What software DD/IDD providers use
DD/IDD waiver providers typically use specialized platforms like Therap, Sandata, Statewise, or iCareManager to handle MUI reporting, person-centered service plans, DSP scheduling, and EVV compliance. No state Medicaid agency requires a specific software vendor, but the complexity of overlapping federal and state reporting rules pushes most agencies toward tools built specifically for the IDD space.
The challenge is not software availability. It is that MUI reporting, person-centered planning, EVV, and scheduling each carry separate compliance deadlines, different penalties, and state-specific rules that often conflict in timing or format.
Why providers need separate systems for these four tasks
MUI reporting, person-centered service plans, EVV, and DSP scheduling are regulated by different agencies, under different timelines, with different consequences for non-compliance.
MUI reporting is governed by state-specific incident management rules. Ohio requires reporting immediately or within 24 hours depending on the type of MUI, but some specific MUIs (abuse, neglect, misappropriation, exploitation, or suspicious death) must be reported within 4 hours. Providers must submit an annual MUI analysis no later than February 28. Pennsylvania requires incidents to be reported within 24 hours, with 48 hours to enter the initial information into EIM (excluding weekends and holidays), and 30 days to complete the investigation and resolution. Florida distinguishes between Critical Incidents, which must be reported within 4 hours, and Reportable Incidents, which must be reported within 1 business day.
Person-centered service plans are federally mandated under 42 CFR § 441.301(c), which requires review at least every 12 months, when circumstances change, or at the individual's request. Federal funds are not approved for HCBS waiver services provided without a person-centered plan. The HCBS Settings Rule required compliance with person-centered planning standards by March 17, 2023.
EVV is a federal mandate under Section 12006(a) of the 21st Century Cures Act. States were required to implement EVV for personal care services by January 1, 2020, and for home health services by January 1, 2023. States that fail to comply face Federal Medical Assistance Percentage (FMAP) reductions: 0.25 percentage points in 2020, 0.5 in 2021, 0.75 in 2022, and 1 percentage point in 2023 and thereafter, unless the state demonstrates both a good faith effort and unavoidable delays.
DSP scheduling does not have a specific federal regulation, but it must align with EVV visit capture, individual service authorization limits, and the person-centered service plan. If a DSP clocks in outside the authorized service window, the visit may be rejected. If the schedule does not match the person-centered plan, the state may deem the service unauthorized.
Many providers use one platform for EVV, another for MUI intake and investigation tracking, a third for person-centered plan documentation, and spreadsheets or separate scheduling tools for DSP assignments.
MUI reporting requirements by state
MUI reporting deadlines and processes vary significantly by state. Here is how the rules differ in three states with detailed public guidance:
| State | Initial Reporting Deadline | System Entry Deadline | Investigation Deadline | Annual Reporting | |-------|---------------------------|----------------------|----------------------|------------------| | Ohio | Immediately or within 24 hours (depending on type) | Not specified | Not specified | MUI analysis due Feb 28 | | Pennsylvania | 24 hours of discovery | 48 hours to enter into EIM | 30 days to investigate and close | Not specified | | Florida | 4 hours (Critical) or 1 business day (Reportable) | Not specified | Not specified | Not specified |
Ohio operates an MUI reporting hotline at 1-800-617-6733 and updated its MUI rule effective July 1, 2025. Pennsylvania uses the Enterprise Incident Management (EIM) system for tracking. Florida defines incident categories under Rule 65G-2, Florida Administrative Code.
Providers serving individuals in multiple states must configure their systems to route incidents to different reporting portals, apply different timelines, and produce different investigation documentation formats.
Person-centered service plan rules
Person-centered service plans are governed by a uniform federal standard, but state agencies add their own documentation and review requirements.
The federal rule at 42 CFR § 441.301(c) for HCBS waivers requires that every person-centered service plan be reviewed and revised at least every 12 months, when the individual's circumstances or needs change significantly, and at the individual's request. The plan must be based on a reassessment of functional need as required under 42 CFR § 441.725(c).
The person-centered planning process, required under the HCBS Settings Rule effective March 17, 2014, mandates that the individual directs the planning process and that the plan reflects their own preferences and goals.
States add specific requirements. New York describes person-centered planning requirements for entities certified by the Office for People With Developmental Disabilities (OPWDD) in 14 NYCRR Part 636. Montana requires that the Community First Choice/Personal Assistance Services (CFC/PAS) person-centered planning process be formally completed by the Plan Facilitator on an annual basis.
The practical challenge is that person-centered plans must align with Medicaid authorization limits, individual budgets, and the services EVV systems are configured to capture. If the plan includes a service code the EVV system does not recognize, the visit may be denied even if the service was delivered.
EVV compliance and FMAP penalties
EVV became a federal mandate on January 1, 2020 for personal care services and January 1, 2023 for home health services. Illinois, for example, mandated EVV for the DDD HCBS Waiver system effective September 1, 2023.
States that do not comply face FMAP reductions on a published penalty schedule:
- 2020: 0.25 percentage points
- 2021: 0.5 percentage points
- 2022: 0.75 percentage points
- 2023 and thereafter: 1 percentage point
The reduction applies unless the state demonstrates both a good faith effort to comply and unavoidable system delays.
