> ## Documentation Index
> Fetch the complete documentation index at: https://mso.getlemma.com/llms.txt
> Use this file to discover all available pages before exploring further.
# UPIC jurisdictions by state
> Which Unified Program Integrity Contractor covers each state and territory, the five jurisdictions and their contractors, and the three places CMS's own directory is wrong or empty.
A **Unified Program Integrity Contractor (UPIC)** is the CMS contractor that investigates fraud, waste, and abuse across Medicare Parts A and B, DME, home health and hospice, Medicaid, and the Medicare-Medicaid data match program. There are **five UPIC jurisdictions** covering all 50 states, the District of Columbia, and five territories, and **two contractors hold two jurisdictions each**.
If your NPI has been used to submit claims you did not render or order, your UPIC is the first call. This page exists because finding it should take ten seconds and currently does not.
**CMS is the authoritative source, and you should confirm against it.** The assignments below were read directly from CMS's [Review Contractor Directory, Interactive Map](https://www.cms.gov/data-research/monitoring-programs/medicare-fee-service-compliance-programs/review-contractor-directory-interactive-map), which requires selecting one state at a time and returns a mixed table of every contractor type. We consolidated all 56 jurisdictions into one table because the underlying data is hard to get out of that interface, not because we improve on it. **Checked August 2026.**
## The five jurisdictions
| Jurisdiction | Contractor | Jurisdictions covered |
| ---------------- | -------------------------------- | --------------------- |
| **Northeastern** | SafeGuard Services LLC | 12 |
| **Southeastern** | SafeGuard Services LLC | 10 |
| **Midwestern** | CoventBridge (USA) Inc. | 11 |
| **Southwestern** | Qlarant Integrity Solutions, LLC | 7 |
| **Western** | Qlarant Integrity Solutions, LLC | 16 |
Two consequences worth knowing. **The contractor name is not the jurisdiction name** — telling someone "SafeGuard has it" does not say whether you mean the Northeastern or Southeastern contract, and they operate from different offices. And **the jurisdiction that covers you for Medicare program integrity is not the same as your MAC jurisdiction**, which is a separate assignment with a separate map.
## Every state and territory
| State or territory | UPIC jurisdiction | Contractor |
| -------------------------------------------------------------------- | ----------------- | -------------------------------- |
| [Alabama](/reference/legal/states/alabama) | **Southeastern** | SafeGuard Services LLC |
| [Alaska](/reference/legal/states/alaska) | **Western** | Qlarant Integrity Solutions, LLC |
| American Samoa | **Western** | Qlarant Integrity Solutions, LLC |
| [Arizona](/reference/legal/states/arizona) | **Western** | Qlarant Integrity Solutions, LLC |
| [Arkansas](/reference/legal/states/arkansas) | **Southwestern** | Qlarant Integrity Solutions, LLC |
| [California](/reference/legal/states/california) | **Western** | Qlarant Integrity Solutions, LLC |
| [Colorado](/reference/legal/states/colorado) | **Southwestern** | Qlarant Integrity Solutions, LLC |
| [Connecticut](/reference/legal/states/connecticut) | **Northeastern** | SafeGuard Services LLC |
| [Delaware](/reference/legal/states/delaware) | **Northeastern** | SafeGuard Services LLC |
| [District of Columbia](/reference/legal/states/district-of-columbia) | **Northeastern** | SafeGuard Services LLC |
| [Florida](/reference/legal/states/florida) | **Southeastern** | SafeGuard Services LLC |
| [Georgia](/reference/legal/states/georgia) | **Southeastern** | SafeGuard Services LLC |
| Guam | **Western** | Qlarant Integrity Solutions, LLC |
| [Hawaii](/reference/legal/states/hawaii) | **Western** | Qlarant Integrity Solutions, LLC |
| [Idaho](/reference/legal/states/idaho) | **Western** | Qlarant Integrity Solutions, LLC |
| [Illinois](/reference/legal/states/illinois) | **Midwestern** | CoventBridge (USA) Inc. |
| [Indiana](/reference/legal/states/indiana)a | **Midwestern** | CoventBridge (USA) Inc. |
| [Iowa](/reference/legal/states/iowa) | **Midwestern** | CoventBridge (USA) Inc. |
| [Kansas](/reference/legal/states/kansas) | **Midwestern** | CoventBridge (USA) Inc. |
| [Kentucky](/reference/legal/states/kentucky) | **Midwestern** | CoventBridge (USA) Inc. |
| [Louisiana](/reference/legal/states/louisiana) | **Southwestern** | Qlarant Integrity Solutions, LLC |
