Top

External Review (Independent Review Organization)

External Review is a formal appeal where an Independent Review Organization (IRO) that is not the payer reviews a denial and issues a binding decision under state or federal rules. External Review typically follows an unsuccessful internal appeal and focuses on medical necessity, coverage rules, and parity compliance.

Kathryn Thompson
Reviewed by Kathryn Thompson · Updated September 2026

What it means

What External Review / IRO Review Is

External Review is a final-level appeal process where an independent reviewer, usually contracted as an Independent Review Organization, evaluates whether a payer denial should stand. The reviewer is separate from the health plan and must follow specific state or federal rules for evidence review, clinical standards, and timelines.

Most commercial plans and Marketplace plans must offer an External Review process for certain types of denials, especially those tied to medical necessity, experimental or investigational services, and coverage rescissions. The member (or the provider with member consent or assignment) requests the review, and the IRO issues a written decision that is usually binding on the health plan.

In revenue cycle terms, External Review is the last formal stop before writing off a denied balance or pursuing legal action. Once the IRO decision is final, the financial outcome on that episode of care is usually fixed: paid, partially paid, or permanently denied.

Why External Review Matters Operationally

External Review is slow and resource-heavy, so it should be reserved for higher dollar or high-impact denials, not every CO-50 or CO-197. Files often require full clinical documentation, utilization review notes, treatment plans, and evidence-based guidelines. That means real staff time, and often clinical leadership, not just a quick appeal letter.

Operationally, External Review has three big impacts:

  • Cash timing: External Review decisions can take weeks to months, which stretches days in A/R for that encounter or episode.
  • Recovery rate: When used selectively for strong cases, IRO decisions can reverse large denials and set useful precedent with a payer.
  • Compliance and parity risk: Incorrect or sloppy submissions can miss deadlines or omit required documents, which can lock in avoidable write-offs and weaken your position in any later regulatory or parity complaint.

A tight workflow is required to track which denials are eligible, which ones have exhausted internal appeals, and what the exact filing deadline and format are by payer and line of business. Losing track by even one day can mean a forfeited right to External Review and a permanent write-off.

How External Review Is Used and How to Read the Decision

The External Review process typically follows this flow:

  • Member or provider submits a request within the External Review filing window after an adverse internal appeal decision.
  • The IRO receives clinical records, internal appeal decisions, plan documents, and any supporting guidelines.
  • A clinician reviewer applies applicable coverage terms, medical necessity criteria, and in some cases parity standards, then issues a written decision.

The IRO decision letter is a key document for revenue cycle staff. Focus on:

  • Scope: Which service dates, levels of care, or units are being decided. Partial approvals are common in long stays.
  • Rationale: Exactly why the IRO upheld or overturned the denial, including which criteria sets, policies, or guidelines were cited.
  • Instructions: How the payer will reprocess the claim if the denial is overturned, and any limits or required adjustments.

Use the IRO rationale to adjust internal documentation templates, authorization workflows, and utilization review practices. If the IRO sides with the payer, that rationale can still guide future clinical documentation and can support broader parity or regulatory complaints when patterns appear across cases.

Common mistakes

  • Letting the External Review deadline expire while waiting for a second internal appeal decision, especially on commercial plans that only allow one internal appeal before IRO and start the External Review clock from the original adverse notice date.
  • Submitting only the UB-04 or CMS-1500 and a brief letter without full clinical records for a residential or PHP denial, which leads the IRO reviewer to rely mainly on the plan's file and often results in an upheld CO-50 decision.
  • Not clarifying assignment or member consent, so the plan rejects the provider-initiated External Review request as invalid and the filing window closes while the team sorts out who can legally file.
  • Using a generic appeal template that does not address the specific medical necessity criteria or parity arguments at issue, so the IRO sees a narrative that does not actually rebut the payer's rationale.
  • Failing to separate service segments in long episodes, so the IRO overturns only part of a denial and billing never rebills correctly for the approved days or units, leaving collectible dollars in A/R.

Why it matters in behavioral health

Behavioral health sees disproportionate use of External Review because medical necessity and level-of-care denials are so common for residential, PHP, and IOP. Long episodes, per-diem rates, and frequent concurrent reviews give payers multiple points to cut off coverage. When internal appeals fail, an IRO can be the only path to recover weeks of denied days.

Carve-outs add complexity. The behavioral health benefit may sit with a separate vendor from the medical plan, so the External Review rights, forms, and deadlines can differ from the main medical plan. Your team must confirm which entity's denial is at issue, which entity's appeal process applies, and whether state External Review protections cover that behavioral carve-out vendor.

Concurrent authorization denials are especially important. A payer may approve the first 7 days of residential treatment, then deny further days as not medically necessary. Internal appeals may only partially restore coverage. External Review can challenge specific cut-off points using ASAM-aligned criteria, safety risks, and step-down planning. Clear day-by-day documentation of risk, function, and attempted lower levels of care becomes critical.

