Credentialing & Privileging Portal

The Credentialing & Privileging Portal takes a practitioner from application to approved privileges in one system. It collects the application, runs primary-source checks against licensing boards and exclusion lists where they can be automated, assembles the file for committee review, and keeps watching licenses, certifications and exclusions after appointment. Every verification is recorded with its source, date and the person responsible, so the file is ready when surveyors ask for it.

The problem it solves

Credentialing is one of the slowest steps between hiring a practitioner and that practitioner seeing patients. Much of the delay is clerical: chasing documents, checking the same sources by hand, and moving paper files between committees.

Who it’s for

• Medical staff services professionals and credentialing specialists
• Department chairs who recommend privileges
• Credentials committees, medical executive committees and boards
• Practitioners applying for appointment and reappointment
• Payer enrollment and EHR access teams, who receive verified data

1. ApplicationPractitioners complete an online application, attest, and upload documents. Information they have given before is carried forward at reappointment.
2. Primary-source verificationLicenses, board certification, DEA registration and exclusion lists are checked automatically where the source allows it; anything else is queued for a specialist, with the result recorded the same way.
3. Committee reviewA complete file, with anything needing attention flagged, goes to the department chair, credentials committee and board in turn, with privileges requested against each department's criteria.
4. Ongoing monitoringExpiring licenses and certifications, periodic exclusion checks, reappointment cycles, and focused and ongoing professional practice evaluations.

Online application

A secure application practitioners complete and sign online, with required items checked before submission.

Automated source checks

Checks against state licensing boards, the OIG exclusion list, SAM.gov exclusions and the NPPES NPI registry where automated lookup is available.

Specialist task queue

Verifications that cannot be automated become tasks with the source, instructions and a place to record the result.

Reference requests

Peer references and attestation letters requested and chased by email, with responses attached to the file.

Delineated privileges

Privilege forms per department, with the criteria for each privilege and the evidence that supports it.

Committee packets

Each file assembled with flags for gaps, adverse findings and expiring items, ready for review.

Electronic approvals

Recommendations and approvals from the chair, committees and board recorded with dates and conditions.

Expiry monitoring

Reminders to practitioners and staff before a license, certification or registration lapses.

Periodic exclusion checks

Exclusion lists rechecked on the schedule your policy sets, with matches flagged for review.

FPPE and OPPE tracking

Focused and ongoing professional practice evaluations recorded against each practitioner and privilege.

Reappointment

Reappointment applications pre-filled from the current file, on the cycle your bylaws set.

Audit trail

Every verification with its source, date and the person who recorded it, for surveyors and accreditors.

Practitioner

Completes the application, uploads documents, requests privileges and responds to requests for information.

Credentialing specialist

Manages files, completes verifications that cannot be automated, resolves flags and prepares packets.

Medical staff services manager

Oversees the queue, configures requirements and forms, and reports on files in progress.

Department chair

Reviews files for the department and recommends privileges, with any conditions.

Committee member

Reviews packets assigned to the credentials or medical executive committee and records decisions.

Read-only reviewer

Views completed files and audit trails, for example during a survey or internal audit.

State licensing boards

Automated lookups where a board offers them; specialist tasks where it does not.

OIG and SAM.gov exclusions

The OIG List of Excluded Individuals/Entities and SAM.gov exclusion records.

NPPES NPI registry

The public registry of National Provider Identifiers.

HR and recruiting

New practitioners created from your HR or recruiting system by file or API.

EHR access

Approved privileges passed to the team that sets up EHR access and order rights.

Payer enrollment

Verified data handed to your enrollment team or enrollment system.

Single sign-on

Staff sign in through your identity provider using SAML or OpenID Connect.

Work API

File status, expiries and approvals available to your reporting tools.

Business associate agreement

Where protected health information is involved, Moraph signs a business associate agreement before any data is loaded.

Role-based access

Each person sees only the files and actions their role allows; committee members see only packets assigned to them.

Encryption

Client data is encrypted, with keys Moraph staff cannot access without explicit, time-bound authorization, as described in our Trust Center.

Single sign-on and two-step verification

Staff sign in through your identity provider; practitioners use a secure account with two-step verification.

Complete audit trail

Every view, change, verification and approval is logged with the person and time.

Independent assurance

The product runs under Moraph's company-wide controls, independently audited for SOC 2 Type II and ISO/IEC 27001.

Moraph cloud

Hosted by Moraph in the United States region, under a business associate agreement where protected health information is involved.

Dedicated environment

Single-tenant hosting for health systems whose policies require it, scoped in the proposal.

Multi-facility setup

One instance for a health system with several hospitals or medical staffs, each with its own forms, committees and approvals.

With a managed service

Optionally run alongside a Moraph managed service for platform administration and configuration changes.

Bylaws and policy review

We map your bylaws, credentialing policy and rules and regulations to the workflow, approval steps and reappointment cycle.

Application and forms

We configure the application, attestation questions and required documents for each practitioner type, with your medical staff office.

Privilege forms

Department delineation forms and criteria are set up with each department chair, who approves their own.

Verification sources

We confirm which sources can be checked automatically for your states and specialties, and set up specialist tasks for the rest.

Data migration

Current practitioner files, expiry dates and approved privileges are moved from your existing system and reconciled with your team.

Training and go-live

Specialists, managers, chairs and committee members are trained on their own part of the workflow before go-live.

• Some licensing boards and certifying bodies offer no automated lookup. Those verifications are completed by a specialist and recorded in the portal.
• National Practitioner Data Bank queries are made by your organization under its own NPDB registration. The portal records the result.
• It hands verified information to payer enrollment but does not submit enrollment applications to payers.
• It is not a credentials verification organization. Moraph does not perform verifications on your behalf or certify your files.
• Professional practice evaluation data is recorded in the portal; it does not extract quality measures from your EHR.
• Privilege criteria and forms are owned by your departments and must be kept current by your medical staff office.
• It does not manage practitioner scheduling, payroll or contracts.
• The workflow supports accreditation standards; meeting them remains your organization's responsibility.

• Which of your verification sources can be checked automatically, and how are the rest handled?
• How does the portal reflect your bylaws, committees and reappointment cycle?
• How are department privilege forms and criteria set up and maintained?
• What does a surveyor see when asking for evidence of a verification?
• How are approved privileges passed to the EHR access and enrollment teams?
• How are existing practitioner files migrated and reconciled?