A comprehensive outpatient rehabilitation facility (CORF) is a Medicare provider that, in CMS's words, must "provide coordinated outpatient diagnostic, therapeutic, and restorative services, at a single fixed location, to outpatients for the rehabilitation of injured, disabled or sick individuals" (CMS, CORFs). This page is for outpatient rehabilitation organizations seeking initial federal CORF certification, or aligning an existing multidisciplinary facility with the conditions of participation. Integral Healthcare Solutions (IHS) drafts your CORF policies and survey evidence against the federal conditions; your rehabilitation clinicians approve the clinical content.

Last reviewed: October 2026.

What is a CORF?

The governing text is 42 CFR Part 485, Subpart B, "Conditions of Participation: Comprehensive Outpatient Rehabilitation Facilities" (sections 485.50 through 485.74), which we read in the current eCFR text (up to date as of September 30, 2026). CMS names State Operations Manual Appendix K as the surveyor guidance for CORFs; this page does not summarize it.

The regulation defines a CORF as "a nonresidential facility that ... Is established and operated exclusively for the purpose of providing diagnostic, therapeutic, and restorative services to outpatients for the rehabilitation of injured, disabled, or sick persons, at a single fixed location, by or under the supervision of a physician" (42 CFR 485.51(a)).

The conditions that shape the program most:

• Core services: "The facility must provide a coordinated rehabilitation program that includes, at a minimum, physicians' services, physical therapy services, and social or psychological services" (42 CFR 485.58).
• Plan of treatment: "For each patient, a physician must establish a plan of treatment before the facility initiates treatment" (485.58(b)).
• Utilization review: "The facility must have in effect a written utilization review plan that is implemented annually, to assess the necessity of services and promotes the most efficient use of services provided by the facility" (485.66).
• Governance: "The facility must have a governing body that assumes full legal responsibility for establishing and implementing policies regarding the management and operation of the facility" (485.56).

Who needs CORF certification and what triggers it

The buyer is an outpatient rehabilitation organization that runs, or plans to run, a physician-supervised multidisciplinary program and wants the federal CORF pathway. The work is triggered by:

• Initial certification. CMS's processing instructions cover "CORF Initial Form CMS-855A Applications" (CMS Transmittal 11574), so a new CORF enrolls on the CMS-855A.
• A recurring survey. "CORFs are surveyed every six years at a minimum" (CMS).
• Alignment of an existing facility, where the services, records or plans of treatment have drifted from Subpart B. CMS says "Deficiencies are based on a violation of the statute or regulations, which, in turn, is to be based on observations of the CORF's performance or practices" (CMS).
• Plans to deliver therapy away from the main site. CMS says "Physical therapy, occupational therapy and speech-language pathology services may be provided in an off-site location" (CMS).

How IHS helps

IHS ties every finding and every drafted document to a section of 42 CFR Part 485, Subpart B.

1. Gap assessment. IHS reads your operation against the CORF conditions of participation, using questionnaires on services, plans of treatment and utilization review.
2. Document and evidence mapping. IHS crosswalks each condition to the record that shows it is met.
3. Drafting. IHS drafts the policy set, with plan-of-treatment and clinical content for your physician and therapists to review and approve, and drafts the utilization review and quality procedures.
4. Mock survey. IHS reviews sample records and practices against the conditions, since deficiencies rest on observations of performance, and lists what is missing.
5. Readiness support. IHS drafts survey correspondence for your organization to send.

What you supply: your service list, credentials, sample records, current policies, and clinician approval of clinical content.

The limit: the choice between CORF and a rehabilitation agency is your organization's and your counsel's call. Physical-plant and life-safety items need your facilities staff. IHS drafts; your organization files and handles all correspondence with the surveying agency and CMS.

What to have ready

Each item ties to 42 CFR Part 485, Subpart B (current eCFR text, up to date as of September 30, 2026) or the CMS CORF page (last modified August 17, 2026).

• A description of your single fixed location and the services delivered there (42 CFR 485.51(a); CMS).
• A list of any physical therapy, occupational therapy or speech-language pathology services delivered off site (CMS).
• Evidence of the three minimum services: "physicians' services, physical therapy services, and social or psychological services" (485.58).
• The physician supervision arrangement the definition requires: services provided "by or under the supervision of a physician" (485.51(a)).
• A plan-of-treatment workflow showing a physician establishes the plan "before the facility initiates treatment" (485.58(b)).
• A written utilization review plan and a record of its annual implementation (485.66).
• Governing body records showing it "assumes full legal responsibility" for policies on management and operation (485.56).
• Sample patient records ready for review, since deficiencies are "based on observations of the CORF's performance or practices" (CMS).
• Your CMS-855A enrollment package (CMS Transmittal 11574).

