Telehealth services agreement guide for hospital contracting

How medical staff services and contracting teams turn tele-stroke, tele-psychiatry and tele-ICU contracts into obligations they can track, from proxy credentialing to renewal.

What should a hospital’s telehealth services agreement include?

It should set coverage hours and response times, meet the CMS requirements for relying on the distant site’s credentialing and privileging, confirm practitioners hold a license recognized where the patient is located, and cover malpractice insurance, technology uptime, HIPAA business associate terms where applicable, fair market value fees, quality reporting and termination with a transition period.

Last updated: September 21, 2026 · Reviewed by the Aavenir Healthcare practice

Key takeaways

  • ✓Credentialing by proxy is permitted only under a written agreement that meets specified CMS requirements.
  • ✓Obligations run both ways, including the hospital’s duty to share performance review information.
  • ✓Monthly roster to privileges reconciliation is the single most important control.
  • ✓Start renewal reviews early, with service level data and a current fair market value analysis.

A hospital that buys tele-stroke, tele-psychiatry or tele-ICU coverage is not buying software. It is buying physicians it will never meet, working under privileges it has to grant, on a schedule it has to trust at 2 a.m. The contract that holds all of this together is the telehealth services agreement, and in most medical staff offices it is negotiated once and then filed.

That is a problem, because the agreement carries live obligations on both sides. The distant site has to keep its roster current, its licenses valid and its response times inside the promised window. The originating hospital has to feed performance information back and re-credential on a cycle. When either side drifts, the hospital carries the regulatory and patient safety exposure.

This guide is written for the medical staff services lead or contracting manager who owns these agreements. It covers what a strong telehealth services agreement contains, where the credentialing mechanics usually break, and a five-step plan for turning a signed contract into an obligation register your team can actually run.

What a telehealth services agreement has to cover

The CMS Conditions of Participation allow an originating-site hospital to rely on the credentialing and privileging decisions of a distant-site hospital or telemedicine entity. This is commonly called credentialing by proxy. It is only available under a written agreement that meets specified requirements. At a working level, the distant site’s practitioners must be privileged at the distant site, they must hold a license recognized where the patient is located, and the originating hospital must share internal performance review information about those practitioners with the distant site. Beyond that regulatory core, a complete agreement addresses:

  • Coverage and response, the service hours, the specialties covered, the time to first contact and time to consult, and what happens when volume exceeds the staffing model.
  • Licensure and roster, how the vendor proves each practitioner holds a license valid in your state, how new practitioners are added, and how departures are reported.
  • Malpractice and indemnity, the professional liability limits each practitioner carries, whether tail coverage applies, and who defends a claim that involves both parties.
  • Technology and data, platform uptime commitments, backup communication paths, record ownership, and HIPAA business associate terms where the vendor handles protected health information on your behalf.
  • Fees and exit, a fee structure supported by a fair market value analysis, quality reporting obligations, and termination rights with a transition period so coverage does not simply stop.

Most of these terms are standard on paper. What separates a well-run program from a fragile one is whether each term turns into a dated, owned task after signature. A response time commitment nobody measures is not a commitment. A roster clause nobody reconciles against the privileges list is an audit finding waiting to happen.

Proxy credentialing is conditional

Relying on a distant site’s privileging decisions is an option the regulations permit, not a default. It holds only while the written agreement meets the specified requirements and both parties keep performing. If the roster, licensure evidence or performance feedback lapses, the basis for relying on proxy credentialing weakens with it.

Where telehealth agreements break down

Teams commonly report that problems surface not at signing but in year two, when the people who negotiated the deal have moved on and the vendor’s roster has turned over. The failure points are predictable.

  • Roster drift. The vendor adds and removes practitioners faster than the medical staff office updates privileges, so someone is consulting without current privileges on file.
  • Licensure gaps. A practitioner licensed in one state picks up shifts covering your hospital in another, and nobody confirms the license before the first consult.
  • Silent performance data. The agreement requires the originating hospital to share performance review information, but no one owns sending it, so the obligation goes unmet on your side.
  • Unmeasured service levels. Response time targets sit in an exhibit while the only record of actual performance lives in a nursing unit’s complaints.
  • Fee creep without review. Rates change at renewal or through amendments without a refreshed fair market value check, which matters because Stark and Anti-Kickback risk generally attaches to compensation that does not reflect the services actually provided.

A five-step roadmap for managing telehealth services agreements

Step 1, Build a single inventory

Start by pulling every telehealth arrangement into one place: tele-stroke, tele-psychiatry, tele-ICU, tele-neurology, and any teleradiology or hospitalist coverage run on similar terms. Include amendments, exhibits and the business associate agreement if one exists. One authoritative record per agreement is the foundation for everything that follows.

Step 2, Extract the obligations, not just the dates

Expiration and renewal dates matter, but they are the smallest part of the job. Capture each operational obligation as a discrete item: roster update frequency, license verification evidence, insurance certificate delivery, performance data sharing, quality report cadence, uptime reporting and notice periods for termination. Record who owes each one, the vendor or the hospital, because the obligations run in both directions. A credentialing specialist should review anything tied to privileges.

