The Oregon Health Authority Certificate of Approval (COA) is the foundational license for substance use disorder treatment programs in Oregon. Without it, you cannot legally operate, bill Oregon Health Plan, credential with CCOs, or — for most commercial payers — contract for SUD services. Getting it requires a structured, documented application process that OHA evaluates for completeness before scheduling a survey.
This walkthrough covers who needs a COA, how outpatient and residential applications differ, what the document checklist looks like, and how to prepare for the survey that determines whether you receive your license.
Regulations change. Verify current requirements with the Oregon Health Authority, and have final implementation reviewed by legal, compliance, and clinical leadership.
Who needs a Certificate of Approval?
Any organization providing substance use disorder treatment services in Oregon must hold a COA issued by the OHA Office of Licensing and Regulatory Oversight. The COA requirement applies regardless of size, payer mix, or whether the program accepts Medicaid. If you provide SUD assessment, counseling, medication-assisted treatment, intensive outpatient, partial hospitalization, residential treatment, or detoxification services, you need a COA. Mental health programs that do not provide SUD treatment operate under a different OHA license type. Programs that provide both mental health and SUD treatment may need separate certifications for each.
How do outpatient and residential COA applications differ?
| Application Component | Outpatient (OAR 309-018) | Residential (OAR 309-019) |
|---|---|---|
| Facility documentation | Lease or ownership, basic floor plan | Full physical plant compliance docs, fire inspection, ADA, square footage per resident |
| Staffing | Clinical director credentials, counselor credentials | All outpatient requirements plus 24-hour coverage plan, medical staff credentials |
| Policy manual scope | Clinical protocols, client rights, documentation, HIPAA/Part 2 | All outpatient requirements plus medication management, controlled substance security, overnight safety, physical environment policies |
| Capacity documentation | Group size limits | Licensed bed count, physical plant capacity documentation |
| Typical timeline | 3–6 months | 5–10 months |
What documents does the COA application require?
OHA will not move an application to substantive review until all required documents are received. Missing items trigger a supplementation request that restarts the completeness clock. The following covers the core requirements — OHA publishes a current checklist and application packet on their website, which should be your authoritative reference.
Organizational documents. Articles of incorporation or organization, a current list of officers and directors, ownership disclosure for any individual with 5% or more ownership, and evidence that the organization is authorized to do business in Oregon. For new organizations, this means having your entity formed and registered before you submit.
Facility documents. Signed lease agreement or property ownership documentation, floor plans showing the proposed program space, a current certificate of occupancy, and a fire inspection clearance from the appropriate local authority. Residential programs must also document physical plant compliance with OAR 309-019 — including square footage calculations, bedroom configurations, and bathroom ratios.
Staffing documents. Credential documentation for the clinical director demonstrating they meet OAR qualification requirements (specific to program type). Credential and licensure documentation for all clinical staff. Background check results for all staff with direct client contact. For programs providing medication-assisted treatment, prescriber credentials and DEA registration documentation.
Policy and procedure manual. A comprehensive policy manual is the most labor-intensive component and the most common application failure point. OHA expects policies that are specific to your program — not generic templates. Required policy areas under OAR include: intake, screening, and assessment procedures; individualized treatment planning (format, frequency, update requirements); clinical service delivery protocols; client rights notification and grievance procedures; incident reporting and critical incident review; medication management; documentation standards and record-keeping; 42 CFR Part 2 confidentiality protections; HIPAA compliance; staff training and competency; discharge and transition planning; and quality assurance and performance improvement (QAPI). Residential programs require additional policies covering overnight operations, physical environment safety, medication storage and security, and emergency procedures.
Free Resource
Navigating OHA licensing?
Download our free step-by-step checklist used by Oregon programs to prepare for OHA certification.
Program description. A description of the program's services, population served, service hours, staffing model, and how the program meets OAR requirements for the level of care being licensed.
What does OHA's completeness review involve?
After submission, OHA conducts a completeness review — typically running four to eight weeks — to determine whether all required documents have been received and whether the application is sufficiently complete to move to substantive review. If documents are missing or insufficient, OHA issues a supplementation request. You have a defined window to respond. Failure to respond or submitting an incomplete response resets the timeline. Programs that receive multiple supplementation requests can spend three to six months on completeness alone before reaching substantive review.
What does substantive review cover?
Substantive review is OHA's evaluation of whether the application demonstrates that the proposed program will operate in compliance with applicable OAR standards. Reviewers evaluate the policy manual for OAR compliance, staffing qualifications against rule requirements, and facility documentation against physical plant standards. If substantive review identifies concerns, OHA may request additional information or clarification before scheduling a survey. Programs with well-prepared applications move through substantive review without additional requests; those with policy gaps face additional rounds of correspondence.
What does the COA survey involve?
Once OHA determines the application is complete and substantively satisfactory, they schedule an on-site survey. Surveyors conduct a physical plant inspection against OAR facility standards, a review of written policies and procedures, staff interviews, and — if clients are present — clinical record review. The survey produces a findings report identifying any deficiencies. Each deficiency requires a corrective action plan (CAP) with documented evidence of remediation. OHA reviews CAP responses before issuing the COA. Programs with substantial deficiencies may go through multiple CAP review cycles, each adding four to ten weeks to the timeline.
The most effective preparation for the survey is a structured pre-survey audit: reviewing each OAR standard against your policies, walking the facility against physical plant requirements, and interviewing staff about their understanding of required procedures. Programs that conduct mock surveys before the actual OHA visit receive significantly fewer deficiency findings.
How do you maintain COA compliance after licensure?
The COA is renewed annually. Renewal requires updated documentation, renewal fee payment, and demonstrated ongoing OAR compliance. OHA may conduct announced or unannounced site visits as part of routine regulatory oversight. Programs with unresolved compliance concerns or a history of deficiency findings receive more frequent regulatory contact. The most effective ongoing compliance posture is treating OAR standards as operational requirements — not survey preparation exercises — and maintaining continuous internal audit and QAPI processes. This is the foundation of the compliance program infrastructure covered in our compliance and risk services.
Frequently asked questions
Who needs a Certificate of Approval from the Oregon Health Authority?
Any organization providing substance use disorder treatment services in Oregon must hold a COA. This includes outpatient SUD, IOP, PHP, residential, detox, and opioid treatment programs.
How is the COA application different for outpatient vs. residential programs?
Residential applications require additional facility compliance documentation, more extensive staffing documentation including 24-hour coverage plans, and a more comprehensive policy manual covering medication management and overnight operations.
What is on the OHA COA application document checklist?
Organizational documents, facility documents, staff credentials and background checks, a complete OAR-compliant policy and procedure manual, and a program description. Residential programs require additional physical plant compliance documentation.
What happens during an OHA COA survey?
Surveyors conduct a facility walkthrough, a policy and procedure review for OAR compliance, staff interviews, and client record review. Deficiencies require documented corrective action plans before the COA is issued.
Can I expand my licensed program to add new levels of care?
Yes, but each additional level requires a separate application and survey cycle. Plan for 4 to 8 months per level added.
How do I renew my OHA Certificate of Approval?
COAs are renewed annually with updated documentation and renewal fee payment. OHA may conduct site visits as part of renewal oversight.
Saint Health has prepared organizations for OHA COA applications across outpatient, IOP, PHP, residential, and detox levels of care. Work with an OHA licensing consultant or contact us to discuss your program's licensing project.