The introductory call is the place to walk through this list against your own facility.

How a CORF compares with other outpatient rehabilitation providers

Medicare has a second outpatient rehabilitation category under 42 CFR Part 485, Subpart H. CMS says "There are three types of organizations that may qualify as OPT/OSP providers": a rehabilitation agency, a clinic and a public health agency (CMS, Outpatient Rehabilitation Providers).

Subpart H quotes are from 42 CFR Part 485, Subpart H in the current eCFR text; the enrollment forms are from CMS Transmittal 11574. For the Subpart H route, see outpatient rehabilitation agency certification. Which category fits your organization is your decision with your counsel.

What CORF certification costs

CMS does not publish a CORF-specific certification fee on the CORF page or in Subpart B. CMS's published fee is the Medicare enrollment application fee: "a $750.00 calendar year (CY) 2026 application fee for institutional providers that are initially enrolling in the Medicare or Medicaid program or the Children's Health Insurance Program (CHIP); revalidating their Medicare, Medicaid, or CHIP enrollment; or adding a new Medicare practice location" (Federal Register 2025-21877).

IHS's reading, October 2026: because a CORF enrolls on the CMS-855A, which the fee notice covers, an initial CORF enrollment pays the $750.00 fee unless a hardship exception is granted. Under 42 CFR 424.514(a), the applicant submits the fee, a hardship exception request, or both, when it files. Verify current fees with CMS.

IHS scopes each engagement after a free introductory call.

What this is not

• IHS does not choose your Medicare provider category. That is your organization's and your counsel's decision.
• IHS does not file enrollment or survey correspondence, and does not act for your organization before the surveying agency or CMS. Your organization submits; IHS drafts.
• This page is not legal advice, and IHS's work does not guarantee a survey result.

Frequently asked questions

What is a comprehensive outpatient rehabilitation facility (CORF)?

A CORF is "a nonresidential facility that ... Is established and operated exclusively for the purpose of providing diagnostic, therapeutic, and restorative services to outpatients for the rehabilitation of injured, disabled, or sick persons, at a single fixed location, by or under the supervision of a physician" (42 CFR 485.51(a)). Its conditions of participation are in 42 CFR Part 485, Subpart B.

What core services must a CORF provide?

At a minimum, physicians' services, physical therapy and social or psychological services. The regulation says "The facility must provide a coordinated rehabilitation program that includes, at a minimum, physicians' services, physical therapy services, and social or psychological services" (42 CFR 485.58).

Can a CORF provide therapy off site?

Some of it. CMS says "Physical therapy, occupational therapy and speech-language pathology services may be provided in an off-site location" (CMS). The facility itself still operates at a single fixed location.

Who must establish the plan of treatment in a CORF?

A physician. "For each patient, a physician must establish a plan of treatment before the facility initiates treatment" (42 CFR 485.58(b)). IHS drafts the plan-of-treatment procedures for your physician and therapists to approve.

What does the CORF utilization review plan require?

A written plan, implemented annually. The regulation says "The facility must have in effect a written utilization review plan that is implemented annually, to assess the necessity of services and promotes the most efficient use of services provided by the facility" (42 CFR 485.66).

How often are CORFs surveyed?

CMS says "CORFs are surveyed every six years at a minimum" (CMS). Records and practices should be kept ready between surveys, since deficiencies are based on observations of the CORF's performance or practices.

CORF versus outpatient rehabilitation agency: which Medicare category fits my organization?

They are separate categories with different minimum services. A CORF must provide physicians' services, physical therapy and social or psychological services (485.58), while a rehabilitation agency provides "at least physical therapy or speech-language pathology services" (485.703). CMS lists rehabilitation agencies, clinics and public health agencies as OPT/OSP providers (CMS). The choice is yours and your counsel's.

What are common CORF survey deficiencies?

CMS does not list common CORF deficiencies on its CORF page. It says "Deficiencies are based on a violation of the statute or regulations, which, in turn, is to be based on observations of the CORF's performance or practices" (CMS). A mock survey of sample records and practices against Subpart B is the way to find your own.

What governing body and administrator requirements apply to a CORF?

The governing body must assume "full legal responsibility for establishing and implementing policies regarding the management and operation of the facility" (42 CFR 485.56). The full text of section 485.56 sets out the rest of the governance condition.