A DMEPOS accreditation checklist is a category-by-category reference of every document, policy, and operational record that CMS-approved accrediting organizations evaluate when surveying a DMEPOS supplier. This guide covers all eight survey categories under 42 CFR §424.57, the 2026 annual survey requirement, and the specific failure points that cost otherwise-prepared providers their accreditation.
If you are preparing for initial accreditation or your first annual resurvey under the new 2026 rules, this is the guide to work through not once, but every time you do an internal audit.
Starting January 1, 2026, CMS moved from a 3-year survey cycle to mandatory annual accreditation surveys for all DMEPOS suppliers. (Source: CMS Final Rule, 2025) That change is not administrative housekeeping. It fundamentally changes what “being prepared” means. For a full walkthrough of the accreditation process — timelines, accrediting organization comparisons, and 2026 rule changes — start with our complete DMEPOS accreditation guide.
What Surveyors Are Actually Looking For (And Why Most Providers Misread This)
Having a policy is not the same as passing a survey. That distinction is where most DMEPOS accreditation preparation falls apart.
Surveyors from CMS-approved accrediting organizations do not just verify that your binder exists. They interview your staff. They ask your delivery coordinator to walk them through your complaint resolution process. They ask your front desk what happens when a patient reports a problem with their equipment. If your team cannot answer
those questions consistently and in plain language, the thickness of your policy manual is irrelevant it is evidence that your compliance program lives on paper and nowhere else.
This is the reality that annual surveys are designed to expose. Under the old 3-year cycle, providers could sprint through preparation in the weeks before a visit, brief staff, and pass. That window is gone. A surveyor can show up any time within your annual cycle, unannounced, and your team needs to perform as if the survey started ten minutes ago. The checklist below reflects how surveyors actually move through a site visit — not how requirements are ordered in the federal register.
The DMEPOS Accreditation Checklist Organized by Survey Category
Every category below maps directly to the quality standards under 42 CFR §424.57 — the federal baseline that all CMS-approved accrediting organizations must survey against. Work through each category against your current operations. Not what you plan to have in place. What exists right now.
1. Administration & Business Operations
Surveyors establish your organizational foundation before they look at anything clinical. They want to confirm your business is structured, licensed, and operating exactly as represented in your Medicare enrollment file.
1) Compliance officer designated in writing, with a corporate compliance policy covering OSHA, HIPAA, FDA, and applicable state regulations
2) Corporate structure diagram on file
3) Facility operating under its own PTAN — not shared with another entity at the same address
4) Proof of sound financial management on file: budget, profit and loss statement, or income statement
5) Marketing policy documented and compliant with CMS non-solicitation rules — no use of lead-generation services
6) Vendor purchasing agreements on file for all major suppliers
7) Licenses and certifications displayed appropriately at the enrolled business address
8) Surety bond current, posted, and reflecting the correct coverage amount for your enrollment
9) Policy for detecting and reporting counterfeit supplies
DROP-SHIP NOTE
Drop-ship and telehealth providers: Physical display requirements for licenses apply to your enrolled business address regardless of fulfillment model. The surety bond requirement does not disappear because you do not carry inventory — confirm your bond reflects your current Medicare enrollment status.
2. Patient Rights & Consumer Services
This is where surveyors spend the most time, and where providers who feel prepared get caught. The records here must be complete and consistent with what your staff says when asked directly.
1) Written patient rights policy — provided to every beneficiary at intake, with documentation confirming receipt
2) Complaint policy compliant with CMS supplier standards, accessible to patients at the point of service
3) Active complaint log with individual complaint forms — maintained continuously, not assembled before a survey
4) Delivery ticket for every order: receipt confirmation, make/model/lot number, business hours contact, after-hours contact, and emergency service contact
5) Written patient instructions for each product category: use, maintenance, potential hazards, and expected delivery timeframe
6) Rental equipment policy documented: purchase vs. rental options explained to the beneficiary and confirmed in writing
7) Code of ethics accessible at the facility and familiar to staff — not posted behind a door no one opens
8) Primary business telephone listed under the business name at the enrolled site
3. Human Resources & Staff Qualifications
Surveyors pull employee files. Not a summary — the actual files, for the actual staff working that day. Every person involved in patient care, equipment delivery, or billing needs a complete file that tells a coherent story from hire date forward.
