Mapping a Digital Health Company's Real Provider Footprint
NPPES, state licensure lookups and CMS Care Compare, read together, test a digital health company's clinician and state claims before the data room opens.
In this note06 · 11 min
A digital health company's provider footprint is a set of claims about clinicians, states and payers, and public registries can test most of those claims before a data room opens. Read together, the NPPES NPI Registry, state licensure lookups and CMS Care Compare separate clinicians who are identified, licensed and visibly billing from clinicians who exist only on a roster. Digital health investors who skip that reconciliation underwrite a slide.
01The Claimed Footprint
Virtual care companies describe scale with three numbers: clinicians on the platform, states served and covered lives. Each number carries a regulatory meaning. A state on a coverage map is a licensing claim, because the clinician must hold authority to practice where the patient sits. Nursing regulation states the principle in so many words: the Nurse Licensure Compact's model statute holds every nurse accountable to the practice laws of "the state in which the patient is located at the time care is rendered" (NLC model legislation, Article I). A clinician count is a capacity claim, and capacity only converts to revenue when identity, licensure and billing enrollment line up for the same person in the same place.
The structure of the company decides where to look. Many care delivery platforms operate through affiliated professional entities under management services agreements, so the clinicians bill under the professional entity's identifiers and the operating company appears in no clinical registry at all (the mechanics are set out under management services organization). The footprint lives in the affiliated practices' records, so the first request is the list of those entities and their organizational identifiers. A company selling regulated software into providers, under the rules described under software as a medical device, has a footprint of customer organizations; the same tools apply with the unit of count changed.
02Three Public Registries
The NPPES NPI Registry
The National Provider System assigns each provider a single National Provider Identifier, maintains the data behind it and deactivates it on dissolution, death or other justifying circumstances (45 CFR 162.408). A covered health care provider must report changes in its required data elements within 30 days of the change (45 CFR 162.410(a)(4)). Individuals carry an NPI-1 and organizations an NPI-2, and each record lists one or more taxonomy codes drawn from the Health Care Provider Taxonomy Code Set, with a license state and number entered beside each code.
Three properties of the registry govern how it is read. First, CMS states on the registry itself that issuance of an NPI "does not ensure or validate" that the provider is licensed or credentialed (NPPES NPI Registry API). Second, the public search covers active records only; deactivations are published separately in a monthly deactivation file (NPPES Downloadable Files). Third, the API returns at most 200 results per request and lets a query skip up to 1,000 records, for a ceiling of 1,200 records over six requests. A query that hits that ceiling has returned a floor, never a total.
State Licensure Lookups
The state board is the authority of record on whether a clinician may practice. Each board publishes a lookup; Vermont, for example, runs a "Find a Professional" search through its Office of Professional Regulation. The lookup is read for license type, status, expiration date and public discipline, and it is read in every state the company claims, since an NPPES license field is only the clinician's own entry.
Two compacts complicate the reading. Under the Nurse Licensure Compact, a multistate license for a registered nurse or licensed practical or vocational nurse is issued by the nurse's primary state of residence and recognized in other party states without additional licenses (NLC, How it Works), so a remote state's own lookup may hold no record for a nurse practicing there lawfully. The compact excludes advanced practice registered nurses, who have a separate APRN Compact (NCSBN, Key Provisions of the Enhanced NLC).
The Interstate Medical Licensure Compact is an expedited pathway to licensure for physicians who practice in several states, and its member boards issue their own licenses (IMLC Commission), so a compact physician should appear in each state's lookup.
CMS Care Compare
The Doctors and Clinicians National Downloadable File behind Medicare Care Compare is built only from Medicare data, meaning PECOS enrollment and claims, with a 12-month claims lookback; each line is unique at the clinician, enrollment record, group and address level (CMS data dictionary). Four fields matter for footprint work: the group PAC ID that ties a clinician to a billing group, the number of clinicians affiliated with that group, the practice state, and a telehealth indicator set when Medicare fee-for-service claims show the clinician offers telehealth. Presence in the file is positive evidence of recent Medicare billing; absence proves nothing about a clinician who treats only commercial, Medicaid or self-pay patients.
One screen sits beside the three registries. The HHS Office of Inspector General maintains the List of Excluded Individuals/Entities (LEIE), searchable online or by file download (OIG Exclusions), and every NPI on a roster is run against it.
