This article assumes the agency has already cleared the application process described in our complete guide to starting a home health agency and has a state-issued license in hand. The model decision that determines whether this playbook applies — Medicare-certified skilled vs. Medicaid HCBS waiver vs. state plan personal care vs. private-pay — is walked side by side in our model comparison guide. For the federal regulatory backbone every Medicare-certified agency operates against, the 42 CFR Part 484 walkthrough is the companion read. State-specific licensure mechanics — the timing windows, the post-issuance state survey cadence, and the Medicare-versus-state license interaction — are walked in our state deep dives on California CDPH Form 5000-A, Texas HCSSA licensure, Florida Rule 59A-8, Ohio ODH certification, Pennsylvania Chapter 601, and New York Article 36. Read the state guide for the state you are licensed in alongside this playbook; the day-range milestones below describe the operational pattern, and the state guide describes the state-specific filings that overlay it.

Day 0 — What Your State License Actually Authorizes (and Doesn't)

The single most common founder mistake on Day 1 is assuming the state license is a license to bill. It is not. A state-issued home health license authorizes the agency to furnish home health services in the state, subject to the scope of practice the state law allows and the agency's own policies and procedures. It does not, on its own, authorize the agency to bill any payer. The payer-by-payer enrollment stack sits on top of the state license:

Medicare. A state license is not a Medicare enrollment. Medicare requires a separate enrollment under CMS-855A, an initial certification survey conducted by the State Survey Agency or a CMS-approved Accrediting Organization (ACHC, CHAP, or The Joint Commission), the assignment of a CMS Certification Number (CCN), and the Medicare Administrative Contractor's effective-date determination. Until those steps close, the agency cannot bill Medicare for any patient — even patients enrolled in Medicare who are clinically appropriate for the home health benefit.

Medicaid (state plan and HCBS waivers). Most states require a separate state Medicaid provider enrollment and, for Medicaid HCBS waiver services, a separate waiver provider agreement with the operating agency for each waiver. Medicaid managed-care organizations (MCOs) that administer state Medicaid programs require their own credentialing and contracting, and the state-license-plus-Medicaid-FFS-enrollment combination does not automatically extend to the MCOs operating in the state. For some Medicaid HCBS programs, EVV (electronic visit verification) under the 21st Century Cures Act is also a precondition to billing — visits not captured in an EVV-compliant system are not payable.

Commercial insurance. Each commercial payer the agency intends to serve runs its own credentialing process — application, primary-source verification of administrator and clinical leadership credentials, malpractice insurance verification, accreditation status confirmation, and a contract negotiation that frequently takes 90 to 180 days. Some commercial payers require Medicare certification or a recognized accreditation as a precondition to credentialing.

Private pay. The state license alone is generally sufficient to accept private-pay clients. For Medicare-certified-track agencies that intend to be paid under PDGM described in our Medicare home health payment walkthrough, private-pay revenue rarely closes the runway gap — it bridges it.

The Day 0 reality check, then, is that the founder has a license to operate and a six- to twelve-month build to first reimbursable claim. Plan the operating runway, the staffing sequence, and the first-patient-admission strategy against that timeline, not against the calendar date the license issued.

Days 1–15: Hiring and Orienting the Core Team

The federal Conditions of Participation at 42 CFR § 484.105 require every Medicare-certified home health agency to have, at a minimum, a governing body, a qualified administrator who reports to the governing body, and a clinical manager who provides oversight of all patient care services and personnel. State licensure rules typically layer additional position-specific requirements — California's Director of Patient Care Services qualifications under Health and Safety Code § 1736.1, Pennsylvania's Director of Nursing requirements under 28 Pa. Code Chapter 601, Texas's Alternate Administrator requirement under 26 TAC Chapter 558, New York's Administrator and DPCS qualifications under 10 NYCRR Part 766. The hiring sequence in the first two weeks is non-negotiable:

Administrator (or confirm in role). Most state license applications already named an administrator — the role is licensed-personnel-specific in many states, and the named administrator on the application becomes the administrator of record on Day 0. Confirm the named administrator's start date, contract, scope of authority delegated by the governing body, and the documented reporting line to the governing body. The CoP at § 484.105(b) requires the administrator to be available during operating hours and to have authority over day-to-day operations; build the operating-hours coverage and after-hours coverage policy in week one.

