STANDARD APPLIED

US health
insurance.

How care gets paid for in the United States.

An interactive field guide for people building software in US healthcare. Follow one member through a plan year, sit in each seat at the table, and find where your product attaches. Terms with a dotted underline open a definition.

OCTOBER 2026 · FIRST EDITION · OPEN SOURCE ↗
THE CLAIMS REGISTER
ALLOWED 1000.00
Claim card From the provider
Receipt The remittance
Drawer The funds
01 / CLAIM SUBMISSION

The provider submits the claim for review.

Information and money leave by different doors. The member’s explanation of benefits arrives separately.

PART I · ONE VISIT

Every field on the card is a key into a different system.

Maya Okonkwo is 34, a product designer at a 400-person software company. Her plan has a $2,000 deductible, 20% coinsurance after it and a $5,000 out-of-pocket maximum. Behavioral health has a separate administrator. The employer funds the claims; the insurer on the card runs the plan for a fee.

Each field is read by a different party and unlocks a different record. Select one to see who reads it and what it opens.

For buildersEach field points at a system of record elsewhere: eligibility, the employer contract, the network, the PBM, the claims address. Treat the card as a set of foreign keys.

Why we say this

Self-funded plans cover 67% of workers with employer coverage, usually run by a national administrator under an administrative services agreement. The card carries the administrator’s brand in both arrangements. Pharmacy routing follows the NCPDP card standard; medical claims follow the payer ID.

KFF ↗ HealthCare.gov ↗ NCPDP via CMS ↗ CMS ↗

Northwind HealthChoice PPO · Open Access
Member name and IDMAYA OKONKWO · W204 118 773
Group numberGRP 7714-02
Printed cost sharingDED $2,000 · OOP MAX $5,000 · COINS 20%
Rx BIN · PCN · Rx GroupBIN 610014 · PCN NWRX · GRP NWCOM
Payer IDPAYER ID 87726
Behavioral healthMental health and substance use: 800-555-0188 · Payer ID 68294
Administered by Northwind Health for the Fairline Software Group Health Plan
PART I · ONE VISIT

Seven words decide who pays what.

The premium keeps coverage in force and is paid whether or not care is used. Everything else on this page happens when care is used, in this order: the provider bills a charge, the plan recognizes an allowed amount, and the allowed amount is split between Maya and the plan by her deductible, her coinsurance and her out-of-pocket maximum.

For buildersIn Maya’s plan these seven values, and the running totals behind the deductible and the maximum, decide a single in-network claim. Real plans add copays, tiers, out-of-network rules and exclusions, but each estimate, EOB and remittance still applies rules like these to an allowed amount.

Builder’s detailThe eligibility response (X12 271) carries the deductible and out-of-pocket amounts remaining; the remittance (835) carries the split with adjustment reason codes; the EOB restates it for the member.

Sources

HealthCare.gov ↗ CMS ↗ CMS ↗ CMS ↗ HealthCare.gov ↗

ONE CLAIM, $1,000 ALLOWEDCOINSURANCE 20%
$0 · deductible met$2,000 · nothing met yet
MAYA PAYS
THE PLAN PAYS80% of what remains after the deductible

Billed charge for this claim: $3,000. The $2,000 difference is written off by the provider; see the bill. Assumes covered, in-network care with no copay and the out-of-pocket maximum unreached.

Premium
What Maya and her employer pay each month for coverage. It never counts toward the limits below.
Allowed amount
The amount the plan recognizes for a service under its contract with the provider. Usually far below the billed charge.
Deductible
What Maya pays first each plan year, in full, until the total reaches $2,000. Then the plan starts sharing.
Coinsurance
After the deductible, Maya’s share of each allowed amount: 20%. The plan pays the other 80%.
Copay
A fixed amount for a visit or a prescription, when a plan uses them. Maya’s plan uses coinsurance alone, to keep the arithmetic in view.
Out-of-pocket maximum
The ceiling on what Maya pays in a plan year, $5,000. After it, the plan pays everything allowed.
Administrator and funder
The administrator runs the plan and prices the claims. The funder pays the plan’s share. In Maya’s plan they are two different organizations.
PART I · ONE VISIT

The same MRI costs Maya a different amount in March and in November.

Maya sees a therapist by video every month from January. In March her doctor orders an MRI, which she has at a hospital outpatient department. In September she goes to an emergency department after a fall.

Cost sharing accumulates. Allowed amounts count toward the deductible until it is met, then coinsurance applies, until the out-of-pocket maximum stops the member’s spending. What a service costs the member depends on everything billed before it in the plan year.

Move the deductible, or move the MRI to another month, and the year reflows. Premium contributions sit outside these limits.

For buildersA patient cost estimate needs the accumulators as of today, which come from the eligibility response. A claim that adjudicates tomorrow changes them.

Builder’s detailThe 271 response reports “deductible remaining” and “out-of-pocket remaining” as of the inquiry; plans refresh these as claims adjudicate, so an estimate given before a pending claim posts can be wrong by that claim.

Assumptions and sources

Covered, in-network care; no copays; no other coverage; one member. Video therapy is allowed at $120 against a $180 charge, the MRI at $1,000 (facility $750, radiologist $250) against $3,000 billed, and the emergency visit at $2,600 (facility $2,200, physician $400) against $7,150 billed. The amounts are synthetic teaching values. One model computes every number on this page.

HealthCare.gov ↗ CMS ↗ U.S. Department of Labor ↗

MAYA’S PLAN YEARDEDUCTIBLE $2,000 · COINSURANCE 20% · OOP MAX $5,000
Video therapy, every month from JanuaryMRI, scheduled in MarchEmergency visit, SeptemberEach month shows what Maya paid, then what the plan paid.
billed by providers
allowed by the plan
paid by Maya
paid by the employer plan
THE MRI’S $1,000, AS FIFTY $20 COUNTERS

MemberPlan
MAYA PAYS
THE EMPLOYER PLAN PAYS
PART I · ONE VISIT

Every encounter walks the same six stations.

Three encounters, one path: eligibility, authorization, care, claim, adjudication and payment. Switch the encounter to see what changes at each station and what stays the same. Real workflows branch, repeat and run in parallel; the stations are the responsibilities.

For buildersEach station is a system boundary with its own transaction, its own failure modes and its own buyer. Turn on Builder’s detail to see the transaction at each one.