Many DD/IDD providers use EVV systems that were originally designed for personal care or home health and do not accommodate the documentation complexity of IDD services—such as community integration supports delivered across multiple locations in a single shift, or group day services where one DSP supports multiple individuals simultaneously.
DSP scheduling and EVV alignment
DSP scheduling is not directly regulated, but it must align with three external constraints: the person-centered service plan, Medicaid authorization limits, and EVV visit capture.
If a DSP is scheduled to provide 4 hours of support but the individual's weekly authorization has only 2 hours remaining, the EVV system may accept the clock-in but the claim will deny. If the schedule lists a service code that does not match the person-centered plan, the state may reject the service as unauthorized even if EVV captured the visit correctly.
Providers manage this by maintaining DSP availability, individual preferences, credential requirements, and authorization balances in separate systems—often a scheduling tool for shift assignments, an EVV platform for visit capture, and an EHR or billing system for authorization tracking.
The result is manual cross-checking. A scheduler assigns a DSP to a shift, then verifies in a separate system that the individual has remaining authorization, then confirms in a third system that the DSP holds the required certification for that service type.
What providers commonly get wrong
The most common compliance failure is timing. MUI reporting deadlines are measured from discovery, not occurrence. If a provider learns of an incident on Friday afternoon and reports it Monday morning, a state with a 24-hour rule will cite the provider for late reporting even if the incident itself happened weeks earlier.
A January 2020 HHS Office of Inspector General audit found that Pennsylvania did not comply with Federal Medicaid waiver and State requirements for reporting and monitoring incidents. The issues were not fraud or intentional concealment—they were procedural gaps in tracking and timely entry.
The second common error is mismatched service codes. A person-centered plan authorizes "community integration" but the EVV system is configured to capture "personal care." The DSP delivers the service, EVV records the visit, the claim is submitted, and the state denies it because the billed code does not match the plan.
The third issue is incomplete EVV data. Federal rules require six data elements. If a DSP clocks in but the EVV system does not capture GPS location, or if the system records start time but not end time due to a missed clock-out, the visit is technically non-compliant. Some states will pay the claim anyway. Others will deny it and require manual correction and resubmission.
How state rules differ for the same task
MUI reporting timelines vary by state even though the underlying federal Medicaid waiver rules are similar. Ohio distinguishes between immediate reporting and 24-hour reporting based on incident type. Pennsylvania splits the requirement into two deadlines: 24 hours to notify the state agency, then 48 hours to enter data into EIM. Florida uses a four-hour deadline for Critical Incidents but allows one business day for Reportable Incidents.
Person-centered planning follows a uniform federal standard under 42 CFR § 441.301(c), but states add documentation requirements. New York specifies the format and process in 14 NYCRR Part 636. Montana requires annual completion by a Plan Facilitator. Other states allow the individual, their family, or a support coordinator to lead the process.
EVV implementation dates differ because states requested and received extensions. Illinois implemented EVV for the DDD waiver on September 1, 2023, more than three years after the federal deadline for personal care services.
Providers operating in multiple states cannot use a single workflow. They must configure separate incident intake forms, apply different reporting deadlines, route notifications to different state portals, and produce investigation documentation in different formats.
What the federal rules actually require
Three federal rules shape how DD/IDD providers operate:
- EVV mandate: Section 12006(a) of the 21st Century Cures Act requires EVV for all Medicaid-funded personal care services and home health services delivered in the home. States must implement EVV or face FMAP reductions up to 1 percentage point.
- Person-centered planning: 42 CFR § 441.301(c) requires person-centered service plans for all HCBS waiver participants, with review at least every 12 months. Federal funds are not approved for services provided without a person-centered plan.
- HCBS Settings Rule: Effective March 17, 2014, the HCBS Settings Rule required states and providers to comply with person-centered planning standards by March 17, 2023. The rule mandates that individuals direct the planning process and that plans reflect their preferences and goals.
States implement these federal rules through waiver appendices, state regulations, and provider manuals. The federal rules set the floor. State rules add documentation, timelines, and specific procedural requirements.
How providers choose software
No state Medicaid agency mandates a specific software vendor. Pennsylvania requires MUI entry into EIM, but EIM is a state-operated portal, not a commercial platform. Florida requires incident reporting through the Region office, but does not specify how providers must track investigations internally. Ohio requires MUI reporting to the county board and an annual analysis, but does not prescribe the system providers use to generate that analysis.
Providers choose software based on three factors: whether the platform covers all four tasks (MUI reporting, person-centered plans, EVV, and scheduling), whether it submits data directly to the required state portals, and whether it handles the specific service models the provider operates—such as group day services, supported employment, or residential habilitation.
Therap, Sandata, Statewise, and iCareManager are the platforms most commonly mentioned in IDD provider networks, but adoption data is not published by state agencies. Providers also use general EHR platforms, Medicaid management information systems, and custom-built databases.
The practical test is whether the platform can generate the specific reports each state requires—such as Ohio's annual MUI analysis due February 28, Pennsylvania's 30-day investigation closure documentation, and the six EVV data elements required under the Cures Act.
AgenciesForge runs charting, scheduling, EVV, and billing on one record, with the clearinghouse included and no per-seat fees. See pricing and features.