Why Document Readiness Matters Before You Select Your Auditor
Choosing an approved quality auditor is not the first step in the NDIS registration or re-registration process — document readiness is. Before you engage an NDIS Commission-approved quality auditor, your organisation must be able to demonstrate compliance with the relevant NDIS Practice Standards. Auditors assess evidence, not intentions. If your documents are incomplete, inconsistent, or undated when the auditor arrives, your audit outcome is already compromised.
From 2026, the strengthened registration framework has raised the bar. The NDIS Commission has expanded the Practice Standards to include enhanced requirements around incident management, behaviour support, governance, and rights-based practice. SIL providers, in particular, face a higher-intensity audit pathway because they deliver some of the highest-risk supports under the scheme.
The checklist below maps directly to what approved quality auditors examine under the NDIS (Providers — Registration and Practice Standards) Rules 2018 and the strengthened 2026 framework.
The Core Document Checklist for NDIS Quality Audit
1. Governance and Organisational Management
- Organisation constitution, ABN, and legal entity documentation
- Current board or leadership structure (including roles and responsibilities)
- Organisational chart aligned to actual staffing
- Conflict of interest policy and register
- Risk management framework and current risk register
- Business continuity and emergency management plan
- Financial governance policies (delegation of authority, procurement)
- Quality management policy and continuous improvement register
2. Workforce Management and Screening
- NDIS Worker Screening Check records for all workers in risk-assessed roles (must be current and from an approved state/territory screening unit)
- Working With Children Check records where applicable
- Staff recruitment policy demonstrating compliance with the NDIS Code of Conduct
- Position descriptions referencing NDIS Code of Conduct obligations
- Induction records confirming Code of Conduct training
- Ongoing professional development register (training logs, dates, topics)
- Supervision and performance review records
- Volunteer and contractor screening documentation
3. Participant Rights and Person-Centred Practice
- Participant rights policy (referencing the NDIS Act 2013 and the National Disability Strategy)
- Rights and responsibilities information provided to each participant (in accessible formats)
- Consent and decision-making frameworks, including supported decision-making procedures
- Advocacy referral pathways documented in policy
- Privacy and confidentiality policy compliant with the Privacy Act 1988
4. Support Planning and Delivery
- Individual support plans for each participant, linked to their NDIS plan goals
- Assessment and intake documentation
- Transition and exit planning records
- Progress notes and daily records demonstrating goal-aligned delivery
- Medication management policy and individual medication records (where applicable)
- Mealtime management plans authorised by a health professional (SIL providers)
- Positive behaviour support plans where restrictive practices are used (authorised by a registered behaviour support practitioner)
5. Incident Management
- Incident management policy and procedure
- Incident register (covering all reportable incidents as defined in the NDIS (Incident Management and Reportable Incidents) Rules 2018)
- Evidence of reportable incidents lodged with the NDIS Commission within required timeframes
- Records of internal investigation and corrective actions taken
- Evidence of participant and family notification following incidents
- Root cause analysis records for serious incidents
6. Complaints Management
- Complaints management policy referencing the NDIS Commission's complaints framework
- Complaints register (with dates received, categories, resolution, and timeframes)
- Evidence of complaints information made accessible to participants
- Feedback and complaints forms in accessible formats
- Records of outcomes communicated to complainants
7. Restrictive Practices (SIL and High-Support Providers)
- Register of all restrictive practices currently in use across your service
- State or territory authorisation documentation for each regulated restrictive practice
- Behaviour support plans prepared by a registered behaviour support practitioner
- Evidence of regular review and reduction planning for each restrictive practice
- Staff training records specific to behaviour support and positive behaviour approaches
- Monthly reporting records submitted to the NDIS Commission (where required)
8. SIL-Specific Additional Documents
- SIL assessment and rostering methodology
- Evidence that SIL funding is aligned to the participant's NDIS plan and that support hours have been agreed with the participant's planner or LAC
- Accommodation/SIL agreement signed by the participant or their authorised representative
- Fire evacuation and emergency plans for each supported accommodation site
- Property maintenance and tenancy agreements (demonstrating separation of tenancy from support provision)
- Household governance arrangements where multiple participants share a site
How to Organise Your Documents for Auditor Presentation
- Map every document to a Practice Standard module. Auditors assess against the core module (applicable to all providers) plus the supplementary modules that match your registration groups. For SIL providers, the High Intensity Daily Personal Activities module and the Specialist Disability Accommodation module may also apply.