STEP 01 / 06
Builder’s detail shows the transaction codes
One ticket, six stations: scanner, stamp, pen, rollers, gauge, pay station

FROM
TO
Rejections, denials and appeals

Rejection

A submission can fail format, identification or other intake checks. The sender may need to correct it before processing can continue.

Denial

A claim decision can deny some or all benefits. The reason and applicable plan procedures determine what happens next.

Correction or appeal

Fixing claim information and challenging a benefit decision are different actions. Follow the plan’s instructions and deadlines.

CMS ↗ U.S. Department of Labor ↗ KFF ↗

PART I · ONE VISIT

The bill, the allowed amount, the member’s share and the write-off are four different numbers.

A provider bills its full charge. The administrator prices the claim at the contracted amount, which is usually far lower, and the provider writes off the difference as a contractual adjustment. The allowed amount is then split between the member and the plan under the benefits in force that day.

The write-off is the number newcomers miss. It explains why a hospital’s list prices say little about what any party pays.

For buildersStore all five values on every claim line: billed, allowed, member, plan, write-off. An unqualified “amount” field is the most common data-model mistake in healthcare software.

Builder’s detailOn the 835 remittance the write-off appears as a contractual obligation adjustment (group code CO) with a reason code, and the member’s share as patient responsibility (group code PR). The billed amount is on the 837; the allowed amount is implied by payment plus adjustments.

Why we say this

The explanation of benefits shows the billed amount, the allowed amount, what the plan paid and what the member owes; the remittance to the provider carries the adjustment reasons. Hospitals must now publish their negotiated rates alongside their list charges, which shows the gap directly.

CMS ↗ CMS ↗ CMS ↗

FROM CHARGE TO PAYMENT

PART II · WHO IS AT THE TABLE

Three seats with different jobs, and a contract between each pair.

The member, with the employer behind them. The providers, in three shapes: a practice, a hospital and a therapist on a video call. The payer, often several companies under one brand. Between each pair sits a contract; information flows one way along it and money the other.

Select a seat to see what it sends and receives. Three seats make five chapters: one for the member and employer, three for the provider shapes, one for the payer. Each answers the same six questions.

For buildersChoose the seat first. A product that serves two seats serves two customers with opposed incentives, and its data model carries both views of the same claim.

THE TABLE
premium · contribution →← card · EOBclaims ↑remittance · funds ↓care ↑cost sharing ↓Member + employerTHE COVERED PERSON · THESPONSORPayer / administratorINSURER · ASO · PBMProvidersPRACTICE · HOSPITAL ·THERAPISTThe claimINFORMATION · MONEY

PART II · WHO IS AT THE TABLE

Maya chose from the plans her employer chose, and her employer funds the claims.

Maya picked a plan at open enrollment and pays part of the premium from each paycheck. Her employer pays the rest and, because the plan is self-funded, pays the claims from its own money. The insurer on the card is its administrator, and stop-loss insurance covers the largest claims.

For buildersThe employer is a buyer with a budget, a broker and a plan year that often begins January 1. Most products reach members through the employer or its administrator.

Sources

KFF ↗ U.S. Department of Labor ↗ HealthCare.gov ↗ U.S. Department of Labor ↗ CMS ↗ U.S. Department of Labor ↗

What they want

Maya: care she can reach, a predictable bill, a network with her doctors. The employer: a benefit that recruits and retains people at a cost it can forecast.

Where the money goes

Payroll contributions plus the employer’s share fund expected claims and administration. In 2025 the average worker paid $1,440 of a $9,325 single premium. Cost sharing comes on top when care is used.

What hurts

For Maya: a surprise bill, a denied authorization, a therapist outside the network. For the employer: cost trend above budget, a few catastrophic claims, vendor contracts it cannot see inside.

Documents and systems

The summary of benefits and coverage, the plan description, the card and the EOB. Behind them, the benefits platform, the enrollment file (X12 834) to each vendor, and the administrator’s portal.

Words that shift

“Plan” is the benefit arrangement. “Group” is the employer’s covered population. “Premium” keeps coverage in force and sits outside the deductible.

Where software helps

Benefits administration and enrollment, decision support at open enrollment, cost estimates, navigation to in-network care, and claims analytics for self-funded employers.

WHO FUNDS THE CLAIMS

PART II · WHO IS AT THE TABLE

A practice is paid a contracted rate for a coded visit, weeks after the visit.

Maya’s doctor belongs to a group practice. The practice is credentialed with each payer it accepts and signs a contract with a fee schedule, often set as a percentage of Medicare rates. Each visit becomes diagnosis and procedure codes, then a professional claim, then a payment and a patient balance.

For buildersSelling to a practice means selling time back to the clinician or cash back to the office. Measure days in A/R, first-pass acceptance and denial rate before and after.

Sources

CMS ↗ KFF ↗ CMS ↗ DataSpring (formerly CAQH) ↗ American Medical Association ↗ CDC National Center for Health Statistics ↗ CMS ↗ KFF ↗ CMS ↗

What they want

Clean claims that pay the first time, authorizations that keep pace with care, patient balances that get collected, and time with patients.

Where the money goes

A fee per coded service at the contracted rate, plus the member’s cost sharing. Value-based contracts add shared savings or a payment per member.

What hurts

Denials, prior authorization, days in accounts receivable, and credentialing that keeps a new clinician from billing for months. Marketplace insurers denied about 19% of in-network claims in 2024.

Documents and systems

The EHR for the record, the practice management system for scheduling and billing, a clearinghouse, and often a billing service or revenue cycle vendor.

Words that shift

“Provider” can be the clinician who rendered the service, the group that bills, or the entity that is paid. A claim carries all three, and they can be three different NPIs.

Where software helps

Eligibility before the visit, prior authorization, coding assistance, claim scrubbing, denial management, patient estimates and payments, value-based reporting.

PART II · WHO IS AT THE TABLE

One hospital visit produces two claims, each priced by contract.

Maya’s MRI and her emergency visit each produced a facility claim from the hospital and a professional claim from the clinician. The hospital bills from its chargemaster, a list of charges for everything it does, and is paid according to contracts. For inpatient stays, Medicare and many commercial contracts pay a fixed amount per diagnosis-related group.

For buildersSelling to a hospital means selling against denials and days in A/R, to a buyer in revenue cycle or finance. The clinical pitch gets a meeting; the cash pitch gets a contract.

