NDIS Provider Audit Preparation: A 2026 Checklist

Q: What is an NDIS compliance audit?

An NDIS compliance audit is an independent assessment of your organisation against the relevant NDIS Practice Standards, carried out by an Approved Quality Auditor. The auditor reviews your policies, procedures and evidence and, for higher-risk supports, visits your site and interviews workers and participants. The outcome supports your registration decision by the NDIS Quality and Safeguards Commission.

Q: How do I prepare for an NDIS audit?

Confirm whether you need a verification or certification audit, then map evidence to each applicable NDIS Practice Standard. Update your policies and procedures, risk management, and incident and complaints handling, confirm worker screening and participant records are current, and run a mock audit to find gaps before the Approved Quality Auditor arrives.

Q: What is a mid-term audit?

Certified providers usually have a mid-term audit partway through their registration period, often around 18 months in, so the Approved Quality Auditor can confirm you are still meeting the NDIS Practice Standards. Keeping evidence current year-round means a mid-term audit is far less stressful.

An NDIS audit sounds scary the first time, but it is really just someone checking that what you do matches what you say you do. Get your NDIS provider audit preparation right and the day itself is calm and even a little boring, which is exactly what you want. This 2026 checklist walks you through the NDIS Practice Standards, the two audit pathways, the evidence auditors actually ask for, and a practical pre-audit checklist you can work through before your Approved Quality Auditor arrives.

Short answer: Providers are assessed against the NDIS Practice Standards by an Approved Quality Auditor (AQA). Confirm whether you need a verification or certification audit, map evidence to every applicable standard, make sure your policies and procedures reflect what you really do, then run a mock audit to close gaps. Preparing before you apply is the single biggest thing that keeps costs and stress down.

What an NDIS compliance audit actually checks

When you register (or renew) with the NDIS Quality and Safeguards Commission, you are assessed against the NDIS Practice Standards by an independent Approved Quality Auditor. The auditor is not there to trip you up. They are checking that you have the right systems in place and, just as importantly, that those systems are actually used day to day. Evidence is the whole game: a policy on its own proves nothing, but a policy plus the records that show it in action proves everything.

If you are still at the registration stage, start with our guide on how to become a registered NDIS provider, then come back here to prepare for the audit itself.

Verification vs certification: which audit do you need?

Your registration groups decide your pathway. Lower-risk supports take the lighter verification route; higher-risk supports such as personal care and Supported Independent Living (SIL) take the more involved certification route.

Feature	Verification audit	Certification audit
Who it is for	Lower-risk supports (e.g. plan management, community participation, domestic assistance)	Higher-risk supports (e.g. personal care, SIL, Short Term Accommodation, behaviour support)
How it works	Single-stage desktop review of your documentation, done remotely	Two stages: a document review, then an on-site visit with worker and participant interviews
Standards assessed	Core module of the NDIS Practice Standards relevant to your groups	Core module plus any supplementary modules for your higher-risk supports
Mid-term check	Not usually required	Yes, a mid-term audit part way through your registration period
Effort to prepare	Lower, but evidence still matters	Higher, because auditors observe practice and speak to your people

If you deliver a mix of supports, you take the higher pathway that applies. When in doubt, confirm your groups and modules with the NDIS Commission before you engage an auditor.

Prepare before you apply, not after

The most common (and most expensive) mistake is applying first and building your compliance systems afterwards. That turns an audit into a scramble, and re-audits cost real money. Preparing your documentation and evidence before you apply keeps your audit shorter, cheaper and far less stressful. Treat the checklist below as work you do up front.

The pre-audit checklist

Work through each of these and, for every item, ask the auditor's favourite question: "Show me." If you cannot point to a document and the records that prove it is used, that is a gap to close now.

1. Policies and procedures

A current policy suite mapped to the NDIS Practice Standards that apply to your registration groups.
Version control on every document: owner, approval date and review date.
Procedures that describe what your team actually does, not generic templates you have never used.

2. Risk management

An organisational risk register that is reviewed and dated, not written once and forgotten.
Participant-level risk assessments for the supports you deliver.
Emergency and disaster management planning, including continuity of supports.

3. Incident and complaints handling

An incident management system with records of incidents, actions taken and lessons learned.
A complaints process participants can actually find and use, with a log of complaints and outcomes.
Evidence of reportable incident processes where they apply to your supports.

4. Worker screening and HR records

Current NDIS Worker Screening Check clearances for every worker who needs one.
Records of the NDIS Worker Orientation Module and any role-specific training.
Position descriptions, onboarding records and evidence of supervision.

5. Participant records

Service agreements and consent records for each participant.
Support plans that are person-centred, current and signed.
Progress notes and outcome records that show supports are actually delivered.

6. Evidence against each standard

A simple matrix listing each applicable NDIS Practice Standard and the exact documents and records that evidence it.
No orphan standards: every standard has at least one piece of proof attached.
A mock audit or internal self-assessment completed, with gaps assigned to an owner and a due date.

Skip the blank-page problem

Provider Scale OS gives you the policies, registers and compliance tools NDIS auditors look for, ready to tailor to your service. It is part of the free 30+ tool system, so you are not building your evidence pack from scratch.

Explore Provider Scale OS See how NDIS Growth works

What the on-site day looks like (certification)

For a certification audit, Stage 2 is on site. The auditor will walk your evidence, observe how supports are delivered where practical, and interview a sample of workers and participants. Nobody expects perfect recall, so brief your team beforehand: they should know where policies live, how to raise an incident, and how a participant makes a complaint. Calm, honest answers backed by records are exactly what an auditor wants to see.

Keep evidence current for your mid-term audit

Certified providers usually face a mid-term audit part way through the registration cycle, often around the 18-month mark. The providers who breeze through it are the ones who kept their registers, records and training current all year rather than cramming beforehand. Build a light monthly rhythm (review the risk register, check screening expiry dates, tidy participant files) and the mid-term audit becomes a formality.

Who this checklist is for

New providers preparing for their first verification or certification audit.
Growing providers adding higher-risk supports and moving from verification to certification.
Registered providers with a renewal or mid-term audit coming up who want to tidy their evidence.

If you are still setting up the business itself, our guide on how to start an NDIS business covers the foundations, and Provider Scale OS gives you the compliance tools to keep your evidence audit-ready.

About the author

Provider Scale is the NDIS growth partner built by real operators. We run Enrichment Care, a registered NDIS provider with a $2M run-rate, so we have prepared for and passed NDIS audits ourselves. Meet the team.

Frequently asked questions

What is an NDIS compliance audit?

It is an independent assessment of your organisation against the relevant NDIS Practice Standards, carried out by an Approved Quality Auditor. They review your policies, procedures and evidence and, for higher-risk supports, visit your site and interview workers and participants. The result supports the NDIS Commission's registration decision.

How do I prepare for an NDIS audit?

Confirm your pathway, then map evidence to every applicable Practice Standard. Update your policies and procedures, risk management, and incident and complaints handling, confirm worker screening and participant records are current, and run a mock audit to close gaps before your auditor arrives.

What is the difference between a verification and certification audit?

Verification is a lower-risk desktop review of your documentation. Certification is a two-stage audit for higher-risk supports like personal care and SIL, and includes an on-site visit with worker and participant interviews.

What is a mid-term audit?

Certified providers usually have a mid-term audit part way through their registration period, often around 18 months in, so the auditor can confirm you are still meeting the standards. Keeping evidence current year-round makes it far less stressful.

What happens if I fail an NDIS audit?

Auditors record non-conformities by severity. Minor issues usually come with a corrective action period to fix and provide evidence. Serious or unresolved non-conformities can delay or stop registration. Preparing evidence before the audit is the simplest way to avoid them.

This checklist is general information, not legal or compliance advice. Always check current requirements with the NDIS Quality and Safeguards Commission.