What Is Primary Source Verification, and Why Does It Take So Long?

A provider submits a medical license, board certification evidence and other credentials to join a health plan's network. The plan does not rely on those documents alone. Before it can make a credentialing decision, it must verify the qualifications against an authoritative source.

This is primary source verification (PSV), one of the most important steps in provider credentialing. It is also a common source of administrative delay. The challenge isn't just the verification itself, but the administrative work surrounding it: contacting multiple sources, tracking responses, resolving discrepancies, and documenting results.

This guide explains how PSV works, why it takes so long, and how provider credentialing software helps health plans complete it more efficiently while maintaining audit-ready compliance.

What is primary source verification?

Primary source verification (PSV) is the process of confirming a healthcare provider's qualifications with the original issuing organization or another accepted authoritative source. For example, a health plan may verify a physician's medical license through the state licensing board and confirm board certification through the relevant certifying organization.

In simple terms, primary verification means checking a qualification against an authoritative source rather than relying only on what the applicant supplied. The primary source verification process establishes that a credential is valid, current and attributable to the provider being reviewed. Under the credentialing standards of the National Committee for Quality Assurance (NCQA), verification may be conducted through the original source, a recognized source, or a contracted agent of the primary source, as applicable.

Health plans use primary source verification credentialing procedures during initial credentialing and recredentialing. Document each PSV verification result according to applicable standards and the plan's policies. This evidence helps credentialing teams make informed decisions and gives them an audit trail for quality reviews and checks.

How the primary source verification process works

Requirements vary by credential and provider type, but most verification workflows follow a similar sequence.

1. Collect the provider's application.

The credentialing team gathers license details, education and training history, certifications, work history, and other required information. Missing or inconsistent details are identified before verification begins.

2. Identify the appropriate verification sources.

Match each credential with its issuing authority or another accepted source. Medical licenses, board certifications, and educational qualifications may need different verification channels.

3. Request and document verification.

Staff retrieve information through an authorized online source, electronic connection, or direct request. Record the result with the required supporting details.

4. Check verification time limits.

Verification information must be current when the credentialing decision is made. According to the NCQA 2025 health plan credentialing requirements, PSV must be completed within 120 days before the decision for files credentialed on or after July 1, 2025.

5. Resolve discrepancies.

An expired license, inconsistent name, missing qualification, or adverse finding triggers additional investigation. The file remains under review until the issue is addressed according to policy.

6. Complete credentialing review.

Once the required verification and other credentialing activities are done, the file proceeds through the plan's established review and committee for final network approval.

On paper, the process is straightforward. In practice, however, coordinating these activities across multiple sources can consume considerable administrative time and slows down the overall provider onboarding process.

Primary Source Verification Process: What gets checked and where

A provider credentialing file contains several qualifications and background checks. The following primary source verification examples illustrate common credentialing activities.

Not every activity in this table is classified as PSV under every applicable standard. Some are additional credentialing or monitoring checks that strengthen the overall assessment.

Consider a health plan that receives an application from a cardiologist seeking network participation. The credentialing team completes primary source license verification with the state board and checks board certification through an accepted source. It also completes the required sanctions, exclusions and malpractice history reviews before the file moves forward. Even when the application is complete, one provider file can involve several independent checks.

Why does primary source verification take so long?

PSV takes long because six operational delays stack up, creating administrative bottlenecks: varied source response times, several checks per provider, incomplete applications, expiring results, manual documentation and monitoring that continues after approval.

1. Response times vary by source

Some licensing boards offer a primary source verification website where you can retrieve information quickly. Others require a primary source verification form sent by email, mail or another channel. Response times depend on each organization's processes and can be affected by state regulations and standards.

2. One provider needs several checks

Credentialing teams may need information from several licensing, certification, educational and regulatory sources. Each request has its own status, documentation needs and follow-up. Without centralized tracking, staff must coordinate these moving parts by hand.