Sources

CMS ↗ CMS ↗ Medicare.gov ↗ eCFR via Cornell LII ↗ CMS ↗ KFF ↗ American Hospital Association ↗ KFF ↗

What they want

Authorized admissions and procedures paid at contracted rates, a short stay for each diagnosis group, and collection of patient balances without losing patients.

Where the money goes

Facility payment by case rate, per diem, percentage of charges or fee schedule, plus patient cost sharing and government programs. Uncompensated care becomes charity care or bad debt.

What hurts

Medical-necessity denials, inpatient-versus-observation disputes, downgraded level of care, and the cost of a revenue cycle department large enough to contest all of them.

Documents and systems

The institutional claim (UB-04 or X12 837I) with revenue codes, the chargemaster, the hospital EHR, utilization review and case management, and a revenue cycle platform across several vendors.

Words that shift

“Charge” is the list price and “rate” the contracted amount. A “facility fee” covers the room, equipment and staff, billed apart from the physician. “Observation” is an outpatient status that looks like an admission.

Where software helps

Prior authorization and utilization review, coding and documentation, denial prevention and appeals, price transparency files and estimates, patient financing, remittance reconciliation.

One visitMRI · EMERGENCYFacility claimHOSPITAL · UB-04 / 837IProfessional claimCLINICIAN · CMS-1500 /837PAdministratorTWOREMITTANCES
PART II · WHO IS AT THE TABLE

Maya’s therapist bills a separate administrator with its own network and rules.

Maya’s plan carves behavioral health out to an administrator with its own network, authorization rules and payer ID. Her therapist, licensed in her state and seeing her by video, checks eligibility and submits claims there. Many therapists stay outside networks; their patients pay directly and submit a superbill. Prescribing ADHD medication by telehealth has its own federal rules.

For buildersThe thinnest margin in the system sits here. The largest recent behavioral healthtech companies are intermediaries between clinicians and payers, or sell the benefit to employers.

Sources

KFF ↗ CMS ↗ U.S. Department of Labor ↗ CMS ↗ HHS ↗ PSYPACT ↗ Federal Register ↗ American Hospital Association ↗ Headway ↗ HHS ↗

What they want

To see patients and be paid a rate that supports a practice. Many solo clinicians skip insurance because credentialing, authorizations and low rates cost more than they return.

Where the money goes

In network: the behavioral administrator pays the contracted rate for a timed psychotherapy code, plus cost sharing. Out of network: the patient pays the clinician and the plan may reimburse part.

What hurts

Low network rates, parity that is promised on paper and hard to enforce, licensure for patients who move or travel, and prescribing rules that change year to year.

Documents and systems

A small EHR or practice platform, a telehealth tool, the administrator’s portal, and increasingly an intermediary that credentials the clinician and bills for them.

Words that shift

“Carve-out” means the benefit is administered elsewhere. “Place of service” says where the patient was (code 10 for home). “Parity” is a legal standard for the rules, with rates left to contracts.

Where software helps

Credentialing and billing intermediaries, telehealth with claims built in, employer-purchased behavioral programs, measurement-based care, licensure and prescribing compliance.

One cardONE BRANDMedicaladministratorDOCTOR · HOSPITAL ·PAYER ID,ABehavioral,administratorTHERAPIST · PAYER ID BMedicalnetworkCONTRACT ABehavioralnetworkCONTRACT B
PART II · WHO IS AT THE TABLE

The payer is paid differently for each line of business, and runs a different operation for each.

The insurer on Maya’s card runs several businesses under one brand. For Maya’s employer it administers claims for a fee. For a fully insured small employer it keeps premium and carries risk. For Medicare Advantage it is paid a risk-adjusted amount per member by CMS, and for managed Medicaid a capitation rate by a state. Each line has its own regulator, measures and often its own claims system.

For buildersName the line of business first. A capability for Medicare Advantage lives under different rules, data and incentives than the same capability for a self-funded employer account.

Sources

CMS ↗ CMS ↗ NCQA ↗ Medicaid.gov ↗ Medicaid.gov ↗ eCFR ↗ KFF ↗ CMS ↗

What they want

Premium or fees that cover claims plus administration, a medical loss ratio within the legal bounds, a network broad enough to sell and narrow enough to price, and quality scores that earn bonuses.

Where the money goes

In: premium, administrative fees, capitation from CMS and states. Out: claims (the large majority), care management, the PBM, network contracting, member service and margin.

What hurts

Cost trend it missed in pricing, risk scores it cannot defend, Star ratings that slip, and prior authorization under scrutiny: Medicare Advantage insurers made 52.8 million determinations in 2024, denied 7.7%, and lost 80.7% of the few appeals.

Documents and systems

The policy or administrative services agreement, provider contracts, benefit configuration, the claims engine, utilization management, the member portal, regulatory filings.

Words that shift

“Payer” covers any plan or claims counterparty; ask who bears risk, who adjudicates and who pays. “Plan” can be the company, the product or the employer’s arrangement. “Network” is a contract set.

Where software helps

Claims adjudication and payment integrity, prior authorization and the new API obligations, provider data, risk adjustment and quality analytics, care management, member engagement, data exchange.

Line of businessHow it is paidRoleRegulator
Commercial, fully insuredPremium from the employer or individualKeeps premium, bears claims risk, bound by the loss ratioState insurance departments; CMS for ACA rules
Commercial, self-fundedAdministrative fee per member from the employerAdministers; the employer bears riskDOL under ERISA
Medicare AdvantageRisk-adjusted payment per member from CMSBears risk; earns Star rating bonusesCMS
Medicaid managed careCapitation per member from the stateBears risk under the state contractThe state Medicaid agency; CMS
Marketplace individualPremium plus federal subsidiesKeeps premium, bears risk, bound by the loss ratioCMS and state Marketplaces
PART II · WHO IS AT THE TABLE

Each party does what its contract pays it to do.

Each party responds to how it is paid and what it is held accountable for. The behavior follows from the contracts.

For buildersA product that asks a party to act against its payment model is adopted slowly. A product that sits with the party whose incentive already points the right way, or that changes the payment model, has a chance.

Why employers self-fund

Two thirds of covered workers are in self-funded plans. The employer keeps the premium margin an insurer would take, follows federal rules under ERISA in place of state benefit mandates, and sees its own claims data. Stop-loss insurance bounds the risk.

