Prior authorization follow-up: the submission versions, document requests and final statuses to inventory before a revenue cycle platform change

Short answer

Before a revenue cycle platform change, inventory the three records that show how each pended authorization was resolved: every submission version with its date and attachments, every missing-document request with the requirement it cited, and the final status with its reason. Note which system holds each, the years covered, who owns it and when read access to the old platform ends. Then introduce the executive who can authorize a data discussion. Licensing depends on rights, de-identification, qualification and the proposed use.

Visual briefFull-size diagram
Five stacked layers of prior authorization history cut by a migration scope line: final status and latest submission move to the new platform, while earlier versions, document requests and work queue tasks stay behind.
Illustrative migration scope for a fictional revenue cycle company; the layers below the line are what the inventory should name.

Prior authorization follow-up is the work between "submitted" and "approved": reading the payer's pend, finding the missing document, resubmitting and chasing a decision. The final status records only the end of that story. A platform change is the moment to find out whether the middle survives.

What should be inventoried before a revenue cycle platform change affects prior authorization follow-up history?

Record classes, time coverage, system owners and the real access deadline, asked at metadata level. The risk in a platform change is specific: the new system may import open authorizations and final statuses but not the closed version history or the work queue tasks between versions.

Questions for the revenue cycle director:

  1. Which record classes exist: submission versions, attachments per version, pend messages, work queue tasks, status history, payer requirement logs?
  2. How many years of closed authorizations sit in the current platform, and how many in systems already retired?
  3. Will the migration bring over closed requests with every version, or only the latest version and its status?
  4. Are clearinghouse 278 logs retained separately, and for how long under that contract?
  5. Where are payer policy changes recorded, if anywhere other than email?
  6. When does read access to the old platform end under the vendor contract or project plan?
  7. Roughly how many authorization requests a year are pended at least once?

Record the answers, not the records. Do not ask for exports, screenshots or logins, and do not recommend keeping data beyond the company's retention policy or authority. A platform change is a real reason to talk now; manufactured urgency is not.

Which layers of the history a platform change keeps

Think of each authorization as five layers, from the summary down to the work. Migration scopes are usually written from the top down; ask how far down this one goes.

LayerWhat it showsRisk of being left behindWhere else a copy may exist
Final status and reasonThe payer's decisionLowPayer portal, if the payer keeps it
Latest submissionWhat was finally approvedMediumClearinghouse logs
Earlier submission versionsWhat was sent first and why it fell shortHighClearinghouse logs, if retained
Missing-document requestsThe requirement the payer citedHighPend messages, fax archive, email
Work queue tasksWho acted, when, and what they attachedHighestNone, once the platform is retired

Two external facts make the lower layers worth naming. The HIPAA standard transaction for prior authorization and referrals is ASC X12N 278 Version 5010, so electronic requests and responses often pass through a clearinghouse that may hold its own logs under a separate contract. And under the CMS Interoperability and Prior Authorization Final Rule, beginning primarily in 2026, impacted payers must send decisions within 72 hours for expedited requests and seven calendar days for standard ones, and must give a specific reason for a denial. The rule covers medical items and services, not drugs, and excludes QHP issuers on the federally facilitated exchanges from those timeframes. For a company with history on both sides of 2026, the inventory should note whether older and newer requests are stored the same way.

An illustrative inventory sheet

Illustrative only; the company and figures are fictional. A 450-person revenue cycle management company serving physician groups is moving to a new platform. Its revenue cycle director fills in the sheet from the project plan.

Record classSystemYears heldOwnerMoves to the new platform?Readable until
Final statusesOld revenue cycle platform2017 to nowRevenue cycle directorLast three yearsOld platform contract end
Submission versions and attachmentsOld revenue cycle platform2017 to nowRevenue cycle directorLatest version onlyOld platform contract end
278 transaction logsClearinghousePer clearinghouse contractIT and vendor managementNot affectedClearinghouse retention term
Missing-document requestsPlatform pend messages, fax archive2018 to nowAuthorization team leadNoFax archive retention rule
Work queue tasksOld revenue cycle platform2019 to nowAuthorization team leadNoOld platform contract end

Reading the sheet: the decisions survive, but the version chain and the work between versions depend on one contract end date, and the clearinghouse term may be shorter or longer than that. Both dates belong in the handoff.

