Front-end authorization gaps and payer policy shifts account for up to 80% of preventable denials. Shifting to dedicated verification and audit-ready workflows accelerates revenue capture and preserves clinical bandwidth.
For many U.S. medical practices, the biggest revenue problem is not patient volume.
It is what happens after the patient has been seen.
A service may be performed correctly, documented correctly and clinically necessary — yet revenue can still be delayed or lost because eligibility was not verified, authorization was missing, a code was incorrect, a claim failed a payer edit, a denial was not appealed on time or an aging account simply stopped receiving attention.
That is why Revenue Cycle Management (RCM) should not be viewed as a back-office billing function. It is the financial operating system of a healthcare practice.
A strong revenue cycle turns completed patient care into predictable cash. A weak revenue cycle creates an invisible pipeline of denials, aging A/R, underpayments, staff rework and write-offs.
The Administrative Burden is Substantial: In the AMA's 2025 prior-authorization survey, physicians reported completing an average of 40 prior authorizations per week, consuming approximately 13 hours of physician and staff time each week; 40% reported employing staff specifically dedicated to prior authorization. [American Medical Association Source]
That raises an increasingly important question for independent practices:
"Should we continue managing medical billing internally, or should we outsource some or all of our revenue cycle?"
There is no universal answer. But there is a measurable one.
This comprehensive guide explains how to make that decision using financial data, revenue-cycle benchmarks, staffing costs, security requirements and operational risk rather than simply comparing vendor fees.
Download the 2026 RCM Benchmarks & Guide
Take this full 2026 framework offline — complete with MGMA benchmark tables, in-house vs. outsourced cost calculators, and the 15-point vendor evaluation matrix.
1. What Is Revenue Cycle Management?
Revenue Cycle Management is the complete administrative and financial process connecting a patient's appointment to final payment.
Medical billing is therefore only one component of RCM.
A mature RCM operation begins before the patient receives care and continues until every legitimate balance is collected, resolved or appropriately written off.
| Stage | Typical Functions |
|---|---|
| Pre-service | Scheduling, registration, insurance verification, eligibility, benefits, prior authorization |
| Clinical / Service | Clinical documentation, charge capture, CPT / HCPCS / ICD-10 medical coding |
| Claims | Claim creation, claim scrubbing, submission and clearinghouse management via claims management protocols |
| Payer Follow-up | Claim-status tracking, denials triage, corrections, appeals and underpayment follow-up |
| Payment | Electronic Remittance Advice (ERA) / EOB processing, payment posting and daily bank reconciliation |
| Patient Responsibility | Patient statements, balance collections, payment plans, co-pays and empathetic patient follow-up |
| Revenue Intelligence | A/R aging analysis, root-cause denial reporting, payer performance trends, collections reporting and cash forecasting |
This distinction matters when comparing providers.
A company that merely submits claims is not providing full revenue-cycle management. The stronger question to ask is:
"Which parts of my revenue cycle will this company actually own?"
2. The Revenue Cycle KPIs Every Practice Owner Should Know
You cannot evaluate an internal billing department or an outsourced partner without a scorecard. The first step is therefore to establish a baseline before changing anything.
A useful public KPI framework hosted by MGMA identifies several important measures for physician practices, including clean claims, denial rate, days in A/R and net adjusted collection rate. The benchmarks should be treated as directional rather than absolute because specialty, payer mix, procedure complexity and geography can materially change performance. [MGMA KPI White Paper]
The 2026 Medical Practice RCM Benchmark Scorecard
| KPI | Healthy Benchmark / Target | Why It Matters |
|---|---|---|
| Clean Claim Rate | ≈98% | Measures how many claims reach the payer cleanly on first submission |
| Initial Denial Rate | <5% best-practice target | Indicates front-end, coding, authorization and payer-process quality |
| Typical Denial Range | 5–10% | A warning band that should trigger root-cause investigation |
| Denial Resolution | ≈85% within 30 days | Measures whether denied revenue is actively being recovered |
| Days in A/R | 30–40 days | Measures how quickly services become cash |
| A/R Older Than 90 Days | <10% of total A/R | Exposes aging and potentially unrecoverable balances |
| Net Collection Rate | 97–99% optimal (95% min) | Measures how much collectible revenue is actually collected |
| Charge Capture Lag | 3–5 days after service | Delayed charges cause delayed cash flow and timely-filing risk |
| Late Charges | ≤2% of charges | Indicates clinical documentation or charge-entry breakdowns |
| Bad-Debt / Write-Off Rate | <3% of expected collections | Highlights preventable revenue leakage |
The MGMA-hosted KPI resource confirms that a 98% clean-claim benchmark, a 5–10% industry denial range with <5% as optimal, 30–40 days in A/R, and less than 10% of A/R over 90 days represent standard clinical practice benchmarks. [MGMA Resource]
For net adjusted collection rate, the same guidance identifies 95% as a minimum and 97–99% as optimal. Historically, MGMA discussions suggest insurance net-collection goals roughly between 95% and 98.5%, while denial targets around 4–6% provide a realistic starting operational range. [MGMA Building Blocks Resource]
The key takeaway is not whether your cardiology practice or chiropractic practice has the exact same target. The important point is whether you know your numbers, their trend, and their root causes.
