The short answer
You need an EHR that does four things well: document time-based psychotherapy codes (90832, 90834, 90837) with start and stop times, track prior authorizations and session limits across multiple payers, submit claims electronically within your state's timely filing window (which ranges from 90 days in New York to 95 days in Texas), and handle 42 CFR Part 2 consent tracking if you treat substance use disorders.
The question is not which brand. The question is whether the system prevents the errors that cause most Medicaid denials in behavioral health: missing eligibility verification, expired prior authorizations, incorrect time documentation, and consent gaps for Part 2 records.
Why this matters more in behavioral health than other specialties
Behavioral health practices manually track prior authorizations, session limits, and payer-specific requirements across multiple payers, according to CMS documentation guidance. Authorizations expire mid-treatment, session limits run out without warning, and each payer enforces different rules. Mistakes mean denials.
A group practice billing Medicaid, two commercial carriers, and a carved-out behavioral health organization could face four different documentation standards for the same 45-minute session. What satisfies one payer gets denied by another.
Claims are rejected due to missing or inaccurate client information, such as names, birthdates, Medicaid ID numbers, or insurance details. Even a small typographical error can trigger a rejection.
Federal requirements that apply everywhere
Federal and state laws require practitioners to maintain records necessary to "fully disclose the extent of the services" furnished to beneficiaries and support claims billed. Documented services must "be complete, concise, and accurate, including the face-to-face time spent with the patient."
CMS warns specifically about EHR features that create compliance problems:
- Turn off auto-fill and keyword features
- Ensure all notes have a date and time stamp, even when updating patient history
- Ensure any edits to the patient's record are initialed or identified with the person making the edit
- Watch for "cloned" notes that appear identical for different visits
Psychotherapy codes are time-based: 90832 covers 16-37 minutes, 90834 covers 38-52 minutes, 90837 covers 53+ minutes. Add evaluation and management codes for medication management, add-on codes for crisis services, and telehealth modifiers, each with different documentation requirements. One wrong time entry and the claim gets rejected.
42 CFR Part 2 if you treat substance use disorders
A final rule revising 42 CFR Part 2 was issued on February 8, 2024, and published in the Federal Register on February 16, 2024. The rule went into effect on April 16, 2024, with a two-year implementation period. Enforcement for the updated Part 2 rules started on February 16, 2026.
As of the 2024 final rule (effective April 16, 2024, compliance required February 16, 2026), 42 CFR Part 2 allows patients to sign a single written consent for all future uses and disclosures of SUD records for treatment, payment, and healthcare operations. This consent can describe recipients generally and remains valid until revoked. A valid Part 2 consent form must contain ten specific elements, including the patient's name, the purpose of disclosure, an expiration date, and a statement that the information may not be re-disclosed.
Your EHR must track which patients have SUD records, which consents are on file, when they expire, and block disclosures that lack valid consent.
Timely filing deadlines by state
Medicaid timely filing deadlines determine how long you have to submit a claim after the date of service. Miss the deadline and the claim is denied with no appeal.
| State | Medicaid FFS Deadline | Managed Care | Notes | |-------|----------------------|--------------|-------| | California | 6 months | Varies by plan | Medi-Cal's six-month limit for original claims | | Texas | 95 days (general) | Varies by plan | Retroactive eligibility claims must be filed within 95 days of add date and 365 days of service date | | New York | 90 days | Often 90 days | MCOs often enforce 90-day windows for behavioral health |
Some Medicaid Managed Care Organizations apply 90-day windows, particularly for behavioral health and specialized networks. The MCO contract window often runs shorter than the state fee-for-service deadline.
Medicare allows 12 months from the date of service for comparison.
What your EHR must do with claims
Eligibility verification on the day of service. Verify Medicaid eligibility on the day of each appointment. Establish a system for eligibility verification to review internally and alert your team of any status changes before treatment occurs.
Prior authorization tracking. A patient is approved for 10 outpatient therapy sessions but continues treatment without renewing authorization. The claim for the 11th session (CPT 90834) is denied for lack of prior authorization. Many behavioral health services require prior authorization from Medicaid before treatment begins.
Internal submission cutoffs. Set internal submission cutoffs that create a buffer before the actual deadline.
Electronic claims submission. Your EHR should connect to your state Medicaid clearinghouse and managed care plan portals without manual file exports.
Denial code analysis. Resolving claim denials involves detailed analysis of CARC (Claim Adjustment Reason Codes) and RARC (Remittance Advice Remark Codes) codes. These codes offer insights into the specific reasons for a claim's rejection, paving the way for identifying the root cause of denial.
