Comprehensive Error Rate Testing (CERT) Question and Answer Fact Sheet

Published 09/17/2025

The Comprehensive Error Rate Testing (CERT) process created a way for the Centers for Medicare & Medicaid Services (CMS) to look at the accuracy of claims processed by all Medicare Administrative Contractors (MACs). The CERT contractor reviews a random sample of processed claims to determine if there has been an improper payment. An improper payment may have been made if a claim should have been fully or partially denied, or paid at a different level based on the submitted documentation.

Last Reviewed: 09/17/2025

There are two contractors who comprise the CERT program. The CERT Statistical Contractor (CERT SC) and the CERT Review Contractor (CERT RC). The CERT SC is administered by The Lewin Group, Inc., who designs how the claims are sampled and calculates the improper payment rates. The CERT RC is administered by Empower AI, Inc. The CERT RC's function is to request, maintain and review sampled medical records to determine if the claims were appropriately paid. Once the reviews are completed for a specific period, the CERT SC calculates an improper payment rate for claims that were either overpaid or underpaid in error. This is referred to as the "improper payment rate." The CERT Contractors are not part of Palmetto GBA.

Last Reviewed: 09/17/2025

An improper payment is a payment that should not have been made or a payment made in an incorrect amount. Both overpayments and underpayments are considered improper payments. These may include: 1) Payments to an ineligible recipient; 2) Payments for an ineligible service; 3) Duplicate payments; 4) Payments for services not received; or 5) Payments for an incorrect amount. Improper payments are a good indicator of how claim errors impact the Medicare trust fund.

Last Reviewed: 09/17/2025

The CERT Contractor chooses a random sampling of processed claims from each MAC, requests medical records and reviews them to determine if an error in payment was made. The samples include claims that were both paid and denied by the MAC. After the claims within a specific period are reviewed, an improper payment rate is determined for each MAC.

Last Reviewed: 09/17/2025

Yes. The CERT process is a federally mandated program. Non-submission of medical records will result in a denial of all services billed on the claim. Please refer to MLN Fact Sheet Medical Record Maintenance & Access Requirements (PDF) for more information about documentation maintenance and access requirements for billing services to Medicare patients.

Last Reviewed: 09/17/2025

Compliance with the CERT process ensures the appropriate reimbursement of claims, preventing unnecessary denials and appeals, and reflecting a positive impression of the provider community by establishing a low payment error rate. Compliance with the CERT process may also prevent additional medical review.

Last Reviewed: 09/17/2025

Providing medical records of Medicare patients to the CERT Contractor is within the scope of compliance with HIPAA. Resource: MLN Fact Sheet Collaborative Patient Care is a Provider Partnership (PDF).

Last Reviewed: 09/17/2025

The letter contains specific information on the CERT process, HIPAA compliance, a listing of documentation to submit (if additional documentation is requested), where and how to submit the documentation, timeframe for responding to the request, claim information, and an original barcoded cover sheet. Please note that the requested documentation is not all-inclusive; the provider should respond with all documentation necessary to support the medical necessity of the services billed and to support the billed services were provided. If applicable, an authenticated or intent to order the billed services should also be submitted with the documentation. 

Last Reviewed: 09/17/2025

Respond to each request separately. The provider may receive requests for several beneficiaries or just one. However, multiple requests for the same beneficiary and the same date of service may also be received. Please check the C3HUB using the Claims Status Search feature to determine if the CERT Contractor has received the requested documentation. If documentation has not been received, submit the medical records again using the submission methods included in the request letter. Even if you have already submitted the documentation once for that beneficiary, respond again. Attach the barcoded cover sheet every time medical records are submitted. This cover sheet has a claim identification (CID) number and instructions on how to submit the documentation. A second request for the same patient and date of service should be carefully reviewed to determine if there was missing information from the first response, or if new information is being requested. Attach the barcoded cover sheet every time medical records are submitted.

Last Reviewed: 09/17/2025

The CERT Contractor sends follow-up or subsequent record requests when a response was received to the initial request, but certain required elements of the documentation are still missing. For example, not all dates of service submitted, missing physician order, or a signature attestation is needed. Be sure to closely review the CERT Contractor's letter for details regarding what documentation is still needed.

Last Reviewed: 09/17/2025

  • Via U.S. Mail

CERT Documentation Center
8701 Park Central Drive, Suite 400-A
Richmond, VA 23227

  • Via Fax to (804) 261–8100
    • Use the barcoded cover sheet as the only coversheet; do not add your own cover sheet
    • Send a separate fax transmission for each individual claim
  • Via Electronic Submission of Medical Documentation (esMD)
  • Via CD
    • Must contain only images in TIFF or PDF format 
    • The images should be encrypted per HIPAA security rules. Once encrypted, the password and CID# must be provided via email to CertMail@empower.ai or via fax to (804) 261–8100.
  • Via Email Attachment
    • Must contain only attachments in TIFF or PDF format 
    • The email attachment(s) should be encrypted per HIPAA ecurity rules. Once encrypted, the password and CID# must be provided via phone to 888–779–7477 or via fax to (804) 261–8100.