3. Clean Claim Rate: Your First Early-Warning Signal
A claim should ideally be correct before it reaches the payer.
Eligibility mistakes, missing policy identifiers, authorization failures and incorrect coding data create avoidable rework downstream. That is why Clean Claim Rate is one of the best leading indicators of RCM quality.
The Two Competing RCM Operational Philosophies:
MGMA's 2026 discussion on denial prevention emphasizes that while net collection rate is the ultimate financial result, practices require early indicators like clean claim rates because collection figures take months to reveal underlying damage. [MGMA Denial Prevention Podcast]
4. Denial Rate: Don't Just Work Denials — Prevent Them
Denial management should never simply mean correcting rejected claims faster. The real objective is to stop the same denial from occurring again.
| Dimension | Example Analysis |
|---|---|
| Root Cause | Eligibility, prior authorization, medical coding, medical necessity documentation |
| Payer | Medicare, Medicaid MCO, Commercial (Aetna, BCBS, UnitedHealthcare, Cigna) |
| Provider / Clinic | Physician-specific, mid-level provider, facility or remote clinic location |
| Procedure | High-volume CPT, HCPCS code, bundled service or modifier dispute |
| Financial Impact | Total gross & net dollars denied vs. claim count |
| Recoverability | Clinical appeal, demographic correction, contractual write-off, or non-recoverable |
| Repeat Pattern | Recurring systematic clearinghouse rejection vs. isolated human error |
A practice with a 7% denial rate but no root-cause reporting has a bigger operational problem than the percentage suggests. Always ask: "What are our top five denial reasons by dollars, not just claim count?" A hundred $40 copay rejections and ten $5,000 surgical authorization denials demand very different operational priorities.
5. Days in A/R: The Cash-Flow Metric Practice Owners Cannot Ignore
Days in Accounts Receivable (A/R) estimates how long the practice takes to convert clinical care into realized bank deposits.
The MGMA physician-practice KPI guidance cites 30–40 days as the optimal healthy range, with less than 10% of A/R over 90 days. [MGMA Source]
Never review total A/R days alone. Always break aging into distinct buckets:
Consider an example: A practice showing 36 total A/R days appears healthy. But if one commercial payer accounts for $300,000 of aging claims over 90 days, there is massive hidden cash trapped inside an apparently acceptable average. This is why a thorough A/R aging report review is the most valuable first step when evaluating practice performance.
6. Net Collection Rate: The Metric That Answers the Most Important Question
Gross collections and total charges can be highly misleading without understanding contractual fee schedule adjustments. Net Collection Rate (Adjusted Collection Rate) cuts through the noise:
The MGMA-hosted guidance identifies 95% as the minimum acceptable benchmark and 97–99% as the optimal range. [MGMA Source]
The Real-World Dollar Impact of a 4% Difference:
Consider a medical practice with $3,000,000 in collectible annual allowable revenue:
- • At a 94% Net Collection Rate: Practice collects $2,820,000
- • At a 98% Net Collection Rate: Practice collects $2,940,000
- • Recovered Revenue Difference: +$120,000 per year
That is why judging a billing operation solely on employee wages or an outsourcing fee percentage is dangerous. The true metric is: Cost to Collect + Revenue Leakage + Operational Risk.
7. In-House Medical Billing: What Does It Really Cost?
Many practice owners compare a biller's base salary directly against an outsourced billing quote. That calculation misses the majority of real overhead.
According to the U.S. Bureau of Labor Statistics (BLS), the median annual wage for medical records specialists was $51,140 in May 2025, with those in physician offices averaging $47,120. [BLS Occupational Data]
Crucially, BLS data shows that wages and salaries represent approximately 70% of total employee compensation, while benefits account for the remaining 30%. [BLS Compensation Breakdown]
A true in-house revenue cycle operation incurs:
Furthermore, small practices face severe concentration risk. If a 3-provider clinic relies on a single lead biller who takes leave or resigns, claims age, authorization windows expire, and collections grind to a halt.
