Guides › Medical record review
Field manual, September 2026. 22 chapters, free, no email.Medical record review: the complete guide
Medical record review is the work of reading a medical file until you can say what happened, when, and what it means for a claim. This manual covers the 6-step workflow, what the work is actually paid, where it breaks, and what makes a review survive cross-examination.
Medical record review is the point where a case stops being a box of paper and becomes a set of facts somebody will argue about. The chronology, the demand, the evaluation, the reserve and the denial all sit on top of it. This manual covers the whole job, from what arrives in the production to what has to be true before a summary goes out under your name. Every number in it comes from a public source, named on the line where it is used. Where nobody publishes a number, this manual says so instead of estimating one.
Record review in 15 numbers
| If you are | Start at |
|---|---|
| Here for the definition, because the phrase means 4 different jobs | Chapter 1, then the glossary in chapter 21. |
| A paralegal or case manager who has to produce the chronology | Chapters 4 through 10, then the templates in 19. |
| The attorney who signs the demand, the motion or the report | Chapters 9, 10 and 15. |
| An adjuster or examiner working a caseload | Chapters 2, 7 and 14. |
| Evaluating software or a review service | Chapters 11, 13 and 18. |
| Building a budget for this work | Chapters 11 and 12. Chapter 12 is the only published price there is. |
| Responsible for signing off on privacy or security | Chapter 16. |
| In a hurry and want the usable parts | Chapter 19. Copy the artifacts and go. |
What medical record review is, and the 5 things it produces
Medical record review is the process of reading a patient's or claimant's medical file closely enough to state, with a page citation for each statement, what treatment happened, in what order, and what the record does and does not support. It is one activity with several names. A paralegal calls it building the chronology. An adjuster calls it file review. A physician preparing for an evaluation calls it record review and bills it separately from the examination. A payer calls it clinical review. The reading is the same reading.
What separates it from simply reading is the obligation to produce something another professional can check. A review that cannot be traced back to the page it came from is an opinion about a file, not a review of one. That single requirement, a citation on every line, drives almost every decision in the rest of this manual: how the file has to be ordered before anyone reads it, why duplicates have to come out first, what a chronology column has to contain, and what a deposition will attack.
The 5 deliverables
Almost everything anyone asks for from a medical file is one of 5 things, or a combination. Knowing which one you owe before you start is the difference between 1 pass through the file and 3.
| Deliverable | What it is | Who asks for it |
|---|---|---|
| Index | A page-level map of the production: provider, document type, date range, Bates span. No clinical content. | Anyone who has to find something in the file twice. |
| Chronology | A date-ordered table of medically significant events, 1 row per event, each row carrying its source page. | Plaintiff and defense attorneys, adjusters, evaluators. |
| Narrative summary | The same facts written as prose for a reader who will not read a table, with the citations kept. | Demand packages, evaluation reports, coverage opinions. |
| Gap and missing-records analysis | What the file references but does not contain: named providers with no records, referrals with no follow-up, date ranges with nothing in them. | Whoever is about to be surprised at deposition. |
| Billing or specials ledger | Charges, payments, adjustments and balances tied back to the treatment that generated them. | Demand valuation, lien resolution, bill review. |
The gap analysis is the one people skip and the one that costs the most when it is skipped, because a missing record is invisible by definition. Everything else in the file announces itself. A provider who was referred to and never appears does not.
Who does this work, and what each one needs off the file
The same 900 pages get read by 6 or 7 different people across the life of a claim, each looking for something different and each producing something the next one relies on. The reason a chronology built for a plaintiff attorney rarely serves a defense evaluator is not quality. It is that they are answering different questions off the same paper.
| Reader | What they are looking for | What they sign |
|---|---|---|
| Paralegal or case manager | Every medically significant event, in order, with a page cite, so nothing has to be found twice. | Nothing. They produce the working artifact everyone else edits. |
| Plaintiff attorney | Mechanism, continuity of treatment, objective findings, and the specials that support the number in the demand. | The demand, and later the complaint. |
| Defense attorney | Gaps, prior injuries to the same body part, inconsistency between what the patient reported to different providers. | Motions, and the questions at deposition. |
| Adjuster or examiner | Compensability, causation, work status, and whether the reserve is still right. | Reserve changes, authorizations, denials. |
| Legal nurse consultant | Standard of care, clinical plausibility, and whether the record actually says what the attorney thinks it says. | A report the retaining attorney relies on. |
| IME or QME physician | Everything relevant to the questions in the cover letter, and anything that contradicts the history the patient gave at the exam. | A report that is evidence, under their own licence. |
| Underwriter or payer reviewer | Diagnosis, duration, documentation sufficiency against a policy or a coverage rule. | Coverage, eligibility or payment decisions. |
2 consequences follow. First, a review is only reusable downstream if it is neutral: a chronology that only carries the facts helping one side has to be redone by the other, and a chronology that carries every fact serves both. Second, the person doing the reading is frequently not the person carrying the professional risk. The paralegal reads, the attorney signs. That gap is why citation discipline matters more here than in almost any other kind of document work, and chapter 15 is about what happens when it fails.
What actually arrives: the shape of a real production
Every guide to record review assumes a clean PDF. Real productions are not clean, and the difference between the 2 is most of the work. Here is what turns up, in rough order of how often it ruins a schedule.
- Volume nobody sized in advance. A medical management company representative told RAND that a packet can run 10,000 to 15,000 pages. That is an outlier, but the working case is not small either: across 198,774 California cases with any paid record review, the median payment implies roughly 513 pages and the 95th percentile roughly 3,533.
- Duplicates, in bulk. The same discharge summary appears in the hospital production, in the referral packet the orthopedist received, and again in the primary care chart. Near-duplicates are worse than exact ones: same document, different scan, 1 page skewed, so a hash comparison misses it.