03The Signal Map
The table below is the method in reproducible form. Each row names one signal, the public source that carries it, and the reading that turns the raw field into a diligence conclusion.
| Signal | Source | How it is read |
|---|---|---|
| The identifier is real | NPPES lookup by NPI | A valid check digit proves format only. The record must return from the registry; an NPI that does not return is checked against the monthly deactivation file before it is called an error. |
| Person or entity | NPPES enumeration type (NPI-1, NPI-2) | Clinician counts use NPI-1 records only. NPI-2 records identify the affiliated practices that bill, and their authorized official ties them to the company. |
| Clinical scope | NPPES taxonomy codes, primary flag | A taxonomy search matches any of a record's codes. Scope is read from the primary code; a secondary match is counted separately. |
| Where the clinician is based | NPPES primary practice location | The primary location anchors the record. A count by state is taken on the primary location first. |
| Where else the clinician practices | NPPES secondary practice locations | Records whose primary location is out of state but which list an in-state secondary location are the telehealth and multistate cohort, and they are reconciled one by one. |
| License, as claimed | NPPES license state and number per taxonomy | A lead, never proof. A practice state with no matching license entry is a question for the board lookup. |
| License, as granted | State board lookup | Status, type, expiration and discipline, in every state where patients are claimed. An APRN is checked state by state; an NLC nurse is checked in the home state for multistate status. |
| Record freshness | NPPES last-updated date | A record untouched for years predates any recent move or new location. The 30-day update duty means staleness is a compliance fact as well as a data-quality fact. |
| Recent Medicare billing | Care Compare national file, NPI presence | Presence shows Medicare enrollment and claims within the 12-month lookback. Absence is neutral for a company that does not bill Medicare. |
| Who the clinician bills with | Care Compare group PAC ID and group size | The group should resolve to the company's affiliated practice. A clinician billing only through unrelated groups is treated as contracted or part-time capacity and discounted accordingly. |
| Telehealth in fact | Care Compare telehealth indicator | Medicare claims evidence of telehealth delivery. For a virtual-first company, a clinician without the flag billed no Medicare telehealth within the lookback. |
| Medicare practice state | Care Compare practice address rows | Compared with the NPPES state. Divergence identifies clinicians whose billing footprint and registry footprint disagree. |
| Exclusion | OIG exclusion list | Any match on an active roster member stops the analysis until resolved. |
| Completeness of the pull | NPPES API result counts | A count at the 1,200-record ceiling is a floor. The query is narrowed by ZIP prefix or city until each slice returns below the ceiling. |
04The Vermont Psychiatric Nursing Sample
To show how the layers interact, the method was run on one market slice with no company roster involved: individual NPI records carrying a psychiatric or mental health taxonomy and a practice location in Vermont. The NPPES pull was taken through the public API on October 11, 2026, and the Care Compare match used the national file released September 10, 2026 (CMS Provider Data Catalog). Vermont was chosen because the queries used here return below the API ceiling there, so each count is a total. The same query in California returned a full page of 200 records at the deepest offset the API permits, so its 1,200 visible records are a floor.
- Base and reach. 173 records list a Vermont primary practice location. Another 22 list a Vermont secondary location while their primary location sits in one of 14 other states, for 195 records with any Vermont practice location.
- Scope. By primary taxonomy, the 195 records are 163 nurse practitioners, 19 clinical nurse specialists, 12 registered nurses and one advanced practice midwife. Twelve records matched only on a secondary code, so their primary scope is not psychiatric.
- Self-reported licensure. Of the 173 Vermont-based records, 12 list no Vermont license on any taxonomy. Of the 22 out-of-state records, 7 list no Vermont license.
- Freshness. 97 of the 173 Vermont-based records were last updated more than three years before the pull, and 72 more than five years before it.
- Medicare presence. 119 of the 195 NPIs appear in the Care Compare file, across 186 lines: 102 of the Vermont-based records and 17 of the out-of-state records. The other 76 show no Medicare enrollment and claims within the lookback.
- Telehealth and groups. 48 of the 119 carry the telehealth indicator on at least one line. 93 are tied to a group PAC ID, across 51 distinct groups, and 9 are tied to more than one group.