Director of Nursing / Clinical Manager (DON / CM). The CoP at § 484.105(c) requires a clinical manager to provide oversight of all patient care services and personnel — patient and personnel assignments, patient care coordination, referral coordination, ongoing assessment of patient needs, and the development, implementation, and updates of the individualized plan of care. The state license rule typically names this position as the Director of Nursing or Director of Patient Care Services and adds a state-specific qualifications grid. Hire this role first if it is not already filled. The CM is the single most consequential clinical hire after the administrator and is usually the survey's primary clinical interview.

RN supervisor / case manager(s). The first one or two RN case managers handle the start-of-care comprehensive assessment, the OASIS data collection, the plan-of-care development, the every-14-day RN supervisory visit when a home health aide is furnishing services to a skilled patient, and the documentation a surveyor will pull at the initial survey. For a startup agency, the DON often doubles as the first RN case manager during the first patient admissions; that is workable for one or two patients and unsustainable beyond five.

Therapy contracts (PT, OT, SLP). Most startup HHAs contract therapy services rather than employ therapists in the first 90 days. The contracted therapy entity or individual therapist must meet the qualifications at § 484.115, must operate under the agency's plan-of-care framework, and must be supervised consistent with the agency's clinical policies. Build the contract templates in week one and execute them before the first therapy referral.

Home health aides. The aides come last, not first. The CoP at 42 CFR § 484.80 requires aides to have completed a training and competency evaluation program meeting the federal 75-hour minimum (16 hours of supervised practical training included) and to be on the state's home health aide registry where applicable. Do not hire aides in week one — there are no aide-only patients yet, the agency's first one or two admissions will likely be skilled-visit-only, and the aide registry verification step (with 30- to 60-day onboarding for aides) will not yield productive billable visits before the agency is ready to accept aide-staffed cases. Plan aide hiring against the projected Day 60 first-aide-supervised-patient milestone, not against Day 1.

Office support (intake, billing, scheduling). A part-time intake coordinator is workable in the first 30 days because referral volume is low. Billing can be outsourced to a home health revenue-cycle vendor or run on the EHR's native billing module — most new agencies outsource through the first six months and bring billing in-house once monthly claim volume justifies a dedicated FTE.

The sequencing rule for the founder building this team is simple: hire the role required by the next regulatory step the agency will face, not the role the founder is most comfortable hiring. Administrator and DON are required for the first patient admission; aides are required for the first aide-staffed patient.

Days 1–30: P&P Manual Implementation, EHR, and EVV Setup

The policy-and-procedure manual the agency filed with the license application is a document. Implementation is a different artifact — the workflow, the EHR configuration, the form library, the training records, and the audit trail that demonstrate the policy is in operation. The first 30 days are when the manual stops being a binder and starts being how the agency works.

P&P operationalization. Walk every section of the manual against the corresponding § of 42 CFR Part 484 (the structure described in our CoP walkthrough works for this) and identify the artifact that demonstrates implementation: a form, a workflow, an EHR template, a training record. Sections that frequently slip in the first 30 days because they have no obvious artifact: § 484.65 QAPI (the program description, the indicator set, the governing-body review schedule), § 484.70 infection control (the surveillance log, the patient and staff education materials), § 484.102 emergency preparedness (the risk assessment, the communication plan, the training schedule, the exercise calendar). Build the artifact for each in the first 30 days; the survey will ask for them in the first 90.

EHR selection and configuration. Most new agencies select among a small set of home-health-specific EHR vendors (HCHB, WellSky, Axxess, MatrixCare, Alora, Kantime, Devero, and a dozen smaller options). Selection is a strategic decision; configuration is the first 30 days of implementation. The configuration items that have to be live before the first patient admission: the OASIS instrument current at the agency's go-live date (OASIS-E1 through 2026, OASIS-E2 from January 1, 2027 per the CY 2026 Final Rule, walked in our OASIS-E documentation guide); the start-of-care, recertification, transfer, and discharge timepoint workflows; the plan-of-care template under § 484.60; the comprehensive assessment under § 484.55; the clinical record content rules under § 484.110; the audit log and access-control configuration under HIPAA, walked in our HIPAA compliance walkthrough; and the billing module if billing is in-house.

