Case Study: National Plan and Provider Enumeration System (NPPES) Operations & Modernization

Executive Overview

Healthcare providers across the United States depend on a National Provider Identifier (NPI) to enroll with health plans, bill for services, and get paid. Every NPI is issued and maintained through the National Plan and Provider Enumeration System (NPPES). For the Centers for Medicare & Medicaid Services (CMS), NPPES is mission-critical. It underpins provider enrollment, claims processing, and the fraud-prevention work of CMS’s Center for Program Integrity (CPI). Any disruption would affect providers, payers, and federal healthcare dollars.

TurningPoint helped CMS lower the cost of operating NPPES, improve the user- experience for the providers who rely on it, and fortify the defenses against fraud, waste and abuse (FWA), all without interrupting service. Through cloud modernization and open-source adoption, the team cut software licensing costs by 75%, and reduced cloud hosting costs by 25%. Further, TurningPoint operates an ISO 9001:2015 certified help desk, supporting more than 456,000 help desk inquiries and over 40,000 email responses annually.

Program History

TurningPoint has supported NPPES since 2015, when we became the prime contractor under a small business set-aside. When the program was recompeted as a small business procurement, TurningPoint’s growth made it ineligible to bid as prime. We have continued supporting the program as a significant subcontractor. This decade-plus continuity gives the team deep knowledge of the NPPES system, its integrations, and the enumeration support ecosystem.

TurningPoint led the modernization of the NPPES user experience by holding stakeholder and user group meetings and implementing UI/UX improvements, which resulted in industry recognition and a FedHealthIT Innovation Award.

The Challenge

NPPES serves as the authoritative source of provider identity for the nation’s healthcare system, making data accuracy vital to stopping fraudulent entities before they enter the payment stream. CMS needed a partner that could sustain high-volume daily operations, reduce cloud hosting costs, maintain strict security and compliance standards, and coordinate seamlessly with other contractors, all without interrupting service.

Program Objectives

  • Day-to-Day Operations & Support: Sustain reliable operations for enumeration, the public NPI Registry, I&A services, data dissemination, and integration workflows.
  • Cloud Migration & Optimization: Move NPPES to the cloud and reduce hosting costs while maintaining performance, high availability, and security.
  • Identity & Access Sustainment: Manage multi-factor authentication (MFA), role and relationship workflows, and access to dependent CMS systems.
  • Security & Compliance: Maintain strict compliance with CMS cybersecurity, privacy, accessibility, and governance requirements.
  • Data Quality & Integrity: Improve validation, duplicate detection, audit trails, and reconciliation.
  • Agile Delivery & DevSecOps: Drive continuous improvement through automated testing, disciplined release management, and adherence to the CMS Target Life Cycle (TLC).
  • Education & Training: Develop and deliver training resources for CMS personnel, stakeholders, and authorized users.
  • Operational Continuity: Maintain clear accountability, boundary controls, and coordination with other CMS contractors and integration partners.

Scope of Systems and Functions

  • Web Enumeration & EFI: Processes approximately 800 – 1,200 web transactions daily and more than 2,000 EFI transactions monthly. Validation controls include Social Security Administration (SSA) SSN verification, address standardization, duplicate detection, and National Uniform Claim Committee (NUCC) taxonomy validation.
  • NPI Registry & Public API: Powers public provider search portals and downstream data dissemination.
  • Identity & Access Management: Supports more than 4.7 million provider users and over 15,000 logins per month, along with user onboarding, session security, profile management, and complex relationship workflows such as Authorized Officials, Access Managers, Staff End Users, and surrogacy delegations.
  • Cross-Boundary Coordination: Manages structured handoffs, issue escalation, and technical triage with the E-BOSC contractor, which handles call center and paper application processing.
  • Enterprise Integrations: Maintains reliable data exchange with SSA, the Death Master File, address validation services, the Provider Enrollment, Chain, and Ownership System (PECOS), Program for Evaluating Payment Patterns Electronic Report (PEPPER), Comparative Billing Report (CBR), and CMS enterprise identity services.

Program Outcomes & Value Delivered

Transitioning NPPES from a legacy Waterfall delivery model to an adaptive Agile approach laid the foundation for long-term modernization. Following a successful migration to the Scaled Agile Framework (SAFe) in 2020, the team has successfully delivered 24 Program Increments (PIs)—each structured into six 2-week sprints. On average, the team analyzes and completes 25 features and 125 user stories per PI, demonstrating sustained high-velocity execution and predictability.

The team migrated NPPES to the cloud, redesigned the user interface to make it easier to use, and adopted an Agile continuous integration/continuous delivery (CI/CD) approach that sped up enhancements. Strategic adoption of open-source solutions and Amazon Web Services (AWS) serverless services delivered the 75% licensing and 25% hosting cost reductions. NPPES APIs and data access capabilities enable Medicare, Medicaid, and private insurers to identify and prevent fraudulent billing while ensuring providers receive seamless, ISO-certified support.

Appraised at CMMI Maturity Level 5 for Development, the highest rating for process maturity, TurningPoint brings measurement-driven, continuously improving processes to NPPES. Our integrated operational controls and Agile delivery model gave CMS uninterrupted mission continuity. Predictable sprint execution, proactive risk management, and stable daily operations supported high-volume web and EFI workflows. Data integrity and security were strengthened through enhanced validation frameworks, strict adherence to CMS privacy and accessibility standards, and timely vulnerability remediation. CMS also gained cost-effective cloud performance and high system reliability, tracked through Quality Assurance Surveillance Plan (QASP) metrics. Finally, clear decision rights, complete audit trails, and collaborative multi-contractor coordination kept operations transparent and accountable.

Looking ahead, NPPES is uniquely positioned to serve as the authoritative System of Record for CMS’s future vision: the National Provider Directory (NPD). By maintaining robust, real-time data integrity, high-volume scalability, and seamless interoperability, TurningPoint ensures that NPPES will continue to anchor the next generation of federal provider directories, further strengthening defenses against fraud, waste, and abuse, and driving greater transparency and program efficiency across the healthcare ecosystem.

Contact our experts today.