- Co-mingled patients. A page belonging to somebody else, sitting inside your production because it was adjacent in the source chart. It is a privacy incident and a credibility problem in the same page.
- Scans of faxes of scans. Optical character recognition on a third-generation fax is not the same problem as OCR on a born-digital PDF, and vendors who quote accuracy rarely say which one they measured.
- Handwriting. Therapy notes, nursing flow sheets, and the margin annotation that turns out to matter.
- Undated and unnumbered pages. A document with no date cannot be placed in a chronology, and a page with no Bates number cannot be cited.
- Template boilerplate. Modern electronic records carry review-of-systems blocks and copied-forward assessments that look like findings and are not. Reading them as new findings on each visit invents a treatment course that did not happen.
- Imaging that is not the report. Studies arrive as discs or as a link to a portal, and the file contains only the radiologist's narrative. See reading imaging as DICOM for what is in one and not the other.
The median file is a day of reading. The 99th percentile is a month of it, and it lands on the same 30-day clock.
Records that were removed before they reached you
There is one more thing in a production, and it is the thing you cannot see. In California, the 2021 medical-legal fee schedule started charging $3.00 a page past 200, which gives the party assembling the packet a direct financial reason to send fewer pages. RAND found that evaluators report this happening. One active evaluator described defense attorneys removing hundreds of pages that other physicians in the file had referenced, which is how the removal became visible at all.
The evaluator's objection was not about the money. It was that deciding which records are clinically relevant is a medical judgment, and a party to the dispute was making it. Whatever your role, the practical consequence is the same: treat the production as a sample, not a census, until the gap analysis says otherwise.
The 6 steps, in the order that survives a real file
The workflow below is not a novel idea; it is the order that stops you reading the same page 3 times. The only part people get wrong is the sequence. Reading before ordering feels faster on page 1 and costs hours by page 400, because every contradiction found early has to be revisited once the rest of the file is in date order.
- Collect. Gather the complete file from every provider named anywhere in the record, plus every prior production. Gaps found in week one are a phone call. Gaps found at deposition are a different kind of problem. Chapter 5.
- Organize. Deduplicate, separate co-mingled patients, number the pages, sort by provider and date. Nothing is read yet. Chapter 6.
- Read and extract. Pull every medically significant event, each one carrying the page it came from. Chapter 7.
- Build the chronology. Put the extracted events in date order with the columns your reader actually needs. Chapter 8.
- Analyze. Causation, treatment gaps, pre-existing conditions, contradictions between providers, work status over time. Chapter 9.
- Report. Write the deliverable in the form the end reader needs, with citations they can check in seconds. Chapter 10.
2 rules govern the whole sequence, and both trade a small cost now for a large one later.
Order before reading
Cheap to fix before you have opinions.
- A contradiction found on page 40 has to be revisited once the rest of the file is in date order.
- A citation written against a temporary page number has to be rewritten.
- Duplicates removed after extraction mean the extraction runs twice.
Cite as you extract
2 seconds now, several minutes later.
- Reconstructing a citation means finding the page again in a file you have stopped holding in your head.
- It is the first discipline to go under deadline and the first thing a deposition tests.
- An uncited line is a claim. A cited line is evidence.
Collect: what complete means, and the clock you are on
A file is complete when every provider named in it has produced records, every date range referenced has documents in it, and the billing matches the treatment. That is a test you run against the records themselves, which is why it can only be finished after a first pass, not before one.
The right of access, and the clock it starts
Under 45 CFR 164.524, a covered entity must act on an individual's request for access to their records no later than 30 days after receipt, with one extension of no more than 30 days. That is the outer bound on a patient-directed request, not a service level, and providers routinely use it. Plan the schedule against 60 days, not against a promise on a release form.
The same rule limits what a provider may charge an individual for the copy. Under 45 CFR 164.524(c)(4) the fee is confined to 4 categories:
- Labor for copying the information, whether in paper or electronic form.
- Supplies for creating the paper copy, or the portable media if the individual asked for electronic copies on media.
- Postage, where the individual asked for it to be mailed.
- Preparing an explanation or summary of the information, if the individual agreed to that.
Search and retrieval time is not on that list. A retrieval invoice that bills for locating the chart is billing for something the rule does not permit on an individual's own access request, and is worth reading closely.
What to request, beyond the obvious
Usually requested
Treatment records from the providers the client names, for the period after the incident.
Usually missing
Billing and payment ledgers as a separate production. Imaging as studies, not just reports. Pharmacy records. Records from every provider named inside the records you already have. The prior-treatment period for the same body part. Certification or affidavit pages, which decide admissibility later.
That fourth item is the one that changes outcomes. The reliable way to find providers is not to ask the client to remember them; it is to read the file you already have and extract every name in it. That is what provider list extraction and missing-records detection are for, and it is the same job whether a person or a tool does it.
Organize: duplicates, co-mingling, and why order comes first
This is the step people treat as clerical and it decides the accuracy of everything after it. 4 things have to happen before a single clinical fact is extracted, and they have to happen in this order.
- Deduplicate. Exact duplicates are easy. Near-duplicates, the same document rescanned at a different angle or printed from a different system, are the ones that matter, because each copy carries a different page number and a reader counts them as separate encounters. See deduplication.
- Separate co-mingled patients. Pull out any page that belongs to another patient. Do not delete it, quarantine it, log it, and tell whoever produced it. See co-mingled record detection.
- Number the pages. Nothing can be cited until it has a stable identifier. If the production came unnumbered, Bates stamp it before reading, not after, because a citation written against a temporary number has to be rewritten.
- Sort. By provider, then by date inside each provider. Undated documents go to a holding set, not into the sequence; see undated document flagging.
Why duplicates are a substantive problem, not a tidiness one
A duplicate that survives into the chronology does 3 separate kinds of damage, and only the first one is cosmetic.
