ContentsChapters
US healthcare · Revenue cycle analytics and technology

RCM Analytics and Technology

A revenue cycle produces millions of data points a month: charges, claims, acknowledgments, remittances, denials, payments, work-queue touches. Analytics turns that exhaust into a small set of numbers that say where the money is stuck and why, and technology decides how much of the work a person has to touch at all. This tutorial covers the HFMA MAP Keys and how to compute them, how to build a dashboard people actually use, denial and A/R analytics, cash forecasting, work-queue design, staffing and productivity, the technology stack from the practice management system to FHIR APIs, and the real state of automation and AI in the revenue cycle as of 2026.

MeasureMAP Keys

Is the cycle healthy?

Standard definitions, computed the same way every month, by payer and by stage.

Net days in A/R, clean claim rate, denial rate, cost to collect: numbers that mean the same thing to everyone.

PrioritizeWork queues

Which account next?

Expected value, deadline and effort decide the order, not arrival time.

Most of the recoverable money sits in a small share of the accounts. Analytics finds them.

AutomateBots, APIs, AI

Does a person need to touch this?

Standard transactions, rules, machine learning and language models, each with a place and a limit.

Automate the touch, keep the judgment, measure the result against a baseline.

14 chapters4 interactive toolsFigures verified Oct 2026
Chapter 01

The big picture

Revenue cycle analytics is the discipline of measuring the cycle with definitions that do not drift, diagnosing where cash is delayed or lost, and directing people and systems at the fixes that pay. Revenue cycle technology is the set of systems that create, move, check and resolve the transactions behind every dollar. Neither works without the other: a dashboard with nothing underneath it is decoration, and automation without measurement is a faster way to make the same mistakes.

The best revenue cycle teams run the same loop every month. They measure with a standard key set, diagnose with cohorts and drill-downs, prioritize by expected value and deadline, act through work queues, bots and process changes, and verify that the number moved. Everything in this tutorial is one piece of that loop.

The analytics loop

  1. 1

    Measure Monthly, by payer and stage

    Compute the MAP Keys from the billing system, the 835s and the bank, with the same definitions every month. Publish the definition next to the number.

  2. 2

    Diagnose Drill to the cohort

    A denial rate of 10% says nothing until it is 10% overall, 21% for commercial inpatient and 4% for Medicare, and until the 21% is traced to CARC 197 from one payer and two service lines.

  3. 3

    Prioritize Daily

    Rank the work by expected value, deadline and effort. Route what a rule or a bot can resolve away from people entirely.

  4. 4

    Act Work queues and projects

    Work the queue, fix the upstream process (registration, authorization, coding), renegotiate the contract, reconfigure the edit, deploy the automation.

  5. 5

    Verify Next month

    Did the key move? Compare against the baseline cohort, not against last month's snapshot, and retire the fix if it did not work.

Why it matters in numbers

Leakage

$48.4 billion

Net revenue that hospitals on Kodiak Solutions' platform (more than 2,300 hospitals) could have collected in 2025 but lost to final denials and bad debt, up about 25% from $38.6 billion in 2024. The median final denial rate rose from 2.5% to 2.7%.

Adoption gap

80% acting, 14% using

80% of health systems were exploring, piloting or implementing generative AI for the revenue cycle in 2025 (HFMA survey of 519 finance leaders, commissioned by AKASA), yet only 14% of claims and billing leaders in Experian Health's 2025 State of Claims survey said they were actually using AI in claims management.

Transaction savings

$18.4 billion

Annual savings available to the medical industry from moving the remaining manual administrative transactions to fully electronic ones, per the 2024 CAQH Index; the 2025 Index (now published as the DataSpring Index) raised the estimate to about $21 billion. Prior authorization, at 35% fully electronic, is the least automated transaction.

Who is involved

Revenue cycle leadership
The VP or director of revenue cycle owns the key set, the targets and the operating cadence. In physician groups this is often the practice administrator or billing manager.
Analytics and business intelligence
Builds the data model, the metric definitions and the dashboards. The best analysts have worked a queue; the best managers can read a SQL query.
IT, integration and EHR analysts
Own the practice management and EHR configuration, the interfaces (HL7, X12, FHIR), the work-queue rules and the reporting extracts.
Operations managers and team leads
Run the work queues, set productivity standards, and are the first consumers of every number on the dashboard.
Front-line staff
Registrars, authorization specialists, coders, billers, follow-up and denial specialists, posters, customer service. Their touches are both the data and the cost.
Finance and accounting
Reconcile cash, book reserves and contractual allowances, and need the revenue cycle numbers to tie to the general ledger.
Compliance and privacy
Approve data flows to vendors, business associate agreements, minimum-necessary access, and the governance of any model that touches coding or billing decisions.
Vendors
EHR and PM vendors, clearinghouses, scrubber and edit vendors, denial and contract management tools, outsourcers, RPA and AI platforms. Each is a data source, a cost line and a risk.

What goes wrong

Numbers without definitions

Two teams report "days in A/R" and get 38 and 52 from the same data, because one used gross charges and the other net revenue, one included credit balances and one did not. Nobody trusts either number, so nobody acts on it.

Dashboards nobody works

Forty charts, no owner, no target, no drill path. The meeting admires the trend and ends. A dashboard that does not change what someone does tomorrow morning is a report, and an expensive one.

Automating the broken process

A bot that checks claim status 50,000 times a month on claims that were never accepted does not fix the rejection problem; it hides it. Measure first, automate second, and keep measuring.

Chapter 02

HFMA MAP Keys: the standard metrics

The MAP Keys are the Healthcare Financial Management Association's industry-standard revenue cycle metrics: 29 keys across five domains, each with a published numerator, denominator and set of clarifications, so that two organizations computing the same key get comparable numbers. They are the vocabulary of every serious revenue cycle conversation, the basis of the annual MAP Award, and the backbone of most vendor dashboards.

You do not have to report all 29. You do have to compute the ones you report the MAP way, or say clearly where you deviate. The table below lists the full set as defined in the current edition of the MAP Keys guide.

KeyNameNumerator ÷ denominatorWhat it tells you
Patient access
PA-1Percentage of patient schedule occupiedSlots occupied ÷ slots availableCapacity use; the front end of volume
PA-2Pre-registration rateEncounters pre-registered with complete demographics and insurance ÷ scheduled encountersHow much of the front-end work is done before the patient arrives
PA-3Insurance verification rateRegistered encounters verified before or at service (or before final bill for unscheduled) ÷ registered encountersEligibility denials start here
PA-4Service authorization rate, inpatient and observationIP/OBS encounters authorized before claim release ÷ IP/OBS encounters requiring authorizationAuthorization denials start here
PA-5Service authorization rate, outpatientOP encounters authorized ÷ OP encounters requiring authorizationSame, for the outpatient book
PA-6Conversion rate of uninsured patients to a third-party funding sourceUninsured encounters converted (Medicaid, exchange, other coverage; not charity) ÷ uninsured encountersFinancial counseling effectiveness
PA-7Point-of-service cash collectionsSelf-pay cash collected at or before service, or within 7 days of discharge ÷ total self-pay cash collectedShare of patient cash collected while the patient is present
Pre-billing
PB-1Days in total discharged not final billed (DNFB)Gross DNFB dollars (month-end snapshot) ÷ average daily gross patient service revenueCoding, documentation and charge delays after discharge
PB-2Days in final billed not submitted to payer (FBNS)Gross FBNS dollars ÷ average daily gross revenueClaims stuck in edits after billing
PB-3Days in total discharged not submitted to payer (DNSP)(DNFB + FBNS dollars) ÷ average daily gross revenueThe whole unbilled pipeline; the key the MAP Award reports
PB-4Total charge lag daysSum of days from service to charge posting ÷ number of charge codes billedCharge capture timeliness
Claims
CL-1Clean claim rateClaims passing claims-tool edits with no manual intervention on first scrub ÷ claims accepted into the claims toolQuality of the claim before it leaves
CL-2Late charges as a percentage of total chargesGross charges posted more than 3 days after service (absolute value) ÷ total gross chargesRebills and lost charges in the making
Account resolution
AR-1Aged A/R as a percentage of total billed A/RBilled A/R in each aging bucket ÷ total billed A/RDistribution of billed receivables by age (0–30 through 120+)
AR-2Aged A/R as a percentage of billed A/R by payer groupSame, within each payer groupWhich payers are slow
AR-3Aged A/R as a percentage of total A/RUnbilled plus billed A/R in each bucket ÷ total A/RThe whole receivable, including DNFB
AR-4Aged A/R as a percentage of total A/R by payer groupSame, within each payer group
AR-5Remittance denial rateClaims remitted with an actionable denial code ÷ claims remitted (excludes patient-responsibility denials, RAC recoupments, duplicates, shadow claims)The initial denial rate, counted from the 835
AR-6Denial write-offs as a percentage of net patient service revenueNet denial write-offs ÷ average monthly net patient service revenueThe final cost of denials
AR-7Bad debtBad debt provision on the income statement ÷ gross patient service revenuePatient balances deemed uncollectible
AR-8Charity careCharity care on the income statement ÷ gross patient service revenueCare given free or discounted under policy
AR-9Net days in credit balanceDollars in credit balance (excluding pre-service deposits and undistributed cash) ÷ average daily net patient service revenueOverpayments waiting to be refunded or reapplied
Financial management
FM-1Net days in accounts receivableNet A/R (net of credit balances, allowances, charity and contractuals) ÷ average daily net patient service revenue over the most recent 3 monthsThe single most watched number in the cycle
FM-2Cash collection as a percentage of net patient service revenuePatient service cash collected in the month, net of refunds ÷ average monthly net patient service revenue (3 months)Are you collecting what you earn? About 100% at steady state
FM-3Uninsured discountsUninsured discounts ÷ gross patient service revenue
FM-4Uncompensated care(Bad debt + charity + uninsured discounts) ÷ gross patient service revenueTotal care not paid for
FM-5Case mix indexSum of MS-DRG relative weights for discharged inpatients ÷ number of discharged inpatientsAcuity of the inpatient book; moves revenue without moving volume
FM-6Cost to collectTotal revenue cycle cost (salaries, benefits, software, outsourcing; excluding hard IT, lease and space) ÷ total patient service cash collectedEfficiency of the cycle as a whole
FM-7Cost to collect by functional areaFunctional area cost ÷ total patient service cash collectedWhere the cost sits: access, HIM, billing, follow-up

