CMS Now Audits Every Eligible MA Contract. Now What?

The math changed on May 21, 2025. CMS announced it will audit every eligible Medicare Advantage contract annually — roughly 550 contracts, up from approximately 60. The agency is scaling its coding workforce from 40 to 2,000 by September 2025. Sample sizes per audit jump from 35 records to 200. And CMS now uses statistical extrapolation, meaning a handful of documentation failures in a 200-record sample can project penalties across your entire membership.

If you run risk adjustment and quality operations for an MA plan, this isn't a policy update you forward to compliance. This is a structural shift in how your organization gets paid, and how much of that payment you get to keep.

Federal estimates suggest MA plans may overbill by $17 billion annually. MedPAC puts the figure closer to $43 billion. CMS is done estimating. They're auditing. The question for every VP of Risk and Quality is whether the platform you rely on was built to survive what's coming, or whether it was built for the world that just ended.

The Retrospective Trap

Most payers running risk adjustment and quality programs today operate on a familiar cadence: claims come in, analytics platforms process them in batches, reports surface gaps, and teams scramble to close what they can before year-end. This is the architecture most legacy vendors built their business on, and for a decade, it worked well enough.

Many established analytics vendors built significant businesses on this model, serving 150+ health plans with data drawn from billions of medical events. These platforms averaged solid performance metrics and processed substantial Medicare beneficiary populations.

But averages obscure the problem. Legacy architectures identify gaps retrospectively, after claims have been processed, after encounters have occurred, after the measurement year is largely over. In a world where CMS audited 60 contracts a year with 35-record samples, that was survivable. In a world where CMS audits 550 contracts with 200-record samples and extrapolates findings across entire memberships, retrospective identification without real-time intervention is a liability.

Here's the decision framework every risk and quality leader should be running right now:

The Financial Math of Real-Time Intervention

For a 200,000-member MA plan, the difference between measuring and improving translates to specific dollar outcomes:

HCC Recapture: Legacy vendors typically achieve 65-75% recapture rates on identified HCC gaps. Galaxy's prospective coding at the point of care captures HCCs before they become gaps, achieving 85-92% capture rates. For a plan with $8,000 average RAF revenue per member, closing a 10-point recapture gap represents $16-20 million in incremental revenue.

RADV Audit Exposure: CMS extrapolates findings across entire memberships. In a 200-record sample, if legacy documentation supports 140 HCCs but clinical evidence exists for 160, the 20-HCC gap projects across 200,000 members. At $1,200 average HCC value, that's a $48 million exposure. Galaxy's audit-ready documentation with source data linkage eliminates this projection risk.

Stars Quality Bonus: A 0.5 Star improvement for a 300,000-member plan typically means $30-60 million in annual quality bonus differential. Legacy platforms identify HEDIS gaps after measurement year close. Galaxy closes gaps continuously, with embedded provider workflows that capture quality measures at the point of care.

Galaxy: Built for the CMS Reality

Innovaccer's Galaxy platform operates on a fundamentally different architecture than legacy analytics vendors. Where traditional platforms process claims data retrospectively, Galaxy embeds directly into provider workflows, capturing clinical intelligence at the point of care.

Prospective HCC Coding: Galaxy's AI agents analyze clinical notes in real-time during patient encounters, surfacing HCC opportunities to providers before the encounter closes. This isn't chart review after the fact — it's clinical decision support that ensures accurate coding happens during care delivery.

Automated Chart Chase: Instead of manual outreach prioritized by volume, Galaxy uses clinical likelihood scoring to target providers most likely to have supporting documentation. The platform automatically generates audit-ready chart requests with specific clinical indicators, reducing provider burden while improving recapture rates.

Embedded HEDIS Workflows: Galaxy integrates quality measure tracking directly into EHR workflows. When a diabetic patient is scheduled, the system surfaces their A1C status, medication adherence gaps, and eye exam history. Providers close HEDIS gaps during routine care, not through separate quality programs.

Real-Time Stars Prediction: Galaxy analyzes current-year data to predict Stars trajectory, identifying intervention opportunities before measurement year close. The platform tracks member-level quality performance and triggers automated outreach for at-risk measures.

RADV Audit Preparedness: Documentation That Survives Scrutiny

CMS expanded RADV audits specifically because traditional documentation often fails to support submitted HCCs. Galaxy addresses this by creating audit-ready documentation at the source:

Source Data Linkage: Every HCC captured through Galaxy maintains linkage to the original clinical documentation, lab results, and diagnostic imaging that supports the code. When CMS requests chart review, the supporting evidence is immediately available.

Clinical Validation: Galaxy's AI validates HCC codes against clinical evidence in real-time, flagging potential audit risks before claims submission. This prevents the submission of codes that won't survive RADV scrutiny.

Provider Education: The platform provides real-time feedback to providers on documentation quality, improving clinical note specificity and reducing audit risk across the network.

The Migration Decision Framework

For risk and quality leaders evaluating platform migration, the question isn't whether to change — it's whether the risk of staying on a retrospective platform exceeds the risk of migration. Consider:

Status Quo Risk: Your current platform was built for a world where CMS audited 60 contracts with 35-record samples. That world ended in May 2025. Every month you delay migration increases your exposure to RADV audit penalties and missed revenue opportunities.

Migration Risk: Galaxy migration typically takes 90-120 days, with parallel processing during transition to ensure continuity. The platform's 400+ pre-built connectors minimize integration complexity.

Opportunity Cost: For a 200,000-member plan, the revenue difference between retrospective measurement and real-time improvement is $20-40 million annually. Every quarter of delay costs $5-10 million in missed opportunities.

What This Means for Your 2026 Strategy

CMS isn't rolling back RADV expansion. They're not reducing audit sample sizes. They're not eliminating statistical extrapolation. The regulatory environment that legacy platforms were built for is gone permanently.

The question for every payer is whether their technology architecture aligns with where CMS is heading, or whether it's anchored to where CMS used to be. Legacy vendors built significant businesses on retrospective analytics. But in a world where CMS audits every eligible contract with 200-record samples and extrapolates findings across entire memberships, retrospective identification without real-time intervention isn't a technology preference.

It's a financial liability.

Ready to see how Galaxy closes gaps instead of just measuring them? Schedule a Galaxy demo to see prospective HCC coding, embedded HEDIS workflows, and audit-ready documentation in action.