CAQH Provider Data Portal

Editorial approval scope: The team checked current source fidelity, scope boundaries, dates, arithmetic, reader usefulness, practical workflow, and general-information limitations.

The portal is a shared data route

The CAQH Provider Data Portal page reflects the established product name. On June 7, 2026, CAQH announced its DataSpring rebrand. The current DataSpring clinician page still says CAQH Provider Data Portal, while its May 2026 fact sheet says DataSpring Provider Data Portal. Existing access, account information, profiles, and saved links did not require a rebrand migration.

The profile can reduce repeated data entry across participating organizations. The shared profile creates no universal credentialing application result. Each payer, hospital, credentials-verification organization, or other recipient decides how it uses the data under its own process and authority.

Profile status and payer status answer different questions

A complete and attested portal profile means that the provider has supplied information, completed the portal workflow, and attested as required by the service. That status cannot prove that a particular payer has:

• received the current profile and documents
• completed primary-source verification or committee review
• credentialed or approved the practitioner
• enrolled the practitioner, group, or service location
• executed a contract or loaded a roster
• assigned an effective date for a product or claim role
• updated its directory or claims system

The DataSpring resources page describes entering, updating, verifying, and sharing professional and practice information with authorized organizations. Providers may use it without charge, and participating organizations can request its use. DataSpring says its completed credentialing application is accepted in all 50 states, including states with unique forms. That is an application-acceptance statement; it does not show that every payer participates, every supplement is complete, or a provider, group, location, or product is approved.

An NPI is another separate state. The CMS NPI standard page describes a unique ten-digit identifier used in HIPAA transactions, and CMS warns that issuance does not validate licensure or credentialing. PECOS is Medicare's enrollment system; a portal profile does not enroll someone in Medicare or update PECOS. Current CMS Medicaid guidance says providers must enroll in each state where they seek to serve Medicaid or CHIP residents. Verify each commercial-payer route separately.

Individual profiles and group data need distinct owners

An individual profile can contain identifiers, education, training, specialties, locations, affiliations, liability coverage, employment, disclosures, and documents. Under the portal terms, an individual may authorize a practice administrator to input data for associated providers, but the individual remains responsible for verifying the submitted data and completing the individual attestation workflow.

The current Provider Data Portal for Groups page describes centralized group and location data and delegated rosters sent to designated plans. This workflow does not replace individual profiles or every payer submission. Reconcile a location change across affected providers and payer routes.

Assign accountable roles:

Authorization controls designated sharing

The CAQH Provider Data Portal Terms, effective June 6, 2025, say users designate service recipients and authorize transmission. Deleting an organization stops future access as soon as practical but does not delete data already received. The terms also identify limited sharing with HIEs and government-program entities having jurisdiction over the professional practice, even if they are not on the user's list.

Verify the right to submit each document and data element. Use individual accounts, remove a departing worker's practice access and provider associations promptly, and transfer open work. Canceling or deleting an account does not erase administrative records retained under the terms. Record recipient authorizations, approval, date, purpose, and payer follow-up.

The portal concerns provider and practice data. It is not a channel for patient records, clinical notes, or claims data.

Attestation needs an event-driven workflow

The terms require recurring re-attestation or reconfirmation. DataSpring's current FAQ states that profiles must be attested every 120 days, or every 180 days for Illinois providers; quarterly directory prompts can produce 90-day re-attestation. Missing the applicable deadline changes the portal status to Expired. Changed facts can still require earlier action.

Create triggers for a new or renewed license, certification, liability policy, controlled-substance registration when applicable, practice location, employment relationship, ownership fact, tax record, specialty, hospital affiliation, disclosure answer, sanction event, credentialing contact, and participating organization. For each change, identify which portal fields, documents, individual profiles, group records, payers, directories, and claim systems need an update.

Keep evidence of the prior value, new value, effective date, submission, attestation, authorization, payer acknowledgment, and final payer decision. A portal confirmation shows a portal event. Recipient consumption or approval requires separate evidence.

A fictional roster review

At a month-end cutoff, a fictional ABA group's rule identifies 18 clinicians due for internal review because of an attestation deadline or change event. Fifteen have current fields, documents, provider review, attestation, and intended recipient access. Control completeness is 15 of 18, or 83.3%. Three remain open: an expired liability document, an unreviewed location change, and a missing attestation.

The practice separately locks 12 provider-payer-product-location applications due for follow-up. Seven have a final dated decision, two are under review, one awaits correction, and two lack confirmed receipt. Decision completion is 7 of 12, or 58.3%. Reporting 7 of 7 would hide five unresolved applications.

These figures measure internal evidence and payer-state visibility. They do not establish network participation, directory accuracy, claim acceptance, or payment.

Measure freshness and downstream status

Useful measures include profiles passing the defined control review divided by profiles due; expired documents divided by documents in scope; changes updated and attested by target divided by changes due; authorized-organization reviews completed divided by reviews due; and payer applications with a final dated decision divided by applications reaching the defined review date.

Segment by provider, group, location, payer, product, application, portal state, document type, owner, and age. Keep saved, submitted, attested, shared, received, under-review, approved, denied, returned, rostered, and effective states distinct. Define every numerator, denominator, clock, evidence standard, and cutoff before interpreting a percentage.