EVV. The 21st Century Cures Act requires states to implement electronic visit verification for Medicaid personal care services and home health services delivered in-home. The EVV requirement applies on a state-specific schedule and is enforced through Medicaid claim edits — visits without an EVV transaction are not payable. Each state operates either a state-mandated EVV vendor (the "provider choice" model with one or more sanctioned vendors), a state-supplied vendor (the "open" or "MCO choice" model), or a state-aggregator model that consumes data from any HIPAA-compliant EVV vendor. Confirm the state's EVV model with the state Medicaid agency, register the agency's EVV vendor (or onboard with the state vendor), and run a test transaction before the first Medicaid HCBS visit. Agencies that miss this step admit the patient, deliver visits, and discover at the first claim cycle that none of the visits are billable.

Background screening stack. Every staff hire — administrator, DON, RN, therapist, MSW, aide, even non-clinical office staff in some states — runs through a layered federal-plus-state background screening protocol described in our background check compliance reference: OIG LEIE, SAM.gov, the State Nurse Aide Registry (for aides), state criminal-history and abuse-registry checks, FBI fingerprint checks where required, and the FCRA disclosure-and-authorization wrapper. The screening is a precondition to assignment, not a post-hire formality. Build the EHR or HRIS workflow that captures the screening artifacts for each personnel file in the first 30 days, because the surveyor will request the personnel file under § 484.115 in the first 90.

HIPAA Security Rule readiness. The Security Rule risk analysis at 45 CFR § 164.308(a)(1)(ii)(A), the device and media controls, the audit log review cadence, and the December 2024 OCR Security Rule NPRM revisions if finalized in the agency's window. The artifact a surveyor or an OCR audit will request is the written risk analysis with a documented date and the corresponding risk management plan; build it in the first 30 days, not after the breach.

Days 1–45: CMS-855A Submission for Medicare Certification

If the agency is pursuing Medicare certification — and most home health agencies are, because Medicare is the largest payer in the home health benefit — the CMS-855A enrollment is the parallel federal track that has to start almost immediately after state license issuance. The form, the timing, and the survey are the principal pacing items for the first 90 days.

The CMS-855A form. The Medicare Enrollment Application for Institutional Providers, available on the CMS provider enrollment page and submitted electronically through PECOS. The 855A captures the agency's legal business name, doing-business-as name, EIN, NPI, ownership disclosures, managing employees, governing body, accreditation status (if pursuing the AO route), state license, malpractice insurance, banking information, and an authorized official's signature. The signed paper certification statement still has to be submitted to the Medicare Administrative Contractor (MAC) processing the enrollment. The MAC for home health agency enrollment is one of three jurisdictional contractors — Palmetto GBA, CGS Administrators, or National Government Services — assigned by state. The full section-by-section walkthrough of the 855A, the 42 CFR Part 489 Subpart F surety bond, the § 489.28 capitalization rule, the MAC jurisdictional map, and the parallel state Medicaid and MA/MLTC contracting tracks is in our Medicare and Medicaid payer enrollment reference.

State Survey Agency or AO election. CMS allows initial certification surveys to be conducted by the State Survey Agency operating under contract with CMS, or by a CMS-approved Accrediting Organization (AO). The three CMS-approved AOs for home health are ACHC, CHAP, and The Joint Commission. The election is made on the 855A and is consequential — the AO route generally produces a faster time-to-survey than the State Agency route in states with multi-month survey backlogs (California, New York, and Pennsylvania routinely have State Agency survey backlogs measured in months), and the AO survey delivers the same Medicare certification outcome. AO accreditation carries an annual fee on top of CMS's enrollment processing — typically $5,000 to $10,000 in initial accreditation fees plus annual renewal — that the State Agency route does not impose. Most new agencies in survey-backlogged states choose the AO route; agencies in less-backlogged states often go with the State Agency.

