Can Your Practice Management System Handle an Audit?

Why audit readiness, documentation, and infrastructure are becoming central to sustainable care delivery.

Across the country, state and federal regulators are tightening controls, congressional committees are requesting provider records, and audits are increasing in both frequency and scope. For many providers delivering high-quality care every day, the shift can feel misaligned with the reality of clinical work.
But the direction of travel is clear. In a landscape shaped by rapid growth and increased scrutiny, compliance is no longer a secondary function. It is becoming core to how sustainable ABA organizations operate.

A shifting regulatory environment

Over the past five years, Medicaid spending on ABA services has grown significantly. Expanded access has enabled more families to receive care, while also introducing new operational complexity across the system. With that growth has come increased oversight.
Recent audits and reports from federal oversight bodies, including the HHS Office of Inspector General, have highlighted recurring issues in documentation, billing alignment, and authorization management across multiple states. In certain state-level reviews, documentation deficiencies were identified across a substantial portion of sampled claims.

At the same time, broader enforcement trends are emerging:

• • Congressional attention on ABA oversight at the state Medicaid level
  • Ongoing federal and state audit activity across multiple regions
  • Increased scrutiny of healthcare billing patterns more broadly
  • State-level policy changes, including rate adjustments and enrollment controls
  • Expanded enforcement of Electronic Visit Verification (EVV) requirements

Taken together, these signals point to a system recalibrating. The expectation is not only that care is delivered, but that it is consistently documented, justified, and auditable.

Where scrutiny is most often focused

As oversight increases, certain patterns are being examined more closely.
Documentation quality remains central. Session notes that clearly connect services to individualized treatment plans, include objective data, and reflect clinical decision-making are increasingly expected. By contrast, templated or repetitive documentation tends to draw attention.

Alignment between clinical activity and billing is another focal point. Discrepancies between recorded services and submitted claims, whether due to timing, authorization limits, or coding, are among the most common issues identified in audits.

Authorization management continues to be a pressure point as well. Expired approvals, exceeded units, or insufficient documentation of medical necessity can quickly create exposure, regardless of clinical intent.
There is also growing attention on service validation. While the Electronic Visit Verification requirements under the 21st Century Cures Act currently apply to personal care and home health services rather than ABA specifically, some states are beginning to extend similar data validation expectations to ABA providers — and the broader trend toward verifiable, timestamped service delivery is expanding.

Finally, supervision structures and credentialing remain under review. The relationship between clinicians and direct service staff, including how supervision is documented and how credentials are maintained, continues to be a consistent area of audit focus.

None of these areas are new. What is changing is the level of consistency and rigor with which they are being evaluated.

From reactive compliance to operational infrastructure

One of the more notable shifts is how compliance is being framed internally within provider organizations.
Historically, compliance has often been treated as a separate function, something reviewed periodically or addressed when an issue arises. Increasingly, that model is proving difficult to sustain.

As requirements become more complex and oversight more continuous, compliance is moving closer to operations. It is showing up in scheduling workflows, in documentation processes, in billing validation, and in how data is captured at the point of care. This shift is also exposing the limitations of fragmented systems.

When scheduling, clinical documentation, authorizations, and billing are managed across disconnected tools, inconsistencies are harder to detect and correct. Small gaps at each step can accumulate into larger risks.

By contrast, organizations operating within more connected environments are often better positioned to maintain alignment between what is delivered, what is documented, and what is billed. In that context, compliance begins to look less like a separate responsibility and more like a characteristic of how the system itself functions.

What this means for ABA providers

For providers, this evolving environment is not simply about avoiding audits. It is about operating within a system where transparency, consistency, and traceability are expected as standard.
The organizations that appear best positioned are not necessarily those with the most extensive compliance programs, but those where clinical, operational, and financial workflows are tightly aligned.

That alignment shows up in different ways:

• • Documentation that reflects real clinical activity
  • Billing that is directly supported by underlying records
  • Authorizations that are actively managed rather than retrospectively checked
  • Data that can be accessed and validated without extensive manual reconciliation

These are not new concepts. What is changing is that they are becoming baseline expectations rather than differentiators.

The role of technology in a compliance-first environment

As compliance expectations evolve, technology is playing an increasingly central role.Platforms designed specifically for ABA are beginning to move beyond administrative support and into operational infrastructure. The focus is shifting toward connecting workflows, reducing manual handoffs, and ensuring that key data points are captured consistently.

Lumary brings together scheduling, documentation, authorization management, EVV, billing, and reporting into a single environment. This level of integration helps reduce the gaps that often emerge between clinical delivery and administrative processes.

At scale, this matters. Lumary supports over 200 healthcare provider organizations globally, processes billions in claims annually, and is used by tens of thousands of healthcare professionals in the United States and Australia. That breadth reflects a broader trend toward systems that can support both growth and regulatory complexity.

Its integration with Hi Rasmus further strengthens this connection by linking real-time clinical data collection with operational workflows, helping ensure that what happens in session is reflected accurately in documentation and downstream processes. In an environment where scrutiny is increasing, the ability to maintain alignment across these areas is becoming increasingly important.

Looking ahead

The current moment in ABA is not defined solely by increased oversight, but by a broader shift in expectations. Regulators, payers, and stakeholders are placing greater emphasis on transparency, accountability, and demonstrable alignment between care delivery and reimbursement. For providers, that raises the bar, but it also creates an opportunity to build more resilient and scalable operations. Compliance, in this context, is less about reacting to external pressure and more about how organizations are structured internally. And increasingly, it is becoming a defining feature of long-term sustainability in the field.

Frequently Asked Questions

How do ABA practices maintain billing compliance as they scale?

As ABA practices grow, the risk of billing errors increases when scheduling, documentation, authorizations, and claims are managed across disconnected systems. Practices that scale successfully tend to operate within integrated platforms that automatically align clinical activity with billing records, actively track authorization limits, and flag discrepancies before claims are submitted — rather than relying on manual reconciliation after the fact.

What are the biggest compliance risks for multi-location ABA providers?

Multi-location providers face compounded risk in three areas: credentialing gaps when hiring rapidly, inconsistent documentation standards across sites, and authorization management across different payers and state requirements. These issues are harder to detect without centralized oversight. Practices operating across states also need to account for varying Medicaid rules, EVV requirements, and supervision ratios by jurisdiction.

How should ABA practices prepare for a Medicaid audit?

Audit readiness starts well before an audit notice arrives. Practices should ensure session notes are individualized and clinically grounded rather than templated, that billing is directly traceable to documented service delivery, that all authorizations are current and units are being tracked in real time, and that supervision documentation reflects actual oversight structures. Providers with integrated practice management systems are typically better positioned to produce records quickly and demonstrate alignment across clinical and billing data.

What role does technology play in ABA compliance at scale?

Purpose-built ABA platforms are increasingly central to compliance infrastructure, not just administrative efficiency. At scale, manual processes create gaps between what is delivered, what is documented, and what is billed. Integrated systems that connect scheduling, clinical documentation, authorization management, EVV, and billing reduce those gaps by design — ensuring data captured at the point of care flows accurately through to claims without manual re-entry or reconciliation.