For independent practices

AWV Compliance Mini-Audit.

Annual Wellness Visit billing is one of the most frequently miscoded service lines in primary care. We surface frequency violations, missing documentation elements, and modifier errors before a Palmetto GBA inquiry forces them to surface during enforcement.

The AWV exposure window

1× lifetime G0438 Initial AWV — once per Medicare beneficiary, ever
12 months G0439 Subsequent AWV — 11 full months must elapse between dates of service
5 elements HRA, depression, cognitive, fall risk, advance care planning
Where the exposure lives

Three categories drive most of the recoupment risk.

Every practice we audit shows exposure in at least one of these three. Most show exposure in two. The patterns are predictable, which is exactly why the OIG has placed AWV billing on the Work Plan in recent cycles — and why a structured audit before a contractor inquiry is the lowest-cost way to surface the risk.

Frequency violations

G0438 billed twice on the same patient. G0439 inside the 12-month window. Lifetime cap and annual frequency are both objective rules — the audit math doesn't bend, and recoupment is straightforward when surfaced on review.

Missing documentation elements

HRA not completed. Depression screen not documented. Cognitive assessment, fall risk, or ACP missing from the encounter note. Each missing element renders the AWV non-payable on retrospective review under 42 CFR 410.15.

Modifier errors

Modifier 25 missing on an E/M billed alongside the AWV same date. Modifier 33 missing on ACP. Preventive codes 99381–99397 billed to Medicare. G0444 billed inside the initial AWV bundling window. Small details, real exposure.

Methodology

What the audit checks.

Five categories of compliance review across the engagement. Each finding is risk-tiered (HIGH / MEDIUM / LOW), cited to the controlling regulation or LCD, and quantified for dollar exposure where calculable.

Category What we test
Frequency violations G0438 lifetime cap · G0439 12-month window · duplicate billing inside frequency rules
Documentation elements HRA completion · depression screen · cognitive assessment · fall risk assessment · advance care planning
Modifier accuracy Modifier 25 on E/M billed with AWV · Modifier 33 on ACP for no-cost-share to beneficiary
CPT misuse Preventive codes 99381–99397 billed to Medicare · G0468 place-of-service mismatches · G0444 bundling inside the initial AWV window
Provider-level patterns Systemic finding flag when a single provider drives ≥3 instances of the same exception — pattern exposure calculation applied
Engagement flow

Five business days from intake to delivery.

No-PHI default architecture. Claims data is processed in memory and never written to disk during automated review. A Business Associate Agreement is executed before any PHI exchange. Standard turnaround is five business days from intake receipt for the deliverable-only tier; the engagement tier adds a 30-minute findings debrief call within seven business days of delivery.

PHASE 1
Intake

BAA executed if needed. Secure file transfer setup. Claims CSV intake template returned.

PHASE 2
Review

Five-category audit run end-to-end. Findings risk-tiered against rubric and cited to controlling regulation.

PHASE 3
Synthesis

Dollar exposure quantified per finding. OIG 2026 Work Plan items mapped. Corrective actions ranked by impact.

PHASE 4
Delivery

Branded PDF report and 7-tab Excel workbook delivered. Engagement tier adds a 30-minute debrief call.

Investment

Two ways to engage.

Productized pricing. Flat fees, no hourly billing, no surprise scope expansion. Larger claim volumes or full-spectrum compliance reviews are available as engagement-based scoping — start with the discovery call.

Tier 1 — Self-serve

Mini-Audit Deliverable

For practices that want the findings and will run their own corrective action.

$349 flat fee · 5 business day turnaround
Includes
  • Branded PDF findings report
  • 7-tab Excel workbook with line-level detail
  • Risk-tiered findings (HIGH / MEDIUM / LOW)
  • Regulatory citations and dollar exposure
  • OIG 2026 Work Plan alignment memo
  • Prioritized corrective action plan
Start intake
Frequently asked

What practices ask before engaging.

How is patient data handled?
Three layers. One: our default automated screening architecture is no-PHI — claims data is processed in memory, never written to disk during review. Two: where the engagement requires PHI access for manual review, we execute a Business Associate Agreement before any data exchange. Three: we don't retain raw client data after engagement close. Methodology is documented in the deliverable.
What format do we send the claims data in?
A CSV with the following columns: claim ID, date of service, de-identified patient ID, provider NPI, CPT/HCPCS code, modifiers, billed amount, diagnosis codes, and documentation flags for HRA, depression screen, cognitive assessment, fall risk, and ACP. We provide an intake template after BAA execution. Most EHR and PM systems can produce the export with a 10-minute conversation between us and your billing or IT lead.
What if the audit surfaces something serious?
That's the entire point. Better to surface findings internally — where you control the corrective action, the timeline, and any disclosure decision — than to have a contractor or the OIG surface them during enforcement. The OIG Voluntary Self-Disclosure Protocol exists precisely for situations where internal review surfaces an issue, and it substantially mitigates penalty exposure when used appropriately. We can scope a follow-on engagement to support that pathway when warranted.
How is this different from what our coder reviews?
Internal coder review tends to focus on the encounter level — was this E/M coded correctly, was Modifier 25 appended where indicated. The mini-audit reviews the same encounters at the population level — frequency violations only surface when you look across the patient's claim history, and systemic patterns only surface when you look across providers. The two layers complement each other; they don't substitute.
What sample size or volume do you handle?
The mini-audit deliverable tier is scoped to roughly 12 months of AWV claims for a single-location practice. Larger practices, multi-location groups, or practices with broader E/M and procedure-coding review needs are scoped as a separate engagement starting at $2,500 — start with the discovery call to size the engagement appropriately.
Do you take on engagements outside Georgia?
Yes. The mini-audit is delivered remotely. Sub-regulatory references default to the Palmetto GBA JM positions relevant to Georgia operators; for practices in other MAC jurisdictions, we substitute the applicable LCDs and contractor-specific policy positions during the audit run.

Surface the exposure before a contractor does.

A 20-minute discovery call covers your AWV billing posture, the engagement tier that fits, and the intake timeline. No commitment to engage; the call alone is often useful.