KFF ↗ U.S. Department of Labor ↗

Why payers manage utilization

An insurer that keeps the difference between premium and claims has a direct interest in avoiding care it judges unnecessary. The loss-ratio rules cap what it can keep, and prior authorization metrics are now public, which keeps the practice under scrutiny.

eCFR ↗ KFF ↗ CMS ↗

Why hospitals keep chargemasters

List prices anchor negotiations, apply to uninsured and out-of-network claims and feed cost reports. Price transparency rules now require hospitals to publish negotiated rates beside the list.

CMS ↗ eCFR via Cornell LII ↗

Why practices consolidate

A larger group has leverage in contracting, can afford a revenue cycle team and can take on value-based contracts. Many practices now belong to hospitals, insurers or investors, which changes who sits across the table.

CMS ↗ UnitedHealth Group ↗

Why PBMs like rebates

A PBM negotiates rebates from manufacturers against list price and keeps or passes through a share. High list prices produce large rebates, a structure the FTC examined in 2024.

Federal Trade Commission ↗

Why clinicians leave networks

When the contracted rate for a timed therapy session falls below the clinician’s cost, the clinician goes out of network or cash-only. Parity law governs the rules; rates stay in the contracts.

CMS ↗ American Hospital Association ↗

PART III · THE SHAPE OF THE SYSTEM

Half of the country is covered through work, and the rest through programs with their own rules.

The route someone’s coverage takes decides the rules that apply, who pays and which products can reach them. Employer coverage is the largest route, then Medicare, Medicaid and individual policies. A person can hold more than one, so the shares add to more than 100%.

For buildersThe same feature has a different buyer and regulator on each route. Choose the routes before the data model.

Why we say this

Share of the US population with each coverage type for some or all of 2025. Census Bureau, September 2026. Categories overlap. In 2026, 55% of eligible Medicare beneficiaries are in Medicare Advantage plans run by private insurers, 78% of Medicaid enrollees receive care through managed care organizations, and 23.1 million people selected Marketplace coverage. Private insurers therefore operate inside the public programs too.

U.S. Census Bureau ↗ KFF ↗ KFF ↗ KFF ↗ CMS ↗

Employment-based53.5%Medicare20.1%Medicaid17.1%Direct purchase10.5%TRICARE2.8%VA and CHAMPVA1.2%Uninsured all year7.9%

Share of the US population with each coverage type for some or all of 2025. Census Bureau, September 2026. Categories overlap.

PART III · THE SHAPE OF THE SYSTEM

The system is a stack of decisions, each still in force.

Each layer solved a problem of its time and left a structure the next layer had to work around. These are the ones a builder still meets.

For buildersWhen a rule seems arbitrary, find its layer. Most of the system’s odd shapes come from a 1940s tax rule, a 1974 pension law or a 1996 privacy law meeting a 2024 API mandate.

Sources

Congressional Research Service ↗ U.S. Treasury ↗ CMS ↗ GovInfo ↗ U.S. Department of Labor ↗ U.S. Department of Labor ↗ CMS ↗ HHS ↗ CMS ↗ CMS ↗

  1. 1942–54
    Employer coverage. Wartime wage controls let firms compete on benefits, and a 1943 tax ruling, made uniform in the 1954 code, kept employer-paid premiums out of taxable income. Coverage attached itself to the job. Congressional Research Service ↗ U.S. Treasury ↗
  2. 1965
    Medicare and Medicaid. Federal coverage for people over 65 and, with the states, for people with low incomes. Two programs, two rule sets, two of the largest payers. CMS ↗
  3. 1973
    The HMO Act. Federal support for prepaid, managed plans: the origin of networks, gatekeeping and the plan types on today’s cards. GovInfo ↗
  4. 1974
    ERISA. Federal standards for private employer benefit plans, preempting state law. Why a self-funded plan escapes state insurance mandates and why the regulator depends on the funding arrangement. U.S. Department of Labor ↗ U.S. Department of Labor ↗
  5. 1985
    COBRA. Continuation of employer coverage after a job ends, at the employee’s expense. U.S. Department of Labor ↗
  6. 1996
    HIPAA. Portability, privacy and security rules, and the standard electronic transactions every claim, eligibility check and remittance still uses. CMS ↗ CMS ↗
  7. 2010
    The Affordable Care Act. Marketplaces, premium subsidies, Medicaid expansion, essential benefits, guaranteed issue and the medical loss ratio. HHS ↗ eCFR ↗
  8. 2022
    The No Surprises Act. Protection from out-of-network bills for emergency care and for out-of-network clinicians at in-network facilities, with a dispute process between providers and plans. CMS ↗
  9. 2026–27
    Interoperability and prior authorization APIs. CMS-0057-F: decision timeframes and public metrics from 2026; patient, provider, payer-to-payer and prior authorization APIs from 2027 for the payers it covers. CMS ↗
PART III · THE SHAPE OF THE SYSTEM

Premiums fill a pool, claims drain it, and the law bounds what stays behind.

Contributions from employers, members, CMS and the states enter a pool. Claim payments to providers leave it. For insured products, at least 80 cents of each premium dollar (85 in the large-group market) must go to care and quality improvement, or the difference is rebated. The remainder covers administration and margin.

In Maya’s self-funded plan the pool is the employer’s money, the administrator is paid a fee, and stop-loss insurance sits above it as a separate contract. The employer’s fiduciary duty under ERISA replaces the loss-ratio rule.

For buildersEvery party’s behavior on the other pages comes from its position in this loop. Find where your product moves, saves or delays money in it, and you have found who will pay for it.

Why we say this

CMS ↗ eCFR ↗ KFF ↗ U.S. Department of Labor ↗ U.S. Department of Labor ↗

THE CISTERN
01 / PREMIUMS IN

$5.3TUS health spending in 2024, 18.0% of GDP CMS ↗
31%paid by private insurance; Medicare 21%, Medicaid 18%, out of pocket 11% CMS ↗
80 / 85%minimum share of premium for care and quality: individual and small group / large group eCFR ↗
$1.6Bin loss-ratio rebates issued to members in 2025 KFF ↗
PART IV · ONE NAME, SEVERAL JOBS

One brand can hold several seats.