It invents visits
3 copies of one physical therapy note read as 3 encounters, and the apparent treatment course inflates with them.
It inflates the specials
If the billing ledger is built off the same pass, the duplicated charge is carried into the demand.
You pay to read the same page twice
Where the page is the billing unit, whoever removes the duplicates decides who pays for them.
That last one is worth stating plainly. RAND's California data is the clearest evidence that this is settled practice rather than a preference: among all the groups they interviewed, including evaluators, attorneys, payers and administrators, no participant of any kind objected to removing duplicate records before they reach the evaluator. Duplicate removal is the one thing everyone in an adversarial system agrees on.
Co-mingling is a privacy event
Another patient's page inside your production is a disclosure of their information to you. Handle it as an incident, not as a filing error: quarantine the page, record what it was and where it came from, notify the producing party, and do not forward it onward. The same page, unnoticed, also becomes a credibility problem, because the first person to spot it at deposition will be opposing counsel.
Read and extract: what counts as a medically significant event
Extraction is the first pass where anyone reads for meaning. The working definition of a medically significant event is narrow on purpose: something a clinician did, found, prescribed, or decided, on a specific date, that a later reader might rely on. If it fails that test it is context, not an event, and context belongs in the narrative rather than the chronology.
Extract
- Encounters: date, provider, setting, reason.
- Complaints as the patient stated them, in their words where the wording will be argued about.
- Objective findings: exam findings, range of motion, imaging impressions, lab values outside range.
- Diagnoses, with the code where one is given.
- Treatment: procedures, injections, surgery, therapy, medication starts, stops and dose changes.
- Work status and restrictions, every time they change.
- Referrals, and whether the file shows the referral being kept.
- Statements about causation by a treating provider.
- Missed and cancelled appointments.
Do not extract as events
- Copied-forward assessments that repeat verbatim across visits.
- Negative review-of-systems boilerplate.
- Template past medical history restated at each encounter.
- Administrative pages: cover sheets, fax confirmations, release forms.
- Duplicate copies of a document already extracted.
- Anything from a page that is not clearly this patient's.
The citation rule
Every extracted line carries the page it came from, written at the moment of extraction. This is the single discipline that separates a review that survives review from one that does not, and it is the one most often relaxed under deadline. Restoring a citation afterwards costs several times what recording it costs, because it means finding the page again in a file you have stopped holding in your head.
2 conventions make citations useful rather than decorative. Cite the page, not the document, because a 40-page operative record with one relevant line is not a citation. And cite the Bates number where one exists, because it is the identifier every other party in the matter shares. See page-level citations for how this is produced automatically.
Build the chronology: the columns, and what goes in each
The chronology is the most common deliverable in this work, and most of what makes one good is decided by its columns. Too few and the reader has to go back to the file. Too many and no 2 rows are comparable.
| Column | What goes in it | Common mistake |
|---|---|---|
| Date of service | The date the care happened. | Using the date the note was dictated or signed, which can be weeks later. |
| Provider and facility | Named individual and the organization. | Facility only, which makes it impossible to see one clinician's view of the case over time. |
| Type of encounter | Office visit, ED, imaging, surgery, therapy, telephone. | Leaving it out, so a phone call and a surgery look the same in the timeline. |
| Subjective | What the patient reported, close to their wording where it matters. | Paraphrasing away the exact complaint that later gets compared across providers. |
| Objective findings | Exam findings, measurements, imaging impressions. | Copying the radiologist's whole report instead of the impression. |
| Assessment and plan | Diagnosis and what was decided. | Recording copied-forward text as a new assessment. |
| Work status | Full duty, modified with the restriction stated, off work. | Only recording it when it changes, which hides how long a restriction ran. |
| Source page | Bates number or page number, every row, no exceptions. | Filling it in at the end. |
Date order, with 2 exceptions
2 things break the sequence, and both need a stated convention rather than a judgment call made row by row.
Date of service, strictly
Not the dictation date, not the date the note was signed. Date of service is the only order that lets a reader see causation and gaps.
Undated documents go in an appended set
With a note on what bounds their date, the fax header or the Bates position. Guessing a date to make the table tidy invents a fact.
Prior treatment gets its own leading section
Treatment for the same body part before the incident answers a different question from treatment after it, so mixing the 2 into one sequence hides both answers.
For a worked artifact, see the sample summary. For the deliverable itself, chronology generation.
Analyze: causation, gaps, pre-existing conditions, contradiction
Analysis is where the chronology stops being a table and starts being an argument. 4 questions produce most of what anyone actually uses. None of them can be answered until the file is in order, which is why this is step 5 and not step 2.
Causation, as the record supports it
Interval to first complaint, mechanism as told to the first treater, objective findings, and any treating opinion already in writing.
Gaps in treatment
Every gap has an innocent explanation and a hostile one, and the file usually holds the material to tell them apart.
Pre-existing conditions
Never whether a prior condition existed. Whether the current presentation differs from the documented baseline.
Contradiction between providers
The highest-value findings in a file, and the only ones that need 2 rows and 2 citations to exist at all.
Causation, as the record supports it
The record does not decide causation; a physician does, and in a contested matter a trier of fact does after that. What the record supplies is the evidence: the interval between the incident and the first complaint, whether the mechanism described to the first treater matches the mechanism in the pleading, whether the objective findings are consistent with that mechanism, and whether any treating provider has already committed to an opinion in writing. Collect those 4 and the causation section writes itself, in the voice of the file rather than the voice of the advocate.