Terms the formulas depend on

Gross patient service revenue
Charges at full chargemaster or fee schedule price. Used for the pre-billing keys and the uncompensated care keys because it is available before adjudication.
Net patient service revenue (NPSR)
Gross revenue minus contractual allowances, charity and other deductions: what you expect to collect. Used for net days in A/R and cash collection. It is an accounting estimate, so changes in the reserve methodology move the key.
Average daily revenue
Revenue over the most recent three months divided by the days in those months. Three months smooths volume swings; a one-month denominator makes the key jump at quarter ends.
Billed vs total A/R
Billed A/R is claims that have left the building. Total A/R adds unbilled balances (in-house and DNFB). AR-1 uses billed; AR-3 uses total. Mixing them changes the over-90 percentage by several points.
Snapshot vs period
A/R, DNFB and credit balances are snapshots at month end. Cash, charges, denials and write-offs are period totals. Ratios that divide a snapshot by a period average (days in A/R) behave differently from ratios of two period totals (denial rate).
Actionable denial
For AR-5, a remit line with a CARC that requires provider action. Patient-responsibility codes (PR-1, 2, 3), RAC recoupments, duplicates and shadow claims are excluded, which is why a raw count of CARCs overstates the key.
Gross days vs net days in A/R

Many practice management systems report gross days in A/R: total A/R ÷ average daily gross charges. Net days (FM-1) divides net A/R by average daily net revenue. The two differ whenever your charge-to-collection ratio differs from your allowance methodology, which is always. Report one, label it, and do not compare your gross days to a peer's net days.

Claims or dollars? Initial or final?

AR-5 counts claims. Most executive reporting also wants denied dollars, and the difference between the initial denial rate (what came back on the 835) and the final denial rate (what was written off after rework) is the most important denial number of all: Kodiak's 2025 data shows commercial inpatient claims initially denied at 21% but finally denied at about 3%. Report all three and say which is which.

Benchmarks you can defend

Benchmarks are only comparable when the definitions match. The figures below come from named 2025–26 sources; use them as reference points, then set targets from your own baseline and payer mix.

MAP Award winners 2026

Net days in A/R 43.6

Median for hospital and health system winners in HFMA's 2026 MAP Award stat sheet, with 3.2 days in DNSP, point-of-service cash at 40.5% of self-pay cash, cash collection at 99.8% of NPSR and denial write-offs at 2.5% of NPSR. Physician practice winners: 18.5 net days, 3.1 days charge lag, 46.6% POS collections, 1.0% denial write-offs.

Kodiak 2025 medians

Final denial rate 2.7%

Across more than 2,300 hospitals: final denials 2.7% (2.5% in 2024), bad debt 1.3% (1.1%), average time to insurance payment 55.2 days (57.4), clinical initial denials 2.6% with 42.1% of them overturned, and the insured patient's share of the bill at 7.3% with 42.4% of it collected.

Common targets

Clean claims 95%+, cost to collect 2–4%

Widely used operating targets: clean claim rate 95% or better, initial denial rate under 5% (Experian's 2025 survey found 41% of providers at 10% or higher), A/R over 90 days under 15–20%, cost to collect in the 2–4% range (an HFMA survey of 556 finance leaders averaged 3.68%, with automation users at 3.51% versus 3.74% for non-users).

Chapter 03

Building the RCM dashboard

A revenue cycle dashboard answers three questions in under a minute: is cash on track, where is it stuck, and who is working on it. Everything else is a drill-down. The design choices that matter are which metrics belong to which stage, which cohorts you can cut them by, and how you show a trend so that a real change is distinguishable from noise.

Metrics by stage

StageLeading indicators (daily or weekly)Lagging indicators (monthly MAP Keys)Owner
Scheduling and accessPre-registration backlog, eligibility 271 failures, auth requests pending past 3 days, estimate delivered rate, no-show ratePA-1 through PA-7Patient access director
Mid-cycleUnsigned encounters, coding backlog by day, CDI query response time, charge reconciliation variancesPB-1 DNFB, PB-4 charge lag, CL-2 late charges, FM-5 CMIHIM and coding manager
ClaimsEdit failures by edit, 999/277CA rejections by reason, claims aged in FBNS, timely filing at risk (within 15 days)CL-1 clean claim rate, PB-2 FBNS, PB-3 DNSPBilling manager
Follow-up and denialsNew denials by CARC and payer, appeals due within 7 days, no-response claims past expected payment date, touches per accountAR-1 to AR-5, AR-6 denial write-offs, overturn rateFollow-up and denials manager
Payment and reconciliation835s unposted, unapplied cash, 835-to-deposit variances, takebacks (PLB) unresolvedAR-9 credit balances, FM-2 cash collectionCash posting lead
Patient financialStatements sent, payment plan enrollments, digital payment share, financial assistance applications pendingPA-7 POS, AR-7 bad debt, AR-8 charity, FM-3, FM-4Patient financial services
Whole cycleCash collected month-to-date vs forecast, A/R balance vs prior monthFM-1 net days in A/R, FM-6 and FM-7 cost to collectRevenue cycle VP and CFO

Cohorts: the dimensions every number needs

Payer and plan
The first cut always. Group by financial class (Medicare, Medicare Advantage, Medicaid FFS, Medicaid MCO, commercial, exchange, workers' comp, self-pay), then by payer, then by plan or product. Kodiak's 2025 data found Medicare Advantage initial and final denial rates more than double traditional Medicare's; a blended number hides that.
Service line, department and site
Denials and DNFB cluster by department. Inpatient vs outpatient vs professional is a minimum; surgery, imaging, infusion and ED each have their own failure modes.
Provider and registrar
Attribution to the person who created the data: the registrar for eligibility denials, the ordering provider for authorization, the coder for coding denials. Use it for coaching, not just reporting.
Denial category and CARC/RARC
Root cause category (registration, eligibility, authorization, coding, medical necessity, timely filing, contract, payer error) layered over the raw codes.
Date of service month vs activity month
Two calendars. Activity-month views (what happened in September) suit operations. Date-of-service cohorts (how have claims from April's services liquidated) suit forecasting and show whether this year's claims are really collecting faster than last year's.
Balance band and age band
Small balances dominate counts; large balances dominate dollars. Show both, and stop staff working $40 balances by hand.

Trending without fooling yourself

Rules for trend charts
  • 13 months on every chart so the same month last year is visible; revenue cycles are seasonal (deductibles reset in January; volume dips in December).
  • Rolling 3-month averages next to the monthly point for noisy keys such as denial rate by payer.
  • Control limits. A point outside roughly two to three standard deviations of the last 12 months is worth a question; a point inside them is noise, however it looks.
  • Annotate events: the system upgrade, the new payer contract, the coder who left, the January code set update.
  • Targets as lines, not colors alone. The reader should see the gap, not just a red tile.
Snapshots lie about progress

Net days in A/R can fall because you collected faster, or because you wrote off old balances, or because charges rose in the denominator. Cash as a percentage of NPSR can exceed 100% for a month because last month's cash arrived late. Pair every snapshot key with a cohort view (the collections waterfall by date-of-service month) before declaring a win.