Last Reviewed: 09/17/2025

Providers should contact the CERT Contractor directly at 888–779–7477 for any questions about the request letter.

For specific questions about the items listed on the request or review results, please email the Palmetto GBA CERT Team at JJ.JM.CERT@palmettogba.com. When contacting us via email, please include only the CID number and be sure not to include any Protected Health information (PHI) or Personally Identifiable Information (PII).

Last Reviewed: 09/17/2025

The initial letter requesting records asks providers to submit the medical records within 45 days of the initial letter date for timely submission. If documentation is not received within that timeframe, the provider may receive up to two additional letters and/or phone contacts from the CERT Contractor. Palmetto GBA may also place a courtesy call in response to the request. If records are not received by the 60th day from the date of the initial letter, Palmetto GBA may adjust the paid claim and recoup all payment for non-submission of documentation. Please see the CERT Contractor’s letter and contact information on the CERT C3HUB portal.

Last Reviewed: 09/17/2025

CERT samples Medicare claims during a specific report year, each with a Universe Date, the date the claim entered the Medicare system. The claim with the oldest Universe Date will be reviewed first. For more information about the CERT report year, please visit CMS.gov.

Last Reviewed: 09/17/2025

If the CERT RC disagrees with the original payment of the claim, the MAC is notified and will adjust the claim based on CERT’s decision. Adjustments can be identified on the provider's remittance advice. Palmetto GBA will also send a Teaching and Instruction for Provider (TIP) education letter to the provider regarding the specific reason for the adjustment of the claim. A follow-up phone call may also be made by Palmetto GBA to ensure the provider understands why the claim was adjusted. Please complete the Contact Name and Phone Number section on the barcoded coversheet when submitting medical records to the CERT Contractor. This will assist Palmetto GBA in contacting the appropriate person in the event the claim is found in error for insufficient documentation.

Please note: If the CERT RC agrees with Palmetto GBA’s original determination, the provider is not notified.

Last Reviewed: 09/17/2025

Providers can now access the CERT C3HUB to obtain claim review and documentation status under the claim status search feature. The C3HUB is operated by the CERT Contractor and updated daily. Providers may email JJ.JM.CERT@palmettogba.com for more information about the CERT review. Please do not contact the CERT Contractor for the review results of your claim. Refer to the Medicare Program Integrity Manual, Publication 100-08, Chapter 12 (PDF) for more information about how CERT information is disseminated.

Palmetto GBA also provides this information within eServices, our free, internet-based self-service portal. (Refer to the eServices User Guide for details.) CERT information can be found in eServices under the eReview tab and then by selecting the eAudit tab. This information is only updated monthly.

Last Reviewed: 09/17/2025

Please review the decision(s) to see specifically what medical records were supplied to the CERT Contractor and what documentation may have been missing. If you don’t agree with the CERT Contractor's review decision. You have one of two options:

1. Send the records to the CERT Contractor as late documentation

  • Submit any additional or missing documentation 
  • Monitor your claim status on the C3Hub to assure the CERT Contractor has completed the review within 120 days

2. Follow the normal redetermination process to appeal if your claim has been adjusted due to the CERT Contractor’s review decision

Last Reviewed: 09/17/2025

The CERT Contractor uses the address on file in the Medicare system when sending letters. Palmetto GBA uses the correspondence address on file in the Medicare system when sending Teaching and Instruction for Providers (TIP) education letters.

  • Address changes and provider file updates must be submitted through the internet-based Provider Enrollment, Chain and Ownership System (PECOS), or on the proper Centers for Medicare & Medicaid Services (CMS) form, depending on the type of provider or supplier. A CMS-855I is required for an individual, a CMS-855B (PDF) is required for an organization, and a CMS-855A is required for institutional providers.
  • Find information about the CMS’s change of address information on Provider Enrollment Chain and Ownership System (PECOS)

Last Reviewed: 09/17/2025

All initial letters requesting medical records will be sent to the correspondence address on file in the Provider Enrollment Chain and Ownership System (PECOS). 

  • After the initial request letter is sent on a specific CID, providers can designate a point of contact, address and/or phone number for future CERT correspondence related to that CID by calling a CERT Customer Service Representative (CSR) at 888–779–7477
  • Providers with at least five PTANs (Provider Transaction Numbers) or OSCAR (Transaction Access Number and NPI), such as a hospital chain with multiple PTANs, or billing practice with multiple NPIs, who would like to elect a single point of contact can enroll in the “chain address” program. Providers should contact CERT at the above number and/or email address. Please see the CERT Contractor's letter and contact information on the CERT C3Hub for additional information and guidance concerning this.

Last Reviewed: 09/17/2025


Was this article helpful?