SMRC Audit Response: The Supplemental Medical Review Contractor Window

If you received a Supplemental Medical Review Contractor (SMRC) documentation request, you have a 45-day window from the date on the letter to produce the requested records. SMRCs operate under CMS Pub. 100-08, Chapter 6 on directed CMS projects. The contractor does not recoup; findings route through CMS to the MAC, and the MAC issues any demand. Do not let the window pass without a granted extension on file.

What an SMRC actually is

The SMRC is a single national contractor tasked by CMS with specific medical-review projects. CMS assigns the project topic (a service, code family, or claim pattern CMS believes carries documentation or medical-necessity risk), and the SMRC studies that population. Active and recent projects are published on the CMS SMRC page.

The current national SMRC is Noridian Healthcare Solutions, operating under the contract awarded by CMS. The contractor name and project list are published; the project list is the first thing to consult on receipt of a letter, because the project number on the letter maps to a documented scope.

SMRC authority differs from the other Medicare contractor lanes:

• RACs identify overpayments on contingency under CMS Pub. 100-08, Chapter 8. RACs both review and demand.
• MACs process claims and conduct TPE under CMS Pub. 100-08, Chapter 3. MACs both review and demand.
• UPICs investigate suspected fraud under Chapter 4. UPICs do not themselves demand; they recommend.
• SMRCs review on directed CMS projects under Chapter 6. SMRCs do not demand; they report to CMS and the MAC issues any demand.

Because the SMRC sits between CMS and the MAC, an SMRC matter has two natural appeal opportunities: the SMRC discussion process and the subsequent MAC redetermination. The response strategy must address both.

The 45-day window

The SMRC documentation request letter specifies the 45-day response deadline. That window is short relative to the document volume requested, which is the single biggest operational pressure point.

`` Day 0 Letter received and date-stamped. Day 0–2 Engage healthcare counsel. Open the privileged track. Day 0–3 Issue litigation hold. Identify the project number on the letter and pull the CMS scope of work for that project. Day 3–7 Reconcile the SMRC's claim list against the billing system. Pull the requested medical records. Begin the documentation review. Day 7–30 Build the documentation package: medical records, supporting documentation, narrative for any contestable claim. Day 30–40 Counsel review. Final assembly and Bates numbering. Day 40–45 Submit by the channel the letter specifies. Confirm receipt. ``

Two operational notes that practices commonly miss:

1. The 45-day clock runs from the date on the letter, not the date received. Letters lost in mail or delivered to a non-current practice address still count from the letter date. Validate the practice's "remit to" and correspondence address in PECOS quarterly.
2. Submission channels differ. Some SMRC projects accept esMD; others require fax or certified mail. Read the letter for the specified channel. A package submitted by the wrong channel can be rejected and the claims denied for documentation insufficiency even though the records exist.

First 48 hours

1. Date-stamp the letter. Record date received, project number, contractor, claim list, services involved, response deadline, and the specified submission channel.
2. Engage outside healthcare counsel. SMRC matters generally do not require counsel as urgently as a UPIC matter, but counsel is appropriate any time the matter touches medical necessity, extrapolation risk, or a claim pattern the practice has had prior issues with. The cost of involving counsel early is lower than the cost of a denied response that later becomes an overpayment demand.
3. Pull the CMS project scope of work. The SMRC's project page on CMS.gov describes what CMS asked the contractor to study. The scope of work tells the practice what evidence the SMRC will weight.
4. Issue a litigation hold. Even though SMRC matters are documentation-sufficiency reviews rather than fraud investigations, the litigation hold preserves the record for the MAC redetermination, ALJ stage, and any later UPIC or OIG escalation.
5. Inventory the named claims. Reconcile against the billing system, the EHR, and any external documentation (referrals, lab reports, imaging interpretations from other practices).

What to assemble

SMRC documentation requests typically include:

• Patient medical records for the sampled claims, including the encounter note, history and physical, vitals, assessment, and plan
• Orders, referrals, and prior-authorization correspondence
• Lab and imaging reports referenced in the encounter
• Treatment plans and progress notes where the service is part of a course of care
• Operative reports and procedure documentation
• Time-based service documentation (start time, stop time, supervision)
• LCD- or NCD-specific documentation (the contractor will review against the applicable LCD/NCD for the service)
• Therapy plans of care, certifications, and recertifications for therapy services
• The signed-and-dated provider order for any DME or service requiring an order

Production format:

• Bates-numbered, with a cover letter from counsel that describes the production
• Indexed against the SMRC's claim list, claim-by-claim
• Narrative for any contestable claim — the documentation may technically satisfy the LCD, but the SMRC will weight the documentation against the project scope, and the narrative is the practice's chance to frame the clinical context
• Privilege log for any document withheld for privilege

What NOT to touch

• Do not amend or "clean up" medical records. Any amendment must follow the practice's records policy as a clearly identified addendum with date and signature. Back-dated entries discovered on review escalate documentation-sufficiency matters into possible fraud referrals.
• Do not produce documents that were not requested. Over-production widens the contractor's review scope.
• Do not let the deadline pass without a granted extension. A non-response on a 45-day window is treated as documentation failure; claims are denied, the MAC issues a demand, and extrapolation may follow.
• Do not assume the SMRC discussion period is informal. The SMRC may offer a discussion period before submitting its finding to CMS. Treat that discussion the same as a contested response — on the record, counsel-coordinated, documented in writing.
• Do not produce the response without a signed attestation from the responsible provider. Signed-and-dated documentation under 42 CFR § 410.20(e) and the documentation requirements in the applicable LCD/NCD must be in place.

