An NDIS audit can feel daunting, but providers who prepare year-round — rather than scrambling in the weeks before — consistently report it as a smooth experience. This guide walks you through what NDIS auditors look at, how to organise your documentation, and how to build a culture of continuous compliance.
What is an NDIS Audit?
NDIS audits are conducted by approved quality auditors under the oversight of the NDIS Quality and Safeguards Commission. All registered NDIS providers must be audited to demonstrate they meet the NDIS Practice Standards. The type of audit — verification or certification — depends on the registration groups you hold and the risk level of the supports you deliver.
- Verification audits are desktop reviews of documentation. They apply to lower-risk support categories such as assistive technology and home modifications.
- Certification audits involve on-site visits, interviews with participants and staff, and a thorough review of your systems and processes. They apply to higher-risk supports including personal care, specialist disability accommodation, and behaviour support.
The NDIS Practice Standards: What Auditors Check
The NDIS Practice Standards are organised into four core modules and several supplementary modules. For most providers, the four core modules are the focus:
- Rights and responsibilities — Do participants understand their rights? Are they free from abuse, neglect, and exploitation?
- Governance and operational management — Do you have clear policies, incident management processes, and a risk management framework?
- The provision of supports — Are care plans person-centred? Are supports delivered in line with each participant’s goals?
- The support provision environment — Is your physical environment safe? Are food, medication, and hygiene standards maintained?
Documentation Auditors Commonly Request
Being able to produce the right documents quickly can make the difference between a clean audit and a finding. Build a document register that includes at a minimum:
- Participant service agreements, signed and current
- Individualised care plans and support plans for each participant
- Progress notes and shift records showing what support was actually delivered
- Incident reports and evidence of follow-up actions
- Complaint register and evidence that complaints were resolved
- Staff qualifications, police checks, and NDIS Worker Screening clearances
- Staff induction records and training logs
- Your organisation’s policies and procedures (up to date)
- Evidence of participant feedback mechanisms
12-Month Audit Readiness Calendar
The best approach is to treat every month as audit month. Here is a practical rhythm:
- Monthly: Review and chase any expiring worker compliance documents (WWCC, police checks, NDIS screening). Check that all participants have current signed service agreements.
- Quarterly: Review care plans and update them to reflect any changes in participant goals or needs. Review your incident register and check all incidents have been closed properly.
- Annually: Full policy and procedure review. Update your risk register. Complete staff training refreshers. Run a mock internal audit.
Common Audit Findings — And How to Avoid Them
Based on patterns from NDIS Commission published data, the most common findings include:
- Outdated service agreements — Set calendar reminders 30 days before each agreement expires and use software to track renewal dates automatically.
- Missing or incomplete incident reports — Require all incidents to be reported within 24 hours. Train staff on what constitutes a reportable incident.
- Care plans not reflecting current goals — Schedule a care plan review at every participant meeting and document it. Plans should be living documents, not set-and-forget.
- Expired worker checks — Maintain a centralised compliance register for all staff. Use automated alerts when checks are approaching expiry.
How Software Makes Audit Readiness Easier
Manual spreadsheets are the enemy of audit readiness. A purpose-built NDIS platform like Maxpilot gives you a single source of truth: participant records, signed agreements, progress notes, incident reports, and staff compliance documents — all in one place, all searchable in seconds. When an auditor asks for six months of progress notes for a specific participant, you can produce them in under a minute.
Audit readiness isn’t something you do before an audit. It’s how you run your organisation every day.
Key Takeaways
- Know which audit type applies to your registration — verification or certification.
- Build a documentation register covering all NDIS Practice Standards evidence requirements.
- Use a monthly, quarterly, and annual compliance rhythm so you are always ready.
- Invest in software that centralises your records so nothing falls through the cracks.