Gaps in treatment
A gap is a period with no treatment where treatment would be expected. Every gap has an innocent explanation and a hostile one, and the file usually contains the material to distinguish them: a documented insurance lapse, a course of therapy completed, a period of incarceration, a move, an authorization denial. A gap analysis that lists the gaps without looking for the explanations hands the other side a free argument.
| What the file shows | What it usually means |
|---|---|
| Gap, then return with the same complaint at the same intensity | Access problem, or a patient who stopped because nothing was helping. Look for denial letters and no-show entries. |
| Gap, then return after a new incident | The second incident is now in the case whether anyone wanted it there or not. |
| Gap that ends the week counsel was retained | Expect it to be raised. Document what the record says about it, either way. |
| Gap with a documented denial or authorization dispute inside it | Not a treatment gap, a coverage gap. Say so explicitly and cite the letter. |
Pre-existing conditions
The question is almost never whether a prior condition existed. It is whether the current presentation differs from the documented baseline. That needs the prior records, which is why chapter 5 insists on requesting the prior period for the same body part even when nobody has asked for it. A pre-existing analysis without baseline records is an assertion.
Contradiction between providers
The same patient tells the emergency physician one mechanism and the orthopedist another. 1 provider records full range of motion and the next, 2 days later, records severe limitation. These are the highest-value findings in a file and they only appear when the chronology is complete, because a contradiction is by definition a comparison between 2 rows. Record both rows with both citations and let the reader decide what it means. See alteration detection for the narrower case where a document itself appears to have changed.
Report: writing for the person who has to sign it
The deliverable is written for one reader, and that reader is usually carrying professional risk on it. Everything about the format follows from that.
| Reader | Form | What they check first |
|---|---|---|
| Attorney building a demand | Narrative with the specials tied to treatment. | Whether the strongest fact has a page cite they can quote. |
| Attorney preparing a deposition | Chronology, not narrative. They need to jump by date. | Whether every row's citation resolves. |
| Adjuster | Short summary on top, full chronology under it. | Compensability and work status. |
| Evaluating physician | Chronology plus the cover-letter questions answered in order. | Whether the history matches what the patient said at the exam. |
| Coverage or underwriting reviewer | Findings against the policy language, with documentation sufficiency called out. | Whether a stated diagnosis is actually documented. |
4 rules that hold for all of them
Separate what the record says from what you conclude. A write-up that blends the 2 is unusable to a defense reader and dangerous to a plaintiff one, because the reader cannot tell which parts they are on the hook for. 3 more rules follow from the same idea.
The page is the unit, and almost nobody prices it
Record review is bought in pages, hours, cases, seats and credits, and only one of those compares across vendors. A case is a different size at every firm. An hour is a different amount of work at every desk. A seat and a credit are whatever the seller defines them as. The page is the only unit with a fixed meaning, which is why it is the one to ask for.
So we went and looked at whether anyone publishes one. We read the published claims of 328 record review vendors, software and services together, and scored each on the same 8 facts a buyer needs, taken from that vendor's own site. The result is the pricing study, recomputed on every build of this site so it cannot drift from the underlying profiles.
8 of 328. That is the entire set of vendors whose price you can put beside another vendor's without a sales call.
A row marked "not published" in that study is a negative finding: we looked on the vendor's own site and it is not there. It is not a judgement about the vendor or about its pricing.
Disclosure is worst where the stakes are highest
The pattern is not random. The 2 categories closest to the medical-legal work itself publish nothing at all between them, covering 57 vendors, and the most transparent category in the study is the one furthest from it.
The published range, and why it is not a ranking
Across the 8 vendors that publish a per-page figure, the range runs from $0.008 to $0.35 a page, roughly fortyfold. That spread says less about margin than about deliverable. A page index, a chronology, a narrative summary and a physician-reviewed report are 4 different products quoted in the same unit. Read the deliverable before you read the rate.
4 questions that turn a quote into a comparison
Ask these
- What counts as a page. Duplicates, blank separators and billing ledgers are real pages and a large share of a litigation file. Ask whether you are billed for them.
- What the deliverable is. A rate without a named deliverable is not a price.
- What a rush costs. Only 85 of 328 publish a turnaround at all. Expedited pricing is rarer still.
- What the floor is. Minimums, per-file fees and annual commitments move an apparently cheap rate more than the rate does.
The one place where reading a file has a published price
There is exactly one jurisdiction in the United States that says, in law, what reading a page of a medical-legal file is worth. California's medical-legal fee schedule at 8 CCR 9795, effective 1 April 2021, sets it at $3.00 a page past the first 200 pages, and every number in this chapter comes from that schedule or from RAND's analysis of what the state actually paid under it.
ML201 comprehensive evaluation
$2,015.00per evaluation124 RVU × $16.25The fee for the examination and the report. The schedule's modifiers, for a psychiatric evaluation or an agreed medical evaluator, multiply this number and only this number.
ML203 supplemental evaluation
$650.00per supplemental report200-page allowance drops to 50Written after the exam, typically because something arrived late. Chapter 14 is about why it arrives late.
ML204 deposition, ML205 missed appointment
Per schedulehourly, and a flat fee8 CCR 9795Listed for completeness. Neither is a reading fee.
ML-PRR record review
$3.00a page, past the first 200no modifier appliesThe only published price in the United States for reading 1 page of a medical-legal file. The first 200 pages are included in the evaluation fee, so the meter starts at page 201 and runs flat from there.
The same code at the 99th percentile
$23,000record review on 1 caseRAND, n = 198,774More than 11 times the $2,015 paid for the evaluation it supports. In an ML201 practice, RAND puts record review at roughly 48% of revenue.
2 structural details matter more than the headline numbers. The schedule's modifiers, which raise the fee for a psychiatric evaluation or an agreed medical evaluator, multiply the evaluation only, never the per-page record fee. And the first 200 pages are included, so the meter starts at page 201 and runs flat from there.
