A clinician’s credentials should travel as signed data. Today a license is a fact that every health plan must look up for itself. Each plan’s credentialing team goes back to the same state board for the same clinician, sometimes through a verification organization it hires. The board answers the same question again and again.
The board is the only party that can say whether a license is real and still good. A board that signed that statement digitally would let any plan check it in seconds. The plan would know where the record came from without calling anyone. Each plan would still check, but the check would no longer mean another request to the board.
Health care has done this before. During the pandemic, SMART Health Cards carried vaccination records as signed data that anyone could verify. More than 150 million people could download or print one by October 2021, according to the coalition behind the standard.
What a signed license looks like
A signed credential is a short record with a digital signature from the organization that issued it. The W3C published version 2.0 of its Verifiable Credentials standard in May 2025, according to Biometric Update. The design has a few parts.
- The issuer signs. The licensing board signs the license record with a private key that only the board holds.
- The verifier checks. A plan checks the signature against the board’s published key and learns at once whether the record is authentic.
- The holder carries it. The clinician keeps the credential and shares it with each plan or hospital that needs it.
- The record stays small. It carries only the fields a verifier needs, such as the license number.
SMART Health Cards showed the model working at scale. The specification was built on the W3C model and on HL7 FHIR, according to the same coalition. Each card carries a signature from the organization that issued it. A verifier app checks that the data has not changed. It also checks that the issuer appears in a public directory of approved issuers, according to the SMART Health Cards site. Each card holds the person’s legal name and date of birth. The rest is the vaccination or test record itself. The site says cards should leave out contact details and government ID numbers.
A license is a simpler record than a vaccination history. It comes from 1 issuer and holds a handful of fields. Its status at any moment is a single value. If pharmacies and state health agencies could sign records for millions of people, a licensing board can sign records for the clinicians it licenses.
Why the status matters more than the document
A license is not a fixed fact. It can be suspended or restricted the week after a plan verifies it. That is why NCQA’s 2026 standards call for checks on sanctions and license limits at least every 30 days. The checks cover every state where a clinician practices, as our review of NCQA’s 2026 requirements described.
Nursing already has part of the answer. The National Council of State Boards of Nursing runs Nursys e-Notify, which sends institutions automatic notices when a nurse’s license status changes. It also reports new public discipline. Institutions pay nothing for the service. More than 1 million nurses had enrolled by September 2023, according to NCSBN.
The W3C has a standard for the status as well. Its Bitstring Status List became a Recommendation in May 2025. An issuer publishes the status of many credentials in 1 compressed list. Each credential points to its own position in the list. A single bit at that position shows whether the credential has been revoked or suspended, according to the W3C’s overview of the standards. Because 1 list covers many credentials, fetching it does not tell the issuer which credential a verifier was checking.
A signed credential with a live status combines both ideas. The plan verifies the signature once and then watches the status. When the board suspends a license, it changes 1 bit. Every plan that relies on the credential sees the change from the same source on its next check, which can come every night rather than every 30 days. Our piece on credentialing as a feed made the case for that kind of update.
A plan should not have to ask whether a license is real. It should only have to ask whether it is still good.
Compacts make the case stronger. A nurse with a compact license holds 1 license from the home state and the privilege to practice in the other member states, as our piece on licensure compacts described. NCQA accepts a compact license when the home-state license was verified with the primary source, according to our NCQA review. A signed credential from the home state would be that verification, and a plan in any member state could check it at once.
What it would take
The technology is the easy part. The standards exist, and the cryptography is routine. The harder work is institutional.
Licensing boards would have to issue signed credentials and keep their status lists current. That takes money and some shared rules about which fields to include. Boards already publish license data, so the change is in the format more than in the work.
Accreditors would have to treat a valid signature from the board as verification from the primary source. That should be a short step, because the signature comes from the primary source itself.
Plans and verification organizations would have to read the credentials and record what they checked. Our piece on verifying credentials once argued that plans should stop repeating the same verification. Signed credentials are the most direct way to get there.
There are fair objections. A board that loses its signing key has a serious problem, and a status service that goes down leaves plans guessing. Both risks are real, and both are familiar from other systems that already rely on signed records. They argue for careful key management, not for checking every license by hand at every plan.
Redlake builds tools that health plans use in utilization review. We hold them to a simple rule. A machine can say yes, but only a person can say no. The same rule fits a credential check. A valid signature with a clean status can pass on its own. A broken signature or a flagged status should go to a person who can look into it.
Every decision our tools support can also be reconstructed later. A credential check should meet the same standard. A signed credential lets a plan show the exact record it checked and the board that signed it. It also shows the status on the day the plan relied on it.