Home › Guides › Tracking clinician credentials

How to track your clinicians' licenses and credentials

For practice managers, medical staff coordinators and agency credentialing teams. The short answer first, then the detail.

The short answer

Keep one record per clinician that holds every license, registration and certificate, each with its own expiration date and the document behind it. Give one person ownership. Send reminders at 90, 60 and 30 days, to the clinician and to you. Let clinicians send documents straight in instead of chasing them. Check the federal exclusion lists every month.

A spreadsheet works for a handful of clinicians in one or two states. Past that, use a credential tracker that reads documents and builds the due list for you. If a health plan or hospital needs primary-source verification, a credentials verification organization (CVO) or the plan’s or hospital’s own staff does that, on top of tracking.

What to track for each clinician

Thirteen items, set by different bodies. Your bylaws or payer contracts can be stricter. Sources and detail: how often each credential renews.

Item	Renews	Note
State license, one per state	Each board's own cycle	Some renewals also need set CME topics, fingerprints or a PDMP account. Rules by state
DEA registration	Every 3 years	A separate registration in each state where the clinician prescribes controlled substances.
State controlled-substance registration	Yearly to every 3 years	22 states and DC issue one to physicians. The 51-jurisdiction table
Board certification	Continuing certification, set by each board	Track the board’s own checkpoints, not just the certificate date.
BLS, ACLS, PALS	Every 2 years	Cards run through the end of the month, two years after issue (AHA).
Malpractice coverage	The policy term	Keep the current declarations page, and tail coverage when a policy ends.
CAQH ProView	Re-attest every 120 days	The fastest clock in the file. The profile shows as Expired Attestation the day after the deadline.
Hospital reappointment	Set by the bylaws	CMS recommends at least every 24 months unless state law sets a timeframe.
Health-plan recredentialing	Every 3 years	The NCQA standard for accredited health plans.
CME	Per state and per board	Each state sets its own hours and mandated topics. Hours alone do not mean compliant.
Exclusion checks	Monthly	The OIG exclusion list (LEIE) and SAM.gov.
NPI	Never expires	Changes must be reported to NPPES within 30 days.
Facility items	Per facility	TB screening, flu shot, fit test: set by each facility, not by the state.

Four ways to track it, and when each fits

Method	Fits	Cost	Where it breaks
A spreadsheet	Up to about 10 clinicians in one or two states	Free	It only warns someone who opens it. Dates are typed by hand and documents live in email. Free group template
Your HR, scheduling or EHR system	You already pay for it and it has an expiration field	Included	Often stores a date without the document, and knows nothing about state CME rules or DEA per state.
A credential tracker	Practices, groups and agencies, from a few clinicians to a few hundred, across states	Monthly, per clinician or by headcount tier	Organizes and alerts. It does not confirm credentials with the issuing source.
A credentialing platform or CVO	You run payer enrollment or committees, or need primary-source verification	Usually quoted	More setup and cost than a group that only needs to stay current.

Comparing products? See credentialing software for small practices and agencies and credentialing software pricing.

Set it up in an afternoon

Name one owner. When everyone is responsible, a DEA registration lapses.
Start from each NPI. The federal registry lists the states where a clinician reports a license. It is self-reported, so treat it as a starting list. Free NPI lookup.
Get the document behind every date. Take dates from the license or card itself, not from memory or last year’s sheet.
Remind at 90, 60 and 30 days, to the clinician and to you. Start sooner when a renewal needs CME topics or fingerprints.
Give clinicians one place to send documents, an email address or upload link, so a new BLS card does not sit in a text thread.
Check exclusions monthly: the OIG list and SAM.gov.
Before each new facility, run its checklist against the file: ready, expiring before the start date, or missing.
Keep a log of who added or changed what.

Where tracking usually breaks

One DEA registration is assumed to cover every state.
State controlled-substance registrations are left off the list entirely.
CAQH re-attestation, every 120 days, lapses first.
Hours are counted but topics are missed: many states require specific CME subjects on top of the total.
A facility’s own items, such as an annual TB test, are tracked as if the state set them.
The only copy of a document lives in one coordinator’s inbox.

Common questions

What is the best way for a small practice to track provider licenses?

One record per clinician, one owner, reminders at 90, 60 and 30 days, and the document behind every date. With fewer than about ten clinicians in one or two states, a well-kept spreadsheet can work. Beyond that, a credential tracker that reads documents and builds the due list saves the hours a spreadsheet costs.

Can we track clinician credentials in a spreadsheet?

Yes, for a small group. Use one row per credential, not one row per clinician, so every date gets its own reminder. Our free group tracker template is set up that way. The weak point is that a spreadsheet only warns the person who opens it.

How far ahead should we be reminded before a license expires?

At 90, 60 and 30 days. Start earlier when a renewal needs CME with set topics, fingerprints or a background check, and for a new state license, which can take months.

Is credential tracking the same as credentialing verification?

No. Tracking keeps dates and documents current. Primary-source verification confirms each credential with the source that issued it, and health plans and hospitals often require it from a credentials verification organization (CVO) or their own staff.

How often should we check the OIG exclusion list?

Monthly. The OIG updates its List of Excluded Individuals/Entities monthly and says checking it monthly best limits liability.

How do locum tenens agencies track licenses across many states?

One record per clinician, with a separate entry for every state license, DEA registration and state controlled-substance registration, each on its own clock, and a checklist per facility before each start date. See credentialing software for locum tenens agencies.

Track it in the Roster

Import your clinicians from any Excel or CSV layout. Documents you or the clinician send are read, checked against the clinician’s name and added to their record. One Due list shows everything due in the next 90 days across every clinician, soonest first, and each facility gets a checklist marked ready, expiring or missing. Every clinician is checked monthly against the OIG exclusion list and the NPI registry. Each clinician chooses what you can see. $10 per clinician a month, admin access free, 30 days free with a card on file. It organizes and flags; it does not verify credentials or make credentialing decisions.

Start your Roster See the Roster

Sources

General guidance on tracking clinician credentials, checked against the sources above on October 19, 2026. Not legal or compliance advice. Your bylaws, payer contracts and state law can be stricter.