To start an applied behavior analysis (ABA) therapy practice, choose a specific service model and state, confirm the rules that apply there, form and insure the business, obtain the identifiers and payer relationships you need, build clinical and privacy controls, hire within your supervision capacity, and test the entire intake-to-payment workflow before the first session. The longest dependency usually determines the launch date, so set the public opening date after written readiness gates have evidence.
Editorial approval scope: The team checked current source fidelity, scope boundaries, dates, arithmetic, reader usefulness, practical workflow, and general-information limitations.
This guide gives you a sequenced launch plan, a working timeline, and a first-client checklist. It is general educational material for a U.S. practice. A healthcare attorney, accountant, licensing authority, and each target payer should confirm the requirements for your ownership structure, location, workforce, and contracts.
Start with a dependency map
An ABA practice launch is a chain of decisions. Entity documents affect tax records, National Provider Identifier (NPI) records, bank accounts, insurance, leases, payer applications, and claims. A name or address mismatch near the beginning can create rework across that chain.
The U.S. Small Business Administration (SBA) puts location, structure, registration, tax identifiers, licenses, banking, and insurance in its launch sequence. It also explains that location affects zoning, taxes, regulations, and costs. Use that general sequence, then add the clinical, payer, privacy, and workforce controls specific to ABA services. Review the SBA launch framework.
Assign one accountable owner to each workstream and require evidence before marking it complete:
| Workstream | Accountable owner | Evidence to retain | Readiness gate |
|---|---|---|---|
| Service model | Founder and clinical leader | Written population, settings, geography, hours, and payer strategy | Demand and delivery model agree |
| Legal and regulatory | Founder and qualified counsel | State and local requirement matrix, registrations, licenses, renewal dates | Counsel confirms the planned model can operate |
| Finance and insurance | Founder and accountant | Budget, cash plan, bank records, tax setup, bound policies | Cash and coverage support the planned opening |
| Payer access | Credentialing lead | NPI records, applications, contracts, effective dates, portal access | Each scheduled client's payment route is verified |
| Clinical quality | Clinical director | Policies, assessment and treatment workflows, supervision plan, audit tools | Clinical leader signs the care-readiness review |
| People | Operations lead and clinical director | Role files, credentials, screening, training, payroll setup | Every scheduled worker is cleared and competent for the role |
| Operations and data | Operations and privacy leads | Tested intake, authorization, schedule, documentation, claim, security, and incident workflows | A mock case passes from inquiry through reconciliation |
1. Define the practice you are actually building
Write a one-page operating definition before filing an entity or signing a lease. State the client population, geography, service settings, referral sources, payer mix, opening capacity, and clinical and business decision owners.
The model controls the research that follows. A center brings facility questions. Home and community services bring travel, safety, and remote-supervision questions. Telehealth adds location, consent, technology, and payer-policy checks. Test local demand with referral partners and families, then choose a small opening panel that the first team can supervise and support well.
2. Build a state and local requirements matrix
Map the planned service against every authority that could govern it. Qualified counsel should review the answer for each location where clients receive services or staff work.
Your matrix should cover:
- Secretary of State registration and foreign qualification for every state where the entity conducts business.
- State behavior-analyst licensure, title, supervision, and scope rules.
- Health-facility, clinic, autism-provider, Medicaid, or other agency enrollment categories that may apply to the chosen model.
- Professional entity, ownership, management, and clinical-control rules.
- City and county business licenses, zoning, occupancy, fire, signage, and home-business requirements.
- Employer registrations, workers' compensation, unemployment, leave, wage, scheduling, and background-check rules.
- Consent, record, mandated-reporting, incident, telehealth, and minor-care requirements.
The SBA advises founders to research state, county, and city licenses because requirements depend on activity and location. It also notes that some licenses expire, which makes renewal ownership part of the initial setup. See the SBA's licenses and permits guidance.
