Utah's Annual EVV Audit: Why Every Month Has to Be Clean

Most states enforce EVV compliance through claim denials at the time of submission. Utah has a different approach — and it's one that catches providers off guard more often than the up-front denial model does.

How Utah's EVV Enforcement Works

Utah Medicaid conducts annual post-payment reviews for all providers of personal care and home health services. The process is specific: for each provider, Utah randomly selects a calendar month within the previous year and pulls every claim for which the provider received reimbursement in that month — including encounters paid through managed care. All of those claims are reviewed for corresponding EVV records.

If the EVV data doesn't hold up — missing records, incomplete data elements, records submitted outside the three-month window — the provider faces recoupment for the affected claims. The random selection means there's no "safe" month to let EVV compliance slip. A month of sloppy clock-ins in February can surface in an audit the following December.

The Provider Choice Model Creates Its Own Risk

Utah operates a fully open EVV model. Providers choose their own EVV vendor, with no state-sponsored free option. The sole requirement is that the system meets Cures Act standards and submits records to UEVV, Utah's EVV aggregator.

That flexibility is genuinely useful — agencies can pick a system that fits their workflow. But it creates a specific audit risk that closed or semi-closed model states don't have: when something goes wrong with the integration between your chosen EVV system and UEVV, there's no state-provided fallback. If your vendor stops transmitting records cleanly and you don't catch it for two weeks, those visits are unverified — and they'll show up in an audit whether you were aware of the gap or not.

Providers who monitor UEVV transmission logs actively are the ones who catch integration failures before they become audit findings. Providers who assume their system is working because caregivers are clocking in are the ones who find out otherwise during a post-payment review.

The Three-Month Submission Window

Utah's rules require EVV records to be submitted within three months of the corresponding claim. That window sounds generous, but it creates its own operational discipline: providers need a workflow that closes out EVV records and submits them to UEVV within that window for every single visit. Claims that paid but never had a matching UEVV record submitted are audit-exposed for the full three-month window — and beyond, since the annual review can go back a full year.

What Changed in 2024

July 1, 2024 marked the launch of Utah's new Caregiver Compensation program — an ongoing service allowing parents, step-parents, legal guardians, and spouses to be paid for providing extraordinary care to a qualifying family member enrolled with DSPD. As this program scales, it brings a new population of family-based caregivers into the EVV compliance framework. Family caregivers who are new to Medicaid billing processes are more likely to miss clock-ins, use manual entries, or be unfamiliar with UEVV submission requirements — creating a compliance risk at the provider level that didn't exist for this population before July 2024.

What Providers Should Do Now

Pull your UEVV transmission logs for the last 90 days and confirm that every claim submitted has a corresponding EVV record in the system. Identify any gaps — especially for Caregiver Compensation services if your agency has onboarded family caregivers since July 2024. Set up monitoring so you're alerted when UEVV transmission fails rather than finding out in an audit.

Utah's post-payment review model rewards providers who treat every month as audit month. The agencies that stay clean year-round are the ones whose systems make that the default — not the exception.