What NDIS Auditors Are Actually Looking For

When an approved quality auditor arrives — whether for an initial registration audit or a renewal — they are not simply verifying that you have a policies folder on a shelf. They are testing whether your documented systems reflect what actually happens in practice, and whether every participant receives support that meets the NDIS Practice Standards. For SIL providers, the scrutiny is especially intense because the 2026 mandatory registration pathway has brought a larger cohort of providers into audit scope for the first time.

The list below covers the document categories auditors consistently examine. It is organised to match the structure of the NDIS Practice Standards so you can map your own document set against it before your audit date.

Core Module Documents

All registered NDIS providers — regardless of the supports they deliver — must demonstrate compliance with the Core Module. Auditors look for evidence in the following areas:

1. Rights and Responsibilities

2. Governance and Operational Management

3. Feedback, Complaints and Incidents

This is one of the highest-risk areas for non-conformance. Auditors will ask to see:

4. Human Resources and Staff Management

SIL-Specific and High-Intensity Support Documents

SIL providers carry additional documentation obligations under the High Intensity Daily Personal Activities and the Specialist Behaviour Support registration groups. Auditors will drill into:

Individualised Support Plans

Risk Assessments

Restrictive Practices

For any provider using regulated restrictive practices, this document set is the most frequently cited area of non-conformance at audit:

The 2026 Strengthened Practice Standards — What Has Changed

The strengthened NDIS Practice Standards, which underpin the 2026 mandatory registration framework, place greater emphasis on participant outcomes and provider culture rather than paperwork compliance alone. In practical terms, auditors are increasingly expected to:

  1. Interview participants and their families, not just staff
  2. Observe actual service delivery where possible
  3. Triangulate what documents say against what workers describe in interviews
  4. Look for evidence of genuine continuous improvement, not just completed forms

This means a perfectly formatted policy folder will not save you if participant interviews reveal that staff are unaware of its contents, or that a complaints process exists on paper but participants do not know how to use it.

Common Non-Conformance Findings

Document Area Typical Finding How to Fix It Before Audit
Incident register Incidents recorded but NDIS Commission notification timeframes not met or not documented Add a notification-date column; cross-check against Commission portal submission records
Worker screening Clearances recorded on intake but not tracked for expiry Build a renewal-date alert into your HR system or a simple spreadsheet with 60-day reminders
Behaviour support plans Plan present but not reviewed within the required period, or authorisation documents missing Audit every BSP for review date and match each restricted practice to a current state-authority document
Support plans Generic template with minimal participant-specific content Replace with individualised plans co-signed by participants; retain the draft and review history
Training records Completion certificates held for some staff but not all; no evidence of content relevance Maintain a central training matrix showing each worker's completions, dates, and certificate file references

A Practical Document Checklist for SIL Providers

Before your audit, work through the following list and mark each item as ready, in-progress, or missing:

  1. Policies covering rights, complaints, incidents, restrictive practices, safeguarding, and HR
  2. Service agreements for all current participants
  3. Complaints register with resolution records
  4. Incident register with Commission notification evidence
  5. NDIS Worker Screening clearance records — current and tracked for expiry
  6. Induction and ongoing training matrix with completion certificates
  7. Individualised support plans, dated and co-signed
  8. Individual risk assessments and emergency evacuation plans
  9. Health management plans for participants with complex health needs
  10. Behaviour support plans with current state-authorisation documents
  11. Restrictive practices register with instance-level records
  12. Quality management plan with evidence of completed improvement actions
  13. Insurance certificates valid at audit date
  14. Board or management oversight records (minutes, sign-offs)

Getting Audit-Ready

The most effective preparation is a structured internal audit — working through every document category above, identifying gaps, and assigning an owner and due date to each remediation action. Providers approaching mandatory registration for the first time in 2026 often find that their biggest gap is not a missing policy but the absence of evidence that the policy is actually being followed — completed forms, signed checklists, dated records of conversations with participants.

If you are building your document library from scratch or want a pre-verified template set, ndiscompliant.com.au offers a 74-document audit-ready SIL compliance kit that covers every item in the Core Module and the SIL-specific registration groups, formatted to meet current NDIS Commission expectations.

Whatever path you take, start the document review at least three months before your audit date. Non-conformances that are identified and corrected before an audit are always preferable to findings that require post-audit remediation under the Commission's corrective action process.

Important: This article provides general guidance about NDIS compliance requirements. It is not legal or professional advice. Requirements may change as the NDIS Commission updates its policies and Practice Standards. Always verify current requirements with the NDIS Quality and Safeguards Commission or a registered NDIS consultant before making compliance decisions.