What that produces in practice
RAND, in RR-A4655-1 (May 2026), commissioned by the California Department of Industrial Relations, analysed 1,752,557 panel assignments from 2012 to 2024 across 5,034 evaluators. Within that, 198,774 cases carried at least one paid record-review line. The distribution across those cases:
At $3.00 a page past the first 200, those payments work out to roughly 513 pages at the median, 1,044 at the mean, 3,533 at the 95th percentile and 7,867 at the 99th.
Read the top of that distribution carefully. At the 99th percentile the record review alone pays $23,000, more than 11 times the $2,015 for the evaluation it supports. RAND found that the growth in California medical-legal spending since 2021 is driven principally by the per-page fee rather than by the evaluations, and that in an ML201 practice roughly 48% of revenue is record review. Nearly half of what a comprehensive-evaluation practice earns is paid for reading, not for examining.
Why a Californian number matters outside California
Almost nowhere else publishes one. Every other market prices this work privately, which is what chapter 11 measured. So $3.00 a page is not a national benchmark and should not be quoted as one; it is the only public data point in existence for what 1 page of medical-legal reading is worth when a regulator sets the number. Treat it as a reference point and as an illustration of what happens when the page becomes a billable unit: the volume goes up, the cost follows, and the parties start managing the page count instead of the case.
3 ways to get it done, costed honestly
There are 3, and most organizations end up with 2 of them running at once. The choice is usually framed as cost, and it is really about where the judgment sits and who carries the risk.
In-house staff
- What you get
- Full control, and the case context stays with the people who have it.
- What it costs
- Staff time, scaling linearly with page count. A 3,500-page file is not a longer version of a 500-page file, it is 7 times the work.
- Watch for
- Capacity is fixed on the day the file lands. The overflow goes somewhere, usually to whoever is free rather than whoever is right.
the vendor service
- What you get
- Judgment and a finished deliverable, with no internal load.
- What it costs
- Per file, per hour or per page. Of 152 service listings in our study, 18 publish any rate.
- Watch for
- Turnaround in days, and only 85 of 328 vendors overall publish one. Ask what a rush costs before you need one.
AI software
- What you get
- A cited draft in minutes at a per-page rate, which you verify.
- What it costs
- Published rates among the 8 vendors that publish any run $0.008 to $0.35 a page, for materially different deliverables.
- Watch for
- Output that does not cite its source pages. Without citations your reviewer re-reads the file, and you have bought nothing.
The honest comparison
None of the 3 removes the human. In-house and outsourced put a person on every page. Software puts a person on the verification pass instead, which is a smaller job on a clean file and not a smaller job on a contested one. What changes is where the hours go, not whether there are hours.
The combination most firms land on is software for the organize-and-extract work, where the task is exhaustive and mechanical, and a human for the analysis and the signature, where it is neither. That split maps exactly onto the 6 steps: chapters 5 through 8 are where the machine earns its keep, and chapters 9 and 10 are where it does not.
The trade-offs are argued at more length in in-house versus outsourced and AI versus human review, and the money side in what record review costs.
Where record review breaks
6 failure modes account for most of the damage. 4 of them are about the file and 2 are about the reader, human or otherwise.
Records arrive after the work is done
The rules put the reading after the exam, then run the report clock from the exam. A median of 9 days late.
Records are removed before they arrive
The per-page fee gives the producing party a reason to cull, and that party is a party to the dispute.
Duplicates survive into the chronology
3 copies of one note read as 3 visits, inflate the treatment course, and on per-page billing get paid for 3 times.
Another patient's page is read as this patient's
A privacy incident and a factual error in the same page, and the fastest way to lose a report's credibility.
Human abstraction error, which is measurable and is not zero
Trained abstractors working under quality control still get pages wrong at a low, measured rate. The honest baseline any AI claim is measured against.
Model hallucination, when nobody checks
A summary nobody checked against the source carries invented detail. Citations are the mechanism, not a feature.
Why the records arrive late, and why it is structural
RAND asked California evaluators what most needed fixing about the medical-legal process. The answer was the timing of records. Under 8 CCR 35 the parties exchange proposed records 20 days before serving them on the evaluator, with 10 days to object, so the evaluator is not entitled to the records until 10 days after the evaluation. Under 8 CCR 38 the report is still due 30 days from that evaluation. The rules put the reading after the exam and then run the clock on both.
What that looks like in practice: records arriving a median of 9 days after the evaluation, and, in one evaluator's account to RAND, 2,000 pages landing 10 days after the exam with the report already 90% written. The report then either goes out incomplete or becomes a supplemental at $650.
What the 2 error rates actually say
The best evidence on this comes from clinical research rather than from litigation, because clinical research measures it. Garza and colleagues, writing in BMC Medical Research Methodology in 2022, studied medical record abstraction in the ACT NOW CE Study and reported an error rate of between 1% and 3% depending on whether you count all fields or only populated ones, under formal abstractor training and continuous quality control. They also found that each additional quality-control event reduced the error rate by 0.51 percentage points.
2 things follow. Trained humans working under a QC regime make errors at a low but non-zero rate, which is the honest baseline any AI claim should be measured against. And the paper's own framing is blunt: abstraction is a significant source of error in studies that rely on record data. On a 900-page file, 1% is 9 pages read wrong.
Research published in PLOS Digital Health in 2025 found that 42% of GPT-4-generated summaries of emergency department encounters contained at least one hallucinated detail when checked against the source record, absent human review.
That number is why every serious deployment of this technology is built around verification rather than around trust, and why citations are not a feature but the mechanism. A cited line can be checked in seconds. An uncited line has to be re-derived from the file, which means the review was not done.
What makes a review survive cross-examination
A review becomes a problem in exactly 2 places: when the underlying records have to get into evidence, and when the person who signed the summary has to defend it under oath. The first is a rules question. The second is a methodology question.