- Billing geography. 23 of the 119 show at least one Medicare practice line outside Vermont. Of the 17 out-of-state clinicians found in the file, only 4 show a Vermont practice line, while 6 carry the telehealth indicator.
Translated to a company's roster of the same shape, the sample produces specific questions. The 22 out-of-state clinicians are the cohort a virtual care company would describe as statewide coverage, and seven of them carry no Vermont license entry in NPPES; each needs a board lookup before the state counts. The 12 Vermont-based records with no Vermont license entry are more likely stale data than unlicensed practice, since half of them appear in Care Compare, but a roster cannot be accepted on that inference. The 76 clinicians with no Medicare presence are neutral for a commercial or Medicaid book and decisive for a company that claims Medicare revenue.
The group fields carry the most diligence value. With 93 clinicians spread across 51 billing groups and 9 of them billing through more than one, a clinician can bill through several organizations at once and so can sit on more than one roster. Where a company counts a clinician who bills Medicare only through an unrelated group, the clinician's hours belong to someone else, and the capacity figure is discounted to the hours the company actually controls.
05Reconciliation Rules
The registries disagree with each other routinely, and the disagreements are where the information is. The rules below set the order of reading and the weight each divergence carries.
- Start from the company's own identifiers. Request the roster with NPIs, the list of affiliated professional entities with their NPI-2s, and the states each clinician serves. A roster without NPIs cannot be reconciled and is treated as unverified capacity.
- Count on primary location, then add the reach cohort. In-state primary records form the base. Out-of-state records with an in-state secondary location are counted only after the license check clears.
- Let the board overrule the registry. NPPES license entries are leads. A board record that shows an active license settles the question in the clinician's favor; a board record that shows nothing, for an APRN or physician, removes the clinician from that state's count.
- Read Medicare presence against the payer mix. Absence from Care Compare matters only to the extent the company bills Medicare. Presence with the telehealth flag corroborates a virtual delivery claim with claims data the company did not prepare.
- Tie billing groups to the company's entities. Each clinician's group PAC ID should resolve to an affiliated practice the company manages. Clinicians who bill only elsewhere are contracted capacity and are valued as such.
- Treat stale records as a finding. A large share of records untouched for years suggests the company's credentialing function does not keep registry data current, which is a compliance gap under the 30-day update rule and a payer enrollment risk.
- Screen every NPI against the exclusion list. The screen is cheap and the consequence of a miss is severe.
The method has limits. NPPES and the Care Compare file are snapshots with their own refresh cycles, so a clinician hired last month may appear in neither. Care Compare sees only Medicare fee-for-service enrollment and claims; commercial, Medicaid managed care and self-pay volume are invisible to it, and those books are verified through payer contracts, remittance data and credentialing files in the data room. Taxonomy codes are self-selected, so a clinician's scope is confirmed against the license type on the board record. The public layer narrows the question to the clinicians and states that need documents; it does not replace the documents.
The result is a footprint stated in verified units: clinicians who are identified, licensed in each claimed state, tied to the company's billing entities and, where Medicare matters, visibly billing. The gap between that figure and the slide is a direct input to capacity, revenue durability and valuation.
06Frequently asked questions
Does an NPI prove that a clinician is licensed?
No. CMS states on the NPI Registry that issuance of an NPI does not ensure or validate licensure or credentialing, and the license fields in a record are supplied by the provider. Licensure is confirmed on the state board's own lookup in each state where the clinician treats patients.
Why would a practicing clinician be missing from Care Compare?
The Doctors and Clinicians file is built only from Medicare enrollment and fee-for-service claims with a 12-month lookback. A clinician who treats commercial, Medicaid or self-pay patients, or who joined recently, can be in active practice and absent from the file.
How does the Nurse Licensure Compact affect verification of psychiatric nurse practitioners?
The Nurse Licensure Compact covers registered nurses and licensed practical or vocational nurses and excludes advanced practice registered nurses, who are addressed by a separate APRN Compact. A psychiatric nurse practitioner's authority to practice is therefore checked against the board records of each state where patients are claimed.
Nothing in this piece is investment, legal, tax or accounting advice, and nothing in it is an offer to sell any security. Fund I is offered only as stated on the Fund I page.
Want to discuss this note or have questions? We would be glad to hear from you.