Step 3, Tie the roster to privileges

The single most important control is a reconciliation between the vendor’s active practitioner list and your privileges list. Set a recurring task, monthly for high-volume services, where the vendor certifies its roster and your office confirms each name has current privileges and a license recognized in your state. Any mismatch should create an exception with an owner and a due date. This is where proxy credentialing either holds up or quietly erodes.

Step 4, Schedule the feedback loop

Make the originating hospital’s own duties as visible as the vendor’s. Assign an owner to compile and send internal performance review information about telemedicine practitioners to the distant site on the cycle your agreement specifies. Track completion and keep the evidence. Surveyors and auditors ask whether the process ran, not whether it was written down. Our Stark, Anti-Kickback and HIPAA audit checklist covers the documentation side in more depth.

Step 5, Review performance before renewal

Set a renewal review at least 120 days before the notice window closes. Bring response time data, uptime reports, roster stability, complaint and incident history, and a current fair market value analysis to the table. Decide whether to renew, renegotiate or run a competitive process while you still have time to act. A renewal that happens by default is the most expensive outcome in telehealth contracting.

Keep every telehealth obligation on schedule

Aavenir turns telehealth agreements into owned, dated tasks, from roster reconciliation to performance data sharing and renewal review.

Book a demo

How Aavenir supports telehealth contracting

Aavenir’s contract lifecycle and obligation management apps run standalone or natively on ServiceNow, which matters for hospitals that already route credentialing and IT work through that platform. AI extraction pulls coverage terms, licensure requirements, insurance obligations and notice periods from each agreement into structured fields. Each obligation becomes a task with an owner, a due date, reminders and an evidence trail. Roster reconciliations and performance data exchanges show up on a calendar alongside renewal milestones, so the medical staff office, compliance and the service line work from one view. The healthcare obligation management datasheet lists the obligation types Aavenir tracks out of the box.

Telehealth services agreement obligation map

Use this map as a starting template. Adjust frequencies to what your agreements actually say, and assign every row to a named person rather than a department.

ObligationOwed byTypical cadenceEvidence to keep
Practitioner roster certificationDistant siteMonthly or on changeSigned roster, reconciliation log
License recognized where patient is locatedDistant siteBefore first consult, then at renewalPrimary source verification record
Internal performance review sharingOriginating hospitalPer agreement, often annually or at reappointmentTransmittal record and summary sent
Response time and uptime reportingDistant siteMonthly or quarterlyService level report, exceptions
Fair market value and renewal reviewOriginating hospitalBefore each renewal or fee changeFMV analysis, renewal decision memo

A telehealth services agreement protects the hospital only as long as both parties keep doing what it says. Proxy credentialing depends on ongoing evidence, not a signature from three years ago. Put every obligation in one register, give each an owner, and review performance before renewal rather than after. That is how contracting and medical staff services keep remote coverage reliable and defensible.

For related guidance, see Exclusive professional services agreements for hospitals, On-call coverage agreement controls for hospitals and Medical equipment service agreement uptime tracking.

FAQ

Telehealth services agreement FAQs

What is credentialing by proxy in telehealth? +
Credentialing by proxy lets an originating-site hospital rely on the credentialing and privileging decisions of a distant-site hospital or telemedicine entity instead of repeating the full process itself. CMS Conditions of Participation permit it only under a written agreement that meets specified requirements, and the originating hospital's governing body still grants the privileges based on that information.
What must the written agreement require for proxy credentialing? +
At a working level, the distant site's practitioners must be privileged at the distant site, must hold a license recognized where the patient is located, and the originating hospital must share internal performance review information about those practitioners with the distant site. Review the current regulatory text with counsel before relying on any template.
Does a telehealth vendor need a business associate agreement? +
It depends on the arrangement. When a vendor creates, receives, maintains or transmits protected health information on the hospital's behalf, HIPAA business associate terms generally apply. Practitioners treating patients may be acting as providers rather than business associates. Your privacy officer should classify each arrangement and document the reasoning in the contract file.
How should hospitals handle fair market value for telehealth fees? +
Get a fair market value analysis that reflects the actual services, coverage hours and volumes, and refresh it before renewals or fee changes. Compensation that does not track the services provided can raise Stark and Anti-Kickback concerns, so keep the analysis, the rationale and any amendments together in the agreement record.
How often should the vendor roster be reconciled? +
Monthly is a practical default for high-volume services such as tele-stroke, plus an immediate update whenever a practitioner joins or leaves. Each reconciliation should confirm current privileges and a license recognized in your state for every name, and any mismatch should become a tracked exception with an owner and a due date.
When should a telehealth renewal review start? +
Start at least 120 days before the notice window closes, not the expiration date. That leaves time to review response times, uptime, roster stability, incidents and a current fair market value analysis, and to renegotiate or run a competitive process if performance or pricing no longer fits the hospital's needs.

Run telehealth agreements as live obligations

See how Aavenir turns every telehealth services agreement into owned, dated tasks your medical staff office can prove at survey time.

  • ✓AI extraction of coverage, licensure and notice terms
  • ✓Roster, performance sharing and renewal tasks with evidence
  • ✓Standalone or native on ServiceNow