8. What Does Outsourced Medical Billing Cost?
Pricing varies according to specialty, monthly volume, payer complexity, and whether the scope covers basic claim submission or full-service RCM. Common market structures include:
| Model | Typical Application |
|---|---|
| Percentage of Collections | Full-service medical billing outsourcing and comprehensive RCM |
| Per-Claim Pricing | Predictable, standardized, high-volume claim environments |
| Fixed Monthly Retainer | Smaller practices or concierge medicine with steady appointment volume |
| Dedicated Staffing (FTE) | Group practices requiring full-time certified remote coders or AR analysts |
| Contingency Fee | Aged A/R wind-down projects and old denial recovery campaigns |
| Hourly / Project-Based | Chart audits, compliance assessments, fee schedule negotiations |
A vendor charging 3% who collects 92% of allowable charges is dramatically more expensive than a vendor charging 5% who collects 98%. Always evaluate total cash collected net of fees.
9. In-House vs. Outsourced Billing: A Better Comparison
| Operational Factor | In-House Billing | Outsourced RCM Partner |
|---|---|---|
| Staffing Control | High direct oversight | SLA-governed / vendor-managed |
| Fixed Payroll Cost | High & rigid fixed overhead | Converts to variable, volume-aligned cost |
| Recruiting Burden | Practice absorbs turnover & hiring | Handled entirely by RCM partner |
| Specialty Expertise | Limited to current staff experience | Dedicated specialty certified coders |
| Absence & Leave Coverage | Vulnerable during vacations/illness | Pooled team redundancy ensures zero stoppage |
| Technology Investment | Practice pays for scrubbers & seats | Distributed across client infrastructure |
| Payer Intelligence | Limited to practice's local sample | Cross-practice multi-payer insight |
| Security & HIPAA Risk | 100% internal liability | Shared risk governed under formal BAA |
| Scalability | Slow (requires job postings & training) | Instantaneous scaling as volume expands |
10. When Does Outsourcing Medical Billing Make Sense?
Outsourcing medical billing warrants immediate evaluation when multiple of the following symptoms occur together:
- Denial rates are trending above 7–10%;
- A/R over 90 days exceeds 10–15% of your total balance;
- First-pass clean-claim performance falls below 95%;
- Billing staff turnover or medical leave is causing cash flow interruptions;
- Prior authorizations consume excessive clinical staff hours;
- Physicians or front-desk personnel are spending evening hours on claim inquiries;
- Your practice lacks detailed denial root-cause analytics;
- You are expanding specialties without certified coder bandwidth;
- Management cannot readily state its adjusted net collection rate;
- Payer timely-filing limits are being breached;
- The practice has recently transitioned to a new EHR / Practice Management system;
- Your current billing service is non-responsive or fails to supply transparent reporting.
11. When Should a Practice Keep Billing In-House?
Outsourcing is not a silver bullet for every practice. Retaining billing in-house makes sense when:
- You possess stable, tenured billing leaders with deep payer relationships;
- Your coders have proven specialty mastery and achieve >98% accuracy;
- Your clean claim rate consistently exceeds 98% with days in A/R under 35;
- You maintain sufficient internal staffing redundancy to weather vacations;
- You have established compliant cybersecurity and HIPAA audit safeguards;
- Your operational scale spreads technology and management overhead efficiently.
Consider a Hybrid Model: Many practices choose to retain charge capture and clinical coding in-house while outsourcing aged A/R follow-up, prior authorizations, and complex appeals.
12. HIPAA Compliance: The Outsourcing Question That Cannot Be Treated as a Checkbox
A medical billing partner handling Protected Health Information (PHI) functions as a Business Associate.
CMS establishes that covered entities utilizing third-party business associates must execute a formal, written agreement establishing duties and mandating HIPAA safeguards. [CMS HIPAA Guidance]
HHS outlines that a compliant Business Associate Agreement (BAA) must address permitted uses, physical and electronic safeguards, breach reporting protocols, subcontractor liabilities, and data return/destruction terms. [HHS BAA Provisions]
Never simply ask a vendor: "Are you HIPAA compliant?" Instead ask: "Show me how you operationalize HIPAA across your network and workforce."
13. A Practical Security Framework for Evaluating an RCM Vendor
Before sharing access to your EHR or patient records, evaluate the prospective partner across 5 security layers:
- Governance: Documented security policies, annual employee HIPAA training, a designated HIPAA Compliance Officer, and regular vulnerability risk assessments.
- Identity & Access Control: Principle of Least Privilege, role-based access, instantaneous termination protocols, and mandatory Multi-Factor Authentication (MFA).
- Data Protection: AES-256 encryption at rest, TLS 1.3 encryption in transit, strict prohibition against downloading PHI onto unmanaged personal endpoints.