| [Maine](/reference/legal/states/maine) | **Northeastern** | SafeGuard Services LLC |
| [Maryland](/reference/legal/states/maryland) | **Northeastern** | SafeGuard Services LLC |
| [Massachusetts](/reference/legal/states/massachusetts) | **Northeastern** | SafeGuard Services LLC |
| [Michigan](/reference/legal/states/michigan)b | **Midwestern** | CoventBridge (USA) Inc. |
| [Minnesota](/reference/legal/states/minnesota)c | **Midwestern** | CoventBridge (USA) Inc. |
| [Mississippi](/reference/legal/states/mississippi) | **Southwestern** | Qlarant Integrity Solutions, LLC |
| [Missouri](/reference/legal/states/missouri) | **Midwestern** | CoventBridge (USA) Inc. |
| [Montana](/reference/legal/states/montana)c | **Western** | Qlarant Integrity Solutions, LLC |
| [Nebraska](/reference/legal/states/nebraska) | **Midwestern** | CoventBridge (USA) Inc. |
| [Nevada](/reference/legal/states/nevada) | **Western** | Qlarant Integrity Solutions, LLC |
| [New Hampshire](/reference/legal/states/new-hampshire) | **Northeastern** | SafeGuard Services LLC |
| [New Jersey](/reference/legal/states/new-jersey) | **Northeastern** | SafeGuard Services LLC |
| [New Mexico](/reference/legal/states/new-mexico) | **Southwestern** | Qlarant Integrity Solutions, LLC |
| [New York](/reference/legal/states/new-york) | **Northeastern** | SafeGuard Services LLC |
| [North Carolina](/reference/legal/states/north-carolina) | **Southeastern** | SafeGuard Services LLC |
| [North Dakota](/reference/legal/states/north-dakota) | **Western** | Qlarant Integrity Solutions, LLC |
| Northern Mariana Islands | **Western** | Qlarant Integrity Solutions, LLC |
| [Ohio](/reference/legal/states/ohio) | **Midwestern** | CoventBridge (USA) Inc. |
| [Oklahoma](/reference/legal/states/oklahoma) | **Southwestern** | Qlarant Integrity Solutions, LLC |
| [Oregon](/reference/legal/states/oregon) | **Western** | Qlarant Integrity Solutions, LLC |
| [Pennsylvania](/reference/legal/states/pennsylvania) | **Northeastern** | SafeGuard Services LLC |
| Puerto Rico | **Southeastern** | SafeGuard Services LLC |
| [Rhode Island](/reference/legal/states/rhode-island) | **Northeastern** | SafeGuard Services LLC |
| [South Carolina](/reference/legal/states/south-carolina) | **Southeastern** | SafeGuard Services LLC |
| [South Dakota](/reference/legal/states/south-dakota) | **Western** | Qlarant Integrity Solutions, LLC |
| [Tennessee](/reference/legal/states/tennessee) | **Southeastern** | SafeGuard Services LLC |
| [Texas](/reference/legal/states/texas) | **Southwestern** | Qlarant Integrity Solutions, LLC |
| US Virgin Islands | **Southeastern** | SafeGuard Services LLC |
| [Utah](/reference/legal/states/utah) | **Western** | Qlarant Integrity Solutions, LLC |
| [Vermont](/reference/legal/states/vermont) | **Northeastern** | SafeGuard Services LLC |
| [Virginia](/reference/legal/states/virginia) | **Southeastern** | SafeGuard Services LLC |
| [Washington](/reference/legal/states/washington) | **Western** | Qlarant Integrity Solutions, LLC |
| [West Virginia](/reference/legal/states/west-virginia) | **Southeastern** | SafeGuard Services LLC |
| [Wisconsin](/reference/legal/states/wisconsin) | **Midwestern** | CoventBridge (USA) Inc. |
| [Wyoming](/reference/legal/states/wyoming) | **Western** | Qlarant Integrity Solutions, LLC |
## What we corrected
Three things in CMS's own directory did not survive checking. We flagged each in the table above.
**a. Indiana has no data at all.** Indiana appears in the map's state selector, but its content block is **empty**, no UPIC, no MAC, no RAC, nothing. A provider in Indiana following CMS's own instructions to "find your UPIC" reaches a blank panel. We placed Indiana in the Midwestern jurisdiction on the strength of CoventBridge's own published description of the UPIC MW contract, which names Iowa, Illinois, **Indiana**, Kansas, Kentucky, Michigan, Minnesota, Missouri, Nebraska, Ohio, and Wisconsin.2 A contractor's statement of its own contract scope is good evidence, but it is not CMS — treat Indiana as the one row here to confirm before relying on it.
**b. Michigan is listed under a predecessor contractor.** CMS's Michigan entry names **AdvanceMed, an NCI Company**, which held program integrity work under the earlier contract structure. The phone number printed alongside it is the same number CMS lists for CoventBridge's Midwestern UPIC, and CoventBridge's own contract description includes Michigan. We list Michigan as Midwestern / CoventBridge.
