What should a medical billing contract include?

What are the essential clauses in a medical billing contract?

A medical billing contract needs twelve clauses: scope, fee basis, per-item fees, performance standards, reporting, a business associate agreement, compliance duties, payment flow, liability and insurance, term and renewal, termination and runout, and data ownership. Most vendor drafts cover the first two in detail and leave the rest thin, which is where practices lose money.

The table below lists each clause, the minimum wording to look for and the risk when it is missing. For full-service medical billing, every row applies.

Is a medical billing service agreement the same as a BAA?

No. The medical billing service agreement sets the commercial terms: services, fees, standards and exit. The business associate agreement sets how the vendor may use and protect patient data. HIPAA requires specific business associate terms, usually signed as a separate BAA, and the service agreement should refer to it and say that a BAA breach is grounds to terminate the whole contract.

Can you use a medical billing contract template?

A template is a starting checklist, not a finished contract. The free templates that rank for this topic leave the fee base as a blank, skip the runout period, and describe HIPAA in one sentence with no BAA attached. If the billing company sends its own paper, compare it clause by clause against the table above and mark every row it does not cover.

How should a medical billing contract define the fee?

The contract should state the percentage and the base it applies to, in one sentence, with exclusions listed. In our Practice Manager Survey 2026, 44% could not name the fee basis in their current billing contract. That gap is expensive because the same rate on a different base produces a very different bill.

Write the definition of collections into the contract. A practice-friendly version reads: payments received from payers on claims the company submitted or worked, net of refunds and recoupments. Then list what is excluded: patient payments taken at the front desk, capitation, incentive payments such as MIPS adjustments, grant money and refunds of overpayments. Full-service billing typically runs 3% to 6% of collections, and our outsourced revenue cycle management cost breakdown covers how rates are set. The contract’s job is to fix what that rate touches.

Worked example: one rate, three bills

Take a 3-provider practice collecting $90,000 a month: $76,500 from payers and $13,500 from patients. At a 5% rate on payer payments only, the fee is $3,825 a month, or $45,900 a year. If the contract applies 5% to all deposits, the fee is $4,500 a month, or $54,000 a year. Add $25 per appeal on 20 appeals a month and $1 per statement on 400 statements a month, and the extras cost $900 a month, bringing the total to $64,800 a year.

The same 5% rate produces an annual fee of $45,900, $54,000 or $64,800 depending on the fee base, a spread of $18,900 or 41%.

Runout is the second fee trap. If you leave with $120,000 in open claims and the old contract charges 5% on everything collected during a 120-day wind-down, that is $6,000. If the new company also charges its rate on the same deposits, you pay $6,000 twice. The contract should say which company earns the fee on each claim after the switch date.

Is a percentage-of-collections fee allowed under Medicare rules?

Yes, as long as Medicare pays the practice, not the billing company. Under 42 CFR 424.73 and 424.80, Medicare may pay a billing agent directly only if the agent’s pay is not related to the dollars billed or collected. A percentage fee is therefore acceptable when every payment goes to an account in the practice’s name and the vendor invoices the practice separately.

Put that in the contract: payers deposit to the practice’s account, the vendor never endorses checks or controls the account, and the practice can change payment instructions at any time. The OIG’s compliance guidance for third-party billing companies adds that percentage arrangements may raise the risk of upcoding, so a percentage contract should also include regular coding audits.

State law can be stricter. New York Education Law section 6530(19) treats paying for personnel services with a percentage of practice income as professional misconduct. Ask a health care attorney in your state before signing a percentage deal.

What performance standards and reports belong in the contract?

The contract should set numeric targets for four metrics, a report that proves them every month, and a remedy when they are missed. Across 38 client practices, clean claim rate rose from 89.6% to 97.3% in the first 90 days, and first-pass denial rate fell from 14.2% to 6.1% within 90 days of onboarding. Those are reasonable targets to write down; the exact figures depend on your specialty and payer mix.

• Clean claim rate of 95% or higher, measured at the clearinghouse
• First-pass denial rate below 8%
• Days in AR below 40, with no more than 15% of AR past 90 days
• Charges entered within 2 business days of the visit

The monthly report pack should include AR ageing by payer, denials by reason code with dollars, appeals filed and won, underpayments against contracted rates, write-offs with who approved them, and collections against charges. In our billing reviews, 19% of denied claims were never reworked or appealed, and underpayments against contracted rates appeared on 7.8% of paid claims. A contract that does not require a denial and underpayment report lets both problems stay invisible.

Missing reporting is also why relationships end: 52% of practices that switched billing vendors cited missing denial reporting as the main reason.

Remedies can be simple: a fee credit for each month a target is missed, and a right to terminate without penalty after two consecutive misses. If the vendor also runs denial management and AR recovery, name the appeal levels it will pursue, since some companies stop after the first.

What should the business associate agreement cover?

The BAA must meet 45 CFR 164.504(e): permitted uses of patient data, safeguards under the Security Rule, reporting of any improper use or breach, the same terms flowed down to subcontractors, support for patient access and amendment requests, HHS access to the vendor’s records, return or destruction of data at the end, and your right to terminate for a material breach.

Add four terms most drafts leave out:

• Breach notice timing. HIPAA allows a business associate as long as 60 calendar days after discovery. Ask for 5 to 10 business days in the contract.
• Offshore and subcontractor disclosure. A named list of every location and subcontractor that touches PHI, with notice before any change.
• Cyber insurance. A stated minimum, with the practice named as an additional insured where possible.
• Document retention. HIPAA documentation must be kept for 6 years, so the vendor’s records duty should outlast the contract.

Our guide to evaluating a billing company for compliance covers the audit reports and screening logs to request before you sign. The contract simply makes those items obligations instead of promises.