1) Employee files containing: job description, employment application, OIG exclusion check, W-4 or W-9, I-9, HBV declination letter or vaccination record
2) OSHA training documented for all applicable staff, with completion dates
3) HIPAA training documented for all staff with access to patient information
4) Hazard communication training on file where applicable
5) Current licenses and certifications for all credentialed staff
6) Annual performance evaluations completed and signed by both parties
7) Employee rights poster — current federal version, displayed where staff can see it
8) Competency assessments documented for all patient-facing and delivery staff, not just at hire
IMPORTANT
OIG exclusion checks documented at hire with no evidence of periodic rechecks are a compliance gap. The check needs to happen at hire and be repeated on a documented schedule. One check from three years ago does not satisfy current standards.
4. Delivery, Setup & Patient Education
The documentation built in this category does double duty. It satisfies accreditation surveyors and it is the same paper trail a RAC auditor requests when a claim gets flagged. Build it once, build it right, and it protects you in both situations. For a deeper look at how delivery documentation connects to the full accreditation workflow, see our guide on how to get DMEPOS accreditation step by step.
1) Written standard operating procedure for equipment delivery and patient setup
2) Patient education documentation for every order: what was explained, by whom, and written confirmation of patient or caregiver understanding
3) Follow-up contact documented: confirmation of fit, effectiveness, and patient understanding after delivery — not just at the point of dispensing
4) Beneficiary signature on delivery confirmation — dated, matching the delivery date on the submitted claim
DROP-SHIP NOTE
Drop-ship providers — read this carefully. Your drop-ship agreement must require your supplier to generate a delivery confirmation with a beneficiary signature and return it to your files within a defined timeframe. If your current agreement does not specify the format and the return timeline, that is not an administrative oversight. It is a compliance exposure that will surface in a survey or a Medicare audit, whichever comes first. Our medical supplies dropship program covers what a documentation-compliant drop-ship workflow looks like in practice.
5. Product Safety & Equipment Management
Surveyors want to see that you know where every piece of equipment is, what condition it is in, and what your plan is when something goes wrong with it.
1) Equipment tracking log with make, model, serial number, and patient information for all dispensed items
2) Documented inspection, maintenance, and cleaning procedures for all product categories you supply
3) Incident policy in place and implemented: hospitalizations or deaths reported within 24 hours of awareness, all other incidents within 72 hours
4) Incident log maintained with findings documented — including conclusions and any resulting changes to policy or procedure
5) Current SDS (Safety Data Sheet) binder for all hazardous materials at the facility
6) Emergency management plan with a documented alternate supplier arrangement for patient continuity of care
6. Information Management & Records
This category is where survey outcomes are often decided and where the connection between your clinical records, delivery documentation, and billing data gets tested in real time.
Surveyors pull five patient files and review them in detail. Those five files are a cross-section of your entire operation. Inconsistencies between what the CMN says, what was delivered, and what was billed are the most common source of corrective action plans and the most common trigger for post-payment RAC audits.
1) HIPAA compliance policy written, implemented, and familiar to all staff with patient record access
2) Five complete patient files ready for surveyor review, each containing:
- Prescription or physician notes supporting medical necessity
- Certificate of Medical Necessity (CMN) where applicable to the product category
- Face-to-face evaluation documentation
- Delivery ticket with beneficiary signature, dated to match the claim
- Advance Beneficiary Notice (ABN) where applicable
- Follow-up service records
- Warranty, rental, and return policy acknowledgment
3) Beneficiary records accurate, current, accessible, and maintained per HIPAA standards
4) Billing records reconcilable with inventory logs and delivery confirmations no gaps between what was ordered, what was shipped, and what was billed
IMPORTANT
The CMN documents medical necessity for a specific product. The delivery ticket confirms what was actually delivered. If those two documents reference different product codes, different dates, or different diagnoses — even by a clerical error — a surveyor flags it. A RAC auditor reviewing the same file treats it as a potential overpayment. Review every file for internal consistency before any survey, and build a reconciliation checkpoint into your intake workflow so the problem never originates in the first place.