One brand can hold several seats. Licensing, ownership, business portfolio and service contracts connect organizations in different ways, and each kind of connection carries a different meaning.

For buildersFor a contract or an integration, identify the legal entity, the product and the line of business. The logo identifies the brand.

Relationship notes, other groups and BlueCard

Other company groups

CVS Health

Aetna provides health benefits, CVS Caremark is the pharmacy benefit manager, and CVS owns pharmacies and clinics. One group holds the payer, the PBM and part of the provider seat.

CVS Health ↗

Centene

The largest Medicaid insurer, with 12.5 million Medicaid members in 30 states at the end of 2025, paid by states per member. It bought Magellan Health, a behavioral company, in 2022 and agreed to divest the remainder in December 2025. Portfolios change, so every relationship here carries a date.

Centene ↗

Kaiser Permanente

An integrated system in which the health plan, the hospitals and the medical groups are parts of one organization. The payer and the provider share a seat, which changes every incentive on the other pages.

Kaiser Permanente ↗

The BlueCard program

Independent Blue companies cooperate when a member receives care outside the Home Plan’s area. The Home Plan issues the policy; the Host Plan is local to the care. In the BCBS Kansas example, the provider submits locally, local pricing applies and the Home Plan decides benefits. Coverage follows the member’s product and the card’s instructions.

BCBS Kansas ↗

Selected relationships from public filings and company websites. Business brands and regulated entities are labeled separately, and dates appear with their sources.

PART V · WHERE SOFTWARE ATTACHES

Nine seams, each with a buyer, a measure, a standard and a rule.

From enrollment to reconciliation there are nine seams where one party hands something to another. Each has a buyer, a measure the buyer watches, a data standard and a rule. Most healthcare software lives at one of them.

For buildersPick a seam. Learn its standard, its rule and the number its buyer reports upward. Then decide whether you improve that number or replace the party on one side of it.

PART V · WHERE SOFTWARE ATTACHES

Each seat has a signer, a blocker and a calendar.

Each seat has a person who signs, a person who blocks and a calendar that decides when the signature can happen.

For buildersSell to the calendar. A product that reaches members through employers has one buying window a year, and the broker is usually in the room.

SeatWho signs, who blocksWhen
EmployerThe benefits leader (HR or total rewards) with the CFO behind them. The broker or benefits consultant advises and often controls access; most employers use one.Renewals and new vendors are decided in the months before the plan year, which for many employers begins January 1. Open enrollment runs in the weeks before it.
Physician practiceThe practice owner or administrator; in a larger group, the revenue cycle director or COO. Clinicians champion; administrators sign.Short cycles, small budgets, high churn. Integration with the practice management system is the gate.
HospitalThe VP of revenue cycle, the CFO or the CIO, depending on the seam. Clinical leaders sponsor; IT security and procurement review.Long cycles tied to budget years and EHR roadmaps. A pilot in one department is the usual door.
Therapist or virtual practiceThe clinician, or the platform that employs or contracts them. Employer-purchased behavioral programs are bought by the benefits leader.Fast for tools the clinician pays for; slow for anything that needs the administrator’s cooperation.
PayerLine-of-business leaders (commercial, Medicare, Medicaid), the chief medical officer for clinical programs, the CIO for platforms, procurement for everything.Annual budgets, regulatory deadlines (the 2026 and 2027 API dates) and bid cycles for government contracts set the calendar.
SpringEmployers and brokers review renewal quotes and shop vendors for a calendar-year plan.
SummerBenefit decisions are made; vendors contract for the next plan year.
FallOpen enrollment: employer plans in the weeks before their plan year; Medicare October 15 to December 7; the Marketplace November 1 to January 15.
January 1Marketplace coverage and many employer plan years begin; deductibles and out-of-pocket accumulators reset.
Sources

KFF ↗ Medicare.gov ↗ HealthCare.gov ↗ U.S. Department of Labor ↗ KFF ↗

PART V · WHERE SOFTWARE ATTACHES

Before data moves, each party has a legal role.

Before any data moves, each party has a legal role. The roles decide what can be shared, with whom and under which agreement.

For buildersDecide your HIPAA role on day one. It determines your contracts, your architecture and which seams you can reach.

Sources

HHS ↗ HHS ↗ HHS ↗ HHS ↗ HHS ↗

Covered entity

Health plans, most providers and clearinghouses. Bound directly by the HIPAA privacy and security rules.

HHS ↗

Business associate

A company that handles protected health information for a covered entity: a billing vendor, a cloud host, an analytics product. Bound by HIPAA and by an agreement with each customer.

HHS ↗

The agreement

A business associate agreement states permitted uses, safeguards, breach duties and subcontractor flow-down. A product sold to covered entities signs one with every customer.

HHS ↗

Minimum necessary

Use or disclose only the information the purpose needs, with exceptions that include disclosures for treatment. The rule shapes which fields an integration may request.

HHS ↗

De-identification

Two routes release data from the rules: removing eighteen identifiers (safe harbor) or an expert’s statistical determination. Both have conditions analytics products get wrong.

HHS ↗

Substance use records

Records from federally assisted substance use programs follow 42 CFR Part 2, with consent requirements stricter than HIPAA. A 2024 rule aligned parts of it with HIPAA; the remaining differences matter for behavioral products.

HHS ↗

State law

State privacy laws can be stricter than HIPAA, and several now cover consumer health data outside it. Check the state of the member as well as the state of the company.

HHS ↗

PART V · WHERE SOFTWARE ATTACHES

Four questions to settle before the first integration.

Settle these with the organizations involved. They determine the contracts, data model, permissions and test cases a product needs.

For buildersAnswer these in writing with the counterparties before the first test claim. Each one becomes a column, a state or a contract clause in the product.

  1. 01

    Identify each party

    Record the sponsor, regulated entity, product, administrator, network, billing provider and payee separately. Use the trading partner’s current routing instructions. An NPI identifies a provider; the other roles need their own identifiers.

  2. 02

    Keep effective dates

    Coverage, benefits, contracts and company relationships change. A claim’s service date can matter more than the date your system receives it. Retain the version used for a decision.

  3. 03

    Define states and reconciliation

    Distinguish submission, acceptance, adjudication, payment, correction and appeal. Link remittance to funds, preserve identifiers, and agree how duplicates, reversals and adjustments are handled.