855A processing timeline. CMS's published target processing timeline for a complete 855A is 60 calendar days. Real-world experience varies widely — a clean 855A with no follow-up requests can clear within the 60-day target; an 855A that triggers MAC follow-up for missing documentation, ownership disclosure clarifications, or state license verification often runs 90 to 120 days from submission to MAC recommendation to certification. Submit the 855A as soon after Day 1 as the package is complete; every day of MAC processing time is a day the agency is paying overhead without Medicare reimbursement.

The "tasking" requirement and the first patient admissions. CMS does not schedule the initial certification survey until the agency has demonstrated operational readiness through actual patient services. Current CMS Survey & Certification policy generally requires the agency to have admitted a minimum number of patients (typically a small number — a handful of skilled patients with the comprehensive assessment and plan of care in the record) before the State Agency or AO will conduct the on-site survey. This is the chicken-and-egg problem of the 90-day window: the agency cannot bill Medicare until certified, but cannot be certified until it has admitted patients. The first patient admissions therefore have to come from non-Medicare payers — Medicaid HCBS, Medicaid managed care, private pay, or a commercial-insurance referral — and the agency operates at full clinical and documentation cost on those patients while waiting for the Medicare survey window to open.

Days 30–60: First Patient Admission

The first patient admission is the operational stress test for everything the agency has built in the first 30 days. The clinical workflow, the EHR configuration, the documentation cycle, the supervision cadence, the billing eligibility check, the EVV transaction (for Medicaid HCBS), the HIPAA disclosure to the patient, the rights-acknowledgment signature, the comprehensive assessment timing, the plan-of-care signature workflow, and the QAPI indicator capture all run end-to-end on the first patient. Mistakes on the first patient become the survey artifact 60 days later.

Referral source mix in the first 60 days. Most newly licensed agencies do not have hospital-discharge referral relationships in the first 60 days because hospitals refer to known agencies with established outcomes. The first-60-day referral mix typically comes from: Medicaid HCBS waiver case managers (where the agency has executed the waiver provider agreement), independent physician practices, adult day health centers, assisted living communities, and self-referrals from private-pay clients. Founders who plan the first 60 days against an assumed hospital-discharge pipeline are usually the founders who run out of cash before they reach Medicare certification.

The skilled-visit-only first admission. The simplest first patient is a Medicaid HCBS waiver patient or a private-pay patient who is clinically appropriate for skilled nursing visits without aide service. The skilled-visit-only model lets the agency exercise the comprehensive assessment, the plan of care, the OASIS data collection (if the patient is Medicaid-skilled and the state's Medicaid program requires OASIS data submission, or in anticipation of the Medicare certification), the every-60-day reassessment, and the QAPI indicator capture without the additional aide-supervision and aide-registry-verification workflow on the first patient. Add aide-staffed cases on patient three or four, after the agency has run two full cycles of the skilled-visit workflow.

The intake and admission packet. Build the packet against § 484.50 patient rights, § 484.55 comprehensive assessment, the OASIS instrument, the HIPAA Notice of Privacy Practices, the state Home Health Hotline notice, the OASIS privacy notice, and the protection-and-advocacy contact information. The packet is signed and dated by the patient or representative on the first or second visit; the signed acknowledgments live in the clinical record. New agencies frequently miss the timing of the rights notice (must be delivered no later than the second visit per § 484.50) or the patient signature on the OASIS privacy notice; the surveyor will check both.

The first 60-day episode. Even on a Medicaid or private-pay patient, run the patient through a 60-day care-planning cycle to exercise the recertification workflow that Medicare patients will require. The 60-day reassessment is the rhythm the rest of the agency's clinical operation runs against; building muscle memory on patient one is cheaper than building it on patient ten under the pressure of a survey window.

