What NDIS Auditors Are Actually Looking For
When an approved quality auditor arrives — whether for an initial registration audit or a renewal — they are not simply verifying that you have a policies folder on a shelf. They are testing whether your documented systems reflect what actually happens in practice, and whether every participant receives support that meets the NDIS Practice Standards. For SIL providers, the scrutiny is especially intense because the 2026 mandatory registration pathway has brought a larger cohort of providers into audit scope for the first time.
The list below covers the document categories auditors consistently examine. It is organised to match the structure of the NDIS Practice Standards so you can map your own document set against it before your audit date.
Core Module Documents
All registered NDIS providers — regardless of the supports they deliver — must demonstrate compliance with the Core Module. Auditors look for evidence in the following areas:
1. Rights and Responsibilities
- A current participant rights and responsibilities policy, signed off at board or executive level
- Evidence that participants have received and understood information about their rights (service agreements, welcome packs, accessible-format versions for people with communication needs)
- Copies of current service agreements for each active participant
2. Governance and Operational Management
- Organisational charts showing the chain of accountability
- Board or management meeting minutes demonstrating oversight of quality and safety matters
- A documented quality management framework or continuous improvement plan with evidence of actions completed
- Insurance certificates (public liability, professional indemnity) current at the audit date
3. Feedback, Complaints and Incidents
This is one of the highest-risk areas for non-conformance. Auditors will ask to see:
- Your complaints management policy and procedure
- The live complaints register — including closed complaints — with resolution timeframes recorded
- Your incident management policy, covering classification of incidents by severity
- The incident register, with evidence that reportable incidents were notified to the NDIS Commission within the required timeframes
- Post-incident review records demonstrating that systemic lessons were identified and acted upon
4. Human Resources and Staff Management
- NDIS Worker Screening clearance records for all workers in risk-assessed roles — this is non-negotiable
- Police check and reference check records for workers not yet in the screening pathway
- Induction records showing that every worker completed mandatory orientation before delivering supports
- Ongoing training records, particularly for NDIS Code of Conduct, abuse and neglect recognition, and manual handling
- Evidence that the NDIS Worker Orientation Module was completed by all relevant workers
- Performance review records and any disciplinary or conduct action files
SIL-Specific and High-Intensity Support Documents
SIL providers carry additional documentation obligations under the High Intensity Daily Personal Activities and the Specialist Behaviour Support registration groups. Auditors will drill into:
Individualised Support Plans
- A current, person-centred support plan for every participant — not a templated generic document
- Evidence the plan was co-produced with the participant and, where appropriate, their support network
- Dated review records confirming the plan is reviewed at least annually or when the participant's needs change significantly
- Goal-tracking records showing progress against participant goals
Risk Assessments
- Individual risk assessments addressing physical, environmental, health, and psychosocial risks
- Emergency and evacuation plans specific to each residence, with evidence of regular practice drills
- Health management plans where a participant has a complex health condition (epilepsy, dysphagia, PEG feeding, diabetes, etc.)
Restrictive Practices
For any provider using regulated restrictive practices, this document set is the most frequently cited area of non-conformance at audit:
- A current behaviour support plan prepared or reviewed by an NDIS-registered behaviour support practitioner
- State or territory authorisation documents for each regulated restrictive practice in use
- A restrictive practices register recording every instance of use, including duration and the worker involved
- Evidence the participant, their guardian, or nominee has been consulted about the practice and its reduction plan
- Reportable-conduct notifications to the NDIS Commission where applicable
The 2026 Strengthened Practice Standards — What Has Changed
The strengthened NDIS Practice Standards, which underpin the 2026 mandatory registration framework, place greater emphasis on participant outcomes and provider culture rather than paperwork compliance alone. In practical terms, auditors are increasingly expected to:
- Interview participants and their families, not just staff
- Observe actual service delivery where possible
- Triangulate what documents say against what workers describe in interviews
- Look for evidence of genuine continuous improvement, not just completed forms
This means a perfectly formatted policy folder will not save you if participant interviews reveal that staff are unaware of its contents, or that a complaints process exists on paper but participants do not know how to use it.
Common Non-Conformance Findings
| Document Area | Typical Finding | How to Fix It Before Audit |
|---|---|---|
| Incident register | Incidents recorded but NDIS Commission notification timeframes not met or not documented | Add a notification-date column; cross-check against Commission portal submission records |
| Worker screening | Clearances recorded on intake but not tracked for expiry | Build a renewal-date alert into your HR system or a simple spreadsheet with 60-day reminders |
| Behaviour support plans | Plan present but not reviewed within the required period, or authorisation documents missing | Audit every BSP for review date and match each restricted practice to a current state-authority document |
| Support plans | Generic template with minimal participant-specific content | Replace with individualised plans co-signed by participants; retain the draft and review history |
| Training records | Completion certificates held for some staff but not all; no evidence of content relevance | Maintain a central training matrix showing each worker's completions, dates, and certificate file references |
A Practical Document Checklist for SIL Providers
Before your audit, work through the following list and mark each item as ready, in-progress, or missing:
- Policies covering rights, complaints, incidents, restrictive practices, safeguarding, and HR
- Service agreements for all current participants
- Complaints register with resolution records
- Incident register with Commission notification evidence
- NDIS Worker Screening clearance records — current and tracked for expiry
- Induction and ongoing training matrix with completion certificates
- Individualised support plans, dated and co-signed
- Individual risk assessments and emergency evacuation plans
- Health management plans for participants with complex health needs
- Behaviour support plans with current state-authorisation documents
- Restrictive practices register with instance-level records
- Quality management plan with evidence of completed improvement actions
- Insurance certificates valid at audit date
- Board or management oversight records (minutes, sign-offs)
Getting Audit-Ready
The most effective preparation is a structured internal audit — working through every document category above, identifying gaps, and assigning an owner and due date to each remediation action. Providers approaching mandatory registration for the first time in 2026 often find that their biggest gap is not a missing policy but the absence of evidence that the policy is actually being followed — completed forms, signed checklists, dated records of conversations with participants.
If you are building your document library from scratch or want a pre-verified template set, ndiscompliant.com.au offers a 74-document audit-ready SIL compliance kit that covers every item in the Core Module and the SIL-specific registration groups, formatted to meet current NDIS Commission expectations.
Whatever path you take, start the document review at least three months before your audit date. Non-conformances that are identified and corrected before an audit are always preferable to findings that require post-audit remediation under the Commission's corrective action process.
Important: This article provides general guidance about NDIS compliance requirements. It is not legal or professional advice. Requirements may change as the NDIS Commission updates its policies and Practice Standards. Always verify current requirements with the NDIS Quality and Safeguards Commission or a registered NDIS consultant before making compliance decisions.