Getting the records in
Medical records are ordinarily admitted under the business records exception, Federal Rule of Evidence 803(6), "Records of a Regularly Conducted Activity". The rule's conditions are that the record was made at or near the time by, or from information transmitted by, someone with knowledge; that it was kept in the course of a regularly conducted activity; that making it was a regular practice of that activity; that all this is shown by a custodian or other qualified witness or by a certification under Rule 902(11); and that the opponent does not show a lack of trustworthiness in the source, method or circumstances.
Rule 902(11) is the route that avoids putting a custodian on the stand. It makes a domestic business record self-authenticating where the proponent produces a certification of the custodian or another qualified person meeting 803(6)(A) through (C), and where, before the trial or hearing, the proponent gives the adverse party reasonable written notice of the intent to offer the record and makes the record and certification available for inspection, so the party has a fair opportunity to challenge them.
The practical consequence for record review is small but sharp: the certification page is part of the production. It is the page most likely to be dropped as administrative in chapter 6's organize step, and it is the page that decides whether anything else gets in. Keep it, index it, and note in the gap analysis where it is missing.
Defending the method
The questions come in a predictable order, and a review built the way this manual describes answers all 6 from its own artifacts.
| The question | What answers it |
|---|---|
| Did you read the entire file? | The page index, showing the full Bates span accounted for. |
| What did you leave out, and why? | A written inclusion rule, plus the duplicate and quarantine logs. |
| Where does this statement come from? | The page citation on that row. |
| Who actually did this work? | A named reviewer and, where software produced the draft, a statement of that with the name of whoever verified it. |
| What records did you not have? | The missing-records section, written before anyone asked. |
| Did you change anything after you learned the theory of the case? | A version history, or an honest answer. |
The last 2 are the ones that do damage when they are improvised. Both are cheap to answer in advance and impossible to answer afterwards. See audit trail and chain of custody.
What has to be true before the file leaves your office
Medical records are the most sensitive category of document most firms handle, and record review means sending them somewhere. Whether that somewhere is an outsourced service or a software vendor, the same questions apply.
- A signed business associate agreement, before any file moves. Not a security page, not a badge on a website, an executed BAA. If a vendor cannot produce one, the conversation is over.
- Encryption in transit and at rest, stated plainly. What algorithm, where the keys live, who can decrypt.
- Named subprocessors. Where the file physically goes, including any model provider, and in which jurisdiction. "Cloud" is not an answer.
- A minimum-necessary posture. Only the people who need the file can reach it, and there is a record of who did.
- An explicit training and reuse policy. Whether your records, or anything derived from them, are used to train, fine-tune or evaluate a model. This is the question most often left unanswered, and it is the one with the longest tail.
- Deletion on request, with a stated retention period and a way to verify it.
Answers that count
- Executed BAASigned, on your paper or theirs, before any file moves.
- Named subprocessorsEvery party the file reaches, including any model provider, with the jurisdiction.
- Training policyIn writing, covering derived and de-identified content, not only the raw file.
- DeletionOn request, with a stated retention period and a way to verify it happened.
Answers that do not
- "We are HIPAA compliant"A badge on a website is not an executed agreement.
- "It is in the cloud"Not a location, not a subprocessor list, and not a jurisdiction.
- "Encrypted end to end"Without the algorithm, where the keys live, and who can decrypt.
- Silence on trainingThe question most often left unanswered, and the one with the longest tail.
Redaction is a separate decision
Redaction is not a privacy control on the vendor side, it is a decision about what the eventual reader gets. Removing identifiers before a file is reviewed can break the review, because a co-mingled page is caught by comparing patient identifiers. Redact on the way out, for the deliverable, rather than on the way in. See redaction.
Where AI fits, and the line it does not cross
Map the 6 steps against what each kind of worker is actually good at and the answer stops being controversial.
| Step | Nature of the task | Who |
|---|---|---|
| Collect | Requesting, chasing, tracking. Administrative. | People and workflow systems. Not a reading task. |
| Organize | Exhaustive, mechanical, unforgiving. Every page, every time. | Software. This is the clearest case of the 6. |
| Read and extract | High volume, rule-governed, needs a citation on every output. | Software drafts, a person spot-checks against the stakes. |
| Build the chronology | Structuring what was extracted. | Software, with the columns set by the person who needs it. |
| Analyze | Judgment, context, knowing what matters in this matter. | A person. Software can surface candidates; it cannot decide. |
| Report | Writing for a specific reader who carries the risk. | A person, working from a cited draft. |
The line
Software drafts and cites. You review, you revise, you sign. That sentence is the whole boundary, and everything on the wrong side of it is a claim nobody should make: a signed medical opinion, a merit score on a case, an automated claims decision, a coverage denial without a human on it. None of those are record review. They are decisions that a record review informs.
The reason is not caution for its own sake. It is the 42% from chapter 14 on one side and the professional licence on the other. A draft that cites its pages costs seconds to check. A finished-looking output with no citations costs a full re-read, which means the software saved nothing and added a risk.
What AI does well here
- Reads every page at the same attention on page 900 as on page 9.
- Finds near-duplicates a hash comparison misses.
- Compares the patient identifier on every single page.
- Extracts structured fields at volume, with a page cite on each.
- Lists what is referenced and not produced.
- Works in minutes, so the reading stops being a scheduling constraint.
What it must not do
- Produce a clinical opinion, or anything that reads as one.
- Decide causation, compensability, or the merit of a case.
- Output a finding with no source page behind it.
- Be relied on without a qualified person reading the output.
- Retrieve records. That is a different industry and we are not in it.
How to test a platform on your own closed file
Demos are built on clean files. Your files are not clean. The only test worth running uses a closed matter you already know the answer to, which means you can grade the output instead of admiring it.
Pick the right file
Not the biggest one and not the tidiest. Pick a closed case of 400 to 900 pages that you personally worked, that contained at least one duplicate set, at least one handwritten document, and at least one thing you found late and wish you had found early. That last item is the actual test.
