CAQH Profile Setup and Maintenance: Complete 2026 Guide

One thing before we start. CAQH made two changes this year, and people often mix them up.

In January 2026, the organization moved from a non-profit to a for-profit company. In June 2026, it changed its name to DataSpring, powered by CAQH. These are two different events, five months apart.

Your login, your data, and how you use the system at proview.caqh.org have not changed because of either one. So if you see CAQH ProView called the Provider Data Portal or DataSpring, know it is still the same system with a new name. Don’t let that confuse you.

Why the CAQH Profile Exists in the First Place

Think about the old days.

A provider who wanted to join five insurance networks had to fill out five separate forms that asked almost the same questions. Same education history, same malpractice details, same work history, just laid out differently for each payer.

CAQH solved that. It built one central place where you enter your data once, and payers pull from it instead of asking you to fill out their own paperwork.

A few basics worth knowing early:

• It’s free for providers. It always has been. Health plans and other groups pay fees to use the system, not you.
• Over 900 health plans and groups use it, including almost every major commercial payer.
• Your profile has around 18 sections. This covers your NPI, licenses, malpractice history, work history, hospital ties, and practice locations.

Once your profile is built and turned on for a payer, that payer starts its credentialing work using your data instead of sending you their own forms. Most people think the job ends there. That belief is exactly what gets them in trouble.

Complete and Attested Are Not the Same Thing

Most people think ‘filling out your profile’ and ‘attesting’ are the same step. They are not, and mixing them up is where a lot of providers get stuck.

Complete means every required field has something in it. The system will show 100 percent even if you have not signed off on any of it yet.

Attested means you looked over that complete profile and legally swore it is accurate, with an electronic signature and a date.

I have seen providers say their profile is ‘done’ because the bar shows 100 percent, while their attestation date is five months old. Every payer pulling that file is looking at stale information. Completion and attestation run on two separate clocks, and only one of them matters to insurance companies. That second clock never stops.

Why a CAQH Profile Is Never Truly Finished

CAQH makes you log back in and re-attest, which means confirm everything is still true, every 120 days. Not once. Forever. For as long as you want your profile active.

Here is what makes this risky instead of just annoying:

• Nothing breaks loudly when you miss it. Claims with payers you are already in network with usually keep going through for a while. No alarm goes off.
• CAQH does send a reminder email near the 120-day mark. But it will not warn you about expired files sitting in your profile, like an old license or malpractice certificate, until you try to attest and get stopped.
• New panel requests and re-credentialing quietly stall in the background. You may not find out for weeks, until a payer rep tells you your application never moved.

What Happens During Attestation, and Why It Trips People Up

Attestation is not just clicking a button that says ‘confirm.’

It is a legal statement. You are swearing the data in your profile is true and current, and it holds real legal weight. That is why CAQH asks for it even when nothing in your file has changed.

When you log in to attest, you walk through:

• Your dashboard status, shown as Incomplete, Expired, or Up to Date
• Every section of your profile, checked for accuracy: licenses, education, malpractice insurance, practice locations, credentials
• Whether any files have expired, like your malpractice face sheet, license renewal, or hospital privileges paperwork
• Any break in your work history longer than three months, which needs a short written explanation
• Whether your list of approved payers still matches who you actually work with

Setting Up the Profile Right the First Time Saves You Later

If you are setting up a brand new profile, have these ready before you start:

• Your NPI number, required for registration
• An active, unrestricted state license
• A current malpractice insurance certificate
• Your DEA certificate, if you prescribe
• Five years of work history with no gaps you cannot explain

Give yourself a buffer before you apply to a payer.

Some payers pull your data the moment you grant access.

Others take a few days to sync.

Turn on access in CAQH first, wait a bit, then send your application. Skipping straight to the application can leave it stuck waiting on a handshake that has not happened yet. Once your profile is built, the system gives you a CAQH Provider ID automatically, which becomes your reference number going forward. None of this means CAQH does your credentialing for you. That difference matters more than people think.

Why This Isn’t Really ‘Medical Billing,’ Even Though It Affects Billing

People ask me this all the time, so let’s settle it.

CAQH setup and upkeep falls under credentialing and payer enrollment, not billing. Credentialing proves you are qualified and gets you approved to join a network. Billing is about sending claims and getting paid for work you already did.

Here is why people group them together anyway, and it is a fair instinct:

• If your CAQH profile lapses, payers can mark you as non-credentialed
• A non-credentialed provider’s claims can get denied or held, no matter how clean the actual billing was
• Revenue cycle teams end up cleaning up a mess that started upstream, in credentialing

So credentialing and billing are separate jobs, but they are tightly linked.

Group Practices and Proxy Access Change Everything

Most guides about CAQH assume a solo provider managing their own profile. But most practices are not that simple.

If you manage CAQH for a group, here is what changes:

• A practice manager or credentialing staffer can ask for proxy access to manage a provider’s profile for them. The provider still has to approve it and stays legally responsible for whatever gets attested
• Group practices often run a separate Group ID tied to the Tax ID Number, alongside each provider’s personal profile. These two need to match, or payers will flag mismatched billing addresses
• When a provider leaves or joins a practice, someone has to update their affiliation in CAQH. Skip this, and a provider who left can still show as active at your location in payer directories. This is the kind of “ghost network” problem regulators have started cracking down on

The No Surprises Act Gave This Process New Weight

A few years ago, this was barely a concern.

Now it matters a lot.

Federal directory accuracy rules under the No Surprises Act push health plans to keep their provider directories accurate, and CAQH data often feeds those directories.

What that means in practice:

• An outdated address or phone number in your CAQH profile does not just sit there harmlessly anymore. It can show up as wrong in a patient-facing directory, and payers face more pressure to fix that
• Some plans now run more frequent data checks because of these directory rules, separate from your normal 120-day attestation cycle
• If a patient gets a surprise bill because your directory listing was wrong, that is now a compliance issue involving the payer, not just an awkward phone call

This is part of why ‘just attest every 120 days and forget about it’ no longer works. Keeping your address and contact info accurate now carries real regulatory weight. And that weight grows the more states you hold licenses in.

Multi-State Licenses Are a Headache Generic Guides Skip

If a provider holds licenses in more than one state, which is common now with telehealth, CAQH wants every active license listed, not just your main one.

Telehealth has made this harder, since providers now hold licenses in far more states than before, and CAQH upkeep has grown more complex right along with it. Nobody updated the instructions to mention this. And all those licenses sit inside a profile that also holds some of your most sensitive personal data.

Handling Sensitive Data Is a Bigger Deal Than People Treat It

CAQH profiles hold your Social Security Number, date of birth, and your full malpractice claims history, if you have one.

That malpractice claims history deserves its own closer look, since it is the section providers get wrong most often.

Malpractice History Reporting Is More Detailed Than It Looks

If you have ever had a malpractice claim, settlement, or even a complaint that led to no payment, CAQH wants the details, and payers check this against the National Practitioner Data Bank.

A few things that actually matter:

• A claim that was dropped or dismissed usually still needs to be listed, with an explanation. Leaving it out and having it turn up later during a payer’s check looks far worse than disclosing it upfront
• If you are a new physician fresh out of residency with no malpractice history yet, this section should say so directly instead of being left blank. A blank field reads as missing information, not “not applicable”
• Tail coverage gaps, meaning a break between when one malpractice policy ended and the next one started, are something payers specifically look for. If you switched insurers, make sure the dates on both policies connect with no gap

Even with every one of these boxes checked, that still does not guarantee smooth sailing with every payer you apply to.

Why Your Profile Can Look Perfect and Still Get Rejected by a Payer

Even a fully attested, accurate CAQH profile does not guarantee smooth credentialing everywhere, and this is the part that frustrates providers most.

This is usually the point where people start thinking about outside help. If your practice deals with multiple providers, multiple states, or a high volume of payer applications, it may be worth hiring a credentialing specialist or service to track the day-to-day work. The moving parts pile up fast once you are past a solo provider with two or three contracts. The providers who avoid this whole mess tend to share a few habits.