  4. 04

    Establish data access

    Confirm the purpose and permission for each exchange, the parties’ HIPAA roles and the required agreements. Apply the minimum necessary standard where it applies; treatment disclosures are among its exceptions.

CMS ↗ CMS ↗ CMS ↗ HHS ↗ HHS ↗

Implementation guidance based on the responsibilities described in this guide. Specific trading-partner requirements must be checked for the actual product and transaction.

PART VI · REFERENCE

Insurance terms

“Group” might mean an employer’s coverage group, a physician practice or a corporate family. “Payer” alone leaves several responsibilities unspecified. Each term links to its source.

Member / enrolleePeople

A person enrolled in coverage. The member can be the subscriber or a covered dependent.

HealthCare.gov ↗

Subscriber / dependentPeople

The subscriber is the person through whom coverage is held. A dependent receives coverage through that relationship, such as an eligible spouse or child.

HealthCare.gov ↗

Plan sponsorOrganizations

The employer, union or other organization that establishes or maintains a plan. Sponsorship and day-to-day administration can sit with different parties.

U.S. Department of Labor ↗

GroupOrganizations

In employer benefits, a group commonly refers to an employer’s covered population or contract. A provider group is a practice. A corporate insurance group is a set of related companies. The context determines the meaning.

U.S. Department of Labor ↗

Group health planOrganizations

An employment-related benefit arrangement providing health coverage to employees and eligible dependents. It can be insured or self-funded.

U.S. Department of Labor ↗

Insurer / carrierOrganizations

An organization issuing insurance and assuming covered financial risk under the policy. The same company may separately sell administrative services.

HealthCare.gov ↗

TPA / ASOOrganizations

A third-party administrator performs contracted administrative work. Administrative services only describes an arrangement in which services are provided for a fee without taking on the underlying claims risk.

HealthCare.gov ↗

Plan administratorOrganizations

The person or entity designated to administer the plan. The legally designated administrator can differ from the vendor that processes claims.

U.S. Department of Labor ↗

Payer / payorOrganizations

A term commonly used for a health plan or claims-processing counterparty. Ask separately who bears claims risk, who adjudicates and who sends the payment.

CMS ↗

PayeeOrganizations

The recipient of a payment. The payee is often the group or facility, with the individual clinician recorded separately as the rendering provider.

CMS ↗

ProviderPeople

A clinician, facility or other organization furnishing health care. Rendering and billing roles can belong to different parties.

CMS ↗

Provider networkOrganizations

Providers contracted for a particular plan or network arrangement. Participation is per network and product, so a provider can accept some of a company’s products and stand outside others.

HealthCare.gov ↗

PBMOrganizations

A pharmacy benefit manager administers pharmacy benefits: pharmacy networks, claims processing, formularies and manufacturer rebates, depending on the contract.

Federal Trade Commission ↗

Carve-outOrganizations

A benefit administered separately from the medical benefit, such as behavioral health or pharmacy, often by a different company with its own network and payer ID.

KFF ↗

Behavioral administratorOrganizations

The organization that administers a carved-out mental health and substance use benefit. It can belong to the same group as the medical administrator or to a different one.

KFF ↗

Integrated systemOrganizations

An organization that owns both the health plan and the providers, so the payer and the provider seats are the same company.

Kaiser Permanente ↗

Fully insuredFunding

The sponsor buys insurance; the insurer bears covered claims risk under the policy in exchange for premiums.

U.S. Department of Labor ↗

Self-funded / self-insuredFunding

The employer assumes responsibility for paying claims. It can purchase administration, network access and other services separately. Two thirds of covered workers are in such plans.

KFF ↗

Stop lossFunding

Insurance that reimburses an employer or plan for covered losses above contractual thresholds. It is distinct from the member’s ordinary health benefits.

U.S. Department of Labor ↗

PremiumFunding

The amount paid to keep insurance coverage in force, usually monthly. It is separate from the cost sharing incurred when care is used and sits outside the deductible.

HealthCare.gov ↗

Medical loss ratioFunding

The share of premium an insurer spends on medical care and quality improvement. The Affordable Care Act requires at least 80% in the individual and small-group markets and 85% in the large-group market, with rebates below that.

eCFR ↗

Billed chargeFunding

The amount a provider bills for a service, from its fee schedule or chargemaster. The starting point of a claim; contracts decide what is paid.

CMS ↗

Allowed amountFunding

The amount recognized for a covered service under the plan’s rules or provider agreement. It can differ sharply from the amount billed.

CMS ↗

Contractual adjustmentFunding

The difference between the billed charge and the allowed amount, written off by a participating provider under its contract.

CMS ↗

DeductibleFunding

The amount a member pays for services subject to the deductible before the plan begins sharing those costs. Some benefits apply before the deductible is met.

HealthCare.gov ↗

Copay / coinsuranceFunding

A copay is a fixed amount for a covered service. Coinsurance is a percentage of the allowed amount. Plan rules determine when each applies.

HealthCare.gov ↗

Out-of-pocket maximumFunding

A limit on qualifying member cost sharing for covered care over the plan period. Premiums sit outside it, and network and plan rules decide what counts.

HealthCare.gov ↗

AccumulatorFunding

The running total of what a member has paid toward the deductible and the out-of-pocket maximum in the plan year. The eligibility response reports it as of today.

CMS ↗

Fee scheduleFunding

The list of contracted payment amounts per service between a payer and a provider. Commercial schedules are often expressed as a percentage of Medicare’s physician fee schedule.

KFF ↗

ChargemasterFunding

A hospital’s list of all items and services for which it has established a charge. Price transparency rules require hospitals to publish it with their negotiated rates.

eCFR via Cornell LII ↗

Facility feeFunding

A hospital’s separate charge for the room, equipment and staff of an outpatient department, billed in addition to the clinician’s professional fee.

KFF ↗

DRGFunding

A diagnosis-related group. Medicare and many commercial contracts pay one fixed amount per inpatient stay, set by its group.

CMS ↗

Observation statusFunding

An outpatient status in which a patient is monitored in the hospital while a doctor decides whether to admit. It can look like an admission to the patient and is paid differently.

Medicare.gov ↗

CapitationFunding

A set payment per member for a defined period and set of services. States pay Medicaid managed care organizations this way; some provider contracts use it too.