MAP Key calculatorEnter one month for a fictional hospital (Riverside Health). Pick a domain or show all 29 keys. Benchmarks are reference points from the 2026 MAP Award medians and common targets, not standards.
Domain

Financial management inputs

Dashboard design checklist

Chapter 04

Data sources and data quality

Every revenue cycle number traces back to a handful of systems and a handful of standard transactions. Knowing which source holds which fact, and where each one is unreliable, is the difference between a dashboard that reconciles and one that gets quietly ignored.

SourceWhat it holdsFields that matterWhere it goes wrong
Practice management / patient accounting systemAccounts, charges, payments, adjustments, balances, aging, work-queue history, statementsAccount number, patient control number, financial class, payer plan, DOS, post date, transaction type and adjustment reason code, user IDAdjustment reason codes used inconsistently; balances netted across payers; "A/R" that includes credits and unbilled
EHR and schedulingEncounters, orders, documentation status, coding status, authorizations on file, estimates, registration editsEncounter ID, department, ordering and attending provider, signed/unsigned, coded date, auth number and datesEncounter-to-account mapping; DNFB status flags set by hand; authorization fields free-text
837 claims (outbound)Exactly what you told the payer: codes, charges, providers, dates, auth numbers, COB dataCLM01 patient control number, CLM02 total, CLM05 frequency, HI, SV1/SV2, REF*G1, loops 2320/2330The PM system's claim record is not always what the clearinghouse sent after its own edits; keep the outbound file
999 and 277CA acknowledgmentsWhether the file and each claim were accepted into adjudication, with STC rejection reasons and the payer claim numberTrace numbers, STC codes, acceptance date (your proof of timely filing)Rejections not loaded back into the PM system, so "billed" claims the payer never received age silently
835 remittancesThe payer's decision per claim and line: paid, adjusted, denied, with CARC/RARC and the ICNCLP, CAS group and reason codes, SVC, PLB, BPR amount, TRN trace, LQ remark codesLine-level CAS collapsed to claim level; PLB offsets not tied to accounts; multiple 835s per check
270/271 eligibility and 278 authorizationCoverage, plan, accumulators, service type benefits; auth decisions and numbersEB segments, DTP dates, MSG text, HCR decision, REF auth numberResponses stored as PDFs or not at all; no link from the 271 to the encounter it verified
Clearinghouse reportsSubmission, rejection and payer response status across all payers; payer-specific editsClaim status categories, rejection reasons, days to payer responseOnly the clearinghouse's view; a second clearinghouse or direct-to-payer connection splits the data
Bank, lockbox and EFTDeposits, EFT credits, check images, lockbox correspondenceDeposit date and amount, TRN reassociation trace, remitterCash in the bank with no 835 (or the reverse); virtual card payments with fees deducted
Contract managementFee schedules, contract terms, expected reimbursement per claimExpected allowed, actual allowed, variance, contract versionContracts loaded late or incompletely; carve-outs and lesser-of logic missing, so every variance is "underpayment"
Patient engagement and paymentsStatements, portal payments, payment plans, estimates delivered, text and email activityStatement cycle, payment channel, plan status, propensity-to-pay scorePayment posted in the vendor system but not the PM system, or twice
Workforce and costFTEs, hours, salaries and benefits, vendor invoices, software costsCost by functional area for FM-6 and FM-7; touches per user for productivityCost centers that do not match revenue cycle functions; outsourcing invoices booked elsewhere

The transactions behind the data

  • 270 / 271Eligibility inquiry and response
  • 278Services review (authorization) request and response
  • 837 P / I / DProfessional, institutional, dental claims
  • 999 · 277CAFile and claim acknowledgments
  • 276 / 277Claim status inquiry and response
  • 835Electronic remittance advice
  • EFT (CCD+)Electronic funds transfer with TRN reassociation
  • 275Attachments (not yet mandated; adoption 32%)

All are HIPAA Administrative Simplification standards (version 005010) under 45 CFR Part 162. The CAQH CORE operating rules add response-time, content and connectivity requirements on top of several of them.

Data quality: the four reconciliations

Encounters to charges

Did every visit produce a charge?

Daily: scheduled and arrived encounters with no charge after the department's expected lag. The source of the late charge key (CL-2) and the beginning of every charge capture audit.

Charges to claims

Did every charge reach a claim?

Billed claims in the PM system against 837s sent and 277CAs accepted. Claims rejected at the clearinghouse and never resubmitted are the most common hidden A/R.

835s to the bank

Does every remittance match a deposit?

BPR amount and TRN trace against the EFT credit. Unmatched 835s mean unposted cash; unmatched deposits mean paper EOBs or virtual cards waiting to be identified.

Subledger to the general ledger

Do the revenue cycle totals tie to accounting?

A/R, cash, contractual allowances and write-offs by month. If the dashboard's A/R differs from the balance sheet, the dashboard is wrong until proven otherwise.

Master data the metrics depend on

Payer plan mapping
Every plan code in the PM system mapped to a payer, a financial class and a contract. Unmapped or "misc commercial" plans make payer-level analysis meaningless. Review new plan codes weekly.
Adjustment reason taxonomy
A controlled list of adjustment codes separating contractual, denial write-off by root cause, small balance, charity, bad debt, administrative. The denial write-off key (AR-6) is only as good as this list.
CARC/RARC to root cause
A maintained crosswalk from the 835 codes to your denial categories and owners (see chapter 05). CARC lists change three times a year; the crosswalk must too.
Department and service line hierarchy
One hierarchy shared by finance, clinical operations and the revenue cycle. Two hierarchies produce two answers to "which department has the most denials."
Dates
Date of service, discharge date, charge post date, bill date, submission date, acceptance date, remit date, payment date, post date. Each key uses a specific one. Store them all.
Identifiers
Account number, encounter ID, patient control number (CLM01), payer claim number (ICN), 277CA trace, 835 CLP07. The chain from encounter to cash is only traceable if every link is stored.

From sources to dashboard

  1. 1

    Extract Nightly, some hourly

    Transaction-level extracts from the PM system and EHR, raw X12 files from the clearinghouse, bank files. Keep the raw files; the vendor's summary tables change without notice.

  2. 2

    Stage and conform Same night

    Parse the 835 and 837 into tables, apply the payer map, the adjustment taxonomy and the CARC crosswalk, and stamp every row with its load date.

  3. 3

    Model Once, then maintained

    A fact table of transactions (charge, payment, adjustment, denial, touch) and dimensions for payer, provider, department, date and account. This is the layer every metric is computed from, in SQL that is version-controlled.

  4. 4

    Metric layer The MAP definitions live here

    Each key is one defined query with its numerator, denominator and exclusions. Dashboards consume the metric layer; nobody recomputes days in A/R in a spreadsheet.

  5. 5

    Present and act Dashboards, alerts, work queues

    Tiles and trends for leaders; exception lists and queue assignments for staff; alerts for breaches (an 835 that did not post, a payer whose rejection rate doubled).

Protected health information in analytics

Revenue cycle data is PHI. The HIPAA minimum-necessary standard applies to analysts and dashboards as much as to billers: role-based access, logged queries, and de-identified or limited data sets for anything that leaves the organization. Every analytics, automation or AI vendor that sees the data needs a business associate agreement that covers the specific use, including model training, and a documented answer to where the data is stored and processed.

Chapter 05

Denial analytics

Denials are the richest data set in the revenue cycle because every one of them comes with a reason code, a payer, a date, a department and an outcome. Denial analytics is the practice of turning that into three things: a prevention list for the front and middle of the cycle, a work list ordered by recoverable value, and a scorecard for payers.

The scale justifies the effort. Kodiak's 2025 data shows commercial inpatient claims initially denied at 21% and outpatient at 11%, both finishing near 3% after rework; the gap is the rework cost. Experian Health's 2025 survey found 41% of providers with denial rates of 10% or higher, with missing or inaccurate data (50%), authorizations (35%) and registration data (32%) as the top causes, every one of them preventable upstream.

The denial record

A denial analytics model starts from the 835 line, not the account. Each denied line becomes a row with these attributes; the outcome fields are filled in as the denial is worked.

