CAQH ProView Explained: The 120-Day Attestation Cycle

CAQH ProView — now formally called the CAQH Provider Data Portal — is the online database where a provider enters their professional information once and shares it with every health plan that credentials them, and it must be re-attested on a strict 120-day cycle to stay usable. If you have ever wondered why a payer "can't see" a provider who is clearly in CAQH, the answer is almost always a lapsed attestation. This guide explains what the portal is, how the 120-day cycle works, how payers actually use your data, and how to keep a profile from silently expiring.

What is CAQH ProView?

CAQH ProView is a centralized, provider-maintained repository run by the nonprofit alliance CAQH. Instead of mailing the same license, DEA, and malpractice documents to a dozen insurers, a clinician completes one profile and authorizes plans to pull it. According to CAQH, public and commercial payers across the country use that single data set for credentialing, recredentialing, provider directories, and network management. It is the connective tissue of payer enrollment: nearly every commercial credentialing workflow in the United States begins by reading a provider's CAQH profile.

Note that CAQH is a data source, not a verifier. Payers and credentials verification organizations still perform primary source verification against the originating boards and registries. CAQH simply supplies the self-reported starting point and the supporting documents that the verification is built on.

How do you register for CAQH ProView?

There are two ways in. A provider who has been flagged by a health plan for credentialing receives an invitation email from CAQH containing a CAQH Provider ID; everyone else can self-register at proview.caqh.org. Per the CAQH Provider Data Portal user guide, initial registration asks for the provider's name, provider type, primary practice state, date of birth, email, and core identifiers — Social Security number, NPI, DEA number, and license state and number. CAQH then emails the CAQH Provider ID and a link to finish account setup.

From there the real work begins: completing a detailed application that covers practice information, education, training, licensure, and malpractice history, then uploading supporting documents — diploma, license, DEA registration, and malpractice certificate of insurance. Only after the provider authorizes the relevant health plans and completes the first attestation does the profile become usable for credentialing. Budget a few hours for a first-time profile; it is the foundation every payer builds on.

What is the 120-day attestation cycle?

Attestation is the provider's formal certification that everything in the profile is current and accurate. CAQH requires a fresh attestation every 120 days — every 180 days for providers who practice in Illinois — even if nothing has changed. Per CAQH guidance, you must log in, review each section, upload any newly expiring documents, and click "Attest" before the deadline for the profile to remain active.

Three things trip providers up about the cycle:

• There is no grace period. The 120-day clock only resets when you actually attest — not when you log in, and never automatically.
• It runs regardless of changes. "Nothing changed" is not an exemption; you still have to re-attest.
• The date is per-attestation, not per-calendar-quarter. Every attestation sets a brand-new 120-day deadline measured from that day.

Who is responsible for keeping CAQH current?

Technically the provider owns the profile and must personally attest — the legal certification is theirs. In practice, most groups do not leave a revenue-critical deadline to a busy clinician. A credentialing coordinator, practice administrator, or delegated credentialing team typically maintains the data and documents year-round and prompts the provider to attest before each 120-day deadline. Whoever owns it, the responsibility has to be explicit and calendared; "we assumed the provider was handling it" is one of the most common reasons a profile silently expires.

How do payers use your CAQH data?

When a provider authorizes a health plan, that plan gains ongoing access to the profile and its documents. Payers use it to build the initial credentialing file, to re-verify at recredentialing, to populate the public provider-directory search members rely on, and to keep network and referral data accurate. Because so many downstream systems read from it, a single wrong address or an expired malpractice certificate in CAQH can quietly propagate into directory errors and claim denials across multiple plans at once.

The same profile is read again at every recredentialing cycle — typically every 36 months for NCQA-aligned plans — so a profile that is accurate today but neglected for three years becomes a liability at exactly the wrong moment. Treating CAQH as a living record rather than a one-time form is what keeps recredentialing every three years uneventful.

What happens if you miss re-attestation?

Once 120 days pass without attesting, the profile status flips from attested to expired, and authorized payers can no longer pull current data. The consequences cascade quickly:

• In-flight credentialing and recredentialing stall because the payer's file is now incomplete.
• New payer enrollments can be delayed by weeks while the provider re-attests and each plan re-reads the profile.
• A provider mid-recredentialing can even risk falling out of network — a costly outcome we cover in the hidden cost of a recredentialing lapse.

CAQH keeps the historical data; nothing is deleted. But the profile is effectively invisible to payers until the next attestation, and that invisible window is exactly where revenue leaks.

What are the most common CAQH failure modes?

Most CAQH problems are not exotic — they are the same handful of avoidable mistakes that quietly stall credentialing:

• A missed attestation. The profile expires and payers lose access, freezing every in-flight application until it is re-attested.
• Expired supporting documents. A lapsed license, DEA, or malpractice certificate sitting in the profile fails verification even when the underlying credential was renewed on time.
• Un-authorized plans. A payer that was never granted access simply cannot see the provider, no matter how complete the profile is.
• Data that disagrees with other systems. A name, address, NPI, or tax ID that does not match the group's W-9 or the provider's PECOS record triggers directory errors and claim edits.
• Incomplete sections or unexplained work-history gaps. A verifier stops, sends the file back, and adds a full round-trip to the timeline.

Every one of these is preventable with routine maintenance, which is why the durable fix is a calendar and a named owner, not last-minute heroics.

How do you keep a CAQH profile current?

Keeping ProView healthy is a maintenance discipline, not a one-time task. A reliable routine looks like this:

• Put the 120-day attestation date on a calendar with a reminder 2–3 weeks out — don't rely on CAQH's own email, which can land in spam.
• Re-upload documents before they expire: state license, DEA, malpractice certificate of insurance, and board certification.
• Authorize every plan the provider works with, and keep practice locations and NPIs exact.
• Fix errors at the source in CAQH, not just on individual payer forms, so the correction propagates everywhere.
• If a profile gets stuck, the CAQH Provider Data Portal help desk can be reached at 888-599-1771.

A current CAQH profile is one of the biggest determinants of how long credentialing takes, and it belongs on any new-provider onboarding checklist. This is exactly the kind of quiet, deadline-driven maintenance a done-for-you credentialing team monitors continuously — tracking every provider's 120-day clock so a forgotten attestation never becomes a stalled claim, with a real person confirming each update.