Guide
How to Document Exclusion Screening
By Keelstar Team · Updated June 1, 2026
The short answer
For every exclusion check, record who was screened, which lists were searched, the search date, list version or source, names and identifiers used, the result, and who performed the review. Potential matches need a documented disposition. Spreadsheets without timestamps or inbox screenshots do not survive CMS, payer, or internal audits.
What auditors actually ask for
Auditors and surveyors do not ask whether you screen — they ask you to prove it. Expect requests for a sample of vendors or employees screened during a specific period, evidence that re-screening occurred on schedule, and documentation of how potential matches were resolved.
Minimum fields for each screening record
Every check should answer: who was screened, when, against what, with what result, and by whom.
- Legal name and aliases or DBAs searched
- Date and time of the search
- List source (OIG LEIE, OFAC SDN, state list)
- Result: clear, potential match, or confirmed match
- Reviewer name or system identity
- Disposition notes for any match investigation
Documenting match resolution
Potential matches require a separate record: why the hit was a false positive or why the relationship was blocked. Include identifiers compared — date of birth, address, EIN, NPI — and the escalation path if a true match was confirmed. 'We looked and it was fine' without detail fails under scrutiny.
Tie screening to the vendor or employee record
Screening evidence scattered across email, shared drives, and personal downloads is unusable at audit time. Attach each check to the vendor or employee master record so anyone with appropriate access can reconstruct the full history — onboarding check, quarterly re-screens, and any holds.
Common documentation failures
Teams lose audits on process gaps, not intent: screening happened but was not dated; only the final 'clear' was saved, not the names searched; re-screening was informal; staffing agency attestation replaced your own check. Each gap creates exposure.
Use a screening log or monitored workflow
A standardized exclusion screening log — or a tool that writes one automatically — ensures every check produces the same evidence format. Export the log by date range, vendor, or employee when legal, compliance, or a payer requests proof.
Frequently asked questions
- How long should we keep screening records?
- Retention periods vary by regulator and contract, but many healthcare organizations retain exclusion screening evidence for at least six years — often aligned with federal healthcare record retention expectations. Confirm with your compliance policy.
- Is a screenshot of a clear search enough?
- It is better than nothing, but weak on attribution and continuity. A structured log with date, searcher, names checked, and disposition is stronger. Automated workflows produce this by default.
Related guides
Put this into a monitored workflow
Exclusion Monitor handles this continuously — with reminders and an audit trail.