Building a System So This Stops Being a Recurring Crisis

The providers who never deal with CAQH chaos all do roughly the same things. The ones who get caught off guard usually skip these:

• Set a reminder at 90 days, not 120. That gives you a buffer if a document needs renewing before you can attest
• Keep a digital folder with current copies of your license, malpractice certificate, and any other file CAQH asks for. Update it the moment something renews, not the moment you need it
• Finish your profile updates in one sitting when you can. The system can time out, and partial saves don’t always hold
• Take a screenshot of your attestation confirmation every time, in case a payer disputes your status later
• After attesting, call the payer’s provider relations line once in a while to confirm they can actually see your updated profile. Approval and visibility are not always instant

Treat this with the same seriousness you would give a license renewal or board recertification. It is not optional. The data accuracy rules are not suggestions. And the cost of ignoring them shows up as real dollars and real delays, not just inconvenience.

Your Setup and 120-Day Maintenance Checklist

Keep this nearby, whether this is your first time building a profile or your tenth time re-attesting.

Before you start setup:

• NPI number on hand
• Active, unrestricted state license, all states if licensed in more than one
• Current malpractice insurance certificate
• DEA certificate, if you prescribe
• State controlled substance certificate, if you need one
• Five years of work history with no unexplained gaps, or a written explanation ready
• Hospital privileges documentation, if it applies to you
• Current W-9 form
• Legal name matches exactly what is on your professional license

Initial profile build:

• Registered at proview.caqh.org
• All 18 profile sections completed, not just the required minimum
• Practice locations matched to your actual billing addresses
• Malpractice history completed in full, including dismissed or unpaid claims
• Payer access turned on for every insurer you want pulling your data
• Profile attested and electronically signed for the first time
• Attestation confirmation screenshot saved

Every 120-day re-attestation cycle:

• Checked dashboard status
• Confirmed license and malpractice certificate have not expired
• Checked for tail coverage gaps between malpractice policies
• Reviewed work history for new gaps
• Confirmed addresses and payer access still match reality
• Re-attested, signed, and saved a new confirmation screenshot
• Added the next deadline to your calendar with a 90-day reminder

For group practices and credentialing staff:

• Proxy access requested and approved by the provider
• Group ID and Tax ID Number matching across individual profiles
• Affiliation updated the moment a provider joins or leaves
• Former employer’s access removed when a provider departs

Frequently Asked Questions

1. Is CAQH the same thing as credentialing?
No. CAQH is the data source that feeds credentialing. The payer still makes its own credentialing decision and runs its own checks on top of what CAQH gives them. Think of CAQH as the paperwork warehouse, not the approval itself.

2. How long does the whole process take, from registration to being usable by payers?
If you have all your documents ready, initial setup usually takes about an hour. After that, CAQH itself does not ‘approve’ anything, since it is just a data repository. But the actual credentialing decision by each payer typically takes anywhere from 90 to 180 days, depending on the payer and how complete your data is.

3. If I update one field, do I need to re-attest right away?
Yes. Saving a change is not the same as attesting it. Payers cannot see your updated information until you go through the attestation step again, even if you only changed a phone number.

4. What happens to my data if I deactivate my CAQH account?
CAQH keeps your information for as long as the law requires, even after deactivation. It does not disappear the moment you stop using it.

5. Do all insurance companies require CAQH?
No. Most major commercial payers do, but some smaller regional plans or specific plan types do not use CAQH at all. Those still need a separate, direct application, no matter how solid your CAQH profile is.

6. I keep hearing about CAQH becoming DataSpring. Do I need to create a new account?
No new account is needed. Your login at proview.caqh.org still works, your data is intact, and your workflow has not changed. The for-profit conversion happened in January 2026, and the DataSpring name itself arrived in June 2026. Neither one touched your account or your data.

7. Can someone else manage my CAQH profile for me?
Yes, through proxy access. But this is not automatic, and it does not carry over if you switch practices or billing companies. Each new arrangement needs fresh approval from you, even if the same staffer managed your profile at your last job.

8. Does CAQH report to the National Practitioner Data Bank, or the other way around?
They are separate systems, but payers commonly check your CAQH malpractice disclosures against the NPDB during their own review. Any mismatch between the two will get flagged. If you have made it this far, you already know more about CAQH than most providers ever bother learning, and that knowledge is exactly what keeps your claims flowing without interruption.