Payer Revalidation and Recredentialing Calendar: Never Miss a 120-Day Window

Credentialing gets all the attention when you onboard a provider. Then everyone forgets that credentialing is not a one-time event, it is a set of clocks that keep ticking, and the day one of them runs out, your billing stops without warning. The renewals are boring, invisible, and unforgiving, which is exactly why they need a calendar. Here is every cycle in one place.

Three renewals people conflate

Half the missed deadlines start with confusing three different things that sound alike. Revalidation is renewing your government enrollment, Medicare or Medicaid, on a fixed cycle. Recredentialing is a commercial payer periodically re-verifying your qualifications to stay in its network. Re-attestation is confirming your CAQH profile is still accurate, which most commercial payers read from. They are three separate clocks with three separate owners and three separate consequences, and a practice that tracks only one of them will eventually be blindsided by the other two. The whole point of a renewal calendar is to stop treating these as the same event, because they are not, and their deadlines rarely line up.

The full renewal calendar

Here is every renewal that keeps a provider billable, with its cycle and who owns it. This table is the artifact: build your calendar from it.

Read down the cycle column and the problem is obvious: the intervals are all different, from 120 days to five years, so there is no single "renewal season." They land scattered across the calendar, which is precisely why memory fails and a tracked calendar succeeds. The CAQH cycle is the fastest and the one most often missed, covered in depth in the CAQH re-attestation guide.

What missing each one costs

The renewals feel low-stakes because nothing happens the day you set them up. The stakes show up only when one lapses, and then they are severe. Miss a Medicare revalidation and CMS can place a payment hold or deactivate your billing privileges CMS revalidation; critically, Medicare does not cover services provided during the inactive period, so that revenue is simply gone, and reactivation is processed like a brand-new enrollment, extending the gap by weeks. Miss a commercial recredentialing and you can be dropped from the network, so claims for that payer start denying. Let CAQH lapse and every payer that verifies against it stalls at once. Let a license or DEA expire and the provider cannot practice or prescribe at all. Framed against the cost of any credentialing gap, roughly $10,122 a day per physician who cannot bill, detailed in what a credentialing delay costs, the few hours a year of renewal upkeep are the cheapest insurance in the practice. The renewal math nobody runs is simple: a single missed five-year deadline can cost more than a decade of diligent tracking ever would.

The 2026 tightening you should know about

Two 2026 developments make this calendar more urgent, not less. First, Medicare is operating under its Cycle 3 revalidation, with stricter checks on enrollment accuracy, and certain higher-risk provider categories moved to shorter cycles, so the old assumption that everyone gets a clean five years no longer holds for every practice; confirm your own cycle rather than assuming 42 CFR 424.515. Second, CMS announced a nationwide Medicaid revalidation initiative in April 2026, asking states to submit expedited revalidation plans and prioritize higher-risk provider types, which means Medicaid revalidation reviews are likely to become more frequent than the federal five-year floor in many states. The practical takeaway is that renewal cycles are getting tighter and scrutiny is rising, so a practice tracking these loosely is more exposed in 2026 than it was a year ago. Do not rely on receiving a notice; CMS posts due dates in advance but holds you responsible for the deadline either way.

Special situations that add renewals

Beyond the standard cycles, several events trigger extra filings that catch practices off guard, and each belongs on the calendar as its own trigger. Off-cycle revalidations: CMS reserves the right to request a revalidation before your scheduled date, so five years is a floor, not a guarantee. Reportable changes: Medicare requires you to report changes like a new practice location, a change of ownership, or a change in managing employees within set timeframes, and missing those reporting windows is its own compliance failure, separate from revalidation 42 CFR 424.515. New locations: adding or moving a site is not a renewal, but it triggers enrollment updates with every affected payer, on their timelines. Multi-state providers: each state multiplies the clocks, a license and often a separate DEA registration per state, plus each state Medicaid program's own revalidation cycle, so a provider practicing in three states carries roughly three times the renewal load. Adding a provider: a new hire does not reset anyone else's dates, but it adds a full set of clocks that must go on the calendar from day one. The rule of thumb: anything that changes who you are, where you practice, or which states you touch adds renewals, so update the calendar whenever the practice changes, not just when a date approaches.

How to build the calendar

Building it is straightforward once you accept that it cannot live in someone's head. Start by listing every provider and every renewal from the table above, then record each next-due date, working from the earliest known date and the standard cycle. For each entry, assign one owner so it is never everyone's job, and set an alarm that fires months ahead, not days, because some renewals, especially recredentialing and revalidation, take time to complete and often route through monthly payer committees. Then review the calendar on a set cadence, monthly, so nothing approaching its date is a surprise. This is exactly the structure the recurring tasks tracker is built to hold, run alongside the credentialing tracker that watches your other credentialing dates. Getting the underlying CAQH profile right first is in the CAQH setup guide.

The cadence that never misses

Put together, the method is a rhythm. Monthly, review the calendar and act on anything due in the next 120 days, re-attesting CAQH, starting a recredentialing packet, renewing a license or DEA that is approaching. Quarterly, confirm every provider's Medicare and Medicaid revalidation status using the CMS lookup, since a due date can appear before a notice does. Annually, renew malpractice and reconcile the whole calendar against reality, catching any provider added or any cycle that changed. Run that rhythm and the renewals stop being a source of nasty surprises and become a routine four-times-a-year checklist. The upstream process that feeds all of this is in the credentialing guide, the initial enrollment in the payer enrollment plan, and the documents in the credentialing checklist. A renewal that lapses is a self-inflicted wound; a calendar is how you stop inflicting it.

Where to go next

• CAQH Re-Attestation: The Mistakes That Stall Enrollment (and a 90-Day Reminder SOP) live

  CAQH re-attestation mistakes that stall enrollment: lapses, incomplete profiles, expired docs,.

• $10,122 a Day: What a Credentialing Delay Actually Costs live

  A credentialing delay costs about $10,122 a day per physician. Here is the math from published.

• Recurring Tasks Every Practice Forgets: Calibrations, Contracts, Renewals (Template) live

  A free recurring tasks tracker for a medical practice: every daily-to-annual duty with an owner.

Frequently asked questions

Sources

1. CAQH ProView, provider re-attestation required about every 120 days to keep an enrollment application current with participating payers. proview.caqh.org
2. CMS revalidation. cms.gov
3. 42 CFR 424.515. ecfr.gov