Create columns for authority, requirement, official source, owner, filing and effective dates, renewal, evidence, and counsel's conclusion. Record the source-check date and use the issuing agency's current instructions for the decision.
3. Form the entity and stabilize its identity
Choose the legal and tax structure with a healthcare attorney and tax professional. The SBA explains that structure affects taxes, fundraising, paperwork, and personal liability, with material state variation. Compare business structures through the SBA.
After counsel settles the structure and ownership:
- Clear the legal name and any assumed name.
- File formation and governance documents with the state.
- Document ownership, voting rights, clinical authority, capital contributions, distributions, and exit rules.
- Obtain an Employer Identification Number (EIN) directly from the Internal Revenue Service (IRS).
- Register for state and local tax and employer accounts.
- Open dedicated bank, credit, and merchant accounts.
- Set up bookkeeping, approval limits, expense documentation, and monthly close ownership.
- Bind the insurance required by law, contract, lease, and the practice's risk analysis.
The IRS instructs a founder creating a legal entity to register it with the state before applying for an EIN. It also says the business name on the EIN application should match the formation documents. Read the IRS EIN instructions. Preserve the EIN confirmation, certified formation record, ownership documents, W-9, voided check or bank letter, and insurance certificates in a controlled credentialing folder.
Review professional, general, cyber, employment-practices, property, vehicle, and workers' compensation exposures with a broker who understands the model. The SBA notes that legal structure offers limited protection and state insurance requirements vary. Review the SBA insurance overview.
4. Obtain identifiers, enrollment, credentialing, and contracts
Treat identifiers, credentialing, enrollment, contracting, and billing activation as separate milestones. One completed step rarely settles the others.
Determine which individual and organization NPIs your electronic transactions and payer applications require, then apply through the National Plan and Provider Enumeration System (NPPES). The Centers for Medicare & Medicaid Services (CMS) lists the NPPES web application and paper process in its NPI frequently asked questions. CMS treats NPI issuance, licensure, and credentialing as separate validations. See the current NPPES notice.
Create a master identity sheet with the exact legal name, assumed name, tax identification number, organization and clinician NPIs, taxonomy selections, service and mailing addresses, billing contact, ownership data, bank details, licenses, insurance, and contact emails. Reconcile every application to that sheet.
For each target payer, track these fields:
| Field | What to capture |
|---|---|
| Product and network | Commercial, Medicaid, managed care, or other exact product |
| Participation route | Individual, group, facility, delegated entity, or payer-defined provider type |
| Required records | Payer checklist with document versions and expirations |
| Application status | Submitted date, reference number, outstanding items, owner, next follow-up |
| Contract status | Received, reviewed by counsel, signed, countersigned |
| Effective status | Written network and billing effective dates by provider, location, and product |
| Operations setup | Portal users, electronic data interchange, clearinghouse, electronic remittance, payment method, authorization route |
Many plans use the CAQH Provider Data Portal, now operated by DataSpring. Clinicians and group administrators control authorized plan access and maintain the profile. Read DataSpring's clinician guidance. Each payer controls its participation decision and effective dates.
Confirm the exact provider, location, product, and effective date in writing before representing the practice as in network. Have counsel review contracts, notices, estimates, billing practices, and applicable law before opening self-pay or out-of-network workflows.
5. Design clinical governance and compliance before hiring for volume
Put a qualified clinical leader in charge of scope, assessment, treatment planning, supervision, documentation, caregiver involvement, transitions, incident response, and clinical quality review. Business targets should flow through that governance structure.
The Behavior Analyst Certification Board (BACB) publishes the ethics requirements for its certificants. Use the current BACB ethics page and the applicable state board as source documents. The Council of Autism Service Providers (CASP) organizes its Organizational Guidelines around business operations, clinical operations, and risk management. Use licensed content through authorized access.