- Vendor & Subcontractor Oversight: Signed BAAs across all cloud hosts, clearinghouses, and sub-processors. HHS mandates that cloud repositories storing ePHI require executed BAAs regardless of encryption status. [HHS Cloud FAQ]
- Incident Detection & Recovery: Automated intrusion detection, 24/7 logging, tested immutable backup restoration, and an established breach escalation plan. For reference, NIST SP 800-66 Rev 2 maps HIPAA Security Rule requirements to modern NIST Cybersecurity Framework controls. [NIST SP 800-66 Resource]
14. The HIPAA Cybersecurity Environment Is Getting Tougher
Healthcare organizations must prepare for evolving federal cybersecurity standards. HHS released significant proposed updates to the HIPAA Security Rule in December 2024, introducing heightened mandates for written documentation, network segmentation, routine penetration testing, and automated security controls. [HHS Proposed Security Rule Fact Sheet]
15. Do Not Forget Marketing Technology and PHI
As clinics adopt online booking portals, tracking pixels, and web forms, strict boundaries must separate public marketing tracking technologies from HIPAA-regulated clinical workflows. Public analytics pixels should never be installed on portals where identifiable patient health queries are transmitted.
16. How to Evaluate a Medical Billing Company
Never rely on marketing claims. Request tangible operational evidence across this 15-point scorecard:
| Evaluation Area | What You Must Ask |
|---|---|
| Specialty Experience | Which practices in our exact specialty and volume do you currently support? |
| Coding Credentials | Who codes our charts, and do they hold active AAPC (CPC) or AHIMA (CCS) certifications? |
| Clean Claim Rate | How do you track clean claims, and what is your verified client average? |
| Denials Management | How are denials triaged, appealed, and systematically engineered out of recurrence? |
| Aged A/R Follow-Up | What is your weekly protocol for claims aging past 30, 60, and 90 days? |
| Reporting Transparency | Will I receive monthly executive dashboards detailing net collections and payer trends? |
| Dedicated Account Ownership | Will our practice have a dedicated, named account manager and billing team? |
| Escalation SLA | What is your guaranteed response time for urgent payer rejections or authorization blocks? |
| HIPAA & Security | Will you sign a Business Associate Agreement, and what endpoint controls protect PHI? |
| Subcontractor Disclosure | Do any offshore entities or third-party vendors touch our patient documentation? |
| EHR Compatibility | Can you work natively inside our existing EHR / PM software (Epic, Athena, eCW, Kareo)? |
| Transition Continuity | How do you prevent claims from slipping through cracks during migration? |
| Contract Terms | What are termination provisions, data return obligations, and post-termination runout terms? |
| All-Inclusive Scope | What specific workflows are included, and what triggers an additional charge? |
| Baseline Diagnostic Audit | Will you analyze our existing aging A/R and denial history before asking us to sign? |
17. The Best First Step Is Often an A/R and Denial Audit
Before replacing employees or committing to an outsourced partner, understand where revenue is currently leaking.
A rigorous diagnostic review evaluates: A/R aging buckets + denial trend reports + payer mix + charge lag + write-off patterns.
Often, clinics discover that 80% of revenue leakage stems from just 2 or 3 preventable bottlenecks. Requesting a Complimentary A/R & Denial Audit is the smartest way to validate actual performance before altering operations.
18. What Does a Good RCM Dashboard Look Like?
Every practice owner should be able to log into a single view and immediately answer:
- How much gross revenue did we bill this month?
- What was our total allowable collectible revenue?
- How much cash was deposited into our operating accounts?
- What percentage of claims was denied on first submission?
- Which specific payer is responsible for the majority of denials?
- How many dollars sit in the 90+ day aging category?
- What amount was contractual adjustment vs. preventable write-off?
- Which denials are currently undergoing active clinical appeal?
19. The 30-Day RCM Health Check
Incorporate this simple 15-point review into your monthly executive meeting:
Do not ask only: "Are collections up?" Ask: "Why did they move?" That distinction transforms billing from administration into strategic clinical finance.
The Bottom Line
The decision to outsource medical billing should never begin with: "What percentage do you charge?"
It should begin with: "What is our revenue cycle costing us today?"
- Measure the leakage.
- Measure the staff burden.
- Measure the denials.
- Measure the aging A/R.
- Measure the true cost of technology, software, and turnover.
- And most importantly, measure how much collectible revenue actually becomes cash.
A high-performing internal revenue cycle may be worth protecting. A poorly performing one can quietly cost far more than the fee required to fix it.
Ready to Uncover Where Your Revenue Is Leaking?
Download our complete 2026 RCM Benchmarks Guide or schedule a confidential, zero-obligation billing audit with Svizzera's senior billing advisory team.
Frequently Asked Questions
Clear answers on authorization workflows, turnarounds, and EHR integration.
