How to Get an Oregon Certificate of Approval (COA): The 60-Day OHA Review and What Follows

As of October 2026, you get an Oregon Certificate of Approval (COA) by submitting a complete two-part application to the Oregon Health Authority (OHA) and passing its compliance review. Under OAR 309-008-0500, OHA has 60 days from receipt of application materials to conduct its audit, and an incomplete application triggers a deficiency notice with 14 calendar days to amend. Under OAR 309-008-0900, an initial certificate is issued for up to one calendar year, and a renewal certificate for up to three calendar years.

The wait is getting worse. In a January 2026 presentation to the Oregon Legislature, OHA reported a 933% increase in new outpatient provider applications between 2020 and 2025, with more than 100 applications sitting in the review queue. More programs are applying than ever, and the queue rewards the ones that submit clean.

Here is what most programs get wrong. They treat the COA as a form to fill out. It is not. It is a service-by-service compliance package, and the difference between OHA finishing its 60-day application audit on the first pass and a six-month slog is almost entirely decided before you hit submit.

What is an Oregon Certificate of Approval (COA)?

The COA is the document OHA issues that names the behavioral health services your organization is approved to deliver and the locations where you can deliver them. It is governed by OAR chapter 309, division 008 (certification) and division 019 (service delivery). ORS 430.637 sets the criteria for the on-site quality assessment that supports certification.

A COA is the certification path for outpatient programs. Residential programs are licensed separately under their own rules. So if someone tells you that you need a "license" for an outpatient clinic, they are using the wrong word for the wrong process. For outpatient mental health, substance use, and problem gambling work in Oregon, the COA is the approval that lets you operate, bill public funds, and be recognized as a provider.

How long does it take to get a COA in Oregon? The 60-day window

The 60 days is not a marketing number. It comes from the rule. Under OAR 309-008-0500, once OHA receives your application, the Division has 60 days to audit the materials and decide whether they comply. If the application is complete, the Division can move you toward a certification review.

If it is not complete, the path changes. OHA issues a written deficiency notice that describes what is missing, and you have 14 calendar days to submit an amended application. The 60-day audit is rarely the bottleneck. The bounce-and-resubmit cycle is.

So the part of the timeline you actually control is the preparation. A complete, compliant application on the first submission enters the 60-day window cleanly. A thin one circles back to your desk with corrections. Getting it right the first time is the whole game. The certification requirements behind this process are set out in OAR chapter 309, division 8, Certification of Behavioral Health Treatment Services, which is the rule set OHA audits every application against.

How do you get an Oregon COA, step by step?

1. Map your services. Select each service you will deliver (for example OAR 309-019-0182 outpatient SUD or 309-019-0183 IOP) so Part I of the application matches Part II.
2. Write service-specific policies. The application must include a detailed implementation plan for each proposed service and the policies and procedures that show compliance with that service's rule (OAR 309-008-0400(4)). Use the current application packet from OHA to see how each service is labeled.
3. Assemble organizational, facility and staffing documents. Use the Oregon COA application checklist so nothing triggers a deficiency notice.
4. Submit through OHA's Behavioral Health Licensing and Certification unit. Start from the OHA licensing and certification page.
5. Clear the review. OHA audits within 60 days of receipt (OAR 309-008-0500). Respond to any deficiency notice within 14 calendar days.
6. Prepare for the certification review. OHA reviews are conducted under OAR 309-008-0800, including any Plan of Correction.

How long is an Oregon COA valid, and how long does a COA last?

Calendar your renewal filing well before the expiration date. A void certificate means you cannot bill OHP or keep CCO contracts in force. Our OHA licensing timeline guide shows how to sequence renewals with expansion applications.

Where does the COA fit with the rest of your Oregon launch?

• Opening a clinic. How to open an outpatient clinic in Oregon covers the OP path end to end.
• Adding intensive outpatient. How to start an IOP in Oregon covers COA, OAR 309-019 and payer setup.
• Getting paid. The Oregon CCO contracting playbook explains contracting after the COA issues.
• Associate deadline. Oregon's 2027 COA deadline for private practice associates explains why the timing matters.
• Payers and revenue. Behavioral health consulting in Oregon covers CCO contracting, commercial payers and reimbursement around the COA.
• Full requirements. The hub, Oregon treatment center facility licensing, covers every level of care.

What services does an Oregon COA cover?