Pair every policy with an owner, training method, evidence trail, and audit cadence. At minimum, test workflows for:
- intake, eligibility, consent, referral, diagnosis records, and waitlist decisions;
- assessment, individualized goals, treatment planning, assent and preference, caregiver participation, and transition;
- prior authorization, service limits, changes, expiration tracking, and appeals;
- scheduling against authorization, credential, supervision, setting, and staff-competency rules;
- session documentation, late entries, corrections, signatures, claim release, and record retention;
- complaints, incidents, safety, mandated reports, continuity, and emergency communication;
- conflicts of interest, gifts, marketing, referrals, billing integrity, and overpayment response;
- quality audits, corrective action, and leadership review.
Have counsel determine the practice's status under HIPAA and other privacy laws. For covered entities and business associates, the U.S. Department of Health and Human Services (HHS) requires risk analysis to cover all electronic protected health information the organization creates, receives, maintains, or transmits. Read the HHS risk-analysis guidance.
Inventory every system, device, communication channel, vendor, and data transfer. Assign privacy and security officials, role-based access, training, vendor review, agreements where applicable, incident response, backups, access termination, and periodic risk review.
6. Build the financial model around collected cash
Separate startup spending, monthly fixed costs, variable care-delivery costs, and working capital. Model cash receipts from written contract terms and conservative operating assumptions. Billed charges provide little insight into payroll capacity.
A useful runway calculation is:
cash runway in months = unrestricted launch cash / expected monthly net cash burn
For the pre-collection period:
monthly net cash burn = fixed cash expenses + variable cash expenses + debt service - collected cash receipts
State the assumptions for authorized hours, attendance, paid and billable time, wage load, supervision capacity, contract rates, clean claims, collection timing, refunds, and owner compensation. Run a base case and a downside case with a slower start and delayed collections.
Set a hiring gate tied to cash and clinical capacity. For example: approve another technician only when the clinical director has supervision capacity, demand supports the schedule, credential and authorization rules are satisfied, and the downside cash model covers the added payroll. This gate protects care quality and payroll reliability at the same time.
7. Hire the smallest complete team
Define each role's decisions, credentials, competencies, supervision, schedule, and documentation duties. Verify credentials at the issuing source, complete required screening, retain dated evidence, and train new hires in the actual systems and policies they will use.
Have employment counsel or a qualified HR adviser classify roles under current federal, state, and local tests. The Department of Labor says federal classification turns on the full working relationship; a title, 1099, contractor agreement, location, license, or payment method remains one fact within that analysis. Check the current classification page before making a decision because the federal guidance has faced rulemaking and litigation.
Before assigning direct care, confirm the employee file, payroll and timekeeping access, credential status, background and exclusion results where required, training, competency sign-off, client-specific preparation, supervisor assignment, escalation route, and authorized schedule.
8. Test one case from inquiry through payment
Use a synthetic client record and run the complete workflow: inquiry, consent, eligibility, referral, assessment, authorization, staff assignment, session note, review, claim, remittance, denial, family statement, record request, cancellation, incident, and discharge.
Record each handoff, field, system, owner, exception queue, and retained evidence. Fix failures, then run the case again. In a passing test, the team can explain where an item sits, who acts next, what rule controls the decision, and how leadership sees overdue work.
A hypothetical readiness example
Maya, a hypothetical BCBA founder, plans a home and community practice in one county. Her entity, EIN, insurance, privacy setup, and clinical policies are complete. One payer has confirmed the provider, product, location, and effective date in writing. A second application remains under review, so that product stays closed for scheduling. Maya hires and trains within her supervision and cash capacity, runs a synthetic case, and schedules the first family after each applicable gate has evidence.
The example shows how a smaller verified opening can beat a larger planned opening. A pending application remains a pending dependency. Hiring follows supervision and cash capacity. The first session follows the readiness review.
