Provider ‘expirables’ are credentials, documents, and maintenance events whose expiration or due date can affect privileges, payer participation, or operational readiness. A list can include state professional licenses, DEA registration, state controlled-substance credentials where applicable, board certification, malpractice insurance, BLS/ACLS for roles that require them, CAQH attestation, facility privileges, and Medicare revalidation. The exact list depends on provider type and organization, so the tracker should be rule-based rather than copied from another specialty.
Start with an authoritative source for every date
A provider email saying “my license renews next month” is not the final control. Record the authoritative source—state board verification, certificate, DEA record, insurer document, CAQH portal, CMS revalidation list, or other approved source—plus last verification date. If the source and an uploaded document disagree, investigate before overwriting. A wrong expiration date can create either false urgency or a missed lapse.
90 / 60 / 30 is a framework, not a law
| Window | Typical action |
|---|---|
| 90 days | notify provider/owner for slow-renewal items; start documents that require processing |
| 60 days | confirm renewal submitted; escalate missing prerequisites |
| 30 days | verify new evidence or define contingency if unresolved |
| Expiration/due date | final verification; follow organizational hold/escalation rules |
| After renewal | update all required systems and save source evidence |
Some items need more than 90 days, while others can be updated quickly. Configure reminders from actual lead time and consequences. A medical license renewal may need early action if continuing education or board processing is involved; a malpractice certificate may be issued close to the policy date. Too many identical reminders create alert fatigue. The tracker should identify owner, action, evidence required, and downstream systems that need the new date.
CAQH attestation is a maintenance event, not a credential expiration
CAQH’s current guide generally requires re-attestation every 120 days, with a noted Illinois exception. That date belongs on the maintenance board even though it is different from license expiration. Likewise, Medicare revalidation is a periodic enrollment maintenance requirement. CMS currently says most providers/suppliers generally revalidate every five years and DMEPOS suppliers every three, while off-cycle revalidations can occur. Use the CMS Revalidation List rather than calculating a due date from memory.
Track downstream impact when something lapses
A lapse can affect more than one process. A state license problem may affect clinical privileges, payer participation, scheduling, or claim eligibility; malpractice expiration can pend credentialing; a missed Medicare revalidation can lead to payment hold or deactivation of billing privileges. CMS warns that failure to revalidate on time can result in reimbursement hold or deactivation and that Medicare will not reimburse services during a deactivated period. The response should therefore name the affected systems and owners, not simply mark a cell red.
Separate provider action from staff action
Some renewals require the clinician to complete CE, attest, pay a fee, or answer disclosure questions. Staff can remind, prepare documents, and verify the result but may not be able to complete the legal attestation for the provider. Put an owner field on every task. If the provider must act, send a concise request that names the item, due date, link/source, and what evidence to return. Repeated “your credential is expiring” emails with no action request are easy to ignore.
Audit one provider across every system
Monthly or quarterly, choose a sample provider and compare the master tracker with primary-source license data, CAQH, malpractice certificate, CMS revalidation status, and payer/facility records relevant to that provider. The audit catches silent sync failures—dates that were renewed in one place but not another. Trend the mismatch type so the process improves instead of repeatedly correcting the same field.
Not every expiration has the same consequence or renewal owner
A state license lapse, malpractice-policy expiration, DEA or state controlled-substance registration issue, board certification change, BLS or ACLS requirement, CAQH attestation lapse, and Medicare revalidation due date are different events. Some can affect the provider’s legal authority to practice or prescribe; some affect payer or hospital credentialing; some affect internal privileges or employment; some affect data availability. Build the tracker with an authoritative source, expiry or due date, required lead time, provider action, staff action, downstream systems to update, and a severity level.
A 90/60/30-day reminder pattern is useful because it creates escalation points, but it is not a universal legal timetable. For a renewal that requires primary-source verification or board review, 90 days may already be late; for a document that renews instantly online, it may be generous. The most important control is closure: after the provider renews, update CAQH, payer files, medical-staff systems, directories, and internal records that depend on the credential. “Certificate received” is not the same as “every downstream system is current.”
Escalate by consequence, not only by days remaining
Two items both expiring in 30 days may deserve different urgency. A credential that could interrupt a provider’s ability to perform or bill a high-volume service may require immediate leadership attention, while a document that can be renewed quickly with no downstream review may not. Add a consequence field—practice, prescribing, privileges, payer participation, CAQH availability, or internal compliance—and use it to prioritize the queue. The calendar tells you when; the consequence tells you how hard to escalate.
Do not treat DEA registration, a state controlled-substance credential, board certification, BLS/ACLS, malpractice coverage, and a professional license as interchangeable ‘expiration items.’ First identify which employer, facility, payer, law, accreditation standard, or policy actually requires the item for that provider and role. Then document the consequence of a lapse and the team authorized to decide whether scheduling, privileging, enrollment, or billing must stop. The reminder calendar is only useful when it points to the controlling rule and the operational decision.