How to choose an RCM vendor: the 12-question checklist.

Why this mattersThe wrong vendor costs more than the bad fee.

The hidden cost of the wrong RCM vendor is rarely the percentage point on the contract. It is the eight months of operational drift before the practice realizes net collection rate dropped two and a half points. It is the credentialing backlog nobody flagged until three providers stopped getting paid. It is the dashboard that looks healthy because the vendor controls the dashboard.

The right vendor is not the one with the best PowerPoint. It is the one who answers twelve specific questions cleanly, without hedging, and whose written contract reflects the verbal answers. The list below is what we tell prospective clients to ask us. It is also what we recommend they ask every competitor on their short list.

A vendor who answers question twelve before question one is selling. A vendor who walks you through questions one through twelve in order is operating.

How to use the listNot a scorecard. A diagnostic.

The twelve-question checklist is not a scorecard where the vendor with the highest score wins. It is a diagnostic. The vendor's pattern of answers tells you more than any single answer. A vendor who is strong on technology and weak on transition is a different risk than one who is strong on transition and weak on AI architecture. Read the pattern, not the points.

Use the list in two rounds. Round one is written, sent to every vendor on the short list, with a 72-hour window. Round two is verbal, ninety minutes per vendor, with the person who would actually run your account on the line. The written round filters for clarity. The verbal round filters for accountability.

How to read the roomThe pattern of answers tells you more than the answers.

A strong vendor will lead with questions one, six, seven, and eight. They understand that you are buying outcomes, exit options, transition discipline, and accountability. A weak vendor will lead with question four, because AI is the easiest thing to talk about and the hardest thing to verify. A dangerous vendor will skip past question three on HIPAA technical controls because the answer is generic.

Watch the body language on questions ten and eleven. A vendor who flinches on the audit history question, or who tries to steer the reference list to a single happy client, is hiding something. The hide may be benign. It is rarely strategic.

What separates the top decileThe thing that does not fit on a contract.

The top-decile RCM vendor has one trait that does not fit cleanly on a checklist. They are willing to tell you what they will not do. They will not promise a 99 percent net collection rate in the first quarter. They will not promise a fourteen-day transition. They will not promise that AI will replace your coders. The willingness to push back on unrealistic expectations is the single best signal of long-term reliability.

Vendors who promise everything in the sales process tend to deliver less than vendors who push back. The push-back is not friction. It is calibration. Calibration is what you are buying.

The thirty-day diligence sprintFrom short list to signed contract.

Once you have run the twelve-question checklist, the next thirty days should look like this. Week one is the written round, with every vendor on a 72-hour window. Week two is the verbal round, ninety minutes each, with the senior partner who would own your account. Week three is references and security review. Week four is contract redline and a final go or no-go.

The output is not a vendor. It is a decision memo. The memo names the chosen vendor, the runner-up, the three deciding factors, and the three risks the chosen vendor still carries. The memo lives in a folder. Six months in, when something goes sideways, the memo is the artifact that tells you whether the issue was foreseeable or a surprise.