The contract file: amendments, fee exhibits, and proof of everything

Which contract documents should you keep, and where?

Keep three layers together: the contract itself, the records that prove your right to bill under it, and the credentialing file behind both. That means the signed agreement and every exhibit, each amendment with the dated notice that produced it, the provider manual version in effect, your enrollment records, and your credentialing paper. Store it all in one indexed, backed-up, access-controlled place, and retain each item for at least your audit lookback and your state's retention period.

The reason to be systematic is simple: the value of a contract document shows up exactly when something goes wrong — a takeback, a denied claim, a sale, a dispute over which rate applied. At that moment you need the specific version that governed a specific date, not a rough memory of the deal. A contract file that is organized and complete turns those moments from a scramble into a lookup.

The core contract file — what goes in it

Start with the agreement and everything it points to. Keep the fully signed contract, every exhibit — the fee schedule and product-participation exhibits above all — and each amendment paired with the dated notice that created it, so you can reconstruct the terms as they stood on any date. Because payers publish their reimbursement and medical policies on their portals and revise them over time, save the version in effect when you billed, not just the current one 1Ref 1Anthem (2026).Anthem Provider Policies.Named example that Anthem publishes and revises its policies on its provider portal, used to show why you must save the policy and fee-schedule version in effect when you billed, not just the current one.2Ref 2UnitedHealthcare (2026).UnitedHealthcare Policies and Protocols.Named example that UnitedHealthcare publishes and revises its policies online, used alongside the other example for the 'save the version that applied' point about incorporated policies..

A complete core file includes:

• The signed agreement, with signature pages and the effective date.
• Every exhibit, especially the fee schedule — snapshot each version the day it takes effect.
• Every amendment and its notice, which is why amendment-by-notice paperwork belongs here, filed with the change it made.
• The provider manual version in effect, since the contract incorporates it by reference.
• The clauses that decide your money and your exit — timely filing lives in the contract, and so do the assignment clauses and the evergreen contracts language you will need if you ever sell, move, or leave.

This is also why reading a payer contract and filing what you read go together: the file is only useful if it holds the versions, not just the latest copy.

The enrollment records that prove your right to bill

Your right to be paid rests on enrollment records, so keep them as carefully as the contract. For Medicare, keep your CMS-855I enrollment application and its approvals 3Ref 3Centers for Medicare & Medicaid Services (2026).Form CMS-855I — Medicare Enrollment Application: Physicians and Non-Physician Practitioners.That the CMS-855I is the individual Medicare enrollment application, so the completed application and its approvals belong in the enrollment records a practice keeps., and your enrollment as it stands in PECOS, including reassignment and effective-date confirmations 4Ref 4Centers for Medicare & Medicaid Services (2026).Medicare PECOS.That Medicare enrollment, reassignment, and changes are transacted in PECOS, so the enrollment record and its effective-date and reassignment confirmations are documents to retain.. Keep your NPI record from NPPES current — CMS expects updates within a set window — and save the confirmations 5Ref 5Centers for Medicare & Medicaid Services (2026).National Plan and Provider Enumeration System (NPPES).That NPI applications and updates are made in NPPES and must be kept current within CMS's update window, so the NPI record and its update confirmations are part of the file.. Add your W-9s and your EFT and ERA enrollment confirmations, which tie payment to the right account.

These records answer the questions an audit, a payer directory review, or a payment problem will ask: are you enrolled, under what name and tax ID, at what address, and reassigned to which group. A gap here does not just risk a denial — a stale NPPES address or an unrenewed reassignment can quietly break in-network status. Keep the confirmation of every change, dated, so you can prove what was current when.

The credentialing file — proof you were vetted

Payers re-verify you on a cycle, so keep the credentialing record that lets you respond fast. Maintain your CAQH profile and its attestation history, since most commercial payers pull your credentialing data from it and expect periodic re-attestation 6Ref 6CAQH (2026).CAQH.That CAQH operates the provider data portal most commercial payers pull for credentialing, with self-reported profiles providers must periodically re-attest — so the profile and its attestation history belong in the credentialing file.. Keep copies of your license, DEA registration, malpractice certificate, board certification, and CV. Run and save an NPDB self-query so you can see exactly what a credentialing committee sees before they see it 7Ref 7Health Resources and Services Administration (2026).NPDB Self-Query.That a practitioner can self-query the NPDB to see what a credentialing committee will see, making the self-query result a document worth running and keeping before panel applications..

The credentialing file is what turns a recredentialing request or a new payer application from a week of digging into an afternoon. Keep the primary-source verification results payers send, the dates your license and certifications expire, and every attestation you submit. When a payer says your file is incomplete, a well-kept credentialing folder is how you prove otherwise on the same day.

Where to keep it and how to organize it

Keep everything in one place, not scattered across email, a desk drawer, and a billing service's portal. Use a single indexed, backed-up, access-controlled store, and name each document by payer and effective date so the version you need surfaces in seconds. Anything containing protected health information belongs in a HIPAA-aware store under a business associate agreement, not a personal cloud folder. The organizing principle is retrieval under pressure: assume you will need the right version fast.

• A master index. One spreadsheet listing every payer, contract dates, fee-schedule version dates, renewal and termination clocks, and where each document lives.
• Consistent naming. Payer, document type, effective date — so sorting shows the history at a glance.
• Backups and access control. At least one off-site backup, and a record of who can open the file.
• A continuity plan. Note who could reach these records if you were suddenly unavailable — a solo practice has no one else who knows where they are.

How long to keep it, and why the dated version matters

Set retention by the longest clock that can reach a document, then keep it that long. For contract and billing records, that is usually your contract's audit lookback and your state's medical-record retention rule, whichever is longer; enrollment and credentialing records follow their own program timelines. The reason the dated version matters is that every dispute is judged against the rules in effect then — the fee schedule, the policy, the contract language that governed the actual date of service.

So the single habit that pays off most is snapshotting: the day a fee schedule or a policy takes effect, save that version with its date into the file. When a takeback letter arrives two years later citing a rule, you can put the rule that actually applied next to the one they are quoting. A contract file is not paperwork for its own sake — it is the evidence you will wish you had, kept before you needed it.