The COA is not a single approval. It is a menu. You select the specific services you intend to provide, and each one carries its own delivery rule and its own policy requirement.

Mental Health Services

Substance Use Disorder Services

Other Services

Co-occurring Capable and Co-occurring Enhanced services are optional add-ons at ASAM Levels 1, 2.1, and 2.5. DUII has its own condition: a program must be approved for outpatient SUD services and at least ASAM Levels 0.5 and 1 before it can run a DUII program. Every ASAM level you select also has to be covered in a single policy for the delivery of SUD services and supports.

What a Certificate of Approval lets your organization do

A COA reads like a compliance box. It is not. It is the approval that makes four business outcomes possible, and most of them have nothing to do with paperwork.

You can hire the way you actually want to. Unlicensed staff such as QMHPs, QMHAs, certified alcohol and drug counselors, certified recovery mentors, and peer support specialists must work for a COA-certified organization to bill Medicaid (OAR 410-172-0660(7)). Board-registered associates must do the same beginning July 1, 2027. Without a COA, your billable capacity is capped at what your independently licensed staff can personally deliver. With one, your workforce can grow past you. For a solo or small practice, this is usually the entire reason to get certified.

You can bill insurance. A Certificate of Approval is required for an organization that contracts with a CCO or OHA, or receives other public funds, to provide behavioral health treatment. Licensed practitioners and practices made up exclusively of licensed practitioners are exempt (OAR 309-008-0250(4)). It is also the foundation for commercial payer credentialing. The COA is what makes your organization eligible to be recognized and reimbursed, instead of running cash-only and turning away most of the market.

You can expand your scope. Adding a substance use line to a mental health practice, standing up an intensive outpatient program, taking on DUII clients, or opening a problem gambling service are all separate approved services on the same certificate. Each one is a new revenue line. Each one is added by amending what you are approved to deliver.

You can compete for real contracts. Public funding, county contracts, and most referral relationships require an approved provider on the other end. The COA is what puts your organization in that category.

Who needs an Oregon COA?

If your organization is on this list, the COA is the move:

• Startups and new behavioral health entities launching in Oregon
• Solo and small practices that have hit the ceiling of the owner's caseload and want to hire associates instead of turning clients away
• Established mental health practices adding substance use disorder services
• Addiction programs formalizing outpatient care, DUII, or criminal justice work
• Primary care, medical, and medication-assisted treatment clinics building a behavioral health arm
• DUII education and rehabilitation providers
• Problem gambling treatment programs

The common thread is simple. The moment your plan depends on billing insurance or hiring beyond your own license, you need the certificate. For the rest of the build around the certificate, see our guide on how to open a treatment center.

Oregon COA requirements: why the first submission decides everything

Part II of the application is where most programs come apart. The requirement is specific. You submit a policy and procedure for every service you are applying to provide, each one demonstrating compliance with that service's OAR. Use the current application packet from OHA to see how each service is labeled.

That sounds simple. It is not, and the failure modes are predictable:

• Policies that restate the rule instead of describing what staff actually do
• Missing or wrong OAR references for a selected service
• Documents labeled so the reviewer cannot match them to the application
• A SUD delivery policy that does not cover every ASAM level the program selected
• Service selections in Part I that do not line up with the policies in Part II

Any one of these produces a deficiency notice, and the 14-day clock starts.

What documents does the COA application require?

OHA will not move an application forward until all required documents are received. Missing items trigger a deficiency notice and restart the clock. The following covers the core requirements. OHA publishes a current checklist and application packet, which should be your authoritative reference.

Items commonly requested by reviewers, which OHA's current packet confirms or changes:

Organizational documents. Articles of incorporation or organization, a current list of officers and directors, ownership disclosure for any individual with 5% or more ownership, and evidence that the organization is authorized to do business in Oregon. For new organizations, that means having your entity formed and registered before you submit.

Facility documents. Signed lease agreement or property ownership documentation, floor plans showing the proposed program space, a current certificate of occupancy, and a fire inspection clearance from the appropriate local authority. Residential substance use disorder programs apply for an OHA residential license under OAR chapter 415, division 012, not a COA, and must meet the facility standards in OAR 309-018-0200, including bedroom square footage and bathroom ratios.

Staffing documents. Credential documentation for the clinical director demonstrating they meet OAR qualification requirements for the program type. Credential and licensure documentation for all clinical staff. Background check results for all staff with direct client contact. For programs providing medication-assisted treatment, prescriber credentials and DEA registration documentation.

