How to start an ABA company: credentialing, payers and launch

What an ABA company needs before its first client

• A clinical director who is a Board Certified Behavior Analyst (BCBA). Why: payers and families expect qualified supervision, and RBTs can't practice without it.
• State licensure for behavior analysts where your state requires it.
• A business entity, tax ID and NPIs.
• At least one active payer contract, often Medicaid, before you hire a full team.
• HIPAA-compliant systems with signed Business Associate Agreements.
• A service model: center, home, school, or a mix.
• Referral relationships with the clinicians who diagnose autism in your area.

Supervision, licensure and credentials: BCBA and RBT

• Know the two core credentials. The Behavior Analyst Certification Board (BACB) describes BCBAs as "independent practitioners who can provide behavior-analytic services and supervise the work of RBTs" (opens in a new tab). Registered Behavior Technicians are paraprofessionals who "practice under the direction and close supervision" (opens in a new tab) of an RBT Supervisor and/or RBT Requirements Coordinator.
• Check your state's licensure law. BACB's U.S. licensure page (opens in a new tab) lists the states that "license or otherwise regulate behavior analysts"; its current table shows 40 states plus the District of Columbia. BACB says behavior analysts in those states should review the state's rules and "either apply for licensure or determine whether they are in a class exempt from licensure."
• Plan supervision ratios and hours to meet BACB requirements and each payer's contract, which may be stricter.
• Verify every clinician's credential on hire and track renewal dates.
• Get legal advice on ownership. BACB credentials apply to the people who deliver services; who may own the company depends on state law and payer contracts.

Medicaid and commercial payer credentialing

• Get NPIs for the organization and each billing clinician through NPPES (opens in a new tab).
• Enroll with your state Medicaid agency. If many families in your area use Medicaid, it may be your first contract. Ask the agency for its ABA provider requirements, current processing times, and whether its managed care plans contract separately.
• Medicare enrollment applies only if you'll serve Medicare patients; CMS's enrollment steps (opens in a new tab) are NPI, then PECOS, then your Medicare Administrative Contractor.
• Credential with commercial payers, starting with the plans local employers offer. Complete a CAQH ProView profile if the payer uses it.
• Learn each payer's authorization rules: assessments, treatment plans, reauthorization intervals and documentation. Why: ABA billing often depends on approved treatment plans.

HIPAA, records and authorizations

• Choose practice-management and data-collection software built for ABA, and sign its Business Associate Agreement. HHS requires a written contract (opens in a new tab) with any vendor that handles PHI for you.
• Run a HIPAA risk analysis and write policies; HHS's HIPAA for Professionals (opens in a new tab) hub links the Privacy, Security and Breach Notification Rules.
• Secure session data on tablets and phones used in homes and schools.
• Get written parent or guardian authorization before sharing a child's information with a school or any party outside treatment and payment, unless your attorney confirms an exception.
• Never use a child's story, photo or video in marketing without a signed HIPAA authorization (45 CFR 164.508) from the parent or guardian.

This is general information, not legal advice. Confirm how it applies to your practice with a qualified advisor.

Staffing and service model: center, home or school

• Recruit BCBAs first, then RBTs, since RBT hiring depends on supervision capacity.
• Plan RBT training and competency checks to BACB requirements.
• Buy liability insurance that covers home and school settings, plus auto coverage for staff driving to clients.

Referral sources: pediatricians, schools and parents

Referrals decide growth for many ABA companies. Families usually arrive after a diagnosis, and the people who diagnose are your first audience.

• List the diagnosing clinicians in your area: pediatricians, developmental pediatricians, child psychologists and neurologists.
• Make referring easy: a one-page referral form, a direct phone line, and a promise to confirm receipt.
• Close the loop. With the parent's authorization, tell the referring clinician when intake happens and when services start.
• Build school relationships carefully: special-education staff often hear from parents first.
• Reach parent groups with education, not sales.

For a structured outreach program, see physician referral marketing, and for marketing across pediatric therapies, marketing for ABA, speech and OT practices.

Launch marketing for an ABA practice

• A clear website: your service model, ages served, insurance accepted (including Medicaid), the intake steps from first call to first session, and current wait times if you have them. Use a HIPAA-compliant intake inquiry form.
• A Google Business Profile if families visit a center. Google's guidelines (opens in a new tab) require a location customers can visit, staffed during stated hours; a home-based company serving families where they live may qualify as a service-area business instead.
• Write ads that describe services, not the viewer's child. Meta bars ads that assert or imply personal attributes (opens in a new tab), including health and medical conditions. Meta's own examples allow "Depression counseling" but not "Depression getting you down?"
• Read the rules before you run ads. Our guides to ABA advertising and the Meta health ad policy cover what's allowed.

Medfy builds websites with HIPAA-compliant forms, and its patient CRM and inbox keep every intake inquiry in one access-controlled place, with role-based permissions and an audit log. Medfy signs a BAA with each practice before any patient data flows. Start with the free audit and website preview.

Related guides: starting a therapy practice, starting a PT practice, and how to start a private practice.

Frequently asked questions

What do you need to start an ABA company?

Qualified clinical leadership (BCBAs who can provide services and supervise RBTs), state licensure where your state regulates behavior analysts, a business entity, NPIs, enrollment with your state Medicaid agency and contracts with commercial payers, HIPAA-compliant records and Business Associate Agreements, liability insurance, a service model (center, home or school), and referral relationships with pediatricians and other providers who diagnose autism.

Do you need to be a BCBA to own an ABA company?

BACB credentials apply to the people who deliver and supervise services, not to business ownership itself. Who may own the company is a question for your state's law and your payer contracts, which usually require qualified clinical supervision. Many founders are BCBAs; others partner with one as clinical director. Confirm your state's rules and each payer's requirements before you form the company.

How do ABA companies get new clients?

Mostly through referrals. Pediatricians, developmental pediatricians, psychologists who diagnose autism, schools and parent groups send many new families, so build those relationships first. Add a clear website that explains your service model, insurance accepted and intake steps, a Google Business Profile if families visit a center, and ads that describe your services without implying anything about the viewer's child.

How long does Medicaid credentialing take for an ABA provider?

It varies by state, and by whether you also contract with Medicaid managed care plans, which may credential separately. Ask your state Medicaid agency for its current processing time and requirements before you apply, submit a complete application, and track each plan's status. Plan your cash and hiring on the assumption that it can take months, not weeks, before you can bill.