Days 30–90: Initial State Licensure Survey Window

Most states conduct an initial state licensure survey within a defined window after license issuance, with the precise timing varying by state law and State Agency capacity. Common patterns:

  • Pre-licensure survey states. States like Texas (under 26 TAC Chapter 558) and Florida (under Rule 59A-8) require a pre-licensure or initial survey before the license is fully effective; in these states, the "first 90 days after license approval" begins with the conditional license and the survey window is built into the application.
  • Post-issuance survey states. Most states (California under 22 CCR Chapter 6, Pennsylvania under 28 Pa. Code Chapter 601, Ohio under OAC 3701-60, Illinois under 77 Ill. Adm. Code 245) conduct the initial state licensure survey within a defined window — frequently 30 to 180 days after license issuance and after the agency has admitted a minimum number of patients. The State Agency typically arrives unannounced; the agency has to be survey-ready continuously after the first patient admission, not on a scheduled date.
  • Concurrent state-and-federal survey states. In states where the State Agency operates both the state license survey and the federal CoP certification survey on CMS's behalf (Ohio, California, New York, and most other state-licensure states), the state and federal surveys are often conducted in the same on-site visit, and the deficiency findings span both regulatory frameworks. The agency receives a state CMS-2567 (or state-equivalent statement of deficiencies) for the state-license findings and a federal CMS-2567 for the CoP findings, with a separate corrective-action plan required for each.

What the state surveyor reviews. The state license rules typically cover a subset of the federal CoP topics plus state-specific items: governing body and administrator qualifications, DPCS or DON qualifications, the P&P manual, the personnel files (with state-specific background-check overlays), the clinical records of patients on service, the in-home patient visit (the surveyor may accompany an RN or aide on a home visit), the office physical environment, the emergency preparedness program, and the state-specific items that vary by state — California's surety bond, Texas's pre-survey CBT certificate, Florida's ePCER Level 2 screening, New York's Public Health Council approval, Pennsylvania's Chapter 601 or 611 categorization. Read the state guide for the agency's state alongside this playbook.

Survey readiness on Day 30. The agency should be operationally survey-ready no later than the 30-day mark, because the state survey can occur any time after first patient admission. "Survey-ready" means the personnel files are complete with the qualifications, licensure, screening, and training documentation; the clinical records are current with signed plans of care, comprehensive assessments, and visit notes; the QAPI program is documented with a written program description, an indicator set, at least one performance improvement project in process, and governing-body review minutes; the emergency preparedness program is documented with a current risk assessment, communication plan, training records, and exercise schedule; and the office is physically organized so the surveyor can locate any requested artifact within minutes.

Days 60–180: Medicare Initial Certification Survey

The Medicare initial certification survey is the federal half of the survey workload and is conducted by the State Survey Agency on CMS's behalf or by the elected AO. The survey window is highly variable — agencies in survey-backlogged states electing the State Agency route routinely wait 90 to 180 days after MAC recommendation for the survey to occur; agencies on the AO route typically clear the survey within 60 to 120 days of MAC recommendation; agencies in less-backlogged states with the State Agency route fall in the middle. Plan against the longer end of the range and treat the shorter end as upside.

The survey instrument. Surveyors walk the agency against CMS Pub. 100-07 State Operations Manual Appendix B, "Guidance to Surveyors: Home Health Agencies," which maps each Standard within 42 CFR Part 484 to a set of probes, observations, record reviews, and personnel-file reviews. Read Appendix B as if it were the rule, because the survey writes against it. Agencies that build their P&P manual against the regulation alone — without crossing each policy to the corresponding Appendix B probe — frequently produce policies that satisfy the Standard but fail the surveyor's review path. The detailed Subpart-by-Subpart breakdown is in the CoP walkthrough.

The survey artifact set. A typical initial certification survey reviews a sample of clinical records (usually three to ten depending on patient census), all personnel files, the P&P manual, the QAPI documentation, the emergency preparedness program, the infection-control surveillance log, the governing-body minutes, the OASIS submission and lock-date evidence (described in our OASIS-E documentation guide), and the financial controls relevant to the corporate-compliance program. The surveyor accompanies a clinician on at least one home visit to observe the patient encounter, the documentation, and the standard precautions practice.

