What Is a MIPS Audit, and Why Does It Matter?
A MIPS audit, known formally as a Data Validation Audit, is CMS's review of the evidence behind your submitted performance data. Guidehouse, the CMS validation contractor, requests primary source documents such as medical records, claims, and EHR reports to confirm your Quality, Improvement Activities, and Promoting Interoperability scores are accurate.
CMS also runs a separate, practice-initiated process called a Targeted Review. The table below shows how the two processes differ and when each one applies to your practice.
What Does the Macralytics MIPS Audit Support Service Include?
The audit support engagement is a defined-scope response built around your specific Guidehouse notice. Each step uses primary source documentation, not estimates or reconstructed attestations.
Audit Notice Review and Deadline Tracking
Macralytics confirms exactly what Guidehouse is requesting, which performance categories are under review, and the 45-day calendar deadline that started on your notice date. Missing this window can trigger further CMS action.
Documentation Reconstruction by Performance Category
We pull the medical records, EHR reports, and improvement activity evidence tied to each flagged measure. Quality, IA, and PI evidence each require a different documentation type, and we match the request to the correct source.
Targeted Review Eligibility Assessment
If your recalculated score changes your Medicare Part B payment adjustment, we confirm whether a Targeted Review request is available and document the filing deadline for the current performance year.
Response Packaging and Guidehouse Submission
We package your primary source documents in the format CMS and Guidehouse require, then confirm delivery through the secure channel specified in your notice.
Post-Audit Documentation Correction Plan
Once the audit closes, we identify the documentation gap that triggered the review and update your practice's recordkeeping for the next performance year.
Ready to Respond to a MIPS Audit Notice?
A missed 45-day deadline or an incomplete response can turn a MIPS incentive year into a penalty year. Macralytics provides a MIPS Audit Support Service that reviews your Guidehouse notice, rebuilds documentation across every flagged measure, and files a Targeted Review request when your payment adjustment is at risk.
Our AAPC-certified consultants interpret CMS audit requests against the full Data Validation framework, including record retention rules, Targeted Review eligibility, and multi-NPI reporting obligations, so no requested measure is left unanswered.
How Does Our MIPS Audit Support Process Work?
The audit response runs in four defined steps. Most engagements are completed within the 45-day CMS deadline, starting from the date you share your Guidehouse notice with our team.
Step 1. Notice Intake and Deadline Confirmation
Our MIPS audit team logs the exact CMS deadline from your notice and identifies every performance category and measure under review.
What Other MIPS Services Does Macralytics Offer?
Our MIPS work spans more than consulting alone. Specialty selection, audits, EHR configuration, and small-practice support are all covered too.
MIPS Consulting Services
One partner handles the whole QPP cycle. Eligibility, measures, submission, and audits all run through our team.
MIPS Data Submission Service
Filing happens on your behalf ahead of the deadline. Errors get flagged before they turn into penalties.
MIPS Eligibility Check Services
Participation status is confirmed at the NPI and TIN level. Low-volume thresholds and opt-in eligibility get mapped up front.
MIPS Measure Selection Service
Measures are selected based on how well they score against current benchmarks. An outcome or high-priority measure is always part of the mix.
MIPS Score Maximization
Missed points get identified before submission. All four categories are reviewed in the process.
MIPS EHR Consulting
Your EHR gets set up to meet PI requirements correctly. Certification, configuration, and data mapping are all covered.
MIPS QCDR Partners
A registry suited to your specialty gets identified and connected. Submission is coordinated alongside your broader reporting.
MIPS Specialty Consulting
The right measure set or MVP for your practice gets pinpointed. Your score under each is benchmarked first.
MIPS Small Practice Package
Eligibility, measures, and reporting come bundled for smaller teams. Full coverage, without the extra vendors.
Who Needs Professional MIPS Audit Support?
Any MIPS-eligible clinician can receive a Guidehouse notice, but certain situations raise the stakes of a slow or incomplete response.
Practices That Received a Guidehouse Audit Notice
A live audit notice starts a 45-day clock immediately. Practices without a documentation response plan already in place risk missing the deadline while still assembling records.
Practices With Multiple NPIs or TINs
Each NPI/TIN combination can carry a separate audit obligation. Missing one combination's response leaves that entity's payment adjustment unresolved even after the rest of the practice responds.
Practices Using a Third-Party Registry or QCDR
Submitting through a registry does not change what CMS requires as evidence during an audit. Practices need direct access to the primary source documents behind whatever the registry submitted.
Practices With Thin or Inconsistent Documentation Records
A signed attestation alone does not satisfy an Improvement Activities audit. Practices that only kept the attestation form need help rebuilding dated logs and protocol evidence before the deadline.
Is Your Practice Aligned With 2026 CMS MIPS Audit Rules?
The 2026 MIPS program keeps the 75-point performance threshold and the existing category weights: Quality (30%), Cost (30%), Promoting Interoperability (25%), and Improvement Activities (15%). A Data Validation Audit that invalidates evidence recalculates your score against this same scale, which can move a bonus year into penalty territory.
Federal record retention rules require MIPS documentation to be kept for 6 years from the end of the performance period, and CMS requires a response to a data sharing request within 45 calendar days. Practices reporting under 2026 MVPs face the same audit and retention rules as traditional MIPS reporters.
Prepare Your Practice for a 2026 MIPS AuditWhy Do U.S. Practices Choose Macralytics for MIPS Audit Support?
Responding to a CMS audit notice correctly matters as much as avoiding one in the first place. Practices across the United States choose Macralytics for MIPS audit support for the following reasons.
Direct Experience With Guidehouse Data Sharing Requests
Our team reviews Guidehouse notices regularly and knows the documentation format CMS expects for Quality, IA, and PI evidence.
Multi-NPI and Multi-TIN Audit Coordination
We map every NPI/TIN combination named in an audit notice, so no billing entity's response is left incomplete.
AAPC-Certified Team With QPP Program Knowledge
Dr. Attiya Saqib, an AAPC-trained MIPS consultant, leads audit response engagements alongside a team trained in QPP program rules and low-volume threshold calculations.
Documentation Rebuilt to CMS Primary-Source Standards
We pull medical records, EHR audit logs, and dated activity evidence rather than relying on attestation forms alone.
Direct Path to Targeted Review Filing
When a recalculated score changes your payment adjustment, we assess and file your Targeted Review request within the same engagement.
HIPAA-Compliant Data Handling
All documentation collection and submission during an audit response follow HIPAA-compliant data handling protocols at every stage.