What to Look for in a Prior Authorization Company

If your practice is losing days — or weeks — waiting on prior authorizations, the problem is rarely a single payer or form. It is usually a process problem: authorizations requested late, documented thinly, tracked inconsistently, or appealed too late to matter. A prior authorization company exists to fix that process end to end.

But not every company that sells “prior auth services” does the same work. Some submit requests and stop there. Others manage the full lifecycle — order through approval, tracking, expiry monitoring, and appeals. Before you sign anything, know what full-service coverage means, which questions reveal whether a vendor can deliver, and which warning signs should make you walk away.

What “Full-Service” Prior Authorization Actually Covers

The phrase “full-service prior authorization” gets used loosely. A genuinely full-service offering covers the entire authorization lifecycle, not just the submission step:

• Eligibility and benefits confirmation first. The request cannot be built until coverage is verified — active plan, correct member ID, and the specific benefit requiring authorization. This is why insurance eligibility verification and prior authorization belong to the same workflow.
• Medical necessity documentation review. The company should review clinical documentation against the payer’s stated criteria before submitting, flagging gaps — missing conservative-treatment history, incomplete diagnosis support — that would predictably trigger a denial.
• Submission through the correct channel. Payers accept requests through portals, fax, phone, and increasingly FHIR-based electronic prior authorization. Under the CMS Interoperability and Prior Authorization final rule (CMS-0057-F), impacted payers were required to implement electronic prior authorization APIs, and — effective January 1, 2026 — to respond to standard requests within 7 calendar days and expedited requests within 72 hours. A competent vendor submits through whichever channel the payer processes fastest, and tracks the regulatory clock.
• Status tracking and follow-up. Submitted is not approved. The vendor should monitor every open request and escalate on a defined cadence — not wait for your staff to ask.
• Approval capture and expiry tracking. Approvals carry visit counts, date ranges, and unit limits. A full-service company records these so your scheduling and billing teams can use them, and flags expirations before they strand a patient mid-treatment.
• Denials, peer-to-peers, and appeals. When a request is denied, the company should prepare the reconsideration or appeal — including supporting peer-to-peer reviews — rather than handing the denial back to your staff.
• Reporting you can act on. Approval rates by payer and procedure, denial reasons, and aging open requests. If a vendor cannot show you this data for your own practice, they are not managing the process — they are doing data entry.

Any company that only submits forms and leaves tracking, follow-up, and appeals to your team is selling a partial service at full-service prices. Confirm which steps are included in the quote, and which are add-ons.

Turnaround: The Questions to Ask (Not the Benchmarks to Believe)

Every prior authorization company will tell you it is fast. No vendor controls how quickly a payer decides, so do not ask for a guaranteed turnaround time. Ask process questions that reveal whether the company is set up to move quickly:

• “How quickly do you submit after receiving a complete order?” The controllable part of turnaround is the vendor’s own intake-to-submission time. A same-day or next-business-day standard for complete orders is reasonable; what matters is that the standard exists and is measured.
• “What counts as a complete order?” The most common hidden delay is back-and-forth over missing documentation. A good company gives you a clear checklist per procedure type so orders arrive submission-ready.
• “How do you track the payer’s decision clock?” Timelines vary by line of business. Traditional Medicare has its own advance-determination timelines; Medicare Advantage plans operate under CMS rules finalized in 2024 (CMS-4201-F) that tightened how MA plans apply prior authorization. Commercial plans follow state rules and their own medical policies. The vendor should track each request against the applicable timeline.
• “What happens when a request passes the expected decision window?” Listen for a defined escalation path: follow-up cadence, supervisor escalation, and the appeal or external review route — not “we wait.”
• “Do you submit electronically where payers support it?” Electronic submission through payer portals or FHIR-based prior auth APIs reduces errors and creates an auditable trail.
• “How do I see the status of my open requests?” You should have real-time or daily visibility — a dashboard, a shared tracker, or scheduled reports — without having to call and ask.

Notice what these questions have in common: they ask about the vendor’s process, not the payer’s decision speed. The company controls its intake, submission, tracking, and escalation. That is what you are buying.

Red Flags on a Sales Call

• Guaranteed approval rates or turnaround times. No company can guarantee a payer’s decision. “98% approval rate” without context — which payers, which procedures, over what period — is a marketing number, not a fact.
• Vague answers about who does the work. If the salesperson cannot tell you whether the team is in-house or subcontracted, whether the same people handle your account each week, or what training they receive, the operation behind the pitch is thin.
• No payer-specific knowledge. Ask how they handle your top two or three payers by volume. A credible vendor can describe those payers’ portals, medical policies, and common denial triggers from experience. “We work with all payers” is not an answer.
• Pressure to sign before a workflow review. A legitimate company wants to see how your orders and documentation currently flow before quoting — because the quote depends on the work. A vendor that prices blind is guessing.
• Shifting or opaque pricing. Per-transaction, per-approval, and flat monthly pricing all exist. What matters is that the price is tied to a defined scope: which lifecycle steps are included, what counts as a billable transaction, and what happens on appeals.
• No reporting or no access to your own data. If you cannot see approval rates, denial reasons, and aging requests for your own practice, you cannot manage the vendor — or spot when the process is failing.
• Clinical work done by unqualified staff. Peer-to-peer reviews must be conducted by a clinician. Ask who writes the clinical summaries and who handles peer-to-peers.