The Statement of Deficiencies (CMS-2567). If the survey identifies deficiencies, CMS Form 2567 (the Statement of Deficiencies) lists each finding by § and Standard, references the Appendix B probe, and assigns a Scope and Severity rating from A (isolated, no actual harm with potential for minimal harm) through L (widespread, immediate jeopardy to patient health or safety). The agency submits a Plan of Correction (POC) within 10 calendar days of receiving the CMS-2567. A clean survey (no deficiencies) closes immediately; a survey with Standard-level deficiencies closes after the POC is accepted; a survey with Condition-level deficiencies triggers an enforcement remedy under 42 CFR Part 488 Subpart I that may delay or block certification.

Effective date of certification. Once the survey closes cleanly, the State Agency or AO sends the certification recommendation to the CMS Regional Office, which sets the effective date — typically the date the survey was completed (for a clean survey) or the date the POC was accepted (for a survey with cleared Standard-level deficiencies). The CCN is assigned, the MAC sets up the agency for billing, and the agency begins submitting Medicare claims for services furnished from the effective date forward. Services furnished before the effective date are not Medicare-payable, even if the patient was Medicare-eligible during the visit.

Cash-Flow Reality — Why Most Agencies Need Six Months of Operating Runway

The biggest single reason new home health agencies fail in the first year is not survey deficiency, not staffing, and not referral generation. It is cash-flow exhaustion before the Medicare reimbursement cycle clears. The math is consistent across states and accreditation routes:

Pre-revenue period: 60 to 120 days. From license issuance, the agency runs at full operating cost — administrator salary, DON salary, RN case manager(s), office rent, insurance, EHR subscription, EVV vendor fees, malpractice premiums, payroll taxes — without billing-eligible revenue. Even after the first Medicaid HCBS or private-pay admissions, the per-visit reimbursement does not cover the full overhead until visit volume scales.

Medicare claim cycle: 30 to 60 days from visit to receipt. Once Medicare certification is effective and the agency begins billing, PDGM operates on a 30-day payment period. The first claim submission for a 30-day period happens after the period closes, the MAC processes the claim within Medicare's standard payment-floor cycle (typically 14 to 30 days), and the deposit hits the agency's account 45 to 60 days after the start of the first 30-day period. The first significant Medicare receipt typically lands 90 to 120 days after the certification effective date, which is itself 60 to 120 days after license issuance.

Total runway: six months minimum. Adding the pre-revenue period to the Medicare claim-cycle ramp produces a six-month minimum operating runway from license issuance to meaningful positive cash flow. Agencies in survey-backlogged states with State Agency surveys routinely need eight to twelve months. The runway calculation has to cover: monthly fixed overhead (administrator + DON + office + insurance + EHR + EVV typically $25,000 to $45,000 per month for a small startup); variable clinical staff cost on the patients admitted during the runway period; the 855A and AO accreditation fees if applicable; and a contingency reserve for survey-driven corrective-action costs.

What goes wrong. Founders who underestimate this runway typically run into one of three failure modes by month four or five: they cut clinical staff to extend cash, which drops survey readiness and triggers Standard-level findings; they admit patients beyond the agency's capacity to deliver compliant care, which produces clinical-record deficiencies that delay certification; or they take a high-cost bridge loan on the promise of imminent Medicare receipts, which compounds the cash-flow problem when the certification slips by another 30 to 60 days. The fix is on the financing side, not the operational side: secure the runway before issuing the first paycheck, not after the first deficiency letter.

PDGM and the LUPA risk. The case-mix and LUPA structure of PDGM described in our PDGM walkthrough means low-utilization 30-day periods are paid at a per-visit rate rather than at the full case-mix-adjusted rate; the LUPA threshold varies by clinical group and visit-count interval. New agencies that admit Medicare patients without sufficient visit frequency to clear the LUPA threshold receive substantially less per period than the case-mix calculation would suggest. The clinical and operational planning has to incorporate the LUPA threshold from the first Medicare-billable patient.

Common Day-90 Deficiencies Surveyors Find

The pattern across CMS Quality, Safety, and Oversight reports and State Agency aggregate deficiency data on initial certification surveys is consistent enough that founders can pre-empt the top findings. The recurring deficiencies and the artifact that resolves each are summarized below; for the deficiency-by-deficiency walk with the Appendix B probe path, the mock-survey methodology, the Day-1 documentation set, and the Plan of Correction structure CMS will accept, see our Home Health Survey Prep — Top 10 G-Tag Deficiencies reference.

