What is an NDIS Audit?
An NDIS audit is an independent assessment of a provider’s compliance with the NDIS Practice Standards. It is conducted by an approved Quality Auditor and is required for initial registration and every renewal cycle (typically every three years). For a detailed breakdown of each standard, see our complete guide to NDIS Practice Standards.
The NDIS Quality and Safeguards Commission oversees the audit process. It sets the standards, approves the auditors, and makes final decisions about registration outcomes. Providers do not choose their auditor, the NDIS Commission allocates one based on your registration groups and location.
The audit assesses whether your organisation has the systems, processes, documentation, and culture to deliver supports safely and in line with participant rights. It is not just a paperwork check, it is a comprehensive review of how your organisation operates.
NDIS Audit Guide: Understanding the Two Audit Types
Not all NDIS audits are the same. The type of audit you face depends on the registration groups you hold and the complexity of the supports you deliver. This section of our NDIS audit guide explains both types so you can prepare accordingly.
Verification Audit
A verification audit applies to lower-risk registration groups. It is primarily a document and evidence review, and most verification audits do not require an on-site visit. The auditor reviews your policies, procedures, and supporting evidence against the applicable NDIS Practice Standards modules.
Verification audits are faster and less resource-intensive than certification audits. They focus on the Rights and Responsibilities and Governance and Operational Management modules at a document level. Providers delivering lower-risk supports such as assistive technology, home modifications, or support coordination may qualify for verification in many circumstances.
Certification Audit
A certification audit applies to higher-risk and specialist supports. This includes Supported Independent Living (SIL), behaviour support, high intensity daily personal activities, specialist disability accommodation, and early childhood supports. Certification audits include an on-site assessment and staff interviews.
The certification process is significantly more comprehensive. Auditors assess all relevant NDIS Practice Standards modules for your registration groups, interview staff and participants, and review a much broader range of evidence. Preparation requires more time, more documentation, and more organisational coordination.
Which Audit Do You Need?
Your audit type is determined by your registration groups. The NDIS Commission publishes guidance on which groups require verification versus certification. As a general rule: if you deliver supports that involve direct physical contact, complex behaviour management, or 24/7 care environments, you are likely subject to a NDIS certification audit. This NDIS audit guide covers both types in detail below.
If you are unsure which audit type applies to your specific registration groups, the NDIS Commission website provides a full registration group table. You can also access NDIS registration support from HCPA to clarify your obligations before beginning the process. Our NDIS provider registration requirements article also walks through the full registration landscape.
The NDIS Audit Process: Step by Step
Understanding the audit process from start to finish removes a significant amount of uncertainty. This NDIS audit guide walks through how the process typically unfolds for a registration renewal.
- Application submitted to the NDIS Commission. You initiate the renewal process through the NDIS Commission portal. The Commission reviews your application and allocates an approved Quality Auditor.
- Auditor allocated. You do not select your auditor. The NDIS Commission assigns one based on your registration groups and location. Once allocated, the auditor contacts you to begin scheduling.
- Audit scheduled and scoped. For verification audits, you receive a document request list. For certification audits, you also coordinate on-site visit dates and staff interview schedules.
- Audit conducted. Verification audits are completed via document review. Certification audits include site visits, staff interviews, and participant file reviews over one or more days.
- Findings report issued. The auditor provides a report classifying findings as conformant, non-conformant, or requiring corrective action. The report is submitted to the NDIS Commission.
- NDIS Commission decision. The Commission reviews the audit report and makes a decision about your registration, whether renewal, conditional renewal, or refusal.
What NDIS Auditors Look For: An NDIS Audit Guide Checklist
Auditors assess compliance across the NDIS Practice Standards, which cover 28 modules grouped into four categories: Core module, Supplementary modules, Module for specialist support, and the Specialist support for early childhood module. Every provider is assessed against the Core module. Additional modules apply based on your registration groups. For a detailed breakdown of what each standard requires, see our NDIS practice standards explained article.
Common areas assessed across all audit types include:
- Governance documentation and evidence of a nominated responsible person
- Worker screening records – every worker must hold a current NDIS Worker Screening Check
- Incident management records and SIRS (Serious Incident Reporting Scheme) compliance
- Complaints management system – accessible, documented, and actively used
- Rights and responsibilities documentation – participant agreements, welcome packs, decision-making guides
- Staff training records – completion, currency, and competency evidence
- Participant consent and service agreements
- Quality improvement evidence – documented review cycles, policy update records
- Module-specific documentation – for example, positive behaviour support plans for behaviour support registration groups
Using an NDIS Autonomous Audit Platform, providers can monitor compliance against these exact requirements continuously, not just in the weeks before an audit.
The 5 Most Common NDIS Audit Failures
Based on experience across hundreds of NDIS providers, these are the failure points that consistently appear in audit findings. Every issue listed in this NDIS audit guide is entirely preventable with the right systems in place.
- Expired worker screening checks. Worker Screening Checks must remain current for every worker delivering NDIS supports. Providers with large workforces often lose track of expiry dates, leading to critical non-conformities.
- Missing or outdated incident reporting records. Incidents must be documented and reported in line with SIRS requirements. Gaps in incident records, or records that do not meet the required detail level, are a frequent finding.
- Incomplete or expired staff training records. Mandatory training (including orientation, safeguarding, and role-specific modules) must be documented with completion dates. Expired training, particularly first aid and manual handling, is a common gap.
- Policies not reviewed against current standards. The NDIS Practice Standards are updated periodically. Providers who do not conduct regular policy reviews are often found to have documentation that references outdated requirements.
