Introduction
If you've ever been in a meeting where everyone's talking about "credentialing," "delegation," or "CAQH," and thought, "Wait—are we all saying the same thing?" you're not alone.
Healthcare credentialing is one of the most jargon-heavy and fragmented parts of the industry. It's where recruiters, staffing agencies, locum tenens groups, hospitals, medical groups, credentialing verification organizations (CVOs), payers, accrediting bodies, regulators, and software vendors all collide — each with its own language, process, and priorities.
No two organizations credential the same way. A hospital may focus on privileging and peer review. A payer may call it provider enrollment. A medical group might simply say, "getting someone credentialed."
This guide breaks through that confusion — a clear, plain-language glossary for anyone working in credentialing, enrollment, or provider data management.
Credentialing and enrollment
Here's the simple way to think about it:
Credentialing verifies who a provider is. Enrollment gets them paid. These terms are often used interchangeably, but they're not the same. A provider can be fully credentialed with a hospital or CVO and still not be enrolled with payers — meaning they can see patients but not bill insurance.
- Credentialing ensures a provider meets all professional, regulatory, and quality standards — verifying their license, education, board certification, training, malpractice history, and more.
- Enrollment (also called provider enrollment or payer enrollment) is the process of joining insurance networks so that a provider can bill and receive reimbursement.
Credentialing = verification.
Enrollment = network participation.
Primary source verification
One protects patient safety and compliance; the other drives revenue. The cornerstone of credentialing. PSV means verifying every credential directly with the original issuing source:
It's required by NCQA, URAC, CMS, and The Joint Commission, and it forms the foundation of both delegated and non-delegated credentialing programs.
Payer enrollment
This is the process of applying to join a payer's network. Once approved, the provider is considered in-network or participating and can bill under that payer's plan.
Enrollment typically includes credentialing data but also administrative details like tax ID, group affiliations, locations, and EFT information. Each payer has its own process and timeline.
Provider credentialing
The act of verifying a provider's qualifications.
This is usually done by a CVO (Credentials Verification Organization) or internal credentialing team. It's a step that precedes or complements payer enrollment.
Facility credentialing
Hospitals, surgery centers, and clinics also need to be credentialed and approved before billing. Facility credentialing reviews organizational licenses, ownership, and accreditation to ensure compliance with payer and state regulations.
Network participation
When a provider or facility completes enrollment and has an active payer contract, they're officially "in-network."
Contracting
The business side of enrollment. Managed Care executives and contracting specialists handle rate negotiations, terms, and participation agreements with payers. Once a contract is signed, the payer uses credentialing data to activate network participation.
Managed care
Refers to insurance plans and payer departments that control utilization, cost, and network access. A hospital or medical group's AVP of Managed Care typically manages contracting and network relationships with payers — while credentialing teams handle the data and compliance behind the scenes.
Renewals and revalidation
These are periodic maintenance processes that keep providers active and compliant:
- Licenses with state medical boards Board certifications with ABMS or AOA Education with medical schools or residencies Re-credentialing: Re-verifying provider credentials, usually every 2--3 years.
- Re-enrollment: Renewing network participation with payers.
- Re-validation: A CMS-specific requirement to update and confirm Medicare enrollment data.
These steps ensure provider data remains accurate and up to date across payers and directories.
Clinical privileges
Specific to hospitals and ambulatory surgery centers.
Once a provider is credentialed, the facility grants privileges to perform certain procedures or admit patients. Privileging decisions are made by a medical staff committee and are governed by the hospital's bylaws and accrediting body standards.
Continuing education
Required ongoing education for maintaining licensure or board certification. CME tracking is part of re-credentialing and demonstrates continued professional competency.
Performance evaluation
Both are processes unique to hospitals and accredited facilities under Joint Commission standards:
- OPPE (Ongoing Professional Practice Evaluation): Continuous monitoring of provider performance and quality metrics.
- FPPE (Focused Professional Practice Evaluation): A temporary evaluation period, often for new providers or those requesting new privileges.
These reviews ensure clinical performance and patient safety within the medical staff structure.
Delegation
When a payer gives a medical group or CVO the authority to handle credentialing on its behalf through a delegation agreement. Delegated entities perform primary source verification and submit credentialing rosters to payers.
Delegated credentialing offers faster onboarding and tighter control over provider data — but it requires strong compliance, internal audit processes, and data reporting standards.
Verification organizations
An internal department or external vendor that performs credentialing and primary source verification for providers. CVOs follow standards set by NCQA and URAC and are often audited by payers before delegation approval.
Accreditation and governance
NCQA (National Committee for Quality Assurance) Sets national standards for credentialing, re-credentialing, and delegated oversight. Many payers align directly with NCQA's criteria when evaluating provider networks.
URAC (Utilization Review Accreditation Commission) Accredits health plans, telehealth providers, and CVOs, focusing on utilization management and quality improvement.
The Joint Commission Accredits hospitals and healthcare facilities. Its standards govern credentialing, privileging, and peer review within medical staff structures.
Hospital Bylaws Each hospital's medical staff bylaws define how credentialing and privileging occur — including committee composition, voting procedures, and corrective actions. These bylaws are legally binding and must align with accrediting body standards.
Provider rosters
Delegated entities regularly send rosters to payers listing active, new, and terminated providers. Rosters keep payer directories current and help avoid claim delays from inactive or missing enrollments.
Monitoring and data systems
Monthly or quarterly checks for provider exclusions, disciplinary actions, or license issues. Common sources include OIG, SAM, and NPDB databases. Continuous monitoring is an NCQA requirement. Modern platforms (like CredFlow AI) consolidate provider data, automate PSV checks, track expirations, and support compliance reporting. These systems help both delegated and non-delegated organizations manage credentialing efficiently and reduce delays in enrollment or revenue.
CAQH and ongoing operations
A centralized database where providers maintain demographic and professional data. Most payers use CAQH as a standardized source during credentialing or enrollment. Providers must regularly attest to its accuracy for payers to pull current data. Healthcare credentialing isn't a single process — it's an ecosystem.
Different organizations use different terms, but the goals are universal:
- Verify provider qualifications.
- Maintain compliance and safety.
- Ensure providers can bill and get paid.
Whether you're a recruiter, medical staff professional, or payer analyst, speaking the same credentialing language helps align teams and reduce friction across the system.
And as healthcare continues to evolve, platforms like CredFlow AI make it easier to track, verify, and manage provider data across every step — from initial credentialing through ongoing enrollment and compliance.