Audit & Compliance · 7 min read · 2026-04-27

NDIS Evidence Binder Checklist: Audit-Ready in 7 Days

Your evidence binder is the physical (or digital) collection of documents that proves your compliance to auditors. From our Enrichment Care audits and hundreds of provider consultations, we can tell you this: providers who get auditor approval fastest are those with organized, complete evidence binders. Auditors typically request 5-10 specific documents during an audit, and if you can produce them within 24 hours, it signals you're organized and compliant. If you fumble around looking for files, auditors become skeptical about your overall operations. This checklist walks you through every document an auditor will ask to see, organized by Practice Standards module. Use it to build your binder now and avoid stress on audit day.

Sam Tsen

Founder, Provider Scale · Director, Enrichment Care (live NDIS provider)

Module 1 Evidence: Governance and Leadership

Auditors will ask for: (1) Organizational chart showing reporting lines and decision-making authority. (2) Board/leadership meeting minutes from the last 12 months (if applicable to your structure). (3) Complaints register with at least 5 recent complaints (if you have fewer than 5, you may have a disclosure issue—you need to document complaints when they happen). (4) Evidence of complaint resolution—pick 2 complaints and show the outcome. (5) Feedback survey results or feedback meeting notes from the last 12 months. (6) Documentation of how feedback influenced your service (a change log is perfect—'Feedback received: participants wanted longer breaks. Action taken: revised shift structure to include 15-minute breaks. Date implemented: March 2026'). (7) Policy handbook (current version, with version date). (8) Quality improvement plan or annual review document showing service improvements. Keep these organized in a folder labeled 'Governance,' physical or digital.

Module 2 Evidence: Service Delivery

Auditors will ask for: (1) 5 current participant files with intake notes, support plans, and progress notes. (2) Evidence of participant goal-setting and review—in support plans, do you see the participant's NDIS goals reflected and tracked? (3) Training records for support workers showing they're trained on participant-specific needs. (4) Supervision or performance feedback records for support staff. (5) Policy on service delivery, intake, and support planning. (6) Evidence of participant feedback or satisfaction surveys. (7) Examples of support plan reviews showing modifications based on participant progress or feedback. These files should demonstrate that participants' NDIS goals drive your service delivery.

Module 3 Evidence: Participant Safeguarding

Auditors will ask for: (1) Worker screening records for all active staff—Blue Card checks, reference checks, dated and documented. (2) Current list of all active support workers with screening status and expiry dates. (3) Allegation register with at least 2-3 examples (if fewer, ensure you're actively soliciting reports). (4) For each allegation: investigation documentation, outcome, action taken, NDIS Commission notification (if applicable). (5) Safeguarding policy covering worker screening, allegation management, and abuse prevention. (6) Staff training records on safeguarding and mandatory reporting (every staff member). (7) Code of conduct or staff handbook signed by all staff. Auditors spend significant time on this module, so evidence must be thorough and current.

Module 4 Evidence: Operational Management

Auditors will ask for: (1) 5 recent invoices cross-checked against support plans and timesheets (showing invoices match approved supports and actual delivery). (2) Invoicing policy and procedure. (3) Staff records (one for each active staff member): employment contract, job description, induction completion, training records. (4) Payroll records for last 3 months (showing staff are paid according to agreements). (5) Financial records showing income and expenses for last 12 months. (6) Records management policy (how you store and protect participant information). (7) Backup and disaster recovery documentation (how you recover if systems fail). (8) Insurance certificate(s) covering professional indemnity and public liability. If you use ShiftCare or Lumary, evidence can be exported directly from these systems.

Building Your Physical or Digital Binder

If physical: use a 4-5 page folder with dividers for each module. Label each section clearly. Include an index at the front so auditors can navigate quickly. If digital: create a folder structure on your computer or cloud storage (Google Drive, Dropbox) mirroring the modules. Use clear filenames: 'Module 1 - Complaints Register 2026' or 'Module 3 - Worker Screening Records.' Both work, but auditors increasingly prefer digital (easier to search and copy). Include a README file listing what's in each folder so auditors know exactly what you've included. Keep evidence current: update your complaints register monthly, refresh screening records quarterly, and ensure staff records are up to date with current training.

Week 1: Gather all existing documents and organize by module. Identify gaps (missing files, outdated records). Week 2: Fill gaps—conduct missing screening checks, update policies, gather missing documentation. Week 3: Create binder structure (physical or digital) and populate with documents. Week 4: Review binder completeness against this checklist. Test by asking: 'Can I produce any auditor request within 24 hours?' If yes, you're ready. Week 5-8: Maintain binder currency—update registers monthly, refresh files as changes occur. By your Certification audit, you'll have a complete, organized, audit-ready evidence binder. This removes stress and signals competence to auditors.