What happens to your claims and data when the contract ends?

A good contract answers four exit questions in writing: how much notice you give, who works claims already in flight, what the fee is on those claims, and when your data comes back and in what format. If any of these is missing, you negotiate them at the worst possible time.

What a medical billing contract sample from a public agreement shows

Public agencies publish their billing contracts, and they show real market terms. One 2024 ambulance billing agreement in Knoxville, Iowa sets a fee of 5.5% of monthly net collections, a 3-year term that renews automatically for 2-year terms, and a 90-day notice requirement before the term ends. After termination, the vendor keeps working existing AR for 120 days, then delivers a full AR list in an industry standard electronic format, but only once all undisputed fees are paid. A 2024 agreement in Webster, New York renews for 1 year at a time and requires notice no less than 90 and no more than 120 days before expiration, which means missing a 30-day window locks in another year.

Exit terms to ask for

• A 12-month initial term or shorter, then month to month with 30 to 60 days notice
• Termination without penalty for missed performance targets or a BAA breach
• A runout period of 60 to 90 days at the same rate, on claims submitted before the switch date only
• Data delivered within 15 business days in CSV or native export: AR detail, claim history, ERAs, denial and appeal notes, patient balances and payer correspondence
• Data release that does not depend on settling disputed invoices
• Clearinghouse, ERA and EFT enrollments held in the practice’s name, not the vendor’s

Exit terms matter most when AR is aged. The median practice had $118,000 in AR older than 120 days when we started, and we recovered 61% of the dollar value of claims aged 90 to 180 days that practices had stopped working. That money is only recoverable if the next team can see it.

How do you review a medical billing contract, step by step?

Review the contract in seven steps before signing, and do it with your own numbers in front of you.

1. Pull 12 months of collections by source so you can price every fee base option.
2. Rewrite the scope as a task list and check each task against the draft.
3. Recalculate the annual fee under the draft’s exact definition of collections, including every per-item fee.
4. Insert the four performance targets, the report pack and the remedy.
5. Check the BAA against 45 CFR 164.504(e) and add breach timing, offshore disclosure and insurance.
6. Mark the renewal notice date on your calendar and shorten it if it exceeds 60 days.
7. Write the exit plan: runout period, runout rate, data list, delivery format and deadline.

Our checklist on how to choose a medical billing company covers the vendor questions that come before the contract, and the medical billing companies directory lists options by state.

What mistakes do practices make with medical billing contracts?

The most common mistake is negotiating the rate and signing everything else as drafted. When we read billing contracts during 410 practice billing reviews, the gaps followed a pattern.

72% of contracts reviewed set no KPI targets, 61% had no fee rule for runout claims, 54% set no deadline for returning practice data, 47% did not require a denial report, and 38% auto-renewed with 90 days notice or more.

Other mistakes we see in revenue cycle management contracts:

• Letting the vendor write off balances without approval limits. Set a dollar threshold above which the practice signs off.
• No overpayment clause. Medicare requires overpayments to be reported and returned within 60 days of identification, a clock that can pause for as long as 180 days during a timely, good-faith investigation since January 2025, so the vendor must flag them quickly.
• Accepting a liability cap of one to three months of fees when a payer recoupment from a coding pattern can be far larger.
• Signing an exclusivity clause that blocks you from bringing in a second team for old AR.
• Leaving timely filing risk unassigned. Medicare allows 1 calendar year from the date of service, and many commercial plans allow far less; the contract should say who absorbs claims lost to missed deadlines.

If you want a second read of the contract you have now, bring it to a free billing review with your AR ageing report.

Which contract terms favor the practice and which favor the billing company?

Most clauses have a vendor-friendly and a practice-friendly version. Use this table to mark each clause in a draft before you negotiate.

Dental

Dental contracts should say whether the vendor bills medical plans as well as dental PPOs, since medical cross-coding opportunities were missed in 64% of dental practices reviewed. Require an underpayment report against each PPO fee schedule: 12% of paid PPO dental claims came in below the contracted fee. Scope should include narratives and X-ray attachments for restorative claims, because dental practices wrote off a median $23,400 a year in restorative claims denied for missing narratives or X-rays. Name who submits pre-treatment estimates on crowns and implants.

Physical therapy

A physical therapy billing contract should assign responsibility for 8-minute rule unit counts, KX modifier tracking and plan of care certifications. In our claim audit, the KX modifier was missing on 21% of Medicare therapy claims past the threshold, and 8-minute rule unit errors appeared on 9% of therapy claims. Specify who tracks visit limits and authorizations per episode, and who rechecks coverage mid-episode, since 33% of therapy episodes had a coverage change mid-episode that was not caught.

Behavioral health

For therapist and counseling billing, the contract should cover behavioral health carve-outs, time-based code review and credentialing. Claims sent to the medical plan instead of the behavioral health carve-out caused 12% of behavioral health denials. Substance use disorder programs need BAA terms that also address 42 CFR Part 2. Put credentialing in scope with timelines, because new clinicians waited a median 96 days to go in-network with commercial payers.

Ambulance

Ambulance contracts are often long, exclusive and ambulance-specific, like the public Knoxville agreement. Require the vendor to chase Physician Certification Statements, which were missing or unsigned on 18% of non-emergency transports, and to report AR past 90 days by payer: ambulance agencies carried 37% of AR past 90 days. In our King-American Ambulance case study, days in AR went from 71 to 38 once follow-up had clear ownership.

Primary care

Primary care billing contracts should name chronic care management, annual wellness visits and preventive-visit patient calls in scope. Chronic care management time went uncaptured for 58% of eligible patients, and problem-oriented visits billed with an annual wellness visit lacked modifier 25 on 12% of claims. Set the days in AR target near the specialty norm: primary care practices carried a median 36 days in AR.