AttributeSourceUsed for
Payer, plan, financial classPayer map from the 835 payer ID and the accountPayer scorecards; contract escalation
CARC, group code, RARC835 CAS and LQ segmentsRaw reason; crosswalk input
Root cause category and ownerCrosswalk plus a manual override when workedPrevention; routing
Department, service line, provider, registrarEncounter and charge dataAttribution and coaching
Denied amount, expected reimbursement835 line and contract modelExpected value; prioritization
Denial date, DOS, appeal deadline835 date; payer rulesAging and urgency
Preventable? (yes/no/unknown)Set by category rules; reviewed by the workerThe prevention rate
Action taken, touches, worker, datesWork-queue historyCost to rework; productivity
Outcome: overturned, partially paid, written off, patient liabilitySubsequent 835s and adjustmentsOverturn rate; final denial rate; AR-6

From reason code to root cause

Root cause categoryTypical CARC / RARCOwnerPreventable?Prevention lever
Registration and demographicsCARC 31, 140, 16 with N-codes for missing or invalid IDsPatient accessYesCard scanning, real-time 271 checks at scheduling, registration QA scorecards
Eligibility and coverageCARC 26, 27, 22 (COB), 109 (wrong payer)Patient accessYesVerify at scheduling and again 48 hours before service; coverage discovery; MSP questionnaire
Authorization and referralCARC 197, 198, 15, 243, 62Authorization team and ordering departmentMostlyAuth status required before scheduling; unit and date tracking; 278 and FHIR PA APIs
Coding and bundlingCARC 4, 97, 11, 151, 236, 6, 7Coding and CDIYesNCCI and MUE edits before billing; modifier audits; code set updates on time
Medical necessity and level of careCARC 50, 39, 197 with clinical RARCsUtilization management and physiciansPartlyLCD/NCD and payer policy checks at order; two-midnight documentation; peer-to-peer
Request for informationCARC 16 with N479, M127, 252HIM and follow-upPartlyAttachments sent with the claim (275); templates by payer; fast turnaround
Timely filing and duplicatesCARC 29, 18BillingYesRejections worked daily; corrected claims with frequency code 7; 277CA retained
Contract and pricingCARC 45 above expected, 59, 24 (capitation), B7 (provider not certified)Contracting and credentialingYesContract model loaded; enrollment and effective dates tracked
Payer errorAny code where the appeal wins without new informationFollow-up, then payer relationsNo (yours), yes (theirs)Payer scorecard; escalation under the contract; regulator complaints for pattern behavior

Denial metrics, defined

Initial denial rate
Claims (or lines, or dollars) with an actionable denial on first adjudication ÷ claims remitted. AR-5 is the claim-count version. Report by payer and category.
Final denial rate
Denied dollars written off after all rework ÷ net revenue (AR-6 uses NPSR) or ÷ billed dollars. Kodiak's hospital median was 2.7% of net revenue in 2025. This is the number that costs money.
Overturn rate
Denied dollars subsequently paid ÷ denied dollars worked (or appealed). Kodiak measured 42.1% for clinical initial denials in 2025. A high overturn rate for a category means the payer is wrong often; a low one means your denial was probably correct and the fix is upstream.
Preventable denial rate
Denials in categories owned by your own processes (registration, eligibility, authorization, coding, timely filing) ÷ all denials. Commonly most of them, which is the argument for front-end investment.
Days to work and days to resolve
Denial date to first touch, and denial date to final outcome. Appeal deadlines (often 60 to 180 days commercial, 120 days for a Medicare redetermination) make the first one a compliance metric.
Cost to rework
Touches × minutes × loaded labor rate, plus postage and vendor fees. HFMA's long-cited rebill figure is $25 per rebill; appeals with records cost far more. Measure your own by time study.
Touches per resolved denial
Work-queue actions until the account closes. Rising touches with flat overturn rates mean the queue is being churned, not worked.

Analyses that change behavior

Pareto

Top 10 payer × reason pairs

Rank denied dollars by payer and root cause. A short list usually explains most of the dollars: one payer's authorization denials for infusion, one plan's medical necessity denials for observation, one department's missing modifiers.

Trend by cohort

Rate by date-of-service month

Was the spike in September denials a payer policy change for September services, or a batch of old claims finally adjudicated? Only a DOS cohort view tells you.

Recoverable value

Expected value by category

Denied dollars × historical overturn rate × expected reimbursement ratio, minus the cost to work. The ranking for the queue, and the business case for an appeals vendor or an AI appeal writer.

Prevention attribution

Denials by creator

Eligibility denials by registration site and user; auth denials by ordering department; coding denials by coder. Use the data for training and process change, with the caveat that attribution is only as good as the identifiers you stored.

Payer scorecard

Behavior over time

Initial denial rate, overturn rate, days to pay, request-for-information rate and underpayment rate by payer and month. The evidence for contract negotiations, for complaints to state regulators, and for the annual public prior authorization metrics CMS-regulated payers must now post.

Prevented denials

Count what did not happen

Edits that stopped a claim, eligibility checks that caught a termed plan, auth alerts that fired at scheduling. Prevention programs need their own numerator or they are cut in the next budget.

The feedback loop

  1. 1

    Weekly denial review 30 minutes

    The Pareto list, new and worsening payer × reason pairs, appeals at risk. Attendees: revenue cycle, patient access, coding, UM, a payer relations lead.

  2. 2

    Assign a fix with an owner and a measure Same meeting

    "Add a scheduling hard stop for infusion auths at the cancer center; measure CARC 197 for revenue code 0335 by DOS month."

  3. 3

    Build the edit, the alert or the training 2 to 6 weeks

    Most prevention is configuration: an eligibility rule, a scrubber edit, a required field, a work-queue trigger.

  4. 4

    Verify on the cohort 60 to 90 days later

    The denial rate for services after the fix date, compared with services before it. If it did not move, undo the fix or find the real cause.

The payer has analytics too

The US Senate Permanent Subcommittee on Investigations reported in October 2024 that UnitedHealthcare's prior authorization denial rate for post-acute care rose from 10.9% in 2020 to 22.7% in 2022 as the company expanded automation, that Humana's post-acute denial rate was 16 times its overall rate, and that CVS's was three times its overall rate. CMS clarified in February 2024 that a Medicare Advantage plan may use an algorithm to assist a coverage decision but must base the decision on the individual patient's circumstances under 42 CFR 422.101(c), and several states now require a licensed physician to make any adverse utilization decision that an AI tool influenced. For the provider the practical response is data: denial rate by payer by month, request-for-information rates, and overturn rates high enough to show a pattern.

Chapter 06

A/R aging and cash forecasting

Accounts receivable is a promise with a half-life. The longer a balance sits, the less of it you will collect, and the forecast of next month's cash is a forecast of how much of each age band will turn into money. Two views keep the forecast honest: the aging snapshot and the cohort waterfall.

Reading the aging

BucketWhat a balance here usually meansWhat to do with it
0–30 daysBilled and in adjudication; most of it will pay without a touch (Kodiak: average time to insurance payment 55.2 days in 2025, measured from service)Leave it alone unless a rejection or a denial arrives
31–60Slow payers, pended claims, requests for information, first denialsStatus check by 276/277 or bot; work the denials
61–90Claims the payer never received, unanswered RFIs, appeals in progress, secondary claims waiting on the primaryHuman follow-up by expected value; verify 277CA acceptance
91–120Appeals, payer disputes, patient balances after statements, coordination of benefits problemsDeadline-driven work; escalate payer patterns
Over 120Long appeals, litigation-grade disputes, uncollectible patient balances, and accounts nobody has touchedResolve or write off with a reason code; move patient balances to the next collection step; stop aging it on the dashboard as "A/R"
Collectability by age
The share of a bucket that eventually pays, from your own liquidation history. It declines with age for every payer class and falls fastest for patient balances. Measure it; do not borrow it.
True A/R
A/R excluding credit balances, excluding unbilled, and excluding balances already written off in substance but not in form (small balances, deceased, bankruptcy). Dashboards that net credits against debits understate aging.
Reserves and allowances
Accounting's estimate of what A/R will not collect: contractual allowance, allowance for doubtful accounts, denial reserve. The reserve methodology is where the revenue cycle and finance must agree, because it defines net A/R and therefore FM-1.
Expected reimbursement
What the contract says a claim should pay. Forecasting from expected reimbursement instead of gross balance removes the biggest source of error in a cash forecast.
Liquidation curve
For a cohort of claims with the same date-of-service month, the cumulative share of expected reimbursement collected after 30, 60, 90, 120 and 180 days. The shape of the curve is the forecast engine.

Forecasting methods

Aging × collection rate

Simple and transparent

Each bucket times the share of that bucket historically collected within the next 30 days, plus patient A/R at its own rate, plus the part of new billing that pays within the month. The tool below does this. Weakness: it treats every payer in a bucket alike.

Payer lag model

By payer, by days since billing

For each payer, the distribution of days from submission to payment. Apply it to open claims by submission date. Better precision; needs clean acceptance dates and a payer map.

Cohort waterfall

By date-of-service month

Project each open cohort along its liquidation curve. Shows whether this year's claims are collecting faster than last year's and makes the final collection rate visible months before write-off. The most defensible method for finance.

Statistical and machine-learned

Account-level probability and timing

Models score each account's probability of payment and expected days. Useful for prioritization and for large books; validate against the simple methods monthly, and expect drift when payers change behavior.

