DataSpring/CAQH Credentialing Checklist for US Medical Practices
A practical provider-data checklist for building a complete, controlled and maintainable credentialing file.
The direct answer
A useful DataSpring/CAQH credentialing checklist has four controls: one accurate provider profile, one complete document file, one authorization and attestation process, and one maintenance calendar. A complete profile supports credentialing workflows, but it does not replace payer enrollment, contracting or final approval.
Before opening the portal
| Data group | Items to prepare | Control question |
|---|---|---|
| Identity | Legal name, other names used, date of birth where required, individual NPI and taxonomy | Does the identity match licenses, NPPES and payer records? |
| Practice | Entity name, TIN, organizational NPI, locations, billing and correspondence details | Are provider, entity and location relationships clear? |
| Professional | Licenses, education, training, board details, work history and hospital affiliations where applicable | Are dates complete and unexplained gaps addressed? |
| Risk and compliance | Malpractice coverage, claims history and disclosure information where requested | Are supporting explanations and documents current? |
| Documents | CV, certificates, licenses, insurance documents and requested forms | Are files legible, current, correctly named and easy to retrieve? |
| Access | Provider authorization, delegated-user access and attestation ownership | Who is authorized to enter, review and attest? |
The 12-point DataSpring/CAQH checklist
- Confirm the correct provider profile and individual NPI.
- Standardize the provider’s legal name and other names used across supporting records.
- Review practice entities, TINs, organizational NPIs and service locations.
- Verify taxonomy and specialty data against the intended payer workflow.
- Complete education, training and work-history dates without unexplained gaps.
- Upload current licenses, malpractice information, CV and other requested documents.
- Review hospital affiliations, board information and disclosure responses where applicable.
- Authorize only the health plans or organizations required for the active workflow.
- Use delegated access rather than sharing credentials informally.
- Resolve every incomplete or expired-data indicator before attestation.
- Record who reviewed and who completed the provider attestation.
- Create a quarterly and event-driven maintenance schedule.
What the official provider-data resource says
The current DataSpring provider-data fact sheet describes one profile used by many organizations, document upload, health-plan authorization and quarterly profile updates. It also states that the credentialing application is accepted in all 50 states. Individual payers and organizations still determine what additional information or workflow they require.
Maintenance is not only a quarterly task
Quarterly review is a useful baseline, but material changes should trigger a controlled update. Examples include a new license, address, service location, malpractice policy, board status, legal name, tax relationship, disclosure answer or employment arrangement. Track the change across every system that relies on the same data; a portal update does not guarantee that every payer record changes automatically.
Access and security controls
- Use client-authorized and portal-supported delegation.
- Limit access to the minimum functions required.
- Do not place portal passwords in ordinary email or shared spreadsheets.
- Keep an audit trail of updates, attestations and supporting documents.
- Do not place patient information in a provider credentialing tracker.
Official sources
Related Neeraj RCM guidance
See US medical credentialing support, credentialing versus payer enrollment and what to check when a credentialed provider still cannot bill.
Frequently asked questions
Is DataSpring the same as the former CAQH Provider Data Portal?
DataSpring is the 2026 brand shown on current provider-data materials, while many payer and practice workflows still use the familiar CAQH terminology.
Does a complete DataSpring profile enroll a provider with every payer?
No. The profile supports provider-data exchange, but each payer or organization controls credentialing, enrollment, contracting and final decisions.
How often should the profile be reviewed?
DataSpring materials advise providers to update the profile quarterly. Practices should also update it when material provider or practice information changes.
Should portal credentials be emailed to an outside team?
No. Access should follow the portal’s delegation features, client authorization, least-privilege controls and the organization’s security procedures.
About the reviewer
Prateek Singh, CPCS leads credentialing and revenue-cycle operations at Neeraj RCM Global Solutions. The review standard is to separate provider-data preparation, payer enrollment, contracting and effective-date confirmation rather than treating all activity as one undefined “credentialing” status.
Discuss the exact provider or payer bottleneck.
Share the provider count, states, target payers and current administrative status—without patient information.