Policy and procedure manual. The most labor-intensive component and the most common failure point. OHA expects policies specific to your program, not generic templates. OAR 309-019-0110(1)(a) through (z) lists 26 required policy areas, from personnel qualifications and mandatory abuse reporting to ASAM-consistent SUD services, urinalysis testing and quarterly quality assurance review. Each service you select has additional requirements in its own service delivery rule. Residential programs require additional policies covering overnight operations, physical environment safety, medication storage and security, and emergency procedures.

Program description. A description of the program's services, population served, service hours, staffing model, and how the program meets OAR requirements for the level of care being licensed.

For a document-by-document, checkbox-ready version of this list, including required policies, fees, and what happens after you submit, see our Oregon COA Application Checklist.

Completeness review and substantive review

Inside the 60-day window, OHA's audit runs in two distinct phases, and knowing which one you are in tells you what a request for information actually means.

Completeness review asks a narrow question: did everything required actually arrive? OAR 309-008-0500 gives OHA 60 days from receipt of application materials to audit them, and gives you 14 calendar days from receiving a deficiency notice to submit an amended application. OHA reports record application volume, so actual elapsed time can run longer than the rule periods. If documents are missing or insufficient, OHA issues the deficiency notice and the 14-day cure window described above.

Substantive review is the evaluation of whether the application demonstrates that the proposed program will actually operate in compliance with the applicable OAR standards. Reviewers read the policy manual for OAR compliance, check staffing qualifications against rule requirements, and measure facility documentation against physical plant standards. Well-prepared applications move through without additional correspondence. Applications with policy gaps generate another round, and another clock.

How Saint Health Group gets your COA approved

This is the work we do. Saint Health Group builds Oregon behavioral health programs from the application up. We map the exact services you are applying for to their governing rules, then build the policy and procedure set to match. Real operational documents that describe how your program runs, not regulatory paraphrase. We assemble Part I and Part II so the service selections and the policies line up and the file is complete before it reaches OHA.

The result is an application built to clear the 60-day audit on the first pass, so you are not spending the next quarter answering deficiency notices. You stay on hiring, contracts, and clients. We handle the part that decides whether you wait 60 days or six months.

You can carry the whole process yourself. Most of the programs sitting in OHA's queue are doing exactly that. The real question is where your time is worth more.

Oregon Certificate of Approval FAQ

How do you get a COA in Oregon?

Submit a complete two-part application to OHA covering your services, policies and procedures, facility, and staffing, then clear OHA's review. OHA has 60 days from receipt of application materials to audit, and deficiency notices carry a 14-calendar-day amendment window.

How long does a COA take?

The rule gives OHA 60 days from receipt of application materials, but the clock is only clean on a complete, compliant first submission. Applicants who receive deficiency notices cycle back through amendment, which extends real-world timelines.

How long is a COA valid?

An initial certificate is issued for up to one calendar year; a renewal certificate for up to three calendar years (OAR 309-008-0900). A certificate is void on its expiration date if a complete renewal application was not timely submitted (OAR 309-008-0300).

Do I need a COA to bill Oregon Health Plan or hire associates?

Agencies that contract with a CCO or OHA to provide behavioral health treatment generally do, unless they consist exclusively of licensed practitioners. Board-registered associates need a COA-holding employer to bill OHP beginning July 1, 2027, unless they work in an exempt setting. See the 2027 associate deadline guide.

What is the difference between a COA and a license?

The COA is the outpatient behavioral health certification governed by OAR chapter 309, division 008 (certification) and division 019 (service delivery). ORS 430.637 sets the criteria for the on-site quality assessment that supports certification. Residential, detox and similar levels of care follow separate licensing requirements; see the facility licensing hub.

What does a COA cost?

Confirm current OHA fees with the Behavioral Health Licensing and Certification unit before filing. Plan for policy development and staff time on top of OHA's fee.

Can I add services after I have a COA?

Yes. A provider with a current certificate submits a written request for approval before adding services or locations, and OHA must receive it at least 60 days before the desired effective date (OAR 309-008-1000). OHA makes reasonable efforts to decide within 45 days of receiving the request.

Saint Health Group owns the COA end to end: we write the policies and procedures, build the documentation and quality infrastructure, train your staff, and run a full mock OHA readiness review so you submit once and clear the 60-day audit. Talk to our Oregon licensing team or book a consultation.