NDIS Provider Insurance Requirements: Documents You Need in 2026

Why Insurance Documents Are a Registration Non-Negotiable

Insurance is not an administrative footnote in NDIS registration — it is a hard prerequisite. The NDIS Commission's registration requirements and the NDIS Practice Standards both treat adequate insurance as a foundation-level obligation. Auditors check for it at initial registration, on renewal, and during unannounced mid-cycle compliance activity. A lapsed or insufficient policy is treated as a critical non-conformance and can suspend your ability to deliver supports.

For SIL providers and high-intensity support services, the stakes are higher. Participants are living in your supported environments around the clock, meaning your exposure — and therefore the expected depth of your insurance coverage — is substantially greater than for lower-intensity registration groups.

The Core Insurance Types You Must Hold

The NDIS Commission requires registered providers to hold adequate insurance and indemnity arrangements. "Adequate" is defined by reference to the types of supports you deliver and the risk profile of your registration groups. The following insurance types are universally relevant to SIL and disability support providers.

1. Public Liability Insurance

Public liability insurance covers claims arising from third-party bodily injury or property damage caused by your organisation's activities or your workers. For providers operating in participants' homes or in SIL dwellings, this coverage must extend to incidents occurring on those premises. The NDIS Commission expects coverage to be commensurate with the scale and risk of your operations. Many providers hold a minimum of $20 million in public liability cover, though the Commission does not publish a single universal dollar figure — instead, it requires the amount to be appropriate for your registration group and service volume.

2. Professional Indemnity Insurance

Professional indemnity (PI) insurance covers claims arising from professional advice, errors, or omissions. For SIL providers, this is particularly relevant where support workers make day-to-day decisions that affect participant health and safety. PI insurance must reflect the professional activities conducted under your registration, including any allied health or nursing services delivered as part of the support package.

3. Workers Compensation Insurance

All providers with employees in Australia are legally required to hold workers compensation insurance in each state or territory where they employ workers. This is a separate statutory obligation, but auditors will verify that your policy is current, covers all staff categories (including casual and part-time workers), and is not lapsed.

4. Vehicle and Transport Insurance

If your organisation transports participants as part of service delivery, comprehensive motor vehicle insurance (including when carrying passengers who are NDIS participants) is expected. Check that your policy explicitly covers the commercial carriage of passengers with disability, as standard personal vehicle policies often exclude this use.

5. Product Liability Insurance (where applicable)

If your organisation supplies, modifies, or maintains assistive technology or equipment, product liability coverage is relevant. This is less common for pure SIL providers but becomes applicable where equipment prescription or modification forms part of the support scope.

Documents You Need at Registration and Audit

Knowing what insurance to hold is only part of the requirement. You must also be able to produce the right documentation on demand. The following checklist reflects what approved quality auditors look for under the NDIS Practice Standards audit framework.

• Certificate of currency for each insurance policy — must show the policy type, insured entity name (matching your registered legal entity name), coverage amount, and expiry date. An outdated certificate, even by one day, is treated as a lapse.
• Policy schedule or product disclosure statement — the certificate alone may not detail exclusions. Auditors increasingly ask for the schedule to verify that your activities are not excluded from cover (for example, some policies exclude abuse or molestation claims, which is a critical gap for SIL providers).
• Evidence of renewal reminders and internal review — your governance documentation should show how and when your organisation reviews insurance adequacy, typically as part of an annual risk management review.
• Board or management resolution confirming insurance adequacy — for incorporated providers, a documented resolution that the board has reviewed and approved the current insurance arrangements demonstrates governance oversight.
• Register of all current policies — a simple register listing each policy, the insurer, policy number, coverage amount, and expiry date is a practical tool that auditors expect to see as part of your risk management framework.
• Workers compensation certificates for each relevant state or territory — if you operate across jurisdictions, you need a valid certificate for each.
• Subcontractor insurance evidence — if you use subcontractors to deliver NDIS supports, you must verify and retain evidence that those subcontractors hold their own appropriate insurance. This is a commonly missed requirement.

How the Strengthened Practice Standards Affect Insurance Obligations

The strengthened NDIS Practice Standards, which underpin the 2026 mandatory registration reforms, place greater weight on organisational governance and risk management systems. Insurance sits within the Governance and Operational Management core module. Under the strengthened framework, auditors are directed to assess not just whether you hold insurance, but whether your organisation has systematic processes to:

1. Review insurance coverage adequacy at least annually and following any material change to your service scope.
2. Ensure new registration group applications trigger a coverage review before the application is submitted.
3. Document and act on any gaps identified in coverage, including notifying the NDIS Commission where a gap may temporarily exist.

This means the old approach of filing a certificate and forgetting about it until the next audit is no longer sufficient. Your quality management system needs to embed insurance as a live, monitored obligation.

Common Non-Conformances Identified at Audit

Based on the types of issues the NDIS Commission and approved quality auditors have consistently flagged across the sector, the following are the most frequent insurance-related non-conformances SIL providers encounter:

• Lapsed certificates of currency — the most common finding. Policies renew annually but certificate renewal often lags by weeks or months.
• Coverage amount below the risk profile — a small provider expanding into high-intensity or 24/7 SIL supports without reviewing whether their public liability or PI coverage scales accordingly.
• Entity name mismatch — the certificate is in the name of a related entity, trading name, or a previous legal name. The name on the certificate must match your NDIS registration exactly.
• No subcontractor insurance register — providers who engage sole traders or contractors without verifying and recording their own insurance arrangements.
• Exclusion clauses not reviewed — holding a policy that excludes the very activities that constitute your highest-risk supports (for example, manual handling or personal care in a 24/7 SIL setting).
• Workers compensation not covering all staff categories — particularly where overnight or on-call workers are categorised as contractors rather than employees, potentially leaving a gap.

Practical Steps to Get Your Insurance Documents Audit-Ready

1. Pull every current insurance policy and create a centralised insurance register with expiry dates and coverage amounts.
2. Compare the legal name on each certificate against your NDIS registration details exactly — any mismatch must be corrected with your insurer before your next audit.
3. Request the full policy schedule (not just the certificate) and review it for exclusions that may apply to your support types.
4. Set calendar reminders for renewal at least 60 days before each policy expires to allow time for market review and any gaps to be rectified.
5. Add an agenda item to your annual risk management review to formally assess whether coverage amounts remain adequate given your current participant numbers, support types, and geographic footprint.
6. Create a subcontractor register that includes insurance verification as a mandatory field, and set a review trigger whenever subcontractor arrangements change.
7. Document a board or management resolution confirming annual insurance review — this is a governance evidence requirement, not just good practice.

Pulling It Together for Your Compliance Folder

Auditors expect to find insurance documentation in your governance or compliance folder, cross-referenced from your risk management policy. The documents should be version-controlled, dated, and accessible to the person responsible for compliance in your organisation.

If you are building your compliance folder from scratch or preparing for your first registration audit, the 74-document audit-ready SIL compliance kit available at ndiscompliant.com.au includes insurance register templates, subcontractor insurance checklists, and the governance documentation your auditor will expect — which can substantially reduce the time it takes to get your folder in order.

Insurance is one pillar of your registration obligations, but it interacts with your risk management framework, your incident management system, and your governance structure. Treating it in isolation — as a box to tick at renewal — is the pattern most likely to result in a critical non-conformance when you least expect it.