7. Quality Improvement & Performance Management
This category is a test of whether your compliance program is functional or decorative. A quality improvement plan that has never produced a finding tells a surveyor exactly one thing: nobody is looking.
1) Written performance management plan with documented data collection methods satisfaction surveys, complaint logs, billing error logs, incident logs
2) Internal quality audit schedule established, followed, and producing documented findings
3) Corrective action plans on file for identified deficiencies: who was accountable, what changed operationally, how recurrence is prevented
4) Staff compliance training ongoing, documented, and not limited to onboarding
5) Policy manual reviewed and updated at minimum annually with documented review dates, not just a “last revised” footer on the cover page
8. Physical Facility Requirements
This category applies to suppliers operating a patient-facing physical location. Drop-ship and telehealth providers with no retail or clinical space where patients receive services should confirm directly with their accrediting organization which requirements apply to their enrolled address — the answer varies by AO and enrollment type.
1) Separate waiting area with chairs that have armrests
2) ADA-compliant restrooms accessible to patients
3) Fitting area with table and chairs that can be disinfected between patients
4) Parallel bars and full-length mirror for ambulation and fitting assessment
5) Separate, clearly labeled areas for clean and soiled items
6) Repair and disinfecting areas visibly labeled and maintained separately
7) Handicapped-accessible parking and building entrance
8) Visible signage at the entrance: company name, address, hours of operation, contact information
9) Comprehensive liability insurance certificate — correct MAC (Palmetto GBA or Novitas Solutions) and your accrediting organization listed as additional certificate holders
The 2026 Annual Survey Rule Changes Everything About How You Use This Checklist
Under the old 3-year cycle, “being prepared” meant being ready on a specific date. Annual surveys retire that definition.
Every item on this checklist needs to be current on any given Tuesday — not the Tuesday before your survey notice arrives. Complaint logs need to be actively maintained, not reconstructed from memory in the week before a visit. Policy manuals need a documented annual review cycle tied to a specific month, not an ad hoc update when someone remembers. Staff training records need to reflect what your team knows today — not what they were handed at orientation two years ago.
According to NikoHealth’s 2026 accreditation analysis, 60% of failed DMEPOS surveys cite documentation or required postings as the primary deficiency. (Source: NikoHealth) That figure reflects organizations that prepared for an inspection rather than building compliance into how they operate every day.
Always-on compliance comes down to three operational habits: a quarterly internal audit calendar, an annual policy review process tied to a fixed month, and a mock survey run before your accrediting organization’s annual visit. Providers who do these three things pass surveys without drama. Providers who do not spend the weeks before a survey in controlled panic — and the weeks after it managing corrective action plans.
Review what annual surveys add to your total compliance spend in our DMEPOS accreditation cost breakdown before you finalize your 2026 budget.
The Three Places Providers Fail DMEPOS Surveys That No Checklist Will Fix
Every item on this checklist matters. But three failure points appear repeatedly across survey deficiency reports, and they share something in common: no document can correct them after the fact.
Staff cannot explain the policies they are supposed to follow. A surveyor asks your delivery driver what happens when a patient calls after hours with an equipment problem. The driver says that is handled by someone else in the office. That answer is a deficiency — because your after-hours policy requires every patient-facing staff member to know the escalation process. Policies that staff can describe in plain language, without prompting, without looking at a binder, exist in far fewer DME practices than anyone admits.
The delivery ticket and the clinical record contradict each other. The CMN documents an L1851 for a knee diagnosis. The delivery ticket shows a different product code. The physician note references one joint; the brace delivered is coded for another. These mismatches are not always intentional — most are clerical errors that compounded quietly over weeks. To a surveyor, they are deficiencies. To a RAC auditor, they are the exact pattern that triggers a post-payment review. Build a reconciliation check into your intake process and run it on every file before any survey.