Medicaid.gov ↗

Risk adjustmentFunding

Payment adjusted for the expected cost of each member’s diagnoses. Medicare Advantage plans are paid this way, which is why documented diagnoses carry financial weight.

CMS ↗

Coordination of benefitsFunding

Rules that determine payment order when a person has more than one source of coverage. The secondary payer applies its own rules to the remainder.

Medicare.gov ↗

HMO / PPO / EPO / POSOrganizations

Plan designs with different network, referral and out-of-network features. The labels describe access arrangements; ownership and funding are separate questions.

HealthCare.gov ↗

ClaimWorkflow

A request for payment or benefits for care. A claim contains information about the member, provider, services and charges.

CMS ↗

Professional claimWorkflow

A claim from a clinician or practice for professional services, on the CMS-1500 form or the X12 837P transaction.

CMS ↗

Institutional claimWorkflow

A claim from a hospital or other facility, on the UB-04 (CMS-1450) form or the X12 837I transaction, with revenue codes for the facility’s services.

CMS ↗

AdjudicationWorkflow

The evaluation of a claim against applicable benefits, coverage, pricing and payment rules. It produces a decision and any financial allocation.

CMS ↗

Prior authorizationWorkflow

Approval required by a plan for certain care. One condition in a wider coverage and payment process; eligibility and claim rules still apply after approval.

CMS ↗

DenialWorkflow

A claim decision that declines some or all benefits. Marketplace insurers denied about 19% of in-network claims in 2024, and under 1% of denials were appealed.

KFF ↗

Days in A/RWorkflow

Net patient accounts receivable divided by average daily net patient revenue: how long a provider waits for its money. A standard revenue cycle measure.

HFMA ↗

EOBWorkflow

An explanation of benefits tells the member how a claim was processed and what they may owe. The bill comes separately from the provider.

CMS ↗

ERA / remittanceWorkflow

Electronic remittance advice tells a provider how a payment and any adjustments relate to claims. It is information accompanying the payment process.

CMS ↗

EFTWorkflow

Electronic funds transfer moves money through the banking system. Its trace information can be matched with the corresponding remittance.

CMS ↗

ClearinghouseWorkflow

An intermediary that validates, translates and routes claims and other transactions between providers and payers.

HHS ↗

Encounter dataWorkflow

Records of services delivered. A record is required under capitation too, where a periodic payment covers the services.

CMS ↗

FormularyWorkflow

A plan’s list of covered prescription drugs, with applicable tiers and coverage requirements. A member’s cost depends on the drug’s tier and the benefit.

HealthCare.gov ↗

NPIWorkflow

The National Provider Identifier identifies a healthcare provider in standard transactions. The plan, the claims destination and the governing contract each need their own identifier.

CMS ↗

Payer IDWorkflow

The electronic address a clearinghouse uses to route a claim to the right adjudication system. One company can have several.

CMS ↗

BIN / PCNWorkflow

Numbers on the card that route a pharmacy claim to the pharmacy benefit manager’s processing system under the NCPDP standard.

NCPDP via CMS ↗

Place of serviceWorkflow

A claim code for where care took place. Code 10 means telehealth in the patient’s home; code 02 means telehealth elsewhere.

CMS ↗

SuperbillWorkflow

An itemized receipt a patient submits to their plan for out-of-network reimbursement after paying a clinician directly.

American Hospital Association ↗

Good-faith estimateWorkflow

An estimate of expected charges that providers must give uninsured and self-pay patients under the No Surprises Act.

CMS ↗

ParityOrganizations

The legal requirement that mental health and substance use benefits be no more restrictive than medical benefits in financial terms and treatment limits.

CMS ↗

ERISAOrganizations

A federal law setting standards for many private-sector employee benefit plans and preempting state law for them. Governmental and church plans generally fall outside it.

U.S. Department of Labor ↗

Summary plan description / SBCOrganizations

The summary plan description explains an ERISA plan’s operation and benefits. The Summary of Benefits and Coverage uses a standardized format to describe coverage.

U.S. Department of Labor ↗

Covered entityOrganizations

A health plan, a clearinghouse or a provider that transmits standard transactions. Directly bound by the HIPAA rules.

HHS ↗

Business associateOrganizations

A company that creates, receives, maintains or transmits protected health information for a covered entity, bound by HIPAA and by a business associate agreement.

HHS ↗

BlueCard Home / HostOrganizations

In the example BlueCard arrangement, the Home Plan holds the member’s policy and the Host Plan is local to the care. Their operational responsibilities differ.

BCBS Kansas ↗

Star ratingsOrganizations

CMS quality ratings for Medicare Advantage and Part D plans. Higher ratings earn bonus payments, which is why plans invest in the measures.

CMS ↗

PART VI · REFERENCE

Sources and scope

First edition · Sources checked October 19, 2026. This guide explains common arrangements and selected organizations for people building software. Maya and her plan are fictional; every amount is a synthetic teaching value. Organization examples come only from public filings, annual reports and company websites. For an individual claim or coverage decision, use the applicable plan documents and the member card’s instructions. Outside its scope: state-by-state rules, plan selection advice, complete subsidiary trees, detailed risk adjustment, dental and vision, workers’ compensation and the full appeals lifecycle.

Practitioner review: a payer operations review, a revenue cycle review and a behavioral health billing review are pending, and each reviewer will be credited here once complete. Source code and content are at github.com/standardapplied/health-insurance-guide ↗; corrections with a primary source are welcome as issues or pull requests.