State-specific documentation requirements
California
California Welfare & Institutions Code section 14184.402 provides DHCS with authority to implement, interpret, and make specific medical necessity criteria for Specialty Mental Health Services benefits.
The updated CalAIM documentation requirements better align with CMS national coding standards and physical health care documentation practices.
The Department of Health Care Services does not regulate how providers or Medi-Cal Behavioral Health Delivery Systems organize their EHRs (or written records) so long as the documentation requirements outlined in BHIN 23-068 are met. This gives you flexibility in EHR choice as long as you meet the content requirements.
Texas
Claims for a client who receives retroactive eligibility must be submitted within 95 days of the date that the client's eligibility was added to the TMHP eligibility file and within 365 days of the date of service.
Claims must be received within 95 days from each date of service for most providers in accordance with 1 TAC §354.1003. The 365-day timeframe applies only to specific exceptions: claims with retroactive eligibility (must be within 95 days of add date AND within 365 days of service), SHARS program claims, and BCVDDP claims.
If your contract requires CMBHS, your EHR must either integrate with it or you maintain two systems.
New York
New York's billing runs through operating certificates and APG (Ambulatory Patient Group) rate codes. OMH Article 31 clinics bill mental health clinic services; OASAS Article 32 programs bill SUD services. Billing outside the operating certificate's scope is a denial that no amount of coding cleanup fixes.
Clinic payment runs through APGs: rate codes plus CPT/HCPCS procedure codes feed a grouper that calculates payment. The trap is that APG claims often don't deny when miscoded—they underpay.
New York's billing manual outlines the claiming requirements necessary to ensure proper behavioral health claims submission with respect to Mainstream Medicaid Managed Care Plans, Health and Recovery Plans (HARPs), and HIV-Special Needs Plans.
For behavioral health facilities, the eMedNY enrollment process requires submission of OASAS or OMH operating certificates in addition to standard provider enrollment documentation.
What people commonly get wrong
Assuming HIPAA consent covers Part 2 records. The problem: assuming treatment, payment, and operations disclosures need no consent. The solution: always verify consent for Part 2 records, even with the 2024 changes. HIPAA and Part 2 are separate rules with separate consent requirements.
Incomplete time documentation. For time-based psychotherapy codes, documenting start and stop times or total duration is especially important. Inconsistent or incomplete notes are one of the leading causes of Medicare denials. The same applies to Medicaid.
Not tracking coordination of benefits. Sometimes patients have more than one insurance plan, like through an employer and Medicaid. If the claims aren't submitted to the correct payer in the right order, they'll almost certainly get denied.
Relying on the state deadline instead of setting internal cutoffs. Behavioral health clinicians spend significant time on documentation, often completing notes after hours instead of during scheduled work time. By the time the note is signed, the session was three weeks ago. By the time billing reviews it, another week has passed. The 90-day clock doesn't pause for your workflow.
Copy-paste notes across sessions. CMS explicitly warns about "cloned" notes that appear identical for different visits. These may not reflect the uniqueness of the encounter or the patient's description. Post-payment reviews flag identical language as potential fraud.
Accreditation considerations
SAMHSA encourages states to require accreditation by an independent accrediting body but does not designate CARF as exclusive. Multiple accreditors offer CCBHC accreditation including CARF, Joint Commission, COA, and NCQA. The Joint Commission carries CMS deeming authority, making it the standard choice for organizations seeking to substitute a Joint Commission survey for CMS's own Medicare or Medicaid certification inspection.
Both require triennial on-site surveys.
CARF must receive the application at least three months before the requested survey date.
Your EHR must generate the reports your accreditor requires: utilization data, outcome measures, care plan documentation, and audit trails. Ask the vendor which accreditation reports are built in and which require custom report writing.
What to ask an EHR vendor before you sign
- Does the system timestamp start and stop times for psychotherapy sessions automatically, or does the clinician enter them manually?
- How does the system alert staff when a prior authorization is about to expire or a session limit is reached?
- Which state Medicaid clearinghouses do you connect to directly?
- Does the system track 42 CFR Part 2 consents separately from HIPAA authorizations?
- Can I set internal claim submission deadlines that are shorter than payer deadlines?
- What happens when a patient's Medicaid eligibility terminates between scheduling and the appointment?
- Does the system prevent cloned notes or flag identical language across sessions?
- How do I run a denial report grouped by CARC code?
- Which accreditation reports (CARF or Joint Commission) are built in?
- What is included in the base price, and what costs extra per user, per claim, or per month?
If the vendor cannot answer these questions with specific examples from their software, keep looking.
AgenciesForge runs charting, scheduling, and billing on one record with an included clearinghouse and no per-seat fees.