State Medicaid and Medicaid managed care have their own Independent Review and fair hearing structures. Some states route disputes through state-contracted IROs, others through administrative hearings. Behavioral health programs that rely heavily on Medicaid must understand the specific state timelines, whether External Review is mandatory before a fair hearing, and how managed care contracts layer additional appeal rights or requirements.

How AI can help with External Review

AI agents can reduce the grunt work around External Review by gathering all denial details, prior auth records, utilization review notes, and clinical documents into a single case packet. An agent can map each denial to the correct appeal level, track payer and state-specific External Review deadlines, and flag which cases meet internal financial or clinical thresholds for IRO escalation.

Supabill's denials agent can read every 835 and denial letter, classify CARC and RARC codes into medical necessity, benefit, or technical categories, and alert staff when a CO-50 or CO-197 denial has exhausted internal appeal options and is approaching the External Review deadline. A benefits-verification or rules agent can hold payer and state-specific data about who offers IRO review, what paperwork is needed, and which member signatures are required. AI will not replace clinical judgment or nuanced parity arguments. Human leaders still own which cases to escalate, how to frame the medical necessity story, and how to coordinate with the patient or family to submit a compliant IRO request.

FAQ

How is External Review different from an internal appeal with the payer?

An internal appeal is handled by the health plan itself, often by a different unit or clinician than the original reviewer, but still within the same organization. External Review is handled by an Independent Review Organization that cannot be controlled or paid based on the outcome by the plan. Many plans require at least one internal appeal before you can request External Review. The decision from External Review is usually binding on the plan, while internal appeal decisions can be reconsidered or reinterpreted by the plan over time. Source

Who can request an External Review in behavioral health cases: the patient or the provider?

The patient or member almost always has the right to request External Review directly. Providers often can file on the member's behalf if there is an assignment of benefits or a specific authorization from the member. Exact rules differ by state and plan type. For behavioral health, where patients may be in residential care or crisis, having a clear workflow to secure consent and designation of representative early in the episode makes it possible for your organization to pursue IRO review on the patient's behalf when needed. Source

Are Medicaid managed care denials eligible for External Review in the same way as commercial plans?

Medicaid managed care organizations must follow federal fair hearing requirements and state-specific appeal rules, but the structure is not always labeled as "External Review" or "IRO." Some states contract with independent entities that function like IROs, while others route disputes to administrative hearings or state agencies. Behavioral health providers should review each state's Medicaid member handbook and MCO contracts to see whether an external reviewer is used, what the timelines are, and whether a state fair hearing is available if the external reviewer upholds the denial. Source

What types of denials are most appropriate to send to External Review in behavioral health?

External Review is typically reserved for medical necessity and coverage denials where clinical judgment and parity standards matter. In behavioral health, good candidates include cut-off denials for residential stays, PHP or IOP episodes where ASAM level-of-care criteria were met, or denials tied to "experimental" labels for evidence-based psychotherapies. Routine technical denials, like CO-16 for missing data or CO-45 for standard contract adjustments, are not appropriate for IRO review and should be fixed through corrected claims or internal appeals. Source

Does winning an External Review help with future behavioral health denials from the same payer?

An External Review decision is usually binding only for that specific case and set of services, but it can be very useful operationally. The IRO's rationale and references to medical necessity criteria or parity principles can guide your documentation and authorization strategy for future cases. Patterns of upheld or overturned denials across multiple External Reviews can strengthen your position in contract negotiations or formal parity complaints, even though a single IRO win does not automatically change the payer's policy language. Source

Claims Appeal

A claims appeal is a formal request that asks a payer to review and change a denial, reduction, or recoupment on a processed claim. A claims appeal uses additional information, clinical documentation, or contract terms to argue that the original payment decision was incorrect.

Prior Authorization

Prior authorization is a payer requirement to obtain approval before delivering specific services, confirming that planned care is medically necessary and covered under the member's benefit. Prior authorization is typically required for higher-cost, high-utilization, or ongoing treatment and is a common denial trigger when missing or expired.

Medical Necessity

Medical necessity is the payer standard that a service must be clinically appropriate, consistent with accepted standards of care, and not primarily for convenience in order to be covered. Medical necessity is defined in federal and state rules and in individual payer policies, and it is the core reason behind many behavioral health authorization requirements and denials.

Medicaid Managed Care Organization (MCO)

A Medicaid Managed Care Organization (MCO) is a private or nonprofit health plan that contracts with a state Medicaid agency to deliver Medicaid-covered services to enrolled members, usually for a fixed per-member-per-month payment. In behavioral health revenue cycle, a Medicaid MCO is the billed payer and follows plan-specific coverage, authorization, and billing rules that differ from fee-for-service Medicaid.

Sources

AI agents that run your billing.

The first agentic RCM that actually works.

Book a live demo