**c. Minnesota and Montana are frequently transposed.** Several widely-cited third-party summaries place **Minnesota** in the Western jurisdiction. CMS's map puts Minnesota in the **Midwestern** jurisdiction and **Montana** in the **Western** one, and the geography agrees. The error looks like an MN/MT abbreviation slip that has been copied between sources. Both rows above follow CMS.
**Do not let this page be your only check before a deadline.** UPIC assignments move between contract cycles, and this table is a snapshot. Where a response window is running — a 15-day rebuttal, a 30-day redetermination — confirm the contractor on the CMS map before you send anything, and put the confirmation in your file. See [Respond to NPI identity theft](/guides/compliance/respond-to-npi-identity-theft).
## What a UPIC is not
Providers routinely conflate these, and the response to each is different.
| Contractor | Does what | Relationship to a UPIC |
| ------------------------------------------------ | ------------------------------------------------------------------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **MAC**, Medicare Administrative Contractor | Processes claims, holds your enrollment record, issues demand letters, executes recoupment | A separate organization on a separate map. In an identity theft case you generally need both, because the UPIC investigates and the MAC controls the money |
| **RAC**, Recovery Audit Contractor | Finds and corrects improper payments, paid on contingency | Overpayment recovery, not fraud investigation |
| **CERT**, Comprehensive Error Rate Testing | Measures the Medicare fee-for-service error rate | Statistical sampling; no action against you |
| **SMRC**, Supplemental Medical Review Contractor | Conducts nationwide medical review at CMS direction | Not geographic |
| **MFCU**, Medicaid Fraud Control Unit | Investigates and prosecutes Medicaid fraud | State law enforcement, usually in the Attorney General's office, and entirely separate from the UPIC |
| **I-MEDIC** | Part C and Part D fraud investigation | National, not geographic |
A UPIC contact is a **fraud investigation**, not an audit. That distinction should change how you respond and who you involve. See [Respond to payer audits](/guides/compliance/respond-to-payer-audits).
## Verifying your own assignment
[Review Contractor Directory, Interactive Map](https://www.cms.gov/data-research/monitoring-programs/medicare-fee-service-compliance-programs/review-contractor-directory-interactive-map). The UPIC row is in the table that loads.
Not where the management company sits, and not where the clinician lives. Enrollment determines the contractor, which matters in a multi-state group. See [Why multi-state groups have one PC per state](/concepts/entities/one-pc-per-state).
The [MAC directory](https://www.cms.gov/mac-info) is a different lookup. Part A/B and DME are frequently different contractors for the same state, so if the fraudulent claims are for equipment you may need both.
Contractor, jurisdiction, the date you checked, and the phone number you called. If you later have to show that you acted promptly, this is part of it.
**Or just ask the assistant.** Tell it which state your PC is enrolled in and it will return the UPIC, the MAC lookup, your state's Medicaid Fraud Control Unit, your state program integrity director, and your state's CPOM page in one answer.
## Sources
1. CMS, [Review Contractor Directory, Interactive Map](https://www.cms.gov/data-research/monitoring-programs/medicare-fee-service-compliance-programs/review-contractor-directory-interactive-map). Every assignment in the state table was read from this directory's per-state entries, checked August 2026, except Indiana, see note (a). Contractor addresses, phone numbers, and esMD status are on that page and are deliberately not reproduced here, because they change.
2. CoventBridge, [Midwest UPIC](https://coventbridge.com/midwest-upic/), describing the states covered by the UPIC MW contract awarded by CMS in 2016. Used to resolve Indiana, which CMS's directory leaves blank, and to corroborate Michigan.
3. CMS, [Victimized Provider Project](https://www.cms.gov/about-cms/components/cpi/victimizedproviderproject), the CMS program for providers facing overpayment liability from a stolen identity, and the page that directs providers to the contractor directory above.
4. CMS, [MAC directory](https://www.cms.gov/mac-info) for Medicare Administrative Contractor assignments. HHS OIG, [Medicaid Fraud Control Units](https://oig.hhs.gov/fraud/medicaid-fraud-control-units-mfcu/) for state MFCUs.
## Related topics
- [Respond to NPI identity theft](/guides/compliance/respond-to-npi-identity-theft.md)
- [Respond to payer audits and record requests](/guides/compliance/respond-to-payer-audits.md)
- [Handle recoupments and takebacks](/guides/compliance/handle-recoupments.md)
- [Provider identity theft and NPI misuse](/concepts/compliance/provider-identity-theft.md)
- [Billing compliance: the lines you never cross](/concepts/compliance/billing-compliance-basics.md)
- [Medicare (fee-for-service)](/reference/payers/profiles/medicare.md)
- [Medicaid](/reference/payers/profiles/medicaid.md)
- [Acronym decoder](/reference/appendix/acronyms.md)