Why documentation matters more in 2026
Group and centre based supports sit under a registration group that carries higher inherent risk than many other NDIS support types. Participants may be non-verbal, have complex support needs, or spend extended hours in a shared environment — all of which draw closer scrutiny from the NDIS Commission and its approved quality auditors.
From 2026, the strengthened NDIS Practice Standards and mandatory registration changes increase documentation obligations for providers in this space. Auditors are specifically directed to look for evidence that policies are not merely on paper but are actively implemented, reviewed, and understood by frontline staff. Gaps in documentation are the most common finding in certification audits, and they can delay or block your registration renewal.
This checklist organises the documents you need into eight categories. Work through each section systematically before your next audit or registration renewal.
1. Governance and organisational management
- Current organisational chart showing lines of accountability and the responsible person (key personnel) named on your NDIS Commission registration.
- Board or governing body meeting minutes demonstrating oversight of quality and safeguarding matters — at minimum annually reviewed.
- Conflict of interest register, updated and signed off by the most senior officer at least annually.
- Financial management policy confirming participant funds are not commingled with operational accounts (where the provider also manages funds).
- Continuous improvement register or log, showing how complaints, incidents, and audit findings feed back into service improvement.
- Risk register covering organisational, service delivery, and WHS risks, with nominated owners and review dates.
2. Staff qualifications, screening, and training records
Every worker who delivers group or centre based supports must be screened and sufficiently qualified. Your documentation folder must include:
- Current NDIS Worker Screening Check clearances for all workers, including volunteers in regulated roles — stored with expiry dates tracked.
- Police check records where required by state or territory legislation (some roles require both screening check and police check).
- Evidence of completed NDIS Worker Orientation Module ("Quality, Safety and You") for each worker.
- Certificates or completion records for mandatory training: manual handling, emergency evacuation, infection control, and any behaviour support-specific training required by the participant's plan.
- First aid and CPR certificates for a sufficient number of staff on duty at each session, meeting your duty of care obligations.
- Position descriptions for each role, reflecting actual duties and supervision requirements.
- Supervision records — noting frequency, format (group or individual), and topics covered, especially for staff supporting participants with complex needs.
3. Participant support documentation
This is the core of what auditors examine. For each participant receiving group or centre based supports you must hold:
- Service agreement — signed by the participant or their authorised representative, specifying the supports to be delivered, the price, and the participant's rights under the NDIS Code of Conduct.
- Individual support plan or centre-specific support profile — describing how supports will be delivered in the group setting, personalised goals, and communication needs.
- Risk assessment — identifying risks specific to the participant in a group or shared environment and the controls in place.
- Emergency and evacuation plan — tailored to the participant's mobility and communication needs, with a copy accessible at the centre.
- Health action plan or management plan (where applicable) — for participants with epilepsy, diabetes, complex health conditions, or known allergy risks.
- Behaviour support plan — where a participant has one, ensure it is current, signed by an NDIS-registered behaviour support practitioner, and that all staff supporting the participant have been trained in its implementation.
- Consent records — covering photography, sharing of information with families or other providers, and any activities that carry elevated risk (water activities, community outings, etc.).
- Daily/session progress notes — contemporaneous, factual, and signed off by the worker present.
4. Restrictive practice documentation
Restrictive practices in group and centre based settings attract the highest level of scrutiny. If any participant's support involves a regulated restrictive practice, you must hold:
- Current authorisation from the relevant state or territory authority (each jurisdiction has its own authorisation body — confirm the correct body for your state).
- A copy of the behaviour support plan developed by a registered behaviour support practitioner that includes the restrictive practice as a last resort, with documented proactive strategies.
- Monthly (or more frequent, as required) reporting to the NDIS Commission on restrictive practice use, via the Commission's portal.
- Evidence of participant and/or guardian consent or guardianship order, as applicable.
- Records of staff training on the specific restrictive practice, including when that training was completed.
- Reduction plan — showing how the provider is working toward eliminating or reducing the restrictive practice over time.
5. Incident management records
The NDIS Commission's incident management rules require providers to have a documented system, not merely a form. Your incident folder should contain:
- Incident management policy, reviewed at least annually.
- Individual incident reports for every reportable incident, submitted to the NDIS Commission within the required timeframes (24 hours for priority incidents, five business days for other reportable incidents).
- Internal incident register showing all incidents — not only those reportable to the Commission — with dates, nature of incident, actions taken, and outcomes.
- Root cause analysis or review records for serious incidents, demonstrating that the provider has investigated and taken corrective action.
- Evidence that participants and their support network were notified where required.
6. Complaints management records
- Complaints management policy — accessible to participants in plain English (and alternative formats where needed).
- Complaints register covering the date received, nature of the complaint, steps taken to resolve, outcome, and timeframe.
- Evidence that participants were informed of their right to complain to the NDIS Commission if not satisfied with your internal resolution.
- Annual review of complaint trends, with documented actions taken to prevent recurrence.
7. Physical environment and equipment records
For centre based providers, the physical environment is part of the audit. Document:
- Premises safety inspection records — at least annually, with a qualified inspector where fire, electrical, or structural safety is involved.
- Evacuation diagram, posted in the centre and tested with staff (fire drill records).
- Accessible equipment maintenance logs — hoists, wheelchairs, sensory equipment, therapy aids — with service dates and any out-of-service periods noted.
- Vehicle safety records if transporting participants to and from the centre, including driver licence checks and vehicle roadworthy records.
- Infection control procedures — particularly relevant since the pandemic underscored the risks of communal settings.
8. Quality auditor expectations: common non-conformances
Based on publicly available NDIS Commission guidance, the most frequent documentation findings in group and centre based settings include:
- Behaviour support plans that are out of date or not yet trained to staff delivering the supports.
- Restrictive practice reporting missing from the Commission portal despite practices being in use.
- Incident reports that describe the event but lack evidence of investigation or corrective action.
- Service agreements that have not been updated after a participant's NDIS plan was reviewed.
- Staff training records that cannot be located or are incomplete for existing employees.
- Complaints register not maintained — providers relying on memory rather than a documented log.
Address each of these before your audit window opens. Auditors assess evidence of practice, not just the existence of a policy document.
Pulling it together
A practical approach is to create a participant-level folder (physical or digital) for each person and an organisational-level folder for governance, staffing, and facility documents. Conduct an internal self-audit at least six months before your registration renewal date, using your checklist as a scoring tool.
If you are building your documentation suite from scratch or identifying significant gaps, ndiscompliant.com.au offers a 74-document audit-ready SIL and group-provider compliance kit that covers the full Practice Standards across all eight categories above — which can substantially reduce the time needed to reach audit readiness.
The 2026 strengthened framework is not a bureaucratic hurdle — it reflects the genuine risks that arise when vulnerable people are supported in group environments. Thorough documentation is the evidence that your organisation takes those risks seriously and acts on them every day.
Important: This article provides general guidance about NDIS compliance requirements. It is not legal or professional advice. Requirements may change as the NDIS Commission updates its policies and Practice Standards. Always verify current requirements with the NDIS Quality and Safeguards Commission or a registered NDIS consultant before making compliance decisions.