A practical launch timeline
Use this as an internal planning baseline and replace every range with the official agency, payer, landlord, vendor, and hiring dates for your project.
| Planning window | Primary work | Exit evidence |
|---|---|---|
| Weeks 1 to 2 | Define population, setting, geography, capacity, payer strategy, and clinical authority | Signed one-page operating definition and dependency map |
| Weeks 2 to 4 | Complete counsel and tax review, formation, EIN, banking, initial budget, and insurance applications | Stable legal identity and finance file |
| Weeks 3 to 8 | Work through state, local, facility, professional, employer, and privacy requirements | Requirement matrix with approvals, effective dates, and renewals |
| Weeks 4 onward | Apply for NPIs, payer enrollment, credentialing, contracts, portals, and electronic transactions | Written status by provider, location, product, and effective date |
| Weeks 4 to 10 | Configure clinical, intake, authorization, scheduling, documentation, billing, security, and quality controls | Policy owners trained and synthetic case passed |
| Weeks 6 onward | Recruit within approved clinical and cash capacity | Cleared, trained team with assigned supervisors |
| Opening gate | Review each first client's coverage, authorization, consent, staff, setting, safety, and schedule | Clinical and operational sign-off for the specific start |
Credentialing, licensing, construction, and hiring can become the critical path. Parallel work helps when downstream decisions have stable inputs. Track dependencies weekly and move a public opening date after the longest path has enough evidence.
First-client readiness checklist
The founder, clinical director, operations lead, billing owner, and privacy or security lead should sign the checklist that applies to the practice:
- [ ] Legal entity, ownership, locations, licenses, permits, registrations, and insurance are effective.
- [ ] Legal name, tax ID, NPIs, taxonomies, addresses, W-9, bank record, and payer files match.
- [ ] The client's payer product, provider, service location, network status, authorization, service limits, and effective dates are verified.
- [ ] Consent, notices, financial policy, communication preferences, and required referral or diagnostic records are complete.
- [ ] Assessment and treatment-plan workflows have qualified clinical ownership.
- [ ] Assigned staff have current credentials, screening, training, competency, payroll access, and supervision.
- [ ] The schedule checks availability, travel, authorization, setting, supervision, and conflicts.
- [ ] Documentation, signature, correction, claim, remittance, denial, refund, and record-retention workflows passed testing.
- [ ] Role-based system access, vendor agreements, backups, downtime, and incident response are active.
- [ ] Complaints, safety events, mandated reports, cancellations, continuity, and discharge have named escalation paths.
- [ ] Cash reporting covers payroll, taxes, refunds, debt, and the downside runway case.
- [ ] Leadership can see overdue authorizations, expiring credentials, unsigned notes, unreleased claims, denials, incidents, and corrective actions.
If an item affects lawful operation, safe care, privacy, staff qualification, coverage representation, authorization, or billing, keep the related service closed until the accountable reviewer clears it.
Related resources
Use the parent guide, Starting and Launching an ABA Practice, to browse the full startup sequence.
- How Much Does It Cost to Start an ABA Practice?
- ABA Practice Business Plan Template and Worked Example
- Home-Based vs. Center-Based ABA Practices: Costs, Operations and Tradeoffs
- How to Credential an ABA Practice with Insurance Payers
Sources
Sources were checked August 13, 2026. State, payer, employment, tax, and privacy requirements can change, so verify the controlling source again before acting.
- SBA Business Guide
- SBA launch sequence
- Internal Revenue Service, Employer Identification Number
- Centers for Medicare & Medicaid Services, Unique Identifiers FAQs
- Centers for Medicare & Medicaid Services, NPPES NPI Files and NPI Notice
- DataSpring, powered by CAQH, Guidance for Clinicians
- U.S. Department of Health and Human Services, HIPAA Security Rule Risk Analysis Guidance
- Behavior Analyst Certification Board, Ethics Codes
- Council of Autism Service Providers, Organizational Guidelines
- U.S. Department of Labor, Employee or Independent Contractor Classification
