Medicare & MedicaidBack to stories →
← Back to stories
Audits & program integrityNew in this edition

Noridian introduces secure audit file exchange through GoAnywhere

Noridian offers GoAnywhere for audit-document exchange through auditor-approved access, separate from filing and portal systems.

What happened

Noridian’s September 30 GoAnywhere announcement offers managed file transfer for Audit and Reimbursement documentation. Approved providers, hospitals and external partners can securely upload, download and share files with controlled folder access. Access begins by contacting the assigned auditor, who verifies the organization’s approved email domain and provides onboarding instructions. After approval requirements are met, the auditor shares a file or folder that allows the user to create and activate an account.

Certain nonprovider representatives, including consultants, third-party preparers and vendors, must submit the Medicare Cost Report Third-Party Authorization form to their auditor before access can be approved. Noridian links registration, authorization, FAQ and training resources for the platform. It expressly says GoAnywhere does not replace MCReF cost-report filing or the Noridian Medicare Portal; each application requires separate access. As of October 4, an organization should confirm the applicable audit exchange and permissions rather than assume a new transfer account satisfies a filing or portal obligation.

Scope and timing

Authority status
Final
Applicability
Operationally relevant
Audience
Health systems, Provider networks
Jurisdiction
Federal
Affected functions
Revenue Cycle, Compliance, Clinical Operations
Responsible owner
Revenue Cycle

Why it matters

Controlled document exchange needs the right representatives and permissions, while statutory filing and other portal workflows remain separate.

Implementation playbook

  1. Ask the assigned auditor about eligibility, authorize representatives and configure separate access before using the new exchange workflow. Revenue Cycle · Due 2026-10-09
  2. Record the applicability assessment and validate the affected workflow with its operational owner. This is an internal review target, not an additional statutory deadline. Compliance · Due 2026-10-12

Sources

Complete edition and supplemental material

This finding in the complete approved report →

Regulatory horizons, CIA trends and implementation trackers remain in the full report.

Read the entire Medicare & Medicaid report →

← Return to stories

Privacy preferences

Where enabled for this site, Cloudflare Web Analytics can send page-use and performance measurements to Cloudflare. This panel provides information and does not turn analytics on or off.

This panel stores no tracking choice and does not change your tool saves, screening, resets, reports or exports. Other sites have separate settings.

Read Privacy & Cookies