Run the same 9 checks on every vendor
Score every vendor on the same file. The comparison is worthless otherwise, because file difficulty dominates every other variable in this work.
The templates and audit artifacts
4 artifacts, copy them into your own process. Every one of them answers a question from chapter 15 before anybody asks it.
1. Record intake log
1 row per packet, not per case, filled on the day it arrives. This is the table that answers "did you read the whole file" and "what did you leave out".
RECORD INTAKE LOG - one row per packet Matter / claim number Date packet received Delivery route (portal, courier, email, disc, link) Producing party Pages received (count before anything is removed) Pages after de-duplication Duplicate pages removed (count) Pages quarantined as another patient's (count) Date range of records, earliest to latest Providers and facilities represented Bates range applied Applied by whom Certification / affidavit page present? Y / N Undated documents (count) Handwritten documents (count) Providers referenced in this packet with no records produced Date missing-records request sent Reviewed by Date completed
2. Inclusion rule
Write this before reading, not after somebody asks what it was. It is 2 paragraphs and it is the whole defence of your method.
INCLUSION RULE - state before review begins Scope of the review Bates range reviewed: Date range of care covered: Body parts / conditions in scope: What was extracted as an event Every encounter, objective finding, diagnosis, treatment, medication change, work-status change, referral, and provider statement on causation, on a stated date. What was not extracted, and why Exact and near-duplicate copies of a document already recorded Copied-forward assessments identical to a prior visit Template review-of-systems and past-history boilerplate Administrative pages (fax cover sheets, releases, confirmations) Pages quarantined as belonging to another patient Undated documents Held in a separate appended set with the bounding evidence stated. No date was inferred to place a document in the sequence. Prepared by: Date: Software used, if any: Verified by:
3. Missing records request
Send it as soon as the first pass is done, to all parties, and keep the copy. A gap raised in week one is a phone call; the same gap raised at deposition is an argument.
Re: [Matter] - records referenced in the production but not produced Reviewing the records served on [date], Bates [range], the following are referenced within the file itself and do not appear in it. 1. Providers named in the records with no records produced [Provider, specialty, and the page that names them] 2. Studies and reports referenced with no report produced [Study, date, and the page that references it] 3. Date ranges with no documents [Range, and the treatment on either side of it] 4. Billing without corresponding treatment records, or the reverse [Charge, date, and the page] 5. Certification or affidavit pages not included [Producing custodian] Please produce these, or confirm in writing that they do not exist or will not be produced. This list is taken from the file as served and is not a request for anything outside it.
4. Chronology header block
The block that goes at the top of every chronology you hand to someone else. It takes 2 minutes and it is the difference between a deliverable and a spreadsheet.
MEDICAL CHRONOLOGY
Matter: Claimant / patient:
Prepared for: Prepared by:
Date prepared: Version:
Records reviewed: Bates [range], [N] pages as served,
[N] pages after de-duplication
Date range of care covered:
Providers represented: [count]
Records referenced but not produced: see Missing Records, p. [x]
Documents that could not be dated: [count], appended
Pages quarantined (other patient): [count], logged separately
Method: every row cites the page it came from. Statements in the
Findings column are what the record says. Anything that is an
inference by the preparer is marked [inference].
Software used in preparation: [name, or none]
Output verified against source pages by: Date:The 9-point verification checklist
The same 9 checks from chapter 18, in a form you can tick.
Checked: 0 of 9.
The offer, and questions readers ask
Medrecords AI reads the file before you do
Medrecords AI indexes every page of a medical file, removes the duplicates, orders it by date and produces a chronology where every line cites the page it came from. It does not decide anything. It turns a box of paper into something you can check in seconds, and you review, you revise, you sign. 10 cents a page, duplicates not billed.
Medrecords AI does not retrieve records from providers, does not produce clinical opinions, and does not make coverage, compensability or payment decisions. It organizes and cites what you already have.
Questions readers ask
- What is the purpose of medical record review?
- To establish, from the records themselves, what happened to the patient and when, so a claim, defense, evaluation, or underwriting decision rests on documented facts. The output is usually a chronology, summary, or report that a decision-maker can verify against the source pages.
- Who performs medical record review?
- Paralegals and attorneys, claims adjusters, legal nurse consultants, physicians, and increasingly AI software with a human verifying the output. Who should do it depends on whether the deliverable needs clinical judgment and a signature or a cited draft to work from.
- How long does medical record review take?
- Manual review is commonly estimated in minutes per page, so a thousand-page file is days of work. AI software produces a cited draft chronology in minutes; the human verification pass on top depends on the stakes of the matter.
- What is the difference between record review and a chronology?
- Record review is the whole activity; the medical chronology is its most common deliverable, a date-ordered timeline of medically significant events. A review can also produce narrative summaries, gap analyses, and billing checks from the same reading of the file.
- What does medical record review cost per page?
- Only 8 of the 328 vendors we read publish a per-page rate at all, and among those 8 the published range runs from $0.008 to $0.35 a page. That fortyfold spread covers 4 different deliverables sold in the same unit, so compare the deliverable before the rate. The one published statutory figure is California's $3.00 a page past 200 under 8 CCR 9795, which prices a physician reading a medical-legal file, not a software pass.
- How many pages is a typical file?
- There is no national figure. The best public data is Californian: across 198,774 medical-legal cases with any paid record review, RAND found a median payment of $939, which at $3.00 a page past the first 200 works out to roughly 513 pages, and a 95th percentile of $10,000, roughly 3,533 pages. A medical management company told RAND that packets of 10,000 to 15,000 pages occur.
- Are duplicate pages billable?