§ 484.50 patient rights — timing and signature. The verbal notice of rights must be delivered no later than the second visit; the written rights packet must be provided in advance of furnishing patient care; the patient or representative must sign and date the receipt; the OASIS privacy notice and the state Home Health Hotline number must be included. The artifact: a one-page intake packet structured against § 484.50(c) standard-by-standard, with a single signature line covering all required acknowledgments, retained in the clinical record.

§ 484.55 comprehensive assessment timing. The 48-hour initial assessment visit clock and the 5-calendar-day comprehensive assessment completion clock are specific timing rules that frequently slip when the start-of-care workflow is not enforced in the EHR. The artifact: an EHR-based start-of-care workflow that surfaces the deadline on the assigned RN's task list and blocks chart closure until the timely assessment is on the record.

§ 484.60 plan-of-care content and practitioner signature. Plans of care that lack signed orders from the responsible practitioner (MD, DO, podiatrist, NP, CNS, or PA per the CARES Act expansion); that omit specific frequency-and-duration language for each discipline; that do not reflect changes from the most recent reassessment. The artifact: a plan-of-care template tied to the comprehensive assessment fields, with a pre-signature checklist against § 484.60(a) and (b) standard elements and an EHR e-signature workflow that captures the practitioner's signature within the timing the CoP requires.

§ 484.65 QAPI documentation. Surveyors look for evidence the QAPI program is operating: a written program description approved by the governing body, a current set of measurable indicators tied to OASIS and claims data, at least one performance improvement project (PIP) in process, evidence of governing-body review, and minutes documenting the annual evaluation. New agencies that pass the Standard intent but cannot produce the artifacts get tagged at Standard level, and patterns of QAPI deficiencies escalate fast to Condition level.

§ 484.70 infection control surveillance and education. Aggregate infection logs, patient and caregiver education records, staff competency on standard precautions, and the COVID-19 vaccination education-and-offer documentation are the artifacts an Appendix B reviewer expects. Many agencies have the practice and lack the documentation; the documentation is what the survey scores.

§ 484.80 aide supervision cadence and registry verification. The 14-day RN supervisory visit cadence when an aide is furnishing services to a skilled patient, the on-site RN supervisory visit at least every 60 days for aide-only patients, the aide's annual 12-hour in-service total, and the personnel file documentation of the federal 75-hour training and competency evaluation program. The aide registry verification step pre-hire is the most easily missed control. Build the EHR or HRIS workflow that surfaces the registry verification at hire and the supervisory-visit cadence on the RN task list.

§ 484.102 emergency preparedness training and exercise records. The annual training of all staff, the two annual exercises (one full-scale or community-based, plus a tabletop or second exercise), and the post-exercise after-action report. Many agencies run the exercises and never produce the after-action report; surveyors deficiency-tag the missing documentation, not the missing exercise.

§ 484.105 governing body and clinical manager continuity. Governing body minutes that reflect oversight of QAPI, budget, and compliance; a designated clinical manager whose tenure is documented in the personnel file; continuity arrangements when the clinical manager is unavailable. Vacancies in the clinical manager role that are not bridged in the file are direct survey findings.

§ 484.110 clinical record retention and authentication. Five-year retention with a documented backup-and-recovery process, signed and dated entries from each clinician, and an EHR audit-log capability the surveyor can request. Hybrid paper/electronic systems frequently miss authentication and retention rules; single-EHR agencies rarely do.

§ 484.115 personnel file completeness. The credential, the license, the competency evaluation (for aides), the orientation, the annual in-service hours, the health screening, the criminal background check (where required by state law), and the supervision documentation. Missing items in even one personnel file generate a Standard-level finding; patterns across files elevate to Condition level. The federal-plus-state background screening stack the personnel file is supposed to evidence is walked in our background check compliance reference.