3. Incomplete or inaccurate applications create rework

Missing or incorrect information, such as a wrong license number or provider name, can delay or block verification. Teams then have to contact the provider, correct the information and restart the whole process again.

4. Verification results expire

Verification evidence has time limits. If a credentialing decision is delayed beyond the permitted window, teams may need to repeat some checks. NCQA's updated requirements make timely coordination more important, because a completed verification does not stay valid indefinitely.

5. Documentation adds administrative effort

Teams must keep evidence of how they verified information. That evidence goes into a primary source verification report that records the source, verification date, findings and other required details. When the report is compiled manually, the process slows down further.

6. Monitoring continues after approval

The credentialing process does not end when a provider joins the network. Health plans continue monitoring providers and conduct periodic recredentialing as standards, regulations, and requirements change. Changes in license status, sanctions or exclusions identified by the Office of Inspector General (OIG) can also trigger additional review.

What a primary source verification policy should cover

A comprehensive primary source verification policy helps health plans apply procedures across credentialing teams, provider types, and delegated organizations consistently without deviations. A PSV policy must, therefore, clearly establish:

• Credentials that have to be checked for each provider category.
• The issuing authorities, recognized sources, and verification methods that are to be permitted.
• How current the information needs to be when a credentialing decision is made.
• Who performs verification, reviews discrepancies, and oversees delegated credentialing.
• The evidence that must be retained and how verification results are recorded.
• The way in which missing information, inconsistent records, and adverse findings are to be investigated.
• How frequently applicable sanctions, exclusions, and other credentials are reviewed.

The policy should also reflect current accreditation standards, regulatory obligations, and the health plan's own credentialing procedures. Clear policies not only eliminate any ambiguity but also make it easier to identify areas where manual work, inconsistent processes, or missing information are leading to avoidable delays.

How provider credentialing software shortens primary source verification

Health plans cannot skip required verification steps. They can reduce the administrative work needed to complete and document them. Here are five ways technology helps.

1. Validate information before verification begins

Rework caused by incomplete applications is a common and frequent occurrence in the PSV process. Medical credentialing software can check required fields, flag inconsistent or inaccurate information, and identify missing details before the credentialing team begins contacting verification sources.

2. Automate eligible source checks

AI-powered primary source verification software can retrieve verification information electronically. Intelligent automation can also help document the source, result, and date of each completed check, reducing the need for repeated searches and manual data entry.

3. Track verification dates and deadlines

Centralized tracking helps teams monitor which checks are complete, pending, or approaching their applicable time limits. Alerts and workflow rules prevent aging checks from breaching the 120-day NCQA compliance window.

4. Strengthen ongoing sanctions monitoring

Organizations can utilize OIG exclusion monitoring and broader provider sanctions monitoring to identify post-credentialing changes that need to be complied with. Automated screening against relevant exclusion and sanctions sources can reduce repetitive manual lookups, even if potential matches still require appropriate confirmation and review before action is taken.

5. Maintain one reliable provider record

Verified credentialing information should remain connected to the provider's broader network record. A centralized approach improves provider data accuracy by reducing duplicate entry and inconsistent updates between credentialing, network management, and provider directory processes.

Simplifying primary source verification through connected workflows

These capabilities become more valuable when they operate together, especially when powered by embedded intelligence. Instead of managing each verification individually, credentialing teams can track the process through a connected workflow.

HealthAxis offers this operational agility through HealthOS Provider, the provider workspace of HealthOS, the operational backbone of EHOS (Enterprise Healthcare Operating System). HealthOS Provider runs checks for licenses, certifications, sanctions and exclusion lists. Aipass^™, the AI engine inside HealthOS, monitors credentialing information in the background and flags exceptions for a credentialing specialist to review.

The workspace also connects credentialing information with broader provider network operations, helping teams maintain a single source of truth as providers move through verification, enrollment, and ongoing monitoring.