- Participant consent documentation gaps. Consent must be obtained, documented, and regularly renewed for specific supports. Missing consent records, or consent not obtained in an accessible format, consistently appears in audit findings.
Each of these failures is identifiable months before an audit using continuous compliance monitoring. Audit Pilot’s NDIS Autonomous Audit Platform flags gaps in real time, giving providers time to remediate before auditors arrive. That is how our 99.8% audit pass rate is maintained across our provider base. For a deeper analysis of common compliance blind spots, read our article on the 5 NDIS compliance gaps providers miss.
NDIS Audit Guide: How to Prepare Effectively
The traditional approach to NDIS audit preparation involves a six-week intensive effort in the lead-up to the audit: engaging a consultant, scrambling to locate documentation, updating policies, chasing worker screening records, and hoping nothing critical is missing. This approach is reactive, stressful, and expensive. Specialist NDIS compliance consultants typically charge significant fees per engagement, and those costs compound every audit cycle.
There is a better way. The most effective audit preparation is not preparation at all, it is always-on compliance monitoring. Providers who maintain continuous compliance do not face an audit scramble. When the auditor arrives, everything is already in order. Our analysis of the hidden cost of quarterly audits shows exactly how much reactive compliance approaches cost over time.
Audit Pilot is an NDIS Autonomous Audit Software platform designed specifically for NDIS providers. It monitors your compliance posture continuously across all relevant Practice Standards, flags gaps as they appear (not six weeks before your audit), and provides a clear view of your readiness status at any time. Setup takes approximately 10 minutes, and the platform replaces reactive consulting fees with continuous, always-on compliance coverage.
To understand where your organisation stands right now, book a free NDIS compliance gap assessment. It provides a clear picture of your current audit readiness, with no obligation.
What Happens If You Fail an NDIS Audit?
Failing an NDIS audit, or receiving significant non-conformities, does not automatically mean registration cancellation. The NDIS Commission’s response is proportional to the severity and nature of the findings. This NDIS audit guide covers all three severity levels so you know what to expect.
- Low severity: Minor documentation gaps or process weaknesses. Typically addressed through a corrective action plan with a reasonable timeframe for rectification.
- Moderate severity: Systemic issues or patterns of non-compliance. May result in conditions placed on registration, requiring evidence of remediation within a specified period.
- High severity: Significant risk to participant safety, rights, or wellbeing. Can result in registration suspension or, in the most serious cases, cancellation.
If non-conformities are identified, providers are typically given an opportunity to submit a corrective action plan. The NDIS Commission reviews the plan and monitors implementation. Timeframes for rectification vary depending on severity, from a few weeks for minor issues to several months for systemic concerns.
The most important thing to understand is that high-severity findings are almost always the result of systemic gaps that built up over time, not single incidents. An NDIS Autonomous Audit Platform that monitors your organisation continuously prevents these gaps from becoming audit failures. To understand how this differs from periodic consultant reviews, see our comparison of autonomous auditing vs traditional audits.
NDIS Audit Costs: What to Budget
NDIS audit costs are charged by the approved Quality Auditor, not the NDIS Commission. Costs vary based on your organisation’s size, the number of registration groups, service complexity, and the audit type.
Typical auditor fees: Verification audits for small providers may cost a few thousand dollars. Certification audits for larger organisations with multiple complex registration groups can run to tens of thousands of dollars. The NDIS Commission provides guidance on reasonable audit costs, but there is variation in the market.
Internal preparation costs: This is where the real expense lies for most providers. If you are relying on a reactive preparation model with consultants, overtime staff hours, and emergency documentation reviews, your total audit cost climbs rapidly. This NDIS audit guide recommends treating compliance as an ongoing investment rather than a periodic expense.
The Audit Pilot alternative: Audit Pilot continuously monitors your compliance so you are always audit-ready. Over a three-year registration cycle, continuous monitoring represents a fraction of what providers typically spend on reactive consultant fees and last-minute audit preparation. Book a demo to see how the platform works and discuss the right fit for your organisation.
Ready to Pass Your Next NDIS Audit?
As this NDIS audit guide has shown, audits reward providers who maintain consistent, documented compliance, not those who scramble hardest in the final weeks. The providers who pass every audit, on the first attempt, without the stress and expense of reactive preparation, are the ones who treat compliance as an ongoing operational practice rather than a periodic event.
Audit Pilot exists to make that possible for every registered NDIS provider, regardless of size or support complexity. Our NDIS Autonomous Audit Software monitors your compliance posture continuously, flags gaps before they become findings, and gives you a clear view of your audit readiness at any time.
Over 800 NDIS providers trust Audit Pilot to keep them compliant and audit-ready. Book a free NDIS compliance gap assessment today, or explore the full platform at Audit Pilot’s NDIS Autonomous Audit Platform.
Want to pass every NDIS audit with confidence? See how Audit Pilot’s NDIS Autonomous Audit Platform keeps you audit-ready 24/7 across all 28 Practice Standards, or talk to our team about your compliance needs.
Related Resources
These guides and tools help providers prepare for NDIS audits and maintain continuous compliance between assessment cycles.
- NDIS Audit Readiness – learn how to build and maintain audit-ready compliance evidence across all 28 Practice Standards.
- NDIS Gap Analysis Checklist – identify compliance gaps before your next audit with a structured checklist covering every standard.
- NDIS Compliance Management Software – see how continuous compliance management replaces reactive audit preparation.
For the official audit and registration framework, visit the NDIS Quality and Safeguards Commission and review the current NDIS Practice Standards.