The SMRC discussion period

Many SMRC projects build in a discussion period before final findings route to CMS. The discussion period is the chance to address contestable findings before they harden into a MAC demand letter. Treat the discussion period as part of the response, not as an informal follow-up.

Counsel should:

• Receive the SMRC's preliminary findings in writing
• Submit a written response addressing each contested finding with reference to the LCD/NCD, the encounter documentation, and applicable CMS coverage guidance
• Document the discussion in writing — date, contractor representative, position taken, any concessions

Discussion-period concessions can resolve a matter without ever reaching the MAC demand stage.

How findings flow back to CMS and the MAC

`` SMRC review → Finding submitted to CMS ↓ CMS review → Route to MAC (FFS) or other contractor as appropriate ↓ MAC action → Demand letter under 42 CFR § 405.904 ↓ Provider → Pay, appeal, or both ``

The MAC's demand letter is the appealable event under 42 CFR § 405.904. The Medicare appeal track runs from there:

• Level 1 — MAC redetermination, 120 days to file under 42 CFR § 405.942
• Level 2 — QIC reconsideration, 180 days under 42 CFR § 405.962
• Level 3 — Administrative Law Judge hearing, 60 days under 42 CFR § 405.1014, amount-in-controversy threshold applies
• Level 4 — Medicare Appeals Council, 60 days under 42 CFR § 405.1102
• Level 5 — Federal district court review

If the MAC initiates recoupment by offset before the redetermination is filed, the practice can request rebuttal under 42 CFR § 405.374. Filing the redetermination request within 30 days under 42 CFR § 405.379 suspends recoupment during the first two levels of appeal.

Extrapolation in SMRC matters

SMRC findings can support extrapolation when the MAC issues the demand. Extrapolation standards live in CMS Pub. 100-08, Chapter 8, § 8.4. Common challenge grounds:

• Sample size insufficient for the universe
• Universe definition inconsistent with the project scope of work
• Sampling not properly random or stratified
• Contractor failed to provide the sampling materials needed to verify methodology
• Failure to apply the lower-bound 90% confidence interval

These challenges are raised at MAC redetermination, QIC reconsideration, or ALJ. Counsel may engage a statistical expert during the response window.

Common SMRC project areas

Recent SMRC projects on the CMS project list have included high-error services in:

• Skilled Nursing Facility billing
• Therapy services (physical therapy, occupational therapy, speech-language pathology) under Local Coverage Determinations for therapy
• Home Health services
• DME categories (CGM, lower-limb prostheses, power mobility devices) under the DMEPOS quality standards
• Hospice eligibility documentation
• Cardiology procedures with NCD-specific medical-necessity requirements

Practices in any of these service lines should treat an SMRC letter referencing the relevant project as serious, even when the sampled claim count is small. The project framework signals that CMS has determined there is documented vulnerability in the service area.

State-law overlay

State Medicaid programs run their own program-integrity reviews that often parallel SMRC project areas. State medical board interest is typically lower in SMRC matters than in UPIC matters, but a pattern of denied claims for documentation insufficiency can reach the board through a CAP imposed under federal review or through whistleblower complaints. Counsel maps any state Medicaid integrity exposure on dual-eligible patients in parallel to the federal SMRC track.

Restraint about outcomes

No guide can promise an SMRC outcome. The most predictable variables are timeliness, completeness of the documentation package, the strength of the narrative for contestable claims, and a counsel-coordinated discussion-period response. A complete, well-organized response submitted before the 45-day deadline materially improves the posture; nothing guarantees the finding.

This is not legal advice. Consult outside healthcare counsel before responding to any SMRC documentation request that touches medical necessity, extrapolation risk, or a service area the practice has had prior denials in.

How d3rx fits

The d3rx compliance binder assembles the source-grounded documentation an SMRC response is built from — the practice's coding and documentation policy, LCD/NCD tracker, training records, internal audit log, payer policy library. The d3rx audit defense workflow walks the 45-day window, the litigation hold, the project-scope review, the claim-by-claim production structure, and the discussion-period response. d3rx does not represent the practice in any SMRC, MAC, UPIC, OIG, or DOJ proceeding and does not replace counsel; it is a point-in-time administrative documentation aid that counsel and the practice work from.