Primary sources
  1. Health coverageHealthCare.gov
  2. Insurance glossaryHealthCare.gov
  3. Self-insured plansHealthCare.gov
  4. Group health plan responsibilitiesU.S. Department of Labor
  5. ERISA and health plansU.S. Department of Labor
  6. Stop-loss and state regulation, Technical Release 2014-01U.S. Department of Labor
  7. COBRA continuation coverage FAQs, September 2025U.S. Department of Labor
  8. Summary of Benefits and CoverageU.S. Department of Labor
  9. Parts of MedicareMedicare.gov
  10. Managed care arrangementsMedicaid.gov
  11. Managed care: per-member-per-month capitationMedicaid.gov
  12. Prior authorizationHealthCare.gov
  13. 45 CFR Part 158, medical loss ratioeCFR
  14. 2026 medical loss ratio rebates, July 13, 2026KFF
  15. Health Insurance Coverage in the United States: 2025, September 2026U.S. Census Bureau
  16. 2025 Employer Health Benefits Survey, October 22, 2025KFF
  17. National health expenditure fact sheet, 2024 dataCMS
  18. Medicare Advantage in 2026: enrollment update, June 5, 2026KFF
  19. 10 things to know about Medicaid managed care, March 23, 2026KFF
  20. 2026 Marketplace enrollment, March 27, 2026CMS
  21. Employer coverage and the 1942 wage controls, R44160Congressional Research Service
  22. Tax expenditures for health care, OTA Paper 38U.S. Treasury
  23. Agency history: Medicare and Medicaid, July 30, 1965CMS
  24. Health Maintenance Organization Act of 1973, P.L. 93-222GovInfo
  25. HIPAA 101: administrative simplificationCMS
  26. About the Affordable Care ActHHS
  27. No Surprises Act at a glance, January 2025CMS
  28. Independent dispute resolution between providers and plansCMS
  29. Interoperability and prior authorization final rule, CMS-0057-FCMS
  30. Administrative transactionsCMS
  31. Enrollment and disenrollment, X12 834CMS
  32. Eligibility and benefits, X12 270/271CMS
  33. Referral certification and authorization, X12 278CMS
  34. Claims and encounter information, X12 837CMS
  35. Claim status request and response, X12 276/277CMS
  36. Payment and remittance advice, X12 835 and EFTCMS
  37. Adopted transaction standards and operating rulesCMS
  38. Reading an explanation of benefitsCMS
  39. Rendering provider detailsCMS
  40. National Provider IdentifierCMS
  41. Payer and health plan identifiersCMS
  42. Clearinghouses and business associatesHHS
  43. Form CMS-1500 and the 837 Professional, MLN006976CMS
  44. Form CMS-1450 (UB-04) and the 837 Institutional, MLN006926CMS
  45. Physician fee scheduleCMS
  46. How much more than Medicare do private insurers pay?KFF
  47. Medicare provider enrollment, PECOS fact sheetCMS
  48. Provider data portal, formerly CAQH ProViewDataSpring (formerly CAQH)
  49. ICD-10-CMCDC National Center for Health Statistics
  50. CPT codesAmerican Medical Association
  51. HCPCS code systemCMS
  52. Claims denials and appeals in ACA Marketplace plans in 2024, March 24, 2026KFF
  53. MAP Keys: days in A/R, clean claim rate, denial rateHFMA
  54. Medicare Shared Savings Program ACOsCMS
  55. Acute inpatient prospective payment system and MS-DRGsCMS
  56. Inpatient or outpatient hospital statusMedicare.gov
  57. 45 CFR 180.20: chargemaster and standard chargeseCFR via Cornell LII
  58. Hospital price transparency requirementsCMS
  59. Medicare site-neutral payment and facility fees, June 14, 2024KFF
  60. Uncompensated hospital care cost fact sheet, 2020 dataAmerican Hospital Association
  61. Fast facts: health plan, hospitals and medical groupsKaiser Permanente
  62. Mental Health Parity and Addiction Equity ActCMS
  63. Statement on enforcement of the 2024 parity rule, May 15, 2025U.S. Department of Labor
  64. UnitedHealthcare Community Plan member ID card sample, December 2020 (behavioral health line and one payer ID)Kentucky Department for Medicaid Services
  65. Behavioral health carve-outs and carve-ins in Medicaid managed care, May 25, 2023KFF
  66. Place of service codes 02 and 10 for telehealthCMS
  67. Medicare telehealth coverage and flexibilitiesCMS
  68. Billing for telebehavioral health: psychotherapy codesHHS
  69. Participating jurisdictionsPSYPACT
  70. DEA fourth temporary extension of telemedicine prescribing flexibilities through December 31, 2026Federal Register
  71. Out-of-network use for behavioral health care, RTI study, April 18, 2024American Hospital Association
  72. Credentialing, billing and claims for therapistsHeadway
  73. 42 CFR Part 2 final rule fact sheet, compliance February 16, 2026HHS
  74. Medicare Advantage risk adjustmentCMS
  75. 2027 Medicare Advantage and Part D Star Ratings, October 8, 2026CMS
  76. HEDIS measuresNCQA
  77. Managed care capitation rate development guidesMedicaid.gov
  78. Medicare Advantage prior authorization determinations in 2024, January 28, 2026KFF
  79. Internal appeals and deadlinesHealthCare.gov
  80. Interim staff report on pharmacy benefit managers, July 9, 2024Federal Trade Commission
  81. Pharmacy ID card specification: RxBIN, RxPCN, RxGrpNCPDP via CMS
  82. Coordination of benefits: who pays firstMedicare.gov
  83. Form 10-K for 2025: UnitedHealthcare, Optum Health, Optum Insight, Optum RxUnitedHealth Group
  84. Form 8-K, February 22, 2024: Change Healthcare cyberattackUnitedHealth Group
  85. Optum completes combination with Change Healthcare, October 3, 2022UnitedHealth Group
  86. Form 10-K for 2025: Anthem, Wellpoint, CarelonElevance Health
  87. Anthem completes acquisition of Beacon Health Options, March 2, 2020Elevance Health
  88. Form 10-K for 2025: Aetna, CVS Caremark, Oak Street Health, MinuteClinicCVS Health
  89. Form 10-K for 2025: Medicaid, Marketplace and the Magellan divestitureCentene
  90. Covered entities and business associatesHHS
  91. Business associates and business associate agreementsHHS
  92. De-identification of protected health informationHHS
  93. Minimum necessary requirement and exceptionsHHS
  94. Trusted Exchange Framework and Common AgreementASTP/ONC
  95. Medicare open enrollment, October 15 to December 7Medicare.gov
  96. Marketplace dates and deadlinesHealthCare.gov
  97. Broker and consultant compensation disclosure, FAB 2021-03U.S. Department of Labor
  98. 2013 Employer Health Benefits Survey: use of brokers and consultantsKFF
  99. The Blue Cross Blue Shield systemBCBSA
  100. Find a local Blue companyBCBSA
  101. Health plans and companiesHCSC
  102. 2026 provider manual, BlueCard, page 14BCBS Kansas
Use arrow keys to turn pages

Company relationships

Contents

Use the arrow keys or page controls on desktop. On smaller screens, scroll through the guide.