Guide · For Providers

How to Choose an NSA Compliance and IDR Vendor

What to compare when choosing a No Surprises Act vendor for out-of-network payment disputes: eligibility screening, fees, deadlines, HIPAA compliance and support.

Teramed Solutions ·

The right No Surprises Act vendor screens claims for eligibility before filing, is clear about exactly what its fee applies to, manages every deadline, handles both federal and state processes, signs a HIPAA business associate agreement, and reports results claim by claim. Most of the difference between vendors comes down to how they answer those six questions.

This guide covers the main types of help available to out-of-network providers, what to compare between them, and the red flags worth walking away from.

The five ways to get disputes handled

OptionWorks well whenWhere it tends to break
In-house billing teamSomeone owns the deadline calendar full timeThe 4-business-day initiation window and batch construction — unforgiving, and not what billers are trained for
Law firmThere’s a real legal dispute: an unpaid award, a coverage fight, a payer patternExpensive per claim for routine filings that are mostly evidence, not argument
Contingency filing serviceYou want it handled end to end with no upfront costDepends entirely on screening discipline and on what the fee applies to
Software platformYou have staff and want control with better toolingThe work doesn’t disappear; it gets better organised
RCM add-onYour billing company already offers itIDR is often a side line rather than a specialism

None of these is wrong. The question is which failure mode you can live with.

What to compare

1. Eligibility screening before filing

Not every out-of-network claim qualifies for federal IDR. A claim may fall under a state surprise-billing law instead, involve a plan type the federal process doesn’t cover, or have missed open negotiation entirely.

Filing ineligible disputes wastes the fees and invites payers to challenge your submissions in bulk. Ask how the vendor screens claims before filing, and what share of its filings are found ineligible. A vendor that can’t answer has probably never measured it.

The criteria are set out in our federal IDR eligibility checklist.

2. What the fee actually applies to

Most full-service vendors work on contingency. The headline percentage matters less than the base it’s applied to:

  • The whole payment, including what the plan already paid before any dispute, or
  • Only the increase the dispute recovered.

On the same claim at the same percentage, those produce very different bills. Get the answer in writing, with a worked example on one of your own claims.

3. Who pays the federal fees

Every federal IDR dispute carries a non-refundable administrative fee for each party, plus the certified IDR entity’s fee, which is refunded to the party that prevails. Ask whether the vendor passes these to you or absorbs them — and specifically what you owe on a dispute that’s lost.

4. Deadline management

The No Surprises Act runs on short, fixed clocks:

  • Open negotiation must be started within 30 business days of the initial payment or denial, and runs for 30 business days.
  • Federal IDR must be initiated within 4 business days after open negotiation ends.
  • A plan must pay an IDR award within 30 calendar days of the determination.

A missed window can’t be recovered. Ask who owns the calendar, and how a claim is tracked from remit to payment. Our federal IDR timeline walks through each stage.

5. Federal and state coverage

Some states run their own surprise-billing dispute processes, and for claims governed by those laws the federal process doesn’t apply. A vendor that only handles federal IDR will either turn those claims away or file them in the wrong forum. See federal vs. state IDR.

6. HIPAA compliance

A vendor handling your remittances, EOBs and claim records is working with protected health information. That makes it a business associate under HIPAA, and it should sign a business associate agreement (BAA) before you send it a single claim.

Ask how claim files are transmitted and stored, and who can access them. If a vendor hesitates about a BAA, stop there.

7. Offer strategy

IDR entities may not consider billed charges, usual and customary charges, or Medicare and Medicaid rates. Offers built on those carry no weight. Ask how the vendor builds an offer, and listen for the permitted factors: patient acuity, service complexity, provider training and experience, and contracting history. Background in our guide to the qualifying payment amount.

8. Reporting and data ownership

You should be able to see every claim’s status and outcome, broken down by payer, and you should keep that data if you leave. Payer-level results tell you where to push in contract negotiations, which is worth something beyond the disputes themselves.