- That depends entirely on the vendor, and it is worth asking before you sign anything, because duplicates are a large share of a litigation production. RAND found no participant of any kind, on any side, who objected to removing duplicate records before they reach the reviewer. Medrecords AI does not bill duplicate pages.
- Can AI do medical record review on its own?
- No, and no serious vendor should claim it. Research published in PLOS Digital Health in 2025 found that 42% of GPT-4-generated summaries of emergency department encounters contained at least one hallucinated detail when checked against the source record, absent human review. The working arrangement is that software drafts and cites, exhaustively and in minutes, and a qualified person reviews, revises and signs.
Glossary
- Bates number
- A unique sequential identifier stamped on every page of a production, so any page can be cited unambiguously by every party in a matter.
- Chronology
- A date-ordered table of medically significant events drawn from a record, 1 row per event, each row citing its source page.
- Co-mingled records
- Pages belonging to a different patient inside a production. A privacy incident and a factual hazard in the same page.
- Comprehensive medical-legal evaluation
- In California, the full evaluation billed under ML201, which includes the first 200 pages of record review in its fee.
- Gap analysis
- The finding of what a record references but does not contain: named providers with no records, referrals with no follow-up, date ranges with nothing in them.
- Medical record abstraction
- The term used in clinical research for extracting structured data from a chart. It is the same activity as extraction in chapter 7, and it is the one with a published error rate.
- ML-PRR
- The California billing code for medical-legal record review, set at $3.00 per page past the first 200 by 8 CCR 9795.
- Near-duplicate
- The same document appearing twice in different scans or printouts, so a byte or hash comparison treats the 2 copies as different documents.
- Production
- The set of records served by one party on another, usually Bates numbered as a unit.
- Self-authenticating record
- A record admissible without a live custodian, under Federal Rule of Evidence 902(11), on a certification plus advance written notice to the adverse party.
- Specials
- The documented medical charges in a claim, tied back to the treatment that generated them.
- Supplemental report
- A further report answering questions raised after the original evaluation. In California it is billed under ML203 at $650.00, and it is frequently what late records produce.
Method and sources
This is a field manual, not a study. We surveyed nobody outside our own reading of vendor websites. Every number in it comes from a public source, named at the point it is used, and the sources are these 7.
| Source | What it is | What we took from it |
|---|---|---|
| RAND RR-A4655-1, May 2026 | "Qualified Medical Evaluators and the Medical-Legal Process in California Workers Compensation", commissioned by the California Department of Industrial Relations. DOI 10.7249/RRA4655-1. Analysis of 1,752,557 panel assignments 2012 to 2024 covering 5,034 evaluators and 36,922 evaluator-years, plus a 17-state policy review, 27 stakeholder interviews and 6 focus groups with 11 active and 10 former evaluators. | The record-review payment distribution across 198,774 cases, the page equivalents, the 48% revenue share, the 10,000 to 15,000 page packet, the 9-day arrival delay, the culling of records ahead of evaluation, and the finding that nobody objects to removing duplicates. |
| 8 CCR section 9795 | The California medical-legal fee schedule, effective 1 April 2021. | The $3.00 per-page record review charge, the $2,015.00 ML201 amount, the $16.25 conversion factor, the $650.00 supplemental report, and the rule that modifiers do not multiply the per-page fee. |
| 8 CCR sections 35 and 38 | California regulations governing the service of records on a medical-legal evaluator and the deadline for the resulting report. | The 20-day exchange, the 10-day objection window, and the 30-day report deadline that runs from the evaluation rather than from the records. |
| Medrecords AI pricing study | Our own reading of 328 record review vendor websites, software and services, each scored on the same 8 facts from that vendor's own published claims, captured 13 August to 1 September 2026 and recomputed on every build of this site. | Every disclosure figure in chapters 11 and 13: 57, 86, 185, 8, the $0.008 to $0.35 range, the category breakdown, the 30 that publish an export format and the 85 that publish a turnaround. |
| Garza et al., BMC Medical Research Methodology, 2022 | "Measuring and controlling medical record abstraction (MRA) error rates in an observational study", PMID 35971057, from the ACT NOW CE Study. Peer-reviewed. | The 1% to 3% abstraction error rate under formal training and quality control, and the 0.51 percentage point reduction per additional quality-control event. |
| PLOS Digital Health, 2025 | Peer-reviewed research on the accuracy of large-language-model summaries of clinical encounters. | The finding that 42% of GPT-4-generated summaries of emergency department encounters contained at least one hallucinated detail when checked against the source record, absent human review. |
| 45 CFR 164.524 and Federal Rules of Evidence 803(6) and 902(11) | The HIPAA right of access and its permitted fees; the business-records exception and the certification route to self-authentication. | The 30-day response clock and one 30-day extension, the 4 permitted fee categories, and the admissibility requirements in chapter 15. |
What we did not do
- We did not survey attorneys, adjusters, nurses or physicians for this document. RAND interviewed evaluators and stakeholders, and where a view is attributed to them we cite RAND rather than restating it as our own finding.
- We did not publish a national average cost, a national average file size, or a national average minutes-per-page for manual review. No credible public figure exists for any of the 3, and chapter 12 says so rather than estimating one.
- We did not present California's $3.00 per page as a national benchmark. It is the only statutory figure of its kind in the United States, which is exactly why it is worth quoting and exactly why it does not generalize.
- We did not present any vendor's own marketing claim as an independent finding. Where a figure comes from a vendor's website, including our own, the line says so.
- We did not publish an accuracy benchmark for AI record review, ours or anyone's. There is no independent one, and an internally produced number is a marketing claim with a decimal point on it.
- We did not name or link any other record review platform, service or directory in this manual.
RAND, the California Department of Industrial Relations, the California Division of Workers Compensation, PLOS, BMC and the authors of the cited papers are not affiliated with Medrecords AI, have not reviewed this document, and do not endorse it. Their work is public and you should read it.