Provider attestations or portal data are allowed in specific scenarios and when all requirements are met.
Organizations may obtain information from providers on services that were rendered via attestation forms or provider portal interfaces. These are considered supplemental sources, and must be substantiated with proof-of-service documentation (e.g., original medical record).
In particular, organizations may not use provider attestations or data entered in an electronic platform as evidence that a service was rendered (i.e., as proof of service). This includes attestation forms filed in the member’s record, which are not primary sources for the information.
HEDIS MY 2026