Which date is the real deadline?

The date read access to the old platform ends, from the vendor contract or the decommission plan. Record the clearinghouse log retention term beside it, since it may be the only other place earlier versions exist. If neither is set, write "not set"; do not estimate one.

Who decides, and does the company qualify?

The revenue cycle director knows coverage. The CEO, CFO or COO decides whether a licensing discussion fits, and the privacy officer and counsel check client agreements and business associate terms. Any discussion of these records would turn on de-identification: HIPAA's de-identification standard can be met by Expert Determination or Safe Harbor, compared in Safe Harbor vs Expert Determination.

The introduced company needs 50+ full-time employees at peak (contractors excluded), a documented operating history, rights to license the records, and an authorized contact. Companies in the U.S., Canada and the EU qualify, as do companies in the UK, Australia, New Zealand, India, Singapore, South Africa, Latin America, the UAE and Saudi Arabia when at least 90% of the data is in English.

What stays unknown until SourceX reviews it: dataset demand, the rights review result, what de-identification requires, and whether any offer follows. Partners sign the Channel Partner Agreement before submitting introductions, and the first valid introduction within the 90-day window is credited when the company submits a verified application. Related pages: revenue cycle management companies, healthcare operations and the industries hub.

Go deeper on prior authorization follow-up

Next step

Refer a company. Earn up to $100,000. Default reward: 25% of Actual Supplier Payout, capped at $100,000 cumulatively per referred company. Eligibility and payment conditions apply, and a signed Schedule A or addendum can differ. A lead, meeting or signature alone does not trigger payment.

If a client is replacing its revenue cycle platform and years of authorization version history could be left behind, register as a partner, check the company against who qualifies, and read the program terms before you send the handoff.

  1. Step 1Share your linkSend your personal link to a company you know.
  2. Step 2Company appliesThe company applies itself at /apply.
  3. Step 3Company signs and is paidThe company signs, delivers its data and is paid by SourceX under its agreement.
  4. Step 4You get your rewardYour 25% of the actual supplier payout. A reward becomes payable after SourceX has paid the referred company under its signed agreement and the payout conditions in the program terms are met, including finance approval and your tax and payment details.

Common questions

Are prior authorization records protected health information?

Almost always, as they stand: a request names the patient, the service and the diagnosis. Whether any version could be licensed depends on de-identification, the company's agreements with providers or payers, and SourceX's rights review. Partners never collect the records themselves.

Does the CMS 72-hour and seven-day rule apply to every payer?

No. It applies to the payers the CMS rule names as impacted, excludes QHP issuers on the federally facilitated exchanges from the timeframes, and covers medical items and services, not drugs. The page uses it only to explain why dated steps matter in follow-up history.

What if the old platform's history will be lost before anyone decides?

That is a retention and records decision for the company and its counsel, not for the partner. A partner can point out the access date and introduce the decision-maker; never recommend keeping data the company has no authority to keep.

Sources

  1. cms.gov/files/document/fact-sheet-cms-interoperabili…
  2. cms.gov/priorities/key-initiatives/burden-reduction/…
  3. hhs.gov/hipaa/for-professionals/special-topics/de-id…
  4. refer.sourcex.si/terms

Free resources

Know a company with valuable proprietary data?

Become a referral partner, get your link and introduce the company’s CEO (in an owner-run company, usually the owner). Referral partners can join from most countries. We can't work with partners in countries or regions under U.S. sanctions or on U.S. restricted-party lists. The companies you introduce should be based in the U.S., Canada and the EU, or in the UK, Australia, New Zealand, India, Singapore, South Africa, Latin America, the UAE and Saudi Arabia with at least 90% of their data in English.

Refer a company →

I own a business

Explore licensing your company's data directly to SourceX for AI training and evaluation. Start a short assessment; no uploads needed.

Start an assessment