30-day cash forecastAging × collection rate model. Default rates are illustrative; replace them with your own history (share of each bucket collected within 30 days).

Insurance A/R by age (balance at expected reimbursement, or gross if that is what you track)

Share of each balance expected to be collected in the next 30 days (%)

New billing during the next 30 days

Using the forecast

Forecast vs actual, every week

Post the forecast on day 1 and track cash against it daily. A miss of more than a few percent by mid-month has a cause you can find in the data: an 835 feed that stopped, a payer that paused payments, a posting backlog, a holiday. Finding it on day 12 is worth more than explaining it on day 31.

Rates drift

Collection rates by bucket change when payer mix changes, when a payer tightens prior authorization, and when patient deductibles reset in January. Recompute the rates quarterly from the last 12 months of liquidation data, and keep a separate rate for Medicare Advantage, whose denial rates run well above traditional Medicare's.

Chapter 07

Work queue design and prioritization

A work queue is a rule that selects accounts, a sort order that ranks them, and a routing that assigns them to the right skill. Most revenue cycle productivity problems are queue design problems: too many accounts that need no touch, the wrong ones at the top, and no exit rule, so the same account is opened six times.

Design principles

Automate the selection
Accounts enter a queue because of a data condition (denial code, days since acceptance with no 835, balance after secondary), never because someone remembered to look.
Exclude what needs no touch
Claims inside the payer's normal payment window, balances below the cost of a touch, accounts with a pending automated action. Every excluded account is a minute returned to the team.
Rank by expected value and deadline
Expected recovery (balance × expected reimbursement × probability) adjusted for urgency (days to the timely filing or appeal deadline) and divided by the effort to work it. First-in-first-out is the worst possible order.
Route by skill
Clinical denials to nurses or coders, eligibility to access staff, contract variances to a contracting analyst, patient balances to customer service. Skill routing is what makes productivity standards fair.
Batch by payer and action
Twenty status checks on one payer portal take a fraction of the time of twenty on twenty portals. Group the queue by payer and by the next action.
Define the exit
Every account leaves the queue with an outcome: paid, corrected, appealed, transferred, written off with a reason, or deferred to a dated follow-up. A deferral sets a new entry condition; it does not leave the account where it was.
Time-box the touch
If an account cannot be resolved in its expected time, it escalates or routes to a specialist. Twelve touches on a $300 balance is a process failure, not diligence.

The standard queues

QueueEntry conditionSortTypical automationExit
Rejections999 or 277CA rejection, not yet resubmittedTimely filing risk, then dollarsAuto-fix for known patterns (payer ID, taxonomy); the rest to a billerAccepted 277CA
Claim edits (FBNS)Claim held by a scrubber or PM editAge, then dollarsEdit-specific routing to coding, access or billingClaim released
No responseAccepted claim with no 835 after the payer's expected daysExpected value, then payer batch276/277 or portal bot checks status; only "not on file" and "pended for records" reach a person835 received or claim resubmitted
Denials by categoryActionable CARC on the 835, mapped to a root causeExpected value × urgency ÷ effortAuto-corrections for simple technical denials; appeal letter drafting with human reviewOverturned, corrected, written off with reason, or patient liability
UnderpaymentsPaid below contract model by more than a thresholdVariance dollars, aggregated by payer and ruleContract engine flags; batch disputes by payerReprocessed, or variance explained and the model fixed
Credit balancesAccount balance below zeroAge (Medicare 60-day rule), then dollarsClassifier: patient refund, payer refund, posting error, duplicate paymentRefunded, reapplied or corrected
Patient balancesBalance after all payers; statement cycle positionPropensity to pay, balance, days since last statementStatements, texts, payment plans, financial assistance screeningPaid, plan in place, assistance granted, bad debt placement
Unbilled (DNFB)Discharged, no final billDays, then dollars; coding vs documentation vs chargesRouting to the responsible department; autonomous coding for eligible encountersFinal billed

The prioritization score

One formula is enough, as long as everyone uses it. Expected value is the balance that is actually collectible, discounted by the chance of success; urgency rewards deadlines; effort converts it into dollars per staff minute, which is what you are really allocating.

  • Expected valueBalance × expected reimbursement % × probability of success
  • Urgency×2.0 if the deadline is within 7 days, ×1.5 within 14, ×1.2 within 30, ×1.0 otherwise; 0 if passed
  • EffortMinutes to work this account, from the time study
  • ScoreExpected value × urgency ÷ minutes = dollars per staff minute
Work queue prioritization scorerScore one account and see where it lands against five fictional accounts already in the queue. The multipliers and tiers are illustrative; set your own from your overturn history and time studies.
Account type
What should never reach a person
  • Status checks on claims inside the payer's normal payment window.
  • Balances below the cost of a touch, unless a deadline or a pattern makes them worth batching.
  • Rejections with a known, scriptable fix.
  • Secondary claims that can be auto-generated from the primary 835.
  • Credit balances that are posting errors.
Measure the queue, not just the people

Queue inventory, inflow, outflow, age of the oldest account, touches per resolution and resolution rate by worker. If inventory grows while touches rise, the queue is being churned. If one worker's resolution rate is double the team's, study their method before changing the standard.

Chapter 08

Staffing, productivity, outsourcing and vendors

Revenue cycle labor is the largest line in cost to collect, and the one most exposed to turnover and automation. Staffing analytics answers how many people the work needs, productivity analytics answers whether the work is getting done well, and vendor management decides what you buy instead of staff. Experian's 2025 survey found 43% of providers understaffed in claims management; the answer is rarely just more people.

Productivity metrics

RoleVolume measureQuality measureOutcome measureNotes
Registrar / schedulerRegistrations per hourRegistration accuracy (QA audit, fields correct)Eligibility and demographic denials attributed to the registrarAccuracy matters more than speed; a wrong ID costs weeks
Authorization specialistRequests submitted per dayRequests complete on first submissionAuth denials (CARC 197/198) per 1,000 encounters; turnaround timeVolume varies by payer and service mix
CoderCharts per hour by setting (ED, outpatient, inpatient)Coding accuracy on audit (DRG, CPT, modifier)Coding denials; DNFB daysAutonomous coding changes the mix: humans code the hard charts
Biller / claim editorClaims released per day; edits resolved per hourRejection rate on released claimsClean claim rate; FBNS daysEdit volume depends on upstream quality
Follow-up and denial specialistAccounts touched per dayResolution rate; touches per resolutionDollars collected per FTE; overturn rateTouches alone reward churn; pair with resolution
Cash posterTransactions posted per hour; 835s posted same dayPosting accuracy; unapplied cashDays from deposit to postingAuto-posting rates above 90% of 835 dollars are common targets
Customer serviceCalls and messages handledFirst-contact resolution; quality monitoringPatient cash collected; complaintsMeasure outcomes per contact, not call length alone

Productivity numbers vary widely by organization, system and case mix. Published ranges exist (MGMA, HFMA and vendor surveys) but the useful standard is your own baseline, measured consistently and reviewed with the team.

Sizing the team

  • WorkloadAccounts entering each queue per month × minutes per account
  • CapacityProductive hours per FTE (paid hours minus leave, training, meetings; commonly 1,700–1,900 a year)
  • FTEs neededWorkload ÷ capacity, by skill, with a buffer for seasonality and turnover
  • Automation offsetShare of each queue resolved without a touch, from measured touchless rates, not vendor promises
Quality before quantity

A follow-up team can double its touches per day and collect less, because touches that do not resolve the account are free to make. Set the standard on resolution and dollars, audit a sample of touches each month for quality, and report individual productivity to the individual and team productivity to the dashboard.

Turnover is a revenue cycle metric

Every departure is a queue that slows for the months it takes to hire and train. Track vacancy rate, time to proficiency and turnover by role next to the productivity numbers; a denial rate that rises three months after a wave of resignations is not a payer problem.

Outsourcing and offshoring

Full outsourcing

End-to-end revenue cycle

A vendor runs the cycle, usually for a percentage of collections, often with staff rebadged to the vendor. Shifts cost to collect into a contract line; shifts control too. The contract's KPI definitions and audit rights decide whether you can see what is happening.

Functional outsourcing

Coding, A/R follow-up, early-out, bad debt

One function at a time, priced per chart, per account or per dollar collected. The most common model, and the easiest to measure because the function's keys are already defined.

Offshore and nearshore

Lower unit cost, more governance

Coding, follow-up and posting delivered from outside the US. Black Book's Q4 2025 survey of 1,303 provider leaders found 88% listing US data residency and auditable AI pipelines as must-have RFP criteria, and 34% planning not to renew at least one legacy RCM outsourcing contract in the next 18 months.

