Additional Documentation Request (ADR): How to Respond Inside the Window

If you received a Medicare Additional Documentation Request (ADR), the response window is set by the contractor type and review posture under the Medicare Program Integrity Manual (CMS Pub. 100-08, Chapter 3). MAC, SMRC, and RAC ADRs use a 45-calendar-day clock; UPIC ADRs use a 30-calendar-day clock. Missing the applicable window auto-denies the claim and damages the practice's posture in any escalated review.

What an ADR actually is and who sent it

An ADR is a written request for medical records and supporting documentation tied to specific Medicare claims. Multiple contractor types issue ADRs and they look similar on first read. Read the letterhead carefully:

• MAC (Medicare Administrative Contractor) — Routine prepayment or postpayment medical review. Lower stakes, 45-day window, often part of a Targeted Probe and Educate (TPE) round under Medicare Program Integrity Manual Chapter 3, § 3.2.5.
• RAC (Recovery Audit Contractor) — Postpayment review focused on overpayments. ADRs are subject to CMS-published RAC ADR limits by provider type and size.
• UPIC (Unified Program Integrity Contractor) — Higher-stakes program-integrity review, often investigating suspected fraud. Authorized under Medicare Program Integrity Manual Chapter 4. See UPIC audit response.
• SMRC (Supplemental Medical Review Contractor) — National-level review focused on specific service lines flagged by CMS. Authorized under SMRC Statement of Work.
• CERT (Comprehensive Error Rate Testing) — Sample-based national error-rate measurement; less punitive but still requires response.

Each carries the same first-response procedure but different downstream stakes.

The response clock

The response window depends on which contractor sent the ADR and whether the review is prepayment or postpayment. The Medicare Program Integrity Manual (Chapter 3, § 3.2.3.2) governs response timing. Read the letter to confirm which clock applies:

• MAC prepayment review — 45 calendar days from the date on the letter.
• MAC postpayment, SMRC, or RAC review — 45 calendar days from the date on the letter.
• UPIC prepayment or postpayment review — 30 calendar days.

If documentation is not received within the applicable window, the contractor denies the claim for lack of supporting documentation. The no-response denial authority is 42 CFR § 405.929 and § 405.930, and the appeal procedure begins at 42 CFR § 405.903. The denial flows into the standard five-level appeals process.

Late responses sometimes succeed at the redetermination stage but the burden shifts and the contractor's posture toward the practice has already changed.

First 24 hours

1. Date-stamp the letter on receipt. Log it in the audit tracker with letter date, contractor, claim count, services involved, and internal owner.
2. Identify the response deadline as letter date + the applicable window (45 calendar days for MAC, SMRC, or RAC ADRs; 30 calendar days for UPIC ADRs). Calendar it with a 7-day-prior internal deadline so submission is not last-minute.
3. Pull the claims list. Every ADR identifies specific claims by HICN/MBI, dates of service, claim control numbers, and codes. Reconcile the contractor's list against your billing system.
4. Issue a litigation hold. No deletion of records, no chart edits, no late-dated documentation. Note any chart entries made after the date of service per practice policy.
5. Engage the billing manager AND a clinician. Pure billing responses miss the medical-necessity narrative. Pure clinical responses miss the coding and modifier picture.
6. Decide on counsel. Routine TPE ADRs are usually handled internally with billing-vendor support. UPIC and SMRC ADRs warrant counsel from the start.

What to actually submit

The Medicare Program Integrity Manual (Chapter 3, § 3.2.3.4) describes the records reviewers expect. At minimum, per claim:

• The signed and dated provider note for the date of service
• Any orders referenced in the note (labs, imaging, DME, referrals)
• The results that returned from those orders, where they inform medical necessity
• The relevant history-and-physical or assessment that establishes the clinical reason for the service
• Any prior authorization, ABN (Advance Beneficiary Notice), or coverage determination
• The signed Medicare claim and any superbill or encounter form
• For DME, the order, the proof of delivery, and the medical-necessity documentation per 42 CFR § 424.57
• For E/M services, history, exam, and medical decision-making documentation supporting the level billed
• For procedures, the procedure note, anesthesia record if applicable, and pathology report if applicable

What NOT to submit, edit, or touch

• Do not late-date or amend records. Any amendment must follow your records policy and CMS's amendment guidance — dated and signed at the time of the amendment, clearly identified as an addendum, not overwriting the original. A back-dated amendment found on review escalates a routine ADR into a fraud referral.
• Do not submit irrelevant volume. Reviewers note when a 12-page chart arrives for a 3-page request. It signals disorganization or attempted obfuscation.
• Do not include marketing material, certifications, or letters of recommendation. They are ignored at best, prejudicial at worst.
• Do not include the EHR's full audit log unless requested. Audit-log production can become its own discovery exercise.
• Do not contact the requesting reviewer informally. Communications go through the contact listed on the letter, in writing, and through counsel if engaged.

Submission mechanics

Most MACs accept electronic submission through esMD (Electronic Submission of Medical Documentation) per the CMS esMD program. Paper is permitted but slower and creates chain-of-custody questions. If submitting electronically:

• Confirm the esMD gateway your billing vendor uses
• Match each claim to its documents with a coversheet listing claim control number, date of service, and document inventory
• Capture the submission confirmation and date-stamp it into the audit tracker
• Retain a duplicate of the exact submission set in the practice's audit folder

For paper submission, send by tracked overnight carrier and retain the tracking confirmation.

What happens after submission

The contractor has standardized review timelines published in the Medicare Program Integrity Manual. Common outcomes:

• Claim paid — review complete, no further action. Document in the audit tracker.
• Claim denied with appeal rights — file redetermination within 120 days under 42 CFR § 405.940.
• Partial denial — pay the supported portion, deny the rest. Same appeal mechanics.
• TPE Round 2 or 3 notice — failed Round 1; education session offered, then Round 2 begins. See TPE program description.
• Referral to UPIC or RAC — high-error TPE rounds and patterns suggesting fraud route here.
• Extrapolated overpayment demand — for postpayment review, contractor may extrapolate sample error rate to the universe of claims under Medicare Program Integrity Manual Chapter 8, § 8.4.

If the response surfaces a coding or documentation issue affecting other paid claims, the 60-day overpayment clock at 42 CFR § 401.305 starts independently. See the Medicare 60-day overpayment rule.

State-law overlay

State Medicaid programs run parallel ADR processes with their own response windows — typically shorter than the federal 45 days. California Medi-Cal records requests through DHCS often run on a 30-day window. Texas HHSC Medicaid records requests are governed by Texas Administrative Code Title 1, Part 15, with response windows tied to the request type. New York OMIG audits follow 18 NYCRR Part 517 timelines. State requests on dual-eligibles can run concurrently with federal ADRs and require parallel response.

When to engage outside healthcare counsel

• Any UPIC or SMRC ADR
• TPE Round 3 or any TPE moving to extrapolation
• Any ADR touching more than 50 claims
• Any ADR following a whistleblower or employee complaint
• Any ADR where the practice cannot locate the underlying records
• Any ADR that surfaces a probable overpayment

How d3rx fits

d3rx maintains the ADR workflow inside the compliance binder: log, response checklist, claim-to-document mapping worksheet, submission record, and post-determination tracker. The binder is a source-grounded administrative aid. It does not represent the practice in any Medicare proceeding, does not provide legal advice, and does not replace counsel. See audit defense for the broader response surface and the compliance binder overview for the program structure.

D3rx compliance guides are administrative documentation aids. They do not certify compliance, provide legal advice, replace counsel, or guarantee an audit outcome. The practice remains responsible for reviewing, adopting, and maintaining its compliance program.