If your behavioral health practice bills Medicare or Medicaid, CERT audits are not a distant compliance concern — they are an active risk. The Centers for Medicare and Medicaid Services (CMS) Comprehensive Error Rate Testing program reviews hundreds of thousands of claims annually to identify improper payments, and behavioral health services have increasingly landed in the crosshairs. In its most recent reporting period, CMS identified an overall improper payment rate of approximately 7.38% across Medicare Fee-for-Service, representing billions of dollars in flagged claims. For behavioral health providers, the margin for documentation error is razor thin. The good news is that a well-configured EHR system does more than store clinical notes — it actively supports the documentation standards that CERT auditors look for.
What Is a CERT Audit and Why Should Behavioral Health Providers Care?
The CERT program is a CMS-administered review process that samples claims paid by Medicare Administrative Contractors (MACs) to measure whether those claims were paid correctly, underpaid, or overpaid. Auditors request medical records and documentation for each sampled claim, then evaluate whether the services billed were medically necessary, properly documented, and correctly coded. For behavioral health providers, this means psychotherapy notes, evaluation and management documentation, treatment plans, and medical necessity justifications must all be on hand and audit-ready at any time — often within a 75-day response window.
Behavioral health services face particular scrutiny because several high-utilization billing codes — including 90837 (individual psychotherapy, 60 minutes), 90834, and telehealth-delivered services — have historically shown elevated error rates. Missing start and stop times, inadequate medical necessity documentation, unsigned notes, and mismatched diagnoses are among the most common reasons CERT auditors flag behavioral health claims. These are not complex clinical failures. They are documentation failures — and they are largely preventable with the right systems in place.
What CERT Auditors Actually Look For in Behavioral Health Records
Understanding the auditor's lens is the first step to preparing for one. When a CERT request arrives, reviewers are evaluating a specific set of documentation elements for each claim. While requirements vary by payer and service type, behavioral health records are typically assessed against the following criteria.
Documentation Elements Commonly Evaluated
- Accurate session start and stop times for timed psychotherapy codes
- A current, signed treatment plan that aligns with the services billed
- Documentation of medical necessity, including diagnosis, functional impairment, and treatment rationale
- Clinician credentials and supervising provider information where applicable
- Patient consent and HIPAA authorization records
- Progress notes that reflect the complexity level billed (especially for E/M codes)
- Telehealth-specific documentation, including patient location, platform type, and consent for remote delivery
- Timely note completion — many payers flag notes completed significantly after the date of service
One of the most preventable error patterns in CERT findings is the mismatch between what was billed and what is documented. A claim billed at 90837 requires documentation of a session lasting 53 minutes or more. If the note does not include start and stop times — or worse, does not exist at all — the claim becomes indefensible regardless of whether the service was actually delivered.
How EHR Infrastructure Maps to CERT Documentation Standards
A modern behavioral health EHR is not just a digital filing cabinet. When configured correctly, it functions as a compliance layer that enforces documentation standards before claims are ever submitted. Here is how specific EHR capabilities directly support CERT audit readiness.
Structured Note Templates With Required Fields
EHR platforms that include procedure-specific note templates can require clinicians to document session start and stop times, treatment plan alignment, and medical necessity language as part of the standard workflow — not as an afterthought. When these fields are mandatory rather than optional, the documentation gaps that CERT auditors most commonly flag simply do not occur. Platforms like MindWise Health build these requirements directly into therapy note workflows so that a session cannot be marked complete without the elements required for billing validation.
Pre-Billing Chart Audits
One of the most powerful CERT-preparedness tools available in a behavioral health EHR is a pre-billing audit engine — a system that flags incomplete or inconsistent documentation before a claim is submitted to a payer. If a note is unsigned, a treatment plan is expired, a diagnosis code is missing, or a session time does not support the billed CPT code, the claim should be held and the issue resolved internally. This mirrors exactly what a CERT auditor would flag, but allows the practice to catch and correct it first. Pre-billing audits shift compliance from reactive to proactive, which is the posture CMS expects well-managed practices to maintain.
Automated Treatment Plan Tracking
Treatment plans are a cornerstone of behavioral health medical necessity documentation, and they come with their own compliance clock. Many payers require treatment plans to be reviewed and updated at defined intervals — often every 90 days. An EHR that tracks treatment plan expiration dates and alerts clinicians or administrators when renewals are due prevents a common and costly CERT finding: billing for services rendered without a current, clinician-signed treatment plan on file.
Telehealth Documentation Support
Telehealth visits have remained under elevated CMS scrutiny since the expansion of coverage during the COVID-19 public health emergency. CERT auditors reviewing telehealth claims look for documentation confirming the patient's physical location at the time of service, the technology platform used, and whether the patient provided informed consent for remote treatment. EHR systems that include telehealth-specific intake workflows and session documentation fields help practices capture this information consistently, without relying on clinicians to remember to include it manually.
Secure, Retrievable Record Storage
A CERT request typically requires a practice to produce clinical documentation within a defined response window. The ability to retrieve complete, organized records quickly — across providers, service dates, and claim types — depends on how well your EHR stores and indexes documentation. HIPAA-compliant cloud storage with role-based access controls, audit trails, and exportable record formats is not just a data security requirement; it is a practical CERT readiness capability. Disorganized or paper-based records systems frequently contribute to late or incomplete responses, which CMS treats as substantiation failures regardless of whether the underlying care was appropriate.
Building a Culture of Audit Readiness in Your Practice
Technology enables compliance, but it does not replace the need for staff training and internal accountability. CERT readiness is strongest when EHR tools are paired with regular internal audits, clear documentation standards communicated to all clinical staff, and a designated compliance point person who monitors error trends before they become billing patterns. Consider conducting quarterly chart reviews using the same criteria CERT auditors apply — particularly for your highest-volume CPT codes. If your EHR generates billing reports by code, use those reports to identify which services are billed most frequently and prioritize documentation audits accordingly.
The Bottom Line for Behavioral Health Practices in 2025
CERT audits are not punitive by design — they are a measurement tool. But the financial and administrative consequences of an adverse finding, including repayment demands and increased future scrutiny, are real. The practices that fare best are those that treat documentation completeness as a daily operational standard rather than an emergency response. The right behavioral health EHR makes that standard achievable by embedding compliance checkpoints into the workflows clinicians already use. Whether you are currently under audit, preparing for one, or simply trying to build a more defensible billing practice, investing in EHR infrastructure that supports CERT requirements is one of the highest-return compliance decisions a behavioral health practice can make in 2025.