AI-native platforms with managed services

The 2025–26 shift

Software that automates the transaction, with vendor staff handling exceptions. In Black Book's Q1 2025 survey of 220 revenue cycle leaders, 91% said they would require AI and RPA capabilities in any new or renewed outsourcing agreement and 72% planned to move previously outsourced functions to AI-powered internal teams or platforms within 24 months.

Vendor management checklist

The Change Healthcare lesson

The ransomware attack on Change Healthcare in February 2024 took the largest US clearinghouse offline for weeks and left many providers unable to submit claims, receive 835s or check eligibility. Claims piled up unbilled, cash stopped, and organizations with a single clearinghouse connection had no fallback. Black Book's Q4 2025 survey found 59% of respondents adopting multi-clearinghouse workflows to reduce single-point-of-failure exposure. Analytics has a role: the ability to see within a day that 277CAs stopped arriving, and a documented plan for direct-to-payer submission for the largest payers.

Chapter 09

The technology stack and interoperability

The revenue cycle runs on a stack of systems that is rarely designed and usually accumulated. Knowing what each layer does, what data it produces and what it needs from its neighbors is how you decide what to buy, what to switch off and where the next denial is being manufactured.

LayerWhat it doesData in → outWhat to ask before buying or renewing
EHR and practice management / patient accountingThe system of record: scheduling, registration, orders, documentation, charges, claims, payments, A/R, work queuesEverything → 837, statements, reportsWhich revenue cycle functions are native and which need bolt-ons; work-queue rule flexibility; reporting extracts at transaction level; FHIR API availability
Eligibility and benefits verificationBatch and real-time 270/271, coverage discovery, MSP and COB checksSchedule → 271 data on the encounterResponse normalization across payers; storage of the 271 on the encounter; coverage discovery hit rate and cost
Estimates and patient engagementGood faith estimates, price transparency, statements, digital payments, payment plans, text and email reminders271 accumulators + contract rates → estimate; balances → statements and paymentsEstimate accuracy vs final bill; payment channel mix; posting back to the PM system
Prior authorization toolsAuth requirement lookup, 278 submission, portal automation, status tracking, FHIR CRD/DTR/PAS where payers support themOrder → auth number and dates on the encounterPayer coverage for electronic submission; how the auth record flows to the claim
Coding and CDI toolsEncoders, computer-assisted coding, autonomous coding, CDI query workflow, E/M levelingDocumentation → codesTouchless rate by setting; accuracy on your audit sample; how exceptions route
Claim scrubber and editsPre-submission edits: HIPAA, NCCI, MUE, payer-specific, medical necessity (LCD/NCD), custom rulesClaim → clean claim or edit queueEdit library currency; false positive rate; your ability to write and retire edits
ClearinghouseRouting to payers, 999/277CA, 276/277, 835 retrieval, payer connectivity, attachments837 → payer; payer → 277CA, 835Payer list; rejection analytics; redundancy; data retention; fees per transaction
ERA/EFT and lockbox835 retrieval and auto-posting, EFT reassociation, paper EOB conversion, virtual card handling835 + bank → posted payments and adjustmentsAuto-posting rate by payer; exception rules; reconciliation reporting
Contract managementModels every contract to compute expected reimbursement; flags underpayments; supports negotiationsClaim + contract → expected vs actualWho loads and maintains contracts; coverage of carve-outs and lesser-of; variance workflow
Denial managementDenial capture from 835s, root cause mapping, work queues, appeal templates and tracking, payer scorecards835 → categorized denials → appeals and outcomesCrosswalk maintenance; appeal drafting with records; outcome tracking that feeds back into prevention
Analytics and BIWarehouse, metric layer, dashboards, forecastingAll of the above → MAP Keys and drill-downsTransaction-level access; definitions you can inspect; refresh cadence
RPA, workflow and AI platformsBots for portals and status checks, rules engines, machine-learned prioritization, language models for drafting and summarizationQueue → actions, drafts, scoresMeasured touchless rate; error handling; audit trail; what happens when a payer portal changes
Integration engineHL7 v2 feeds (ADT, orders, charges), X12 translation, FHIR gateway, file transferEvery interfaceMonitoring and alerting on every feed; message backlog visibility

Interoperability standards you will meet

X12 (HIPAA 5010)
The mandated administrative transactions: 270/271, 276/277, 278, 835, 837, plus 999 and 277CA acknowledgments. Batch-oriented, mature, universal. The revenue cycle's native tongue.
CAQH CORE operating rules
Business rules layered on the X12 transactions and adopted under the Affordable Care Act: response times, required data content, connectivity, EFT and ERA reassociation (the 3-day rule), and the companion-guide limits that keep payers from inventing their own formats.
HL7 v2
The clinical and administrative messaging standard inside the organization: ADT (registration and movement), ORM/ORU (orders and results), DFT (charges). Most revenue cycle interfaces between the EHR and bolt-on systems are HL7 v2.
HL7 FHIR (R4)
A web-API standard with resources such as Patient, Coverage, Claim, ClaimResponse, ExplanationOfBenefit and Task. The basis of the CMS interoperability rules, patient apps, and the new prior authorization workflow.
Da Vinci implementation guides
HL7 Da Vinci project guides for payer-provider exchange: CRD (coverage requirements discovery: does this order need an auth?), DTR (documentation templates and rules: collect what the payer needs inside the EHR), PAS (prior authorization support: submit and receive the decision), PDex (payer data exchange), CDex (clinical data exchange for attachments and audits), HRex (the shared framework).
USCDI
The United States Core Data for Interoperability: the minimum clinical data classes the APIs must carry. Version numbers advance yearly; the CMS payer rules reference specific versions.
TEFCA
The Trusted Exchange Framework and Common Agreement: a national network-of-networks for clinical data exchange through Qualified Health Information Networks. Relevant to records requests and payer audits more than to claims today.
Certified EHR technology (CEHRT)
ONC-certified capabilities the CMS programs require. From the CY 2027 performance period, MIPS clinicians and hospitals attest to having requested at least one prior authorization electronically through a Prior Authorization API using CEHRT.

CMS-0057-F: the payer API timeline

  1. 1

    Operational rules in force January 1, 2026

    Medicare Advantage, Medicaid and CHIP (fee-for-service and managed care) and federal-exchange QHP issuers must give a specific reason for every prior authorization denial. MA, Medicaid and CHIP must decide expedited requests within 72 hours and standard requests within 7 calendar days (QHPs excepted from the clocks).

  2. 2

    Public prior authorization metrics By March 31, 2026, then annually

    Approval, denial, appeal and timeliness metrics posted on each payer's website. A free payer scorecard: compare your denial rates with the payer's published ones.

  3. 3

    Patient Access API usage reporting From 2026

    Annual metrics on patient app usage reported to CMS.

  4. 4

    The four APIs January 1, 2027

    Patient Access API adds prior authorization data (drugs excluded). Provider Access API lets in-network providers with a treatment relationship pull claims, encounter, USCDI and prior authorization data, with patient opt-out. Payer-to-Payer API moves five years of data when a member changes plans, with opt-in. Prior Authorization API publishes what needs an auth and the documentation rules, accepts requests and returns approvals, denials with reasons, or requests for more information. HHS has announced enforcement discretion so that a FHIR-only prior authorization API, without the X12 278, is permitted.

  5. 5

    Electronic prior authorization measure CY 2027 performance period

    MIPS eligible clinicians (CY 2029 payment year) and eligible hospitals and CAHs attest to at least one electronic non-drug prior authorization through a Prior Authorization API using CEHRT, or claim an exclusion.

Where electronic adoption stands

Transaction (medical)Fully electronicProvider cost, manual vs electronic
Claim submission98%—
Eligibility and benefit verification96%$8.57 vs $2.00
Coordination of benefits90%—
Remittance advice89%—
Claim status inquiry80%$13.80 vs $3.64
Claim payment (EFT)77%—
Prior authorization35%$12.88 vs $5.38; 24 minutes manual, 16 by portal
Attachments32%—

2024 CAQH Index (published February 2025), medical plans and providers, calendar year 2023 cost data. The Index estimates $83.0 billion spent on these transactions and $18.4 billion in annual medical savings from full electronic adoption. Reporting on the 2025 Index put prior authorization at 40% and the medical opportunity at $18.7 billion.

Questions for your EHR vendor and clearinghouse before 2027
  • Which Da Vinci guides (CRD, DTR, PAS) are live in our version, and for which payers?
  • Where does the prior authorization decision land: on the order, the encounter and the claim's REF*G1 automatically?
  • Can we pull our own data through the Provider Access API, and into which system?
  • What does the MIPS electronic prior authorization attestation need from us, and when?
  • Which payers still require X12 278 or portals, and is the clearinghouse translating?
Buy for the data, not the screen

Every tool in the stack should give you back its data at transaction level, on a schedule, in a documented format. A denial management system that shows beautiful charts but cannot export denial-level outcomes to your warehouse locks the most valuable data set you own inside a vendor. Make data access a contract term.

