Provider Credentialing Data Notice

Why does CredentialTrack Pro publish this Notice?

CredentialTrack Pro is a workforce credentialing and compliance platform. It helps users manage professional licenses, certifications, continuing education, hospital privileges, payer enrollment records, and related compliance documentation.

CTP is designed to manage provider credentialing and workforce compliance records — not patient medical records, treatment records, billing records, or other patient PHI. Use of the Service for patient-related PHI is not authorized unless expressly approved by CTP in writing under separate contractual terms.

What credentialing data does this Notice cover?

This Notice applies to provider credentialing and compliance records, including:

• License numbers and expiration dates
• NPI and professional identifiers
• DEA registration details
• Board certification and recertification records
• CEU/CME records
• Employment and training history
• Hospital privilege and payer enrollment records
• Malpractice coverage information
• Sensitive supporting records, such as Social Security numbers or identification documents, when necessary for a credentialing workflow

How is credentialing data used?

CTP uses this data to:

• Store and organize credentialing records
• Track deadlines and expirations
• Generate reminders, dashboards, and reports
• Support provider onboarding, recredentialing, and workforce compliance workflows
• Help authorized organizations administer professional credentialing processes

Who can access credentialing data?

Access to provider credentialing data is limited to:

• The individual user
• Authorized administrators or coordinators associated with the relevant account
• CTP personnel and vendors with a legitimate operational need to support the Service
• Government agencies, licensing boards, courts, insurers, or regulators when disclosure is required by law or directed by the customer

CTP does not sell credentialing data and does not disclose it for advertising purposes.

How is credentialing data secured?

CTP applies commercially reasonable safeguards to protect credentialing data, including:

• AES-256 encryption at rest and TLS 1.2 or higher in transit
• Role-based access controls and the principle of least privilege
• Multi-factor authentication for administrative access
• Audit logging of all access events
• Vendor management and contractual data security obligations

How can you request access, correction, export, or deletion?

Users may request access to, correction of, export of, or deletion of their data, subject to applicable legal, contractual, and administrative limitations. Submit requests to privacy@credentialtrackpro.com.

How can you contact CredentialTrack Pro about this Notice?

Questions regarding this Notice may be sent to: