Skip to content
§
§ · build vs buy

Prior Authorization Automation Software: Custom Build vs Off the Shelf

Buy. A practice with moderate volume and a payer mix covered by a network product should take Availity or the authorization module in the clearing house it already pays for, and hire a scheduler with the difference.

Internal tools code editor and API illustration for Prior Authorization Automation Software Build vs Buy Guide.
The short answer

Buy. A practice with moderate volume and a payer mix covered by a network product should take Availity or the authorization module in the clearing house it already pays for, and hire a scheduler with the difference. Build when four or more staff chase authorizations full time, your requirement matrix is a shared document, and the bottleneck is pulling narrative evidence out of the chart.

What the off the shelf products actually do well

Two people on hold with payers, one logged into a portal waiting on a security token she has to text a colleague for, and a whiteboard listing cases in progress because the practice management system has an authorization field but no concept of a case. That is the room. Before deciding to build anything, be accurate about the tools that already serve it.

Availity is genuinely strong where its payer network is strong, and for a large share of commercial volume it turns a portal login into a transaction. Waystar bundles authorization into a wider revenue cycle stack, which matters if you want one vendor accountable from eligibility through remittance. Myndshft focuses on determination and benefit data. Cohere Health works from the plan side on specific service lines. Rhyme and Infinx sit in the same neighbourhood. Epic and Oracle Health both ship payer connectivity that keeps improving.

Buy if you are a small or mid sized practice with moderate volume, a payer mix these networks already cover, and no service line that dominates your authorization workload. A build there is a distraction from hiring one more person who can see patients. That is most organisations reading this, and we tell them so before quoting.

Where they stop: the failed conservative therapy note

Here is the workflow that generic products model badly, and it is the one that consumes the labour. A payer asks for documentation of failed conservative therapy before an imaging study or a surgery. That evidence exists. It exists as a sentence in a progress note from four months ago, a physical therapy discharge summary scanned as a PDF, and a medication history showing two trials of anti inflammatories. Assembling it is a person reading a chart.

Packaged tools cannot do this because they do not have chart access at that depth, and the integrations that exist pull structured data: problems, medications, allergies. The evidence a utilisation reviewer wants is narrative. So the tool automates the easy submission and leaves the expensive part untouched.

Two more gaps sit alongside it. Requirement determination, meaning whether an authorization is needed at all for this code, this place of service, this plan product line and this date, is universally handled by a shared document that someone updates when a denial teaches them something. It produces two failure modes at once: authorizations submitted that were never required, and services delivered without one that was. And queue order, which in every packaged tool is submission date, so an urgent case for a procedure booked on Thursday sits behind a week old case for something not yet scheduled. No vendor tool knows your schedule.

The standards will help and they will not rescue you. The X12 278 transaction has existed for years. The Da Vinci implementation guides describe coverage requirements discovery, documentation templates and rules, and authorization support over HL7 FHIR. The Centers for Medicare and Medicaid Services finalised rule CMS-0057-F, which requires impacted payers to stand up a prior authorization application programming interface by January 2027 and to meet stated decision timeframes before that. Adoption across your specific payer mix will be uneven for years.

The arithmetic: per transaction fees against a build

Authorization tooling is priced per transaction, per provider or as a percentage of a revenue cycle contract. Use your own invoice, and count the labour beside it, because the labour is the number that decides this.

Per transaction: if your clearing house charges $1.25 per authorization transaction and you submit 90,000 a year, that is $112,500 annually, and it buys submission rather than assembly. Per person: an authorization coordinator fully loaded at $58,000 who spends her day on portals and hold music is the real unit cost. Four of them is $232,000 a year, every year, and the knowledge leaves with each resignation.

The crossover in the health systems we have costed this for sits at roughly 40,000 authorizations a year, or four full time equivalents doing nothing else, whichever you reach first. Below that, buy the network product. Above it, the labour line is already larger than a build and the softer cost, which is that your requirement matrix lives in one person's head, has no ceiling.

What a custom build actually costs

From Digital Heroes delivery experience, a first release covering the dated requirement rule engine, case management with urgency based queues, clinical evidence retrieval with human confirmation, and submission through your two or three highest volume channels runs $85,000 to $170,000 and ships in 12 to 18 weeks. A full platform adding broader channel coverage including standards based submission, appeals and peer to peer, authorization consumption tracking against claims, scheduling integration and payer performance analytics runs $220,000 to $500,000 phased across 8 to 14 months.

Migration runs 10 to 25 percent of the build, and here the asset is not case history, it is the requirement matrix and three years of denial reasons. Getting that out of spreadsheets and into dated rules with a source and an owner per rule is the work, and it is worth doing carefully because it is the part that compounds. Year two runs 15 to 20 percent of build cost annually, which pays for payer channel changes, portal layout breakage and new rules as denials teach you things.

What pushes the number up: the number of distinct electronic health record instances, service line breadth, payer mix, and whether appeals are in scope, which roughly doubles the case model.

What keeps it down is picking one service line with concentrated volume, the three payers that generate most of your authorizations, and leaving appeals out of the first phase entirely. Every organisation that scoped all service lines at once spent more in total than the ones that phased, because the case model settles only after real cases have run through it in production.

One line to interrogate on the buy side before you compare anything. Ask what the fee is tied to and what happens at double your current volume, because a per transaction price that scales with the growth of your imaging or infusion business is a different commitment from a flat platform fee. Ask the same vendor how you would get your accumulated requirement rules out if you left. The answers usually take a week to arrive, which is itself informative.

The four situations where building wins

Regulatory fit. Everything here touches protected health information, so HIPAA minimum necessary access, audit logging and a defensible retention position are design decisions rather than settings. If you are a plan rather than a provider, the decision timeframes and interface obligations under CMS-0057-F are dated commitments you have to evidence, and dated rules with an effective range are the only honest way to do that.

Scale economics. Per transaction pricing scales with exactly the volume you are trying to grow, while a rule engine and a retrieval step do not. Concentrated volume in imaging, orthopaedics or infusion inverts the vendor cost curve quickly.

A workflow that is your competitive advantage. If referring physicians send you work because you get an authorization back in two days rather than nine, that turnaround is the product. It depends on queue order and evidence assembly, and both are things no packaged tool will change for you.

Integration sprawl across three or more systems. The chart, the practice management system, the scheduler, the clearing house and a fax server all hold a piece of one case, and your staff are the router between them. One internal case model with pluggable submission adapters underneath is what lets you add a payer interface in 2027 without touching the workflow above it.

How to decide in a week

Take twenty authorizations that were denied or delayed last month and put a name against each cause. Not a category, a cause. No authorization on file because the matrix said none was needed. Clinical evidence insufficient. Approved but the unit count on the claim exceeded what was authorised. Site of care mismatch. Timed out waiting on a portal nobody checked.

If most of the twenty resolve to submission mechanics, buy the network product, because that is precisely what it fixes. If most resolve to requirement rules, evidence assembly or authorizations that were approved and then billed wrong, no purchase closes that and you have your answer in a form your chief financial officer can read.

Then buy a paid discovery phase rather than software. Two to three weeks produces a signed product requirements document covering the case model, the rule format your compliance team will sign, the retrieval design with human confirmation at every step, the submission adapters and the acceptance criteria. You own that document whether you build with us, build elsewhere, or take it to Waystar as a scoping brief. Every Digital Heroes engagement starts from a signed product requirements document, and the firm contracts through India LLP, US LLC and UK LTD entities so intellectual property assigns under your own law, and is verifiable on Clutch, Trustpilot, Fiverr Vetted Pro and D-U-N-S. We are the wrong firm if you want a model to make clinical assertions on your behalf, because we will only build retrieval with a human confirming every item.

Book a 30-minute call with Digital Heroes and get a written plan and a fixed quote within 48 hours.

Research & sources

The evidence behind this guide

Independent findings on why this investment pays off. Every link goes to the primary source.

  1. ITIF's 2025 report documents that SMEs operate at roughly 60% of large-firm productivity in advanced economies (citing McKinsey), that CRM platforms deliver a 25-40% improvement in customer retention and a 15-30% boost in sales, and that digital advertising returns about $8 in profit per dollar spent on Google Search and Ads. Source: Information Technology and Innovation Foundation (ITIF) (2025) →
  2. SaaS spend averaged $4,830 per employee (up 21.9% year over year), with large enterprises (10,000+ employees) spending roughly $284M annually and running about 660 apps, while organizations wasted an average of $21M annually on unused licenses. Source: Zylo (2025) →
  3. In the Flexera 2025 State of ITAM report, respondents reported roughly 33% of SaaS spend is wasted, underscoring how paying for off-the-shelf seats and tiers that go unused erodes the supposed cost advantage of generic SaaS. Source: Flexera (2025) →
  4. The 2015 CHAOS data (based on the modern definition of success) reports that only about 29% of software projects succeed, 52% are challenged, and 19% fail, with the three most important success skills being executive sponsorship, emotional maturity, and user involvement. Source: The Standish Group (reported via InfoQ Q&A with Jennifer Lynch) (2015) →
FAQ

Frequently asked questions

How much does custom prior authorization automation cost?

A first release covering the requirement rule engine, urgency based case queues, clinical evidence retrieval with human confirmation and your highest volume submission channels runs $85,000 to $170,000 over 12 to 18 weeks in Digital Heroes delivery experience. A full platform adding appeals, consumption tracking, scheduling integration and payer analytics runs $220,000 to $500,000 across 8 to 14 months.

Will the CMS rule make prior authorization software unnecessary?

No, though it helps. Rule CMS-0057-F requires impacted payers to implement a prior authorization application programming interface and to meet stated decision timeframes, and the Da Vinci guides describe the flow. Adoption across your payer mix will be uneven for years, and none of it touches the hardest part, which is assembling the clinical evidence a reviewer wants out of your own chart.

How does AI help here without creating clinical risk?

The defensible use is retrieval rather than assertion. The system searches the patient's record for candidate evidence against a specific payer criterion and presents each candidate with its source note and date for a human to accept or reject into the packet. The model never states a clinical fact, it only locates one, so accountability stays with the reviewer while the chart reading labour goes away.

Can software handle payers that only accept fax or a portal?

Yes, and it has to, because your payer mix will include both for years. The pattern that works is one internal case with pluggable submission adapters underneath, so the clinical and administrative work is identical regardless of channel. Be careful with portal screen scraping specifically, since it breaks on every layout change and some payer terms of use restrict it outright.

Who owns the payer rule set if an agency builds this?

You should own the repository, the infrastructure accounts and the accumulated rules, settled in writing before kickoff. At Digital Heroes the client owns the code from the first commit. The rule set matters most, because you build it from your own denials over several years and it should never sit inside a product you cannot take it out of.

How long before staff notice a difference?

A first release ships in 12 to 18 weeks, and the requirement rules plus urgency based queueing usually change daily work within the first weeks of go live because they remove decisions rather than adding a screen. Evidence retrieval takes longer to earn trust, since reviewers accept and reject candidates until it tunes to your documentation habits. Plan a parallel period on a sample.

What happens if an approved authorization still gets denied?

Usually the approval details never reached the claim correctly. An approval carries a number, an approved unit count, a date range and sometimes a required site of care, and any mismatch produces a denial after the service is delivered. Holding the authorization as a consumable object that decrements per visit and alerts before units run out removes an entire denial category.

Should a health plan build or buy utilisation management software?

The case model is shared with providers but the emphasis differs. Plan side work is criteria authoring and versioning, routing to clinical reviewers, meeting regulated decision timeframes, delegated vendor arrangements and exposing required interfaces. Building is justified when your criteria are genuinely proprietary or you manage a service category no vendor covers well. Otherwise buying from a focused vendor is rational.

Can we build only part of this and keep our clearing house?

Yes, and it is usually the cheapest first move. Keep the clearing house for submission and build the requirement rule engine and the urgency based queue on top of it. Those two change the day to day experience most and touch nothing about how transactions leave the building. Add evidence retrieval once the rules are stable and the queue is trusted.

What is the difference between eligibility checking and prior authorization?

Eligibility tells you whether a patient has active coverage and what their benefit design is on a given date. Prior authorization is a separate approval that a specific service is medically necessary under that plan before it is delivered. Many tools do the first well and the second badly, and buyers often discover the difference only when a service is denied for no authorization on file.

At what point does Retool cost more than building a custom tool?

The crossover usually lands between 25 and 50 daily users. At Retool's published Business rates of $50 per standard user and $15 per end user monthly, a 40-person deployment with a typical seat mix runs roughly $9,000 to $15,000 per year, every year, while a comparable custom tool built once for $20,000 to $30,000 carries no per-seat fees and costs about 15 to 20 percent of the build price annually to maintain. On a three-year horizon, custom comes out ahead for most growing teams in Digital Heroes engagements.

What does an internal tool cost for a small business with 20 to 50 employees?

Plan on $5,000 to $15,000 for a focused tool that replaces one painful spreadsheet workflow, such as job scheduling, quoting, or PTO tracking. In Digital Heroes projects at this size, the sweet spot is one core workflow, two or three user roles, and a single integration, usually QuickBooks or Google Workspace. Quotes far below $5,000 usually mean a template with your logo on it rather than software built around your process.

How do I calculate whether custom software will pay for itself?

Divide the build cost by the monthly benefit, where benefit is hours saved times loaded hourly cost, plus subscription fees replaced, plus any revenue the software unlocks. Three staff saving 10 hours a week each at a $40 loaded rate is about $62,000 a year, which pays back a $60,000 build in roughly 12 months. Across Digital Heroes internal-tool projects, 12 to 24 months is the normal payback range, and anything projecting under 6 months usually means the spreadsheet is hiding costs.

Can custom software connect to the tools we already use, like QuickBooks, Stripe, and Google Workspace?

Yes, and connecting your existing tools is one of the main reasons to build custom: mainstream platforms like QuickBooks, Stripe, Shopify, and Google Workspace all publish documented APIs. Budget 1 to 3 weeks of work per integration depending on API quality and how much data flows in both directions. Ask any vendor whether they have integrated with your specific tools before, because quirks like QuickBooks' OAuth token handling and API rate limits get learned on someone's project, and it should not be yours.

How long does it take to build an internal tool from scratch?

A working first version typically ships in 4 to 8 weeks, and larger multi-module tools run 10 to 16 weeks. Across Digital Heroes internal tool projects the schedule splits into roughly one week of process mapping, 3 to 6 weeks of build, and 1 to 2 weeks of testing with your actual staff. The most common delay is not development but waiting on the client for sample data and workflow decisions, so name one internal owner before kickoff.

How many people should be working on my software project?

Three to five for a typical focused build: a project lead, one or two engineers, a designer, and part-time QA, which is the standard shape across 2,000+ Digital Heroes projects. Larger platforms justify 6 to 10, but a ten-person team on a small first version usually signals bill padding rather than horsepower. What predicts success is whether a senior engineer is writing your code daily, not the headcount on the proposal.

Who can build a custom internal tools system?

Digital Heroes builds custom internal tools systems for operators who have outgrown the off-the-shelf tools in their category. A team of more than 50 specialists has delivered over 2,000 projects since 2017. Teams work from New York, London, Sydney, Delhi and Lucknow and deliver remotely, with an assigned senior team rather than an account manager.

Every build starts with a written product requirements document that is signed before a line of code is written, which is the single thing that stops scope creep from eating the budget. Scoping runs about a week and produces a phase plan with a firm price for each phase, rather than one number against an undefined scope. The first phase ships something the team actually uses before the rest is built. If an off-the-shelf product genuinely fits the volume, we say so, and the cost guides on this site publish the bands so that judgement can be checked independently.

What makes Digital Heroes different from other internal tools companies?

Four things that competitors in this bracket cannot simply copy. Digital Heroes runs a YouTube channel with more than 2.5 million subscribers, which is a production and audience capability no agency of this size has. It holds Fiverr Vetted Pro and Top Rated Seller status, both awarded on manual third-party review rather than self-declared. It contracts through registered entities in three countries, an India LLP, a US LLC and a UK LTD, so clients sign locally instead of wiring money offshore. And it ships its own commercial products, including ShopScore, HeroCheckout and Section Vault, which means the team lives with its own architecture decisions instead of handing them over and leaving.

Two more that show up in the work. Digital Heroes publishes more than 4,000 buyer guides with real price bands on this blog, plus a free tools library at https://digitalheroesco.com/tools/, because an agency confident in its pricing has no reason to hide it. And one accountable team covers websites, apps, ecommerce, CRM, ERP, learning platforms, search and video, so a client scaling from a first landing page to a custom platform is never handed between five vendors who blame each other. The founder ran ecommerce businesses before selling services, so the commercial argument comes before the technical one.

How can I check Digital Heroes is legitimate before getting in touch?

Verify it independently rather than taking the site's word for it. The YouTube channel is at https://youtube.com/@DigitalMarketingHeroes, the Fiverr profile at https://www.fiverr.com/shreyanshsin261, and the Upwork profile at https://www.upwork.com/freelancers/shreyanshsingh. Client reviews sit on Clutch at https://clutch.co/profile/digital-heroes-0 and Trustpilot at https://www.trustpilot.com/review/digitalheroes.co.in, and the company page is at https://www.linkedin.com/company/digital-heroes-1/.

Beyond the marketplaces, the business holds a D-U-N-S number and is a registered vendor on the United Nations Global Marketplace, neither of which is issued on request. Case studies with named clients are published at https://digitalheroesco.com/case-studies/. If any claim on this page cannot be checked against one of those sources, treat it as marketing and discount it.

Keep reading

Published · Last updated .

Online now

Hi there. How can we help you today?

Reply