Credentialing & Privileging Portal

Principal workflows

• Application: Practitioners complete an online application, attest, and upload documents. Information they have given before is carried forward at reappointment.
• Primary-source verification: Licenses, board certification, DEA registration and exclusion lists are checked automatically where the source allows it; anything else is queued for a specialist, with the result recorded the same way.
• Committee review: A complete file, with anything needing attention flagged, goes to the department chair, credentials committee and board in turn, with privileges requested against each department's criteria.
• Ongoing monitoring: Expiring licenses and certifications, periodic exclusion checks, reappointment cycles, and focused and ongoing professional practice evaluations.

Who uses it

• Medical staff services professionals and credentialing specialists
• Department chairs who recommend privileges
• Credentials committees, medical executive committees and boards
• Practitioners applying for appointment and reappointment
• Payer enrollment and EHR access teams, who receive verified data

Reporting

• Files in progress by stage, specialist and department
• Outstanding verifications and references, and how long each has been waiting
• Licenses, certifications and registrations expiring in a chosen period
• Exclusion check results and any matches under review
• Upcoming reappointments and FPPE and OPPE status
• Committee agendas and decision history for minutes and surveys

Features

• Online application: A secure application practitioners complete and sign online, with required items checked before submission.
• Automated source checks: Checks against state licensing boards, the OIG exclusion list, SAM.gov exclusions and the NPPES NPI registry where automated lookup is available.
• Specialist task queue: Verifications that cannot be automated become tasks with the source, instructions and a place to record the result.
• Reference requests: Peer references and attestation letters requested and chased by email, with responses attached to the file.
• Delineated privileges: Privilege forms per department, with the criteria for each privilege and the evidence that supports it.
• Committee packets: Each file assembled with flags for gaps, adverse findings and expiring items, ready for review.
• Electronic approvals: Recommendations and approvals from the chair, committees and board recorded with dates and conditions.
• Expiry monitoring: Reminders to practitioners and staff before a license, certification or registration lapses.
• Periodic exclusion checks: Exclusion lists rechecked on the schedule your policy sets, with matches flagged for review.
• FPPE and OPPE tracking: Focused and ongoing professional practice evaluations recorded against each practitioner and privilege.
• Reappointment: Reappointment applications pre-filled from the current file, on the cycle your bylaws set.
• Audit trail: Every verification with its source, date and the person who recorded it, for surveyors and accreditors.

Integrations

• State licensing boards: Automated lookups where a board offers them; specialist tasks where it does not.
• OIG and SAM.gov exclusions: The OIG List of Excluded Individuals/Entities and SAM.gov exclusion records.
• NPPES NPI registry: The public registry of National Provider Identifiers.
• HR and recruiting: New practitioners created from your HR or recruiting system by file or API.
• EHR access: Approved privileges passed to the team that sets up EHR access and order rights.
• Payer enrollment: Verified data handed to your enrollment team or enrollment system.
• Single sign-on: Staff sign in through your identity provider using SAML or OpenID Connect.
• Work API: File status, expiries and approvals available to your reporting tools.

Deployment

• Moraph cloud: Hosted by Moraph in the United States region, under a business associate agreement where protected health information is involved.
• Dedicated environment: Single-tenant hosting for health systems whose policies require it, scoped in the proposal.
• Multi-facility setup: One instance for a health system with several hospitals or medical staffs, each with its own forms, committees and approvals.
• With a managed service: Optionally run alongside a Moraph managed service for platform administration and configuration changes.

Security and privacy

• Business associate agreement: Where protected health information is involved, Moraph signs a business associate agreement before any data is loaded.
• Role-based access: Each person sees only the files and actions their role allows; committee members see only packets assigned to them.
• Encryption: Client data is encrypted, with keys Moraph staff cannot access without explicit, time-bound authorization, as described in our Trust Center.
• Single sign-on and two-step verification: Staff sign in through your identity provider; practitioners use a secure account with two-step verification.
• Complete audit trail: Every view, change, verification and approval is logged with the person and time.
• Independent assurance: The product runs under Moraph's company-wide controls, independently audited for SOC 2 Type II and ISO/IEC 27001.

Limitations

• Some licensing boards and certifying bodies offer no automated lookup. Those verifications are completed by a specialist and recorded in the portal.
• National Practitioner Data Bank queries are made by your organization under its own NPDB registration. The portal records the result.
• It hands verified information to payer enrollment but does not submit enrollment applications to payers.
• It is not a credentials verification organization. Moraph does not perform verifications on your behalf or certify your files.
• Professional practice evaluation data is recorded in the portal; it does not extract quality measures from your EHR.
• Privilege criteria and forms are owned by your departments and must be kept current by your medical staff office.
• It does not manage practitioner scheduling, payroll or contracts.
• The workflow supports accreditation standards; meeting them remains your organization's responsibility.

Next steps

Book a demonstration or a technical briefing at www.moraph.com/solutions/credentialing-privileging-portal. Purchasing routes and company information: www.moraph.com/how-to-buy.