Pre-empt every one of these findings by Day 30 and the survey window between Day 60 and Day 180 is a manageable operational event rather than an existential one.

Authoritative Sources

The principal regulatory and official references for the first 90 days:

Verify the version current at the agency's filing or survey date. CMS updates eCFR continuously, transmittals against the State Operations Manual appear on a rolling cadence, and the annual Home Health Final Rule is the principal mechanism through which payment, measure-set, and CoP-Standard refinements take effect.

Related Resources

Read this playbook alongside the broader operational and compliance references on the site. For founders who have not yet been licensed, the complete guide to starting a home health agency is the front-end of this playbook. For the regulatory backbone, the 42 CFR Part 484 walkthrough describes the Subparts, the State Operations Manual Appendix B, and the P&P structure that maps to every CoP. For the OASIS-E1 instrument the agency will start collecting on the first patient admission, the OASIS-E documentation guide walks the SOC/ROC/Recert/Transfer/Discharge timepoints and the iQIES submission. For the HIPAA framework that overlays the EHR and the patient-facing intake, the HIPAA compliance walkthrough covers Privacy, Security, Breach Notification, and the BAA structure. For the layered federal-plus-state background screening every personnel file has to evidence, the background check compliance reference walks the OIG LEIE, SAM.gov, the State Nurse Aide Registry, the FCRA workflow, and the state-specific overlays. For the public-reporting outcomes the certified agency will be measured against once the rolling 12-month window opens, the Home Health Compare star ratings guide describes the calculation and the operational moves that lift a 3-star agency to 4 stars. For the payment side, the PDGM walkthrough and the Medicaid reimbursement guide describe the case-mix and rate structures the runway calculation has to plan against.

State-specific deep dives that overlay this 90-day pattern: California CDPH Form 5000-A, Texas HCSSA licensure, Florida Rule 59A-8, Ohio ODH certification, Pennsylvania Chapter 601, and New York Article 36. For the compliance-first hiring process the agency runs against § 484.80 to get the first five home health aides through the door before the initial certification survey, the first five caregivers playbook walks pre-employment screening, training and competency evaluation, the personnel file before first visit, and the 14-day RN supervision rule. Once the certification clears and the agency moves into steady-state operations, the workforce side becomes the principal operating constraint — start with our resources on reducing caregiver turnover, becoming an employer of choice, the credentialing compliance checklist, and fast-track caregiver hiring and onboarding.

The Bottom Line

The first 90 days after home health license approval are the build, not the launch. The license authorizes the agency to operate; the next 90 days produce the operational artifacts — the personnel files, the clinical records, the QAPI program, the emergency preparedness program, the EHR and EVV configuration — that the State Agency or AO surveyor will walk through against 42 CFR Part 484 and the State Operations Manual Appendix B. The CMS-855A starts the parallel federal track that, optimistically, closes within 60 to 120 days; the initial state licensure survey lands somewhere in the 30- to 180-day window depending on state; the Medicare initial certification survey follows on a 60- to 180-day schedule depending on State Agency capacity or AO route; and the first Medicare receipt lands 30 to 60 days after the certification effective date.

Founders who succeed at the 90-day window plan against the longer end of the timeline, secure six months minimum of operating runway before issuing the first paycheck, sequence hires against the next regulatory milestone rather than the founder's comfort, build the EHR and the P&P artifact set in the first 30 days, run the first patient admission as a stress test of the workflow rather than a revenue event, and treat survey readiness as a continuous operational state from Day 30 forward. Founders who stumble are usually the ones who underestimated the runway, deferred the QAPI and emergency preparedness artifacts to "after the first patient," and discovered at the survey window that the practice was in place but the documentation was not.

If you want a structured way to assess your CoP readiness before the State Agency or AO surveyor arrives, our compliance readiness assessment walks the same Subpart B and Subpart C Standards a surveyor would, scores your gaps, and produces an action list ordered by deficiency-tag risk. When you are ready to staff against the § 484.80 home health aide CoP, Home Health Workforce runs high-volume caregiver recruiting on a pay-per-hire model — including the federal 75-hour HHA training and competency-evaluation pathway every Medicare-certified agency relies on.