Chapter 10

Automation, AI and the ROI case

Automation in the revenue cycle is not one thing. Standard transactions, rules, bots, predictive models, language models and ambient listening each do a different job, fail in a different way and need a different kind of oversight. The evidence in 2026 is uneven: strong for transaction automation and bots on repetitive work, promising but mostly self-reported for AI on coding and denials, and still unproven on financial return for ambient documentation.

The automation ladder

Standard transactions

270/271, 276/277, 835, 278, APIs

The cheapest automation is the one the payer already supports. Every eligibility check, status inquiry and remittance that is electronic end-to-end costs a fraction of the manual version and needs no bot. Exhaust this layer first.

Rules and workflow

Edits, triggers, auto-adjustments, routing

Deterministic, auditable, built into the PM system or scrubber. Most "AI" claims in vendor decks are rules. Rules are good; call them rules.

Robotic process automation (RPA)

Bots that use screens

Software that logs into payer portals, reads status, downloads documents, keys data. Fast to deploy, brittle when the portal changes, and best used where no transaction exists. Measure break rate and exception volume.

Predictive models

Denial prediction, propensity to pay, payment timing

Statistical or machine-learned scores on accounts. Useful for prioritization and for stopping a claim before it goes out. Need a baseline, a holdout and periodic recalibration.

Language models

Coding, appeal drafting, summarization, patient messages

Generate codes, letters and summaries from documentation. Strong at drafting, unreliable without review on anything that becomes a claim or a legal argument. Human-in-the-loop until the measured error rate earns autonomy, by chart type.

Ambient documentation

Listens to the visit, drafts the note

Clinician-facing, but it changes the revenue cycle's raw material. Documentation completeness and code capture may improve; so may the risk of notes that say more than happened.

Current state, 2026

Use caseWhat it doesEvidence 2025–26Watch for
Generative AI in RCM generallyDocumentation gap finding, missed reimbursement, coding support, draftingHFMA survey of 519 finance leaders (April 2025, commissioned by AKASA): 80% exploring, piloting or implementing; about 40% piloting or implementing; 64% of larger systems vs about 20% of $500M–$1B systems. Top barriers: integration, cost, data security.Vendor-commissioned survey; measures activity, not outcomes
Ambient documentationDraft visit notes from recorded conversationsAMA's 2026 survey of 1,692 physicians: 72% use AI in practice (38% in 2023), with documentation of billing codes, charts or notes among the top uses. Peterson Health Technology Institute (March 2025, 8 health systems, 10 vendors): burnout reductions up to 40% relative at one system; no significant financial return demonstrated to date; no throughput gain.Billing increases reported at some systems; audit note content against what was done
Autonomous and assisted codingCodes charts without a coder, or pre-codes for reviewBlack Book Q4 2025 (1,303 provider leaders): 76% of hospitals piloting AI coding report coder-level quality equal to or better than human-only baselines; 62% name coding and CDI automation their top mid-cycle priority. Touchless rates are highest for radiology, ED, lab and routine outpatient encounters.Self-reported; verify with your own blind audit sample before raising the touchless share
Eligibility, status and portal botsCheck coverage and claim status; pull documentsMature. Vendor case studies report large queue reductions (one health system case: 71% of accounts removed from staff queues; the CFO quoted 8 FTEs of time freed, the vendor case study 14). Transaction economics from the CAQH Index are the defensible baseline.Count exceptions and break fixes as cost; a bot checking claims the payer never received hides the real problem
Denial prediction and preventionScore claims before submission; flag likely denialsBlack Book Q1 2025 (220 leaders): 83% say AI solutions cut claim denials by 10% or more within six months. Experian 2025: 14% using AI in claims; 69% of those say it reduced denials or improved resubmission.Self-reported; measure on a DOS cohort against a control
AI-assisted appealsDraft appeal letters from the denial, the record and the payer policyWidely offered; outcome data mostly vendor case studies. Kodiak's 2025 clinical overturn rate (42.1%) is the baseline any appeal tool must beat.Letters that cite policies that do not exist; records attached that contradict the argument. Review every letter until the error rate is measured
Patient financial engagementPropensity to pay, statement timing, chatbots, payment plansKodiak: insured patients' share of bills 7.3% in 2025, collected at 42.4% (down from 45.1%). Digital engagement tools are the main lever; results are organization-specific.Fairness and 501(r) compliance in any scoring that changes how a patient is treated
Payer-side AIAutomated utilization review and claim editsSenate PSI report (October 2024): post-acute prior authorization denials rose sharply at the three largest MA insurers as automation expanded. CMS (February 2024): algorithms may assist but MA decisions must rest on the individual's circumstances. State laws (for example California SB 1120, effective January 1, 2025) require physician review of AI-influenced adverse decisions.Track request-for-information and denial rates by payer by month; appeal patterns, not just claims
Automation ROI calculatorPer-transaction costs default to the 2024 CAQH Index provider figures. Replace them with your own time study and loaded labor rate.
Transaction

ROI cases that hold up

Transaction conversion

Manual to electronic

The CAQH per-transaction differences are measured across the industry and repeatable: $6.57 per eligibility check, $10.16 per status inquiry, $7.50 per prior authorization on the provider side. Multiply by your manual volume and the case writes itself.

Cost to collect

Tenths of a point, at scale

HFMA's 2022 survey of 556 finance leaders put cost to collect at 3.51% for automation users against 3.74% for non-users. A quarter of a point on $1 billion of cash is $2.5 million a year. Black Book reports hospitals on AI-enabled platforms citing 18–28% reductions in cost to collect; treat self-reported ranges as hypotheses to test.

Denial reduction

Only on a cohort

The claim "denials fell 10% after we installed the tool" is worth nothing without a date-of-service cohort, a control (another site or payer), and the final denial rate, not just the initial one. Write the measurement plan before the contract.

Change management that makes the ROI real

  1. 1

    Baseline Before the pilot

    Three to six months of the keys the tool is supposed to move, by cohort, with the definitions frozen. Include cost: FTEs, vendor fees, touches.

  2. 2

    Pilot with a control 60 to 90 days

    One payer, one site or one queue, with a comparable one left alone. Decide in advance what result justifies scaling.

  3. 3

    Redesign the work During the pilot

    Automation changes what the humans do. Rewrite the queue rules, the productivity standards and the job descriptions; otherwise staff work around the tool and the touchless rate stalls.

  4. 4

    Scale and govern Ongoing

    Monitor accuracy and exception rates monthly, with a named owner for each model and bot, and a kill switch. Payer behavior changes; models drift; portals get redesigned.

  5. 5

    Count the benefit honestly Quarterly

    Hours freed are only savings if the volume moves to other work, positions are not backfilled, or vendor fees fall. Report capacity freed and cost removed as separate numbers.

AI governance checklist

Chapter 11

Rules and regulations

Revenue cycle analytics and technology sit inside a dense set of rules: the transaction standards that define the data, the privacy and security rules that govern who may see it, the interoperability rules that are forcing APIs onto payers, and the newer rules on algorithms in coverage decisions. The ones that matter most are summarized here, with the sections to cite.

Federal · HIPAA Administrative Simplification

45 CFR Part 162: transactions, code sets, identifiers and operating rules

Adopts the X12 005010 transactions (270/271, 276/277, 278, 835, 837), the code sets (ICD-10-CM/PCS, CPT, HCPCS, NDC), the NPI, and the CAQH CORE operating rules for eligibility, claim status, EFT and ERA. Covered health plans must accept and send the standard transactions; providers who use them electronically must use the standard. These are the definitions behind every data element in your warehouse. The Administrative Simplification Compliance Act requires Medicare claims to be electronic with limited exceptions.

Federal · HIPAA Privacy and Security

45 CFR Parts 160 and 164: minimum necessary, business associates, safeguards

Billing and payment data are PHI. The minimum-necessary standard (45 CFR 164.502(b)) applies to internal dashboard access and to every extract sent outside. Vendors that create, receive, maintain or transmit PHI, including analytics, RPA and AI vendors, are business associates and need a BAA (164.502(e), 164.504(e)). The Security Rule (164.302–318) requires risk analysis, access controls and audit logs for the systems that hold the data. A January 2025 proposed rule would strengthen Security Rule requirements (mandatory encryption, multifactor authentication, asset inventories); as of October 2026 confirm its final status before relying on specific provisions.

Federal · CMS-0057-F

Interoperability and Prior Authorization final rule (January 2024)

Amends 42 CFR Parts 422 (Medicare Advantage), 431 and 438 (Medicaid), 457 (CHIP) and 45 CFR Part 156 (QHPs). From January 1, 2026: 72-hour and 7-day decision clocks (except QHPs), specific denial reasons, annual public prior authorization metrics (first due March 31, 2026). From January 1, 2027: Patient Access, Provider Access, Payer-to-Payer and Prior Authorization APIs built on FHIR, with Da Vinci CRD, DTR and PAS as the recommended implementation guides. Adds the Electronic Prior Authorization measure to MIPS Promoting Interoperability and the hospital program from the CY 2027 performance period.