- Date-stamp and version-control all policies. An undated policy cannot demonstrate currency. Use a document control register that records document name, version number, approval date, and review date.
- Collect participant-level evidence. At audit, auditors typically select a sample of participant files. Every file should contain the support plan, consent forms, progress notes, and any incident or behaviour support records.
- Brief your staff before the audit. Auditors may interview workers. Staff should be able to explain your incident reporting process, how they apply the Code of Conduct, and how they support participant rights in day-to-day practice.
- Resolve known non-conformances before submission. Self-assess against the Practice Standards using the NDIS Commission's own guidance tools. Identify gaps, resolve them, and document the corrective actions taken — this demonstrates your continuous improvement system is active.
- Prepare a document index. Give your auditor a single index listing every document, its location (physical or digital), and the Practice Standard it addresses. This reduces audit duration and demonstrates organisational maturity.
Common Non-Conformances That Delay Registration
| Non-conformance | Why it matters |
|---|---|
| NDIS Worker Screening Checks expired or missing for risk-assessed roles | A mandatory legislative requirement — no valid check means the worker cannot legally deliver NDIS supports |
| Incident register entries missing required fields (date, type, participant identifier, action taken) | Auditors cannot assess reporting timeliness or follow-through without complete records |
| Behaviour support plans not prepared by a registered practitioner | Unregistered plans do not meet the NDIS (Restrictive Practices and Behaviour Support) Rules 2018 |
| Policies referencing superseded legislation or old Practice Standards | Demonstrates that the organisation is not tracking its regulatory environment |
| Support plans not updated after plan reviews | Indicates delivery may not reflect the participant's current goals and funded supports |
| No evidence of complaints information being provided to participants | A rights obligation — participants must know how to raise concerns before a concern arises |
Selecting Your Approved Quality Auditor
Once your documents are in order, select an auditor from the NDIS Commission's list of approved quality auditors. The Commission does not prescribe which approved auditor you must use, but providers are responsible for engaging an auditor who is approved for the relevant registration group type (verification or certification). SIL providers require certification audits — a more in-depth assessment than a desktop verification audit.
When comparing auditors, ask about their experience with SIL and high-intensity support providers, their turnaround time for audit reports, and how they handle corrective action requests before issuing a final report. A good auditor will provide clear written feedback on any non-conformances, giving you an opportunity to resolve them.
If you are building your compliance document library from scratch or need to close multiple gaps ahead of a 2026 registration deadline, ndiscompliant.com.au offers a 74-document audit-ready SIL compliance kit that maps directly to the current Practice Standards — a useful starting point for organisations that want a structured baseline rather than building each policy individually.
After the Audit: What Happens Next
Your approved quality auditor submits their audit report to the NDIS Commission. The Commission then reviews the application, the audit outcome, and any additional information before making a registration decision. Where non-conformances are identified, you may be required to provide a corrective action plan. Providers who demonstrate active, documented continuous improvement are better placed to address non-conformances without having their application refused or their existing registration suspended.
Begin your document review well before your registration renewal date — at minimum six months in advance for SIL providers given the volume of evidence required.
Important: This article provides general guidance about NDIS compliance requirements. It is not legal or professional advice. Requirements may change as the NDIS Commission updates its policies and Practice Standards. Always verify current requirements with the NDIS Quality and Safeguards Commission or a registered NDIS consultant before making compliance decisions.