9. Support

Ask who you’ll actually speak to, how quickly they respond, and whether you get a named contact or a ticket queue. When a payer misses an award payment, you want a person who already knows the claim.

Red flags

  • No eligibility screening — “we file everything” usually means paying fees on claims that were never going to qualify.
  • A fee base that’s vague — if the vendor can’t say whether the percentage applies to the whole payment or only the increase, assume the more expensive answer.
  • Reluctance to sign a BAA.
  • A headline win rate with no volume behind it — ask how many disputes were decided, over what period, for which specialties.
  • Offers anchored to billed charges or Medicare multiples — the IDR entity can’t consider either.
  • Lock-in on your data — you should be able to take your claim history with you.

Questions to ask before you sign

  1. How do you screen claims for eligibility, and what share of your filings are found ineligible?
  2. Is your fee a percentage of the whole payment, or only the increase you recover?
  3. Who pays the administrative and IDR entity fees, and what do I owe on a lost dispute?
  4. Who owns the deadline calendar from remit to payment?
  5. Do you handle state processes as well as federal IDR?
  6. Will you sign a HIPAA business associate agreement?
  7. How do you build an offer?
  8. What reporting will I see, and do I keep my data if I leave?
  9. Who is my day-to-day contact?

How Teramed answers them

We’d rather you ask every vendor these questions — including us. Our answers:

  • Eligibility screening. Every claim goes through a pre-filing eligibility check before anything is filed.
  • Fees. A percentage of the increase we recover above the plan’s original payment — never of what you’d already been paid. Nothing upfront, no retainer, no minimum. See pricing.
  • Federal fees. We absorb the administrative and IDR entity fees. If a dispute is lost, you owe nothing.
  • Deadlines. Your front desk forwards the remit. We own open negotiation, filing and payment follow-up.
  • Federal and state. We determine which process applies to each claim and handle both.
  • HIPAA. We sign a business associate agreement before receiving any claims data.

If you’d like to see how this works on your own claims, send us a sample of recent out-of-network remits and we’ll tell you which are IDR-eligible. Get in touch.

This guide is general information, not legal advice. Confirm current requirements at cms.gov/nosurprises.

Common questions

What should I look for in a No Surprises Act vendor?
Look for a vendor that screens claims for IDR eligibility before filing, explains exactly what its fee is a percentage of, covers or clearly allocates the federal IDR fees, manages open negotiation and filing deadlines, handles both federal and state processes, signs a HIPAA business associate agreement, and reports results by claim and payer.
How much do IDR filing services charge?
Most full-service IDR vendors work on contingency, taking a percentage of what they recover. The percentage matters less than what it applies to: the whole payment, or only the increase over what the plan originally paid. Also ask who pays the federal administrative and IDR entity fees, and what you owe if a dispute is lost.
Should I use a law firm for federal IDR?
Usually not for routine filings. Federal IDR is decided by certified IDR entities weighing clinical and market evidence, not legal argument, so per-claim legal fees rarely make sense. A law firm earns its cost when there is a genuine legal dispute, such as an unpaid award or a payer pattern worth litigating.
Does an IDR vendor need a business associate agreement?
Yes. A vendor handling remittances, EOBs and claim records on a provider's behalf is working with protected health information, which makes it a business associate under HIPAA. It should sign a business associate agreement before receiving any claims data.
Who pays the federal IDR fees when you use a vendor?
Each party to a federal IDR dispute pays a non-refundable administrative fee and the certified IDR entity's fee, with the entity fee refunded to the party that prevails. Some vendors pass these to the provider; others absorb them. Ask before signing, and ask specifically what happens to the fees on a lost dispute.
What is the difference between a contingency fee on the full award and on the increase?
A fee on the full award applies to the entire payment, including the amount the plan had already paid before the dispute. A fee on the increase applies only to the additional money the dispute recovered. On the same claim and the same percentage, the second costs the provider substantially less.

Rather Not Track This Yourself?

Forward us your out-of-network remits. We'll check eligibility, run open negotiation and file IDR, and you pay nothing unless we recover.