Federal · Medicare Advantage coverage decisions and algorithms

42 CFR 422.101(c) and the CMS February 2024 guidance

Since the CY 2024 MA rule, plans must make medical necessity determinations based on the individual enrollee's circumstances and must follow Traditional Medicare coverage criteria. CMS's February 2024 FAQ states that an algorithm or AI tool may assist but cannot be the basis for denying care without the individualized assessment, and that plans must ensure such tools do not discriminate. Combined with the CMS-0057-F metrics, it gives providers a regulatory hook for pattern denials.

Federal · Section 1557 and ONC HTI-1

Nondiscrimination in decision support tools; algorithm transparency in certified EHRs

The 2024 Section 1557 rule (45 CFR 92.210) requires covered entities to make reasonable efforts to identify and mitigate discrimination risk from patient care decision support tools, applicable from May 1, 2025. ONC's HTI-1 rule requires certified EHR developers to disclose source attributes for predictive decision support interventions (45 CFR 170.315(b)(11)). Neither directly regulates a billing bot, but both set the governance expectation for any model that influences patient treatment or financial handling.

State law · AI in utilization review

Physician review of algorithm-influenced denials

California's SB 1120 (effective January 1, 2025) requires that a licensed physician or other appropriate professional make any medical necessity decision a plan's AI tool influences, that the tool base its determination on the individual's clinical information, and that it be subject to audit. Other states have enacted or proposed similar limits, and several restrict AI in prior authorization outright. These apply to fully insured plans; self-funded ERISA plans are generally outside state reach.

Federal · Program integrity

False Claims Act and the 60-day overpayment rule

Claims generated or coded by software are still the provider's claims under 31 USC 3729. A model that systematically selects a higher level of service, or a bot that resubmits claims without correction, creates the same liability as a person doing it. The 60-day rule (42 USC 1320a-7k(d); 42 CFR 401.305) means that credit balances and underpayment analytics that identify an overpayment start a clock to report and return it.

Federal · Price transparency

45 CFR Part 180 and the Transparency in Coverage rules

Hospitals must post machine-readable standard charge files and shoppable services; plans must publish in-network negotiated rates and out-of-network allowed amounts. For analytics these files are a data source: your own contract rates against the market, and the inputs to patient estimates and good faith estimates under the No Surprises Act.

Federal · Information blocking and TEFCA

21st Century Cures Act, 45 CFR Part 171

Providers, health IT developers and exchanges may not unreasonably interfere with access to electronic health information, with penalties for developers and networks and disincentives for providers. Relevant when a vendor refuses to export your own data, and when payers or patients request records through the new APIs.

Chapter 12

Key numbers 2026–27

ItemFigureContext
MAP Keys and award benchmarks
MAP Keys in the current edition29Five domains: patient access, pre-billing, claims, account resolution, financial management
Net days in A/R, 2026 MAP Award winners (hospitals and systems)43.6Median of 16 winners; physician practice winners 18.5
Days in DNSP, 2026 MAP Award winners3.2Discharged not submitted to payer
Point-of-service cash, 2026 MAP Award winners40.5%Of self-pay cash; physician practices 46.6%
Cash collection as % of NPSR, winners99.8%Steady state is about 100%
Denial write-offs as % of NPSR, winners2.5%Physician practices 1.0%
Cost to collect (HFMA survey, 556 leaders)3.68%3.51% with automation vs 3.74% without; 2–4% is the common range
Denials and cash (Kodiak Solutions, 2,300+ hospitals)
Net revenue lost to final denials and bad debt, 2025$48.4 billionUp about 25% from $38.6 billion in 2024
Median final denial rate2.7%2.5% in 2024
Initial denial rate, commercial inpatient / outpatient, 202521% / 11%Both about 3% after rework
Initial denial rate, all claims, 202411.81%Kodiak's 2024 figure; 2025 overall rate not published
Clinical initial denials overturned42.1%42.7% in 2024
Average time to insurance payment55.2 days57.4 in 2024
Insured patient share of bill / collected7.3% / 42.4%6.8% / 45.1% in 2024
Median bad debt rate1.3%1.1% in 2024
Adoption surveys
Health systems acting on generative AI for RCM (HFMA/AKASA, n=519)80%About 40% piloting or implementing; 64% of larger systems
Providers using AI in claims management (Experian, n=250)14%62% say they are well versed (28% in 2024); 41% report denial rates of 10%+
Physicians using AI in practice (AMA 2026, n=1,692)72%38% in 2023, 48% in 2024
Leaders requiring AI/RPA in new outsourcing contracts (Black Book Q1 2025, n=220)91%72% plan to bring outsourced functions onto AI platforms within 24 months
Hospitals piloting AI coding reporting coder-level quality (Black Book Q4 2025, n=1,303)76%34% will not renew at least one legacy RCM outsourcing contract; 59% adopting multi-clearinghouse workflows
Transaction economics (2024 CAQH Index)
Medical savings opportunity from full electronic adoption$18.4 billion / yr2024 Index; $83.0 billion spent on tracked transactions. The 2025 (DataSpring) Index estimates about $21 billion
Prior authorization fully electronic35%Lowest of the tracked transactions; 2025 Index reported 40%
Provider cost, prior authorization, manual vs electronic$12.88 vs $5.3824 minutes manual, 16 minutes by portal
Provider cost, eligibility, manual vs electronic$8.57 vs $2.00Eligibility 96% electronic
Provider cost, claim status, manual vs electronic$13.80 vs $3.64Claim status 80% electronic
Deadlines
CMS-0057-F decision clocks and denial reasonsJan 1, 202672 hours expedited, 7 calendar days standard (MA, Medicaid, CHIP)
First public prior authorization metricsMar 31, 2026Then annually
Patient Access, Provider Access, Payer-to-Payer and Prior Authorization APIsJan 1, 2027FHIR; Da Vinci CRD, DTR, PAS recommended
MIPS Electronic Prior Authorization measureCY 2027Performance period; CY 2029 payment year

What is changing

In effect 2026

Payer metrics are public

CMS-regulated payers now post prior authorization approval, denial and timeliness metrics every year. Pull them into the payer scorecard and compare them with your own denial data for the same payer.

Coming Jan 1, 2027

FHIR APIs on the payer side

Prior authorization from inside the EHR, your own claims data back through the Provider Access API, and a MIPS measure that expects you to use it. Confirm vendor readiness now.

Rising

Denials and automation on both sides

Revenue leakage grew again in 2025, and while Kodiak's first-half 2026 data showed initial denials easing, commercial final denials and payer takebacks kept rising. Providers are automating prevention and appeals; payers are automating review. Measurement by payer and cohort is the only durable advantage.

Sources

  1. HFMA: MAP Keys, 2023 edition (definitions and formulas for the 29 keys)
  2. HFMA: 2026 MAP Award stat sheet (winner medians)
  3. Kodiak Solutions: net revenue losses from final denials and bad debt grew 25% in 2025
  4. Fierce Healthcare: Kodiak 2025 revenue cycle data (time to payment, overturn rates, patient yield)
  5. Employer Coverage: insurance denial rates increased in 2025 (Kodiak inpatient and outpatient rates)
  6. Experian Health: 2025 State of Claims survey
  7. HFMA and AKASA: generative AI in the revenue cycle survey (519 finance leaders, 2025)
  8. Black Book Research: AI disrupts traditional RCM outsourcing (Q1 2025 survey)
  9. Black Book Research Q4 2025 survey on AI coding, clearinghouse redundancy and outsourcing (as reported by Outsource Accelerator)
  10. CAQH: 2024 CAQH Index report (adoption rates and per-transaction costs)
  11. CMS: Interoperability and Prior Authorization final rule (CMS-0057-F) fact sheet
  12. AMA: Physician AI sentiment report, 2026 survey
  13. Fierce Healthcare: Senate PSI report on Medicare Advantage insurers' use of AI in post-acute denials (October 2024)
  14. Fierce Healthcare: Peterson Health Technology Institute evaluation of ambient AI scribes (March 2025)
Chapter 13

Glossary

Chapter 14

Knowledge check

Eight questions drawn from the chapters above. Pick an answer to see the explanation.

Score: 0 / 8

For training and reference. This page summarizes general rules and does not replace payer contracts, plan documents, CMS manuals, state law or legal advice. Example names, IDs, account numbers, dollar amounts and payers are fictional; survey figures are as published by the sources cited and have not been independently audited.

Figures checked October 15, 2026.