Inactivity: Your data is immediately pulled from the active “stream,” making you invisible to automated payer queries.
• Verification Failure: Payers cannot confirm your license, DEA, or malpractice coverage during mandatory quarterly audits.
• Systemic Flagging: Some internal payer systems will automatically flag your NPI as “inactive” or “out of compliance.”
• Revenue Stoppage: Claims are rejected with “Provider Not Credentialed” or “Data Not Available” codes, creating an immediate and mounting backlog of unpaid services.

Visibility Equals Viability

To maintain a steady cash flow, proactive payer contract management must include a CAQH review as a non-negotiable task. By keeping your attestation active, you ensure you remain “visible” to the networks you serve. It is the difference between getting paid on time and spending months fighting for revenue that should have been guaranteed.

Common Mistakes (and How to Prevent Them)

Even the most seasoned practice managers can fall into traps that lead to an expired CAQH attestation status. These errors are rarely due to a lack of effort; instead, they are usually the result of “administrative autopilot” where the complexity of the platform is underestimated. To protect your revenue cycle, you must treat CAQH not as a passive database, but as a living document that requires precise, active management.

The “Auto-Filter” Trap

One of the most frequent causes of a lapsed profile is the simple ignoring of reminder emails. CAQH sends automated notifications at 90, 60, and 30 days prior to expiration. Because these are system-generated, they are frequently diverted by high-security firewalls or filtered into junk, “Promotions,” or “Spam” folders. By the time a provider or manager realizes there is an issue, the 120-day window has often already closed, shifting the profile to “Inactive” and triggering the aforementioned revenue chain reaction.

Attesting Before Updating: The Accuracy Gap

Another significant pitfall—and perhaps the most dangerous—is attesting before updating. Many users log in and immediately click the “Attest” button just to clear the notification. However, if you attest while your malpractice insurance certificate or DEA license on file expired even forty-eight hours prior, your profile is technically inaccurate.

Critical Rule: Payers do not just look at your “Attestation Date”; they scrub the underlying documents. If they find an expired certificate, they will reject the entire file regardless of your active status, leading to “Data Not Available” claim denials.

Strategy for Prevention

To avoid these common hurdles, implement a “Documents First” policy:

1. Whitelist Notifications: Ensure donotreply@CAQH.org is a safe sender in your email client.
2. Verify Before You Click: Always review the expiration dates of your professional liability insurance, state licenses, and board certifications before hitting the final submission button.
3. The 10-Day Rule: Aim to complete your CAQH re-attestation at least 10 days before the actual deadline to account for any document processing delays within the CAQH CAQH system.

Preventive System (Calendar + Doc Folder + Owner)

To insulate your practice from the risks of a lapsed profile, we recommend implementing a robust, three-tier preventive system. This infrastructure moves CAQH management from a reactive “emergency” to a streamlined administrative routine.

• Assign Clear Ownership: Ambiguity is the enemy of compliance. Designate a single point of contact whether a Practice Manager, an internal credentialing specialist, or a dedicated vendor for CAQH setup and maintenance. If the provider is managing it personally, they must formalize the time on their clinical calendar.
• The 90-Day Buffer Rule: Never aim for the 120-day deadline. Set internal calendar triggers for 90 days. This creates a 30-day “grace period” to track down updated malpractice COIs or state licenses that may still be in the mail.
• The Digital Vault: Maintain a dedicated, secure cloud folder (e.g., SharePoint or Google Drive) containing the most recent copies of all licenses, DEAs, and COIs. Label every file by its expiration date (e.g., Malpractice_Exp_12-2026.pdf) for instantaneous verification during the CAQH provider attestation process.

FAQs 

Quick Answers and Recaps

How to complete CAQH attestation (step-by-step)

1. Login: Access the CAQH CAQH portal with your unique credentials.
2. Review Profile: Check all sections, including Personal, Education, Training, and Specialties.
3. Update Documents: Upload current copies of your State License, DEA, and Malpractice COI.
4. Resolve Errors: Click “Review/Correct Errors” to fix any flagged data points.
5. Electronic Signature: Sign the digital CAQH attestation and release form.
6. Attest: Navigate to the “Attest” tab and click the “Attest” button to submit.

What to do if CAQH attestation expired

• Immediate Login: Access CAQH to identify which documents or data points caused the “Inactive” status.
• Audit & Update: Upload current licenses or insurance certificates and answer any new CAQH attestation questions.
• Reattest: Click the final attestation button to move your status from “Expired” back to “Active.”
• Verify Visibility: Ensure all relevant payers are authorized to view your updated data.

Attestation vs. re-attestation

• Attestation: The formal act of a provider confirming that their entire professional profile is 100% accurate and complete.
• re-attestation: The recurring 120-day cycle required by CAQH to maintain an active profile status, regardless of whether data has changed.
• The Trigger: Attestation is triggered by data updates; re-attestation is triggered by the calendar.

Next Steps: Protect Your Credentialing Status

Maintaining an active CAQH profile does not have to become an ongoing administrative burden. Use the checklist below to keep your information current, avoid credentialing delays, and reduce the risk of interruptions that can affect payer approvals and reimbursement.

CAQH Attestation Summary Checklist

• Audit and update your documents: Upload your most recent malpractice COI, state licenses, DEA registration if applicable, and any other outdated records before starting your CAQH attestation.
• Complete your re-attestation: Log in to the portal, review your profile carefully, confirm any changes, and submit your CAQH re-attestation so your status remains active.
• Set recurring reminders: Add a 90-day calendar reminder instead of waiting until the full 120-day window so you have extra time to review updates and avoid an expired attestation.
• Confirm payer access: Check your authorization settings to make sure the appropriate insurance payers can view your updated CAQH profile and supporting information.
• Assign ownership: Decide whether the provider, practice manager, or credentialing partner is responsible for monitoring deadlines, document updates, and follow-up.