In-House vs. Outsourced: The Staffing Math

The decision is not really “vendor vs. employee.” It is a capacity and expertise calculation:

The true cost of in-house prior auth is not one salary. It is salary plus benefits plus payroll taxes plus management time, plus the cost of turnover and retraining — this role has high turnover precisely because it is repetitive and payer-facing. Add the hidden cost of coverage gaps: when your one prior auth person is out, requests stall, and stalled requests become delayed care and rescheduled procedures.

The case for keeping it in-house is real for some practices: very low auth volume, highly specialized procedures where the clinical context lives in the physician’s head, or a team member who already does the job well with backup. If your volume is a handful of requests a week and the process works, a vendor adds overhead without value.

The case for outsourcing strengthens as volume, payer-mix complexity, or denial rates rise. A dedicated prior authorization services team spreads payer-policy expertise across many clients, maintains coverage when individuals are out, and brings reporting that shows exactly where the process breaks down. Many practices land in the middle: outsource the high-volume, rules-driven authorizations and keep complex cases in-house.

One more consideration: prior authorization sits upstream of everything else in revenue cycle. A bad auth process manufactures denials that your billing team then has to appeal. When evaluating a vendor’s cost, factor in the appeal labor and delayed revenue a functioning auth process prevents. This is also why the evaluation overlaps with choosing a medical billing company more broadly: the auth vendor and the billing team must share data, or the handoff between “approved” and “billed correctly” breaks.

Therapy and Behavioral Health Auth Specifics

If your practice provides therapy or behavioral health services, the prior authorization conversation has extra layers a generalist vendor may not handle. Confirm the company understands these:

• Visit limits and reauthorization. Many plans authorize therapy in blocks of visits, with reauthorization required to continue. The vendor must track authorized visit counts against sessions delivered and start reauthorization early enough that care is not interrupted.
• Concurrent review. For ongoing therapy — especially intensive outpatient, partial hospitalization, or residential levels of care — payers conduct concurrent reviews with their own documentation requirements and tight response windows. A vendor that only handles initial authorizations leaves you exposed.
• Benefit carve-outs. Behavioral health benefits are often administered by a separate managed behavioral health organization with its own authorization process, portal, and criteria. The vendor must know which entity authorizes which services for each payer.
• Medicare Advantage for therapists. Since CMS allowed marriage and family therapists and mental health counselors to enroll as Medicare providers (effective 2024), more therapy practices are navigating Medicare and MA authorization rules for the first time. MA plans must follow traditional Medicare coverage criteria under the 2024 CMS final rule, but their processes still vary plan to plan.
• Documentation that survives review. Therapy authorizations live or die on treatment plans, measurable goals, and demonstrated progress — or documented lack of progress with justification for continued care. Ask what documentation the vendor requires before submitting.

Frequently Asked Questions

What should a prior authorization company cost?

Per-transaction, per-approval, and flat monthly fees are all common. Get the scope in writing first, then compare prices against identical scopes. A cheap per-transaction price that excludes appeals and reporting usually costs more in practice than a higher flat fee that includes them.

Can a prior authorization company guarantee approvals?

No — treat any such guarantee as a reason to end the conversation. The payer makes the coverage decision based on the plan’s medical policy and the clinical documentation. What a good company improves is submission quality, documentation completeness, follow-up speed, and appeal rigor. Those raise approval rates over time, but no vendor controls any individual request’s outcome.

How long does prior authorization take?

It depends on the payer, the line of business, and whether the request is standard or expedited. Federal rules set outer bounds in some cases — under CMS-0057-F, impacted payers must decide standard requests within 7 calendar days and expedited requests within 72 hours, effective January 1, 2026 — but commercial timelines vary by state and contract. Ask how a vendor tracks each request against the applicable deadline and escalates when a payer goes quiet.

Should we outsource prior authorization or keep it in-house?

Low volume with a stable, trained staff member and backup coverage is often fine in-house. Rising volume, multiple payers with different portals and policies, frequent denials, or no backup coverage are signs the process has outgrown one person’s capacity. Many practices outsource routine authorizations while keeping complex cases internal.

What is the difference between a prior authorization company and a billing company that offers prior auth?

A standalone prior auth company focuses only on the authorization workflow. A full revenue cycle partner handles authorization as part of a connected process — eligibility verification, authorization, claim submission, denial management, and AR follow-up sharing the same data. The connected model has a real advantage: when authorization details (approved units, date ranges, authorization numbers) flow directly into claim submission, fewer claims deny for authorization mismatches.

The Bottom Line

The right prior authorization company is not the one with the flashiest approval-rate claim. It is the one that manages the full lifecycle — eligibility through appeals — with transparent reporting, payer-specific expertise, and a defined escalation process when payers stall. Ask about process, not promises, and verify the scope in writing.

If authorization delays are already showing up as denials and rescheduled patients, a free billing audit can show you exactly where the process is breaking down — from eligibility gaps to auth tracking to denial patterns. No obligation, and no promises of savings.