CMS-0057-F's decision timelines are already in force. Expedited requests must be decided within 72 hours and standard requests within 7 calendar days, with a specific reason attached to every denial. The first round of public metric reporting, covering volume, approval and denial rates, appeal outcomes, and average turnaround time, was due by March 31, 2026.
More is coming. By January 1, 2027, plans must stand up FHIR-based Prior Authorization, Provider Access, and Payer-to-Payer APIs, and expand the Patient Access API to include prior authorization data.
Providers feel the strain from the other side. In the AMA's 2025 survey, 74% of physicians reported more denials over the past five years. Physicians and their staff spend an average of 13 hours a week on prior authorization, and 95% say it delays care their patients need. 29% say it has led to a serious adverse event for a patient.1
That's why health plans are turning to Salesforce Health Cloud, Data 360, and MuleSoft. With the right implementation partner, prior authorization runs on one connected system that clears routine requests fast, puts complex cases in front of the right reviewer, and keeps every clock in view.
Manual prior authorization can't reliably hit CMS-0057-F's 72-hour and 7-day deadlines at volume, and public metrics now make every miss visible.
Health Cloud, Data 360, and MuleSoft automate intake and triage, track every deadline, and power the FHIR APIs required by January 2027.
Plans hit decision deadlines without adding reviewers, keep public metrics audit-ready, and meet the 2027 data-exchange requirements.
Prior authorization volume keeps growing. Clinical review staff isn't growing with it. And every request now sits on a public clock.
Here's what UM teams are up against:
Fax and portal intake means requests sit in inboxes before anyone touches them. When volume spikes, the 72-hour and 7-day windows get harder to hit, and nobody can see which requests are at risk until it's too late.
When every reviewer works from their own process, clinical criteria get applied differently from case to case. That inconsistency creates risk and frustrates providers.
Providers make repeated calls and send repeated faxes just to check status. That's a lot of hours per week on their side, and a lot of call volume on yours.
Missing documentation and unclear decision trails tend to show up at the worst possible moment, during a CMS compliance review. Now that metrics are public, those gaps are visible to everyone.
We build a prior authorization operation where routine work clears itself and reviewers spend their time on cases that need clinical judgment.
Health Cloud serves as the system of record for every request. Each one links to the member, the submitted clinical documentation, and the requesting provider, so reviewers aren't hunting across systems to make a decision.
Flow and Apex automation handles intake from the provider portal, fax-to-digital conversion, or EDI feeds. Each request is checked against your configured clinical criteria. Straightforward requests are approved automatically. Complex ones route straight to the right clinical reviewer.
Countdown timers built with Flow and Platform Events track every 72-hour and 7-day clock. Staff and supervisors get alerts before a deadline is at risk.
MuleSoft builds and exposes the FHIR-based Prior Authorization, Provider Access, and Payer-to-Payer APIs required under CMS-0057-F. It connects Health Cloud to your core claims and eligibility systems, so authorization data moves between you, providers, and other plans without manual transfers.
Data 360, optionally paired with Snowflake, unifies claims, clinical, and prior authorization data to power public metrics and internal audit dashboards. Field history tracking in Health Cloud records every decision and the criteria behind it.
The biggest change shows up in your queue. Clean requests clear automatically, so clinical reviewers focus on the cases that need them. Deadlines become visible to everyone, and alerts arrive while there's still time to act.
Consistency improves too. Every request runs through the same criteria, and every decision carries a clear reason and a complete record.
Reporting stops being a scramble. Public metrics and internal audit reports pull from the same unified data, so they're ready whenever you need them.
And when January 2027 arrives, the required APIs are already in place and connected to the systems you run on.
Prior authorization volume isn't slowing down, and neither are the regulations. Let's look at your current prior authorization workflow and talk through how fast a tailored solution can go live.
We're here for you. Fill out the form on the right for a free consultation!