What Is the NPI Registry (NPPES)? A Plain-English Guide

Behind every NPI lookup sits a single national database: the NPI registry, formally the National Plan and Provider Enumeration System, or NPPES. This guide explains what NPPES is, what it publishes, what it deliberately keeps private, and how the data reaches tools like this one.

What NPPES is

NPPES — the National Plan and Provider Enumeration System — is the system operated by the Centers for Medicare & Medicaid Services (CMS) that assigns and stores NPIs. It was created to implement the NPI standard mandated by HIPAA. Every NPI in existence was issued through NPPES, and every update to a provider’s record flows through it.

The public-facing search side of NPPES is the NPI registry, available at npiregistry.cms.hhs.gov. This is the authoritative, real-time system of record. NPI Portal is an independent tool built on the same public data; it is not affiliated with CMS or any government agency.

What the registry makes public

The registry is intentionally a public directory of professional information. For each enumerated provider it publishes fields such as:

  • The provider’s name (or legal business name for organizations)
  • The 10-digit NPI and its type — see NPI Type 1 vs Type 2
  • The taxonomy code and specialty
  • The credential, such as MD or NP
  • The practice address and phone number
  • Enumeration and update dates

Because this information is public, you can look up any provider for free with the NPI lookup or by name with NPI lookup by name, and browse by state or by specialty.

What the registry redacts

Just as important is what NPPES does not publish. Sensitive information collected during enumeration is redacted from the public data, including:

  • Social Security numbers
  • Employer Identification Numbers (EINs)
  • Dates of birth

This is by design. The public registry is meant to identify providers professionally, not to expose private data. It is why the NPI is safe to print on a claim while a Tax ID is not — a distinction explained in NPI vs Tax ID vs DEA vs CLIA.

The dissemination file

CMS does not only offer a website; it also publishes the public NPPES data as a downloadable dissemination file. This dataset contains the non-sensitive fields for every enumerated provider — a very large file, on the order of several million records. Anyone can download it, which is exactly how independent tools build their own fast, searchable versions of the registry.

The full file is refreshed on a regular cadence, with incremental updates in between. For the details of that schedule and how it affects the freshness of what you see, read how often NPI data is updated.

How the registry gets used

The registry is the backbone of a great deal of healthcare administration. Billers rely on it to confirm provider details before submitting claims, credentialing teams use it to verify identity, and developers build it into their systems through data feeds and APIs like ours (see the API). For a practical view, see how medical billers use the NPI registry.

The bottom line

The NPI registry is a free, public, national directory of healthcare providers, built and maintained by CMS through NPPES. It publishes professional details while redacting sensitive personal data, and it distributes that data widely so others can build tools on top of it. For the definition of the identifier at its center, start with what an NPI number is.

Frequently asked questions

Is the NPI registry free to use?
Yes. The NPI registry is a public resource, and searching it is free. The underlying data is also published as a downloadable file that anyone can use, which is why independent lookup tools exist.
What personal information does the NPI registry make public?
It publishes administrative details such as the provider's name, NPI, taxonomy, credential, and practice address and phone number. It is designed to show professional, not private, information.
What is the NPPES dissemination file?
The dissemination file is the downloadable dataset that CMS publishes from NPPES. It contains the public fields for enumerated providers and is what independent sites use to build their own search tools.
Does the NPI registry include a provider's Social Security number?
No. Sensitive identifiers such as Social Security numbers, EINs, and dates of birth are redacted from the public data. Only non-sensitive, professional information is disseminated.