The complaint log has never been used. Surveyors know what a working complaint log looks like. It has entries. Resolutions vary. Some issues took follow-up. A complaint log with zero entries over 18 months signals one of two things: either no patient has ever had a problem with your service, or no one is recording problems when they occur. Neither answer passes scrutiny. Document every complaint, every resolution, every time — even when the fix was immediate and the patient was satisfied before they hung up.
Who This Checklist Is For
Use this checklist if you are:
1) A licensed DME provider preparing your first DMEPOS accreditation application
2) An accredited supplier entering your first annual resurvey cycle under the 2026 rules
3) A clinic owner, chiropractor, or physical therapist adding Medicare DME billing to an existing practice
4) An office manager or compliance staff member building or auditing a policy and document library
Get additional support before relying on this checklist alone if:
1) You have never completed Medicare enrollment — start with the full accreditation process, and understand first how DMEPOS accreditation differs from a DME license
2) You operate a drop-ship or telehealth model and have not confirmed which physical facility requirements apply to your enrolled address
3) Your policy library does not yet exist — a compliance consultant or your accrediting organization’s pre-application support is the right starting point, not a checklist
Frequently Asked Questions About DMEPOS Accreditation Requirements
Required documentation falls across eight categories: business administration records, patient rights and consumer service policies, human resources files, delivery and setup procedures, product safety and equipment logs, patient records, quality improvement documentation, and physical facility compliance records. Every CMS-approved accrediting organization surveys against these categories under 42 CFR §424.57, though individual AOs weight and interpret them differently.
Effective January 1, 2026, CMS requires annual accreditation surveys for all DMEPOS suppliers as a condition of Medicare participation — replacing the previous 3-year cycle. Surveys may be unannounced and can include site visits, staff interviews, patient file reviews, and inventory inspections at any point within the annual window.
A failed survey results in a corrective action plan with a defined remediation timeline. Deficiencies not corrected within that window can lead to accreditation revocation and Medicare billing suspension. The average billing suspension following revocation runs approximately 18 months, and civil penalties for billing Medicare without valid accreditation can exceed $25,000. (Source: NikoHealth)
Yes — if you are billing Medicare Part B for DMEPOS items, accreditation is required regardless of whether patients visit a physical location. Physical facility requirements may apply differently depending on your enrolled address and business model. Confirm the specifics with your chosen accrediting organization before submitting your application.
A DME license is issued by your state and authorizes your business to operate as a DME supplier within that jurisdiction. DMEPOS accreditation is issued by a CMS-approved accrediting organization and is required to bill Medicare Part B. Both are required, they come from different bodies, and they run on separate application processes. The full comparison is in our guide on the difference between DMEPOS accreditation and a DME license.
Yes — but only if your drop-ship agreement explicitly requires your supplier to provide a delivery confirmation with beneficiary signature returned to your files within a defined timeframe. The documentation obligation belongs to you as the billing provider. If your current agreement does not address delivery confirmation format and return timing, that gap will appear in a survey before it appears in a Medicare audit — and you want to find it first.
Ready to Offer Compliant DME Without the Inventory Burden?
If you are a licensed DME provider looking to add PDAC-approved orthopedic braces and ambulatory aids to your practice without carrying stock, managing shipping, or building a warehouse compliance program from scratch Ava Medical Supply was built for exactly that.
This program is the right fit if:
1) You hold a DME license or are actively working through the licensing process
2) You want to offer Medicare-compliant DME to your patients without the inventory overhead
3) You need delivery confirmation documentation that holds up in an accreditation survey and a Medicare audit
4) You are billing Medicare now or setting up your billing workflow
This is not the right fit if:
1) You are looking to sell DME on Amazon, Shopify, or directly to consumers without a provider relationship
2) You do not have and are not pursuing a DME license
3) You need wholesale pricing to stock your own inventory
Here is what happens when you reach out:
1) We verify your DME license and NPI one business day
2) We onboard your practice to our partner portal 2 to 3 business days
3) You place your first order we ship direct to your patient with full documentation included
No minimum orders. No long-term contracts. Every shipment includes a compliant delivery confirmation, PDAC product documentation, and HIPAA-compliant packaging. If you have questions about your state licensing situation before you apply, our team can point you toward the right resources before you commit to anything.
Most providers are placing their first order within one week of contacting us.
