UPIC Audit Defense Attorneys

A UPIC (Unified Program Integrity Contractor) is a CMS contractor responsible for Medicare and Medicaid program integrity work in a specific geographic jurisdiction. CMS established the UPIC program in 2016 to consolidate work that was previously split between Zone Program Integrity Contractors (ZPICs) and Program Safeguard Contractors (PSCs). UPICs are different from Recovery Audit Contractors (RACs), which conduct postpayment review of paid claims for overpayment recovery on a contingency basis; from Medicare Administrative Contractors (MACs), which adjudicate claims and process payments; and from Supplemental Medical Review Contractors (SMRCs), which conduct medical review of specific topics on CMS direction. The procedural framework, the appeal track, and the realistic exposure differ across all four contractor types.

SafeGuard Services covers the Northeast and Southeast regions, while Covent Bridge is the Midwest Region UPIC. Qlarant has nationwide authority over FWA analytics for Medicare Part C and Part D through the National Benefit Integrity Medicare Drug Integrity Contract (NBI MEDIC) and the Investigations Medicare Integrity Contract (I-MEDIC). The audit notice itself identifies the contractor, but providers often miss the contractor identification because the notice arrives on CMS letterhead with the contractor name in smaller text. The contractor matters because each UPIC has somewhat different document request conventions, different statistical methodologies, and a different working relationship with the local U.S. Attorney's office. Defense counsel that has worked with the specific contractor on prior matters knows the procedural patterns that an unfamiliar counsel will not.

Prepayment review means the UPIC reviews each claim before CMS pays it. The provider continues to submit claims as usual, but cash flow stops while each claim sits in review (typically 60 to 180 days per claim). Multi-year prepayment review is a possible posture under recent CMS frameworks. Postpayment review means the UPIC reviews claims that have already been paid and demands recoupment of any claims found non-compliant. Postpayment review typically uses statistical extrapolation: the UPIC reviews a sample (often 30 to 50 claims), calculates an error rate, and extrapolates the error rate across the full claim population for the audit window. The procedural defenses, the cash flow consequences, and the ALJ appeal posture differ materially between the two.

Statistical extrapolation challenges focus on whether the UPIC's methodology meets the CMS Program Integrity Manual standards and the relevant federal court precedent. Common defense angles include sample frame defects (the sample is drawn from a population that does not match the audit scope), sample size deficiencies (the sample is too small to support extrapolation at the cited confidence interval), RAT-STATS application errors (the contractor's use of the CMS-mandated statistical software), and Cochran formula objections (the formula used to calculate the point estimate or the lower confidence bound). A successful extrapolation challenge can reduce a multi-million dollar recoupment demand to the actual sample-claim amount, which is typically a small fraction of the extrapolated number. Statistical defense requires either an in-house defense expert or a retained statistician with healthcare claims experience.

The Medicare appeal track has five levels with strict statutory deadlines. Level 1 is the redetermination request to the MAC, due within 120 days of the initial determination. Level 2 is the reconsideration request to a Qualified Independent Contractor (QIC), due within 180 days of the redetermination. Level 3 is the Administrative Law Judge (ALJ) hearing, due within 60 days of the QIC reconsideration; the ALJ hearing has historically had a multi-year backlog, though CMS has worked to reduce it. Level 4 is the Medicare Appeals Council review. Level 5 is federal district court review under 42 USC § 405(g). Missing any deadline waives the appeal at that level and forecloses subsequent levels. The redetermination and reconsideration are the most consequential procedural steps because the record built at those levels is the record the ALJ will review.

UPICs refer matters to HHS-OIG, the DOJ Civil Division, and the local U.S. Attorney's office when the audit findings produce evidence of intent rather than billing errors. Common referral patterns include: documented patterns of false certifications, evidence of services billed but not provided, kickback or anti-kickback indicators, suspected upcoding of E/M or procedure codes for financial gain, and any pattern that the UPIC investigator believes supports a False Claims Act theory. The civil FCA referral runs through the DOJ Civil Division (the matter may surface as a Civil Investigative Demand). The criminal referral runs through the local U.S. Attorney or DOJ Fraud Section (the matter may surface as a federal grand jury subpoena or a target letter). Coordinating the UPIC defense with parallel FCA and criminal defense from the first contact is essential because evidence developed in one track is admissible in the others.

Before responding to the document request. The UPIC document request letter is the first procedural opportunity in the audit, and the production response shapes everything that follows: which documents the UPIC reviews, what claim universe the sample is drawn from, what the realistic findings range will be, and whether the UPIC sees patterns that escalate to criminal referral. A document production made without privileged counsel can produce material that becomes evidence in subsequent civil and criminal litigation, and the procedural defenses available later (extrapolation challenges, ALJ appeal arguments) can be foreclosed by an inadequate or over-inclusive production. The earlier counsel is engaged, the more leverage the defense has across the audit, the appeal, and any parallel matters.