UPIC Audits When a Third-Party Billing Company Prepared the Claims

A Unified Program Integrity Contractor (UPIC) document request does not ask who typed the claim into the billing system. It asks the provider whose National Provider Identifier sits on the claim to produce the medical record, the billing detail, and an explanation for every flagged line, and that deadline does not move because the practice outsourced billing to an outside company. A practice that routes claims through a third-party biller is still the party a UPIC holds accountable, and the first days of the audit are the window to gather what the vendor actually built the claims from.

The Provider Remains the Party of Record

Medicare payment to a billing agent is made in the name of the provider under 42 CFR Section 424.73 for providers and Section 424.80 for suppliers, and the agent may act only on the provider's behalf, under an agency agreement the provider can modify or revoke at any time. The billing company's internal coding rationale and the templates it used to generate a claim do not change who certified that claim to Medicare. A UPIC audit tests the practice's own clinical documentation against the codes billed, not the vendor's internal workflow, and a gap between the two can turn a sample of claims into an extrapolated recoupment demand across the full audit period.

Recovering the Billing Company's Files and Coding Rationale

The practice's own chart rarely shows why a claim was coded the way it was billed. Worksheets, coding queries, claim-scrubber edit reports, and correspondence between the biller and the practice about a specific date of service can explain a coding choice the chart alone does not, and those files should be requested from the vendor the same day a UPIC records request arrives. A signature log tying specific billing staff to a specific date matters for a vendor relationship the same way it matters inside a practice: a reviewer who cannot tell who made a coding decision treats the underlying claim as unsupported. Document Preservation When a UPIC Audit Opens covers the broader preservation steps that apply once a request like this arrives.

Contract Terms That Shape the Response

Billing services agreements vary, and no single clause appears in every one. OIG's Compliance Program Guidance for Third-Party Medical Billing Companies recommends the contract enumerate which compliance functions are the biller's sole responsibility, which are the provider's, and which are shared, and that enumeration often decides how quickly a practice gets its own claims data back once an audit opens. Categories worth reviewing in an existing agreement include the vendor's obligation to cooperate with a government inquiry, its obligation to produce underlying files on request, and how records return if the relationship ends mid-audit. None of these terms is guaranteed to appear in a given contract; a practice should not assume an indemnity or records-ownership provision exists until counsel has read the agreement.

When the Billing Company Faces Its Own Scrutiny

A UPIC that requests records from the billing company directly, not only from the practice, is treating the vendor as a potential subject rather than a records custodian. A vendor under its own review may be slower to cooperate and may not be a reliable source for the worksheets a practice needs. Routing those requests through counsel, rather than relying on the vendor's compliance staff, keeps the practice's response on its own timeline.

Explaining a Vendor's Error Without Conceding Intent

A coding error the vendor made is still a claim the provider submitted, and describing it accurately matters more than describing it defensively. An explanation that traces a wrong code to a specific vendor process or a misapplied edit rule is a factual account a reviewer can evaluate. An explanation that reads as an admission that the practice knew a code was wrong and billed it anyway invites the scrutiny for intent that can turn an overpayment finding into a fraud referral and, eventually, a target letter. Counsel experienced in UPIC responses drafts that explanation before it reaches the contractor.

The provider whose National Provider Identifier is on the claim is the party a UPIC holds accountable, regardless of which company built the claim.

Why Early Legal Counsel Is Critical

It is critical that providers promptly retain experienced healthcare defense counsel upon receiving a UPIC document request, audit notice, or other government inquiry, including one that implicates a third-party billing vendor. Early legal intervention can protect the provider's rights, shape how the vendor's records and explanations are gathered and presented, avoid inadvertent admissions about intent, and allow counsel to communicate with the contractor on the provider's behalf. Delaying representation can narrow the options available once the contractor has already formed a view of the claims.

How Health Law Alliance Can Help

Health Law Alliance has handled 5,000+ matters across healthcare regulatory and audit defense over 25+ years, including UPIC audits that turn on claims a third-party billing company prepared. If your practice has received a UPIC document request and an outside biller was involved in the claims at issue, contact Health Law Alliance's UPIC audit defense attorneys for a free, confidential consultation before the response window runs.