NDIS Compliance Manual for Providers: What's Inside (And Why DIY Versions Fail)

When NDIS providers talk about "the compliance manual," they usually mean different things. Some mean a single large Word document covering every policy in 200 pages. Some mean a binder of separate documents. Some mean a folder structure on a shared drive. The format doesn't matter — the structure does. A usable NDIS compliance manual for providers is organised around the NDIS Practice Standards Core Module's four divisions, with separate sections for the operational layers below them. Here's the section-by-section structure we use in the Complete SIL Kit, and the three ways we see DIY manuals fail.

What an NDIS compliance manual actually is

An NDIS compliance manual is the complete, version-controlled, indexable set of documents that demonstrates how your operation meets the Practice Standards. For an SIL provider, that's typically:

• 20-25 policies (principles — what we do)
• 20-25 forms & templates (operational tools — what staff fill out)
• 8-10 registers (live evidence — what proves we did it)
• 4-6 guides & checklists (implementation aids — audit evidence checklist, registration walkthrough, induction checklist)

That is the size of set a small SIL operation ends up with. That's the size that survives certification audit. Smaller "manuals" usually fail Test 7 (no implementation record) from our audit-mapped documents checklist.

Section 1: Governance & organisation

The cover layer of the manual. Auditors open this section first to understand who you are and how you're structured. Required contents:

• Governance framework or policy (board / director / management structure, decision authority)
• Organisational chart with reporting lines and key personnel
• Key Personnel Suitability Assessment for each director, manager, and authority-holder
• Legal entity registration documents (ASIC, ABN, incorporation)
• Insurance certificates (professional indemnity, public liability, workers compensation)
• Statement of services / scope of supports

Section 2: Rights & responsibilities

Practice Standards Core Module Outcomes 1.1-1.5. The participant-facing layer of the manual. Required policies:

• Person-Centred Support Policy (1.1)
• Cultural Safety Policy (1.2)
• Privacy & Confidentiality Policy + Plain-English Privacy Notice (1.3)
• Independence & Informed Choice Policy + Dignity of Risk Assessment template (1.4)
• Complaints & Feedback Policy + form (1.5)
• Safeguarding (VANED) Policy (1.5)
• Advocacy Information Sheet for participants
• Participant Rights Statement

For the deeper detail on each Outcome, our SIL Audit Survival Guide walks through what auditors look for in each.

Section 3: Provider governance & operational management

Practice Standards Core Module Outcomes 2.1-2.6. The heaviest section of the manual, and the one where DIY manuals fail most often. Required:

This is roughly 25 documents on its own. Our 5 reasons SIL providers fail audits article shows how Outcomes 2.2 and 2.3 in particular trip up DIY manuals.

Section 4: Provision of supports

Practice Standards Core Module Outcomes 3.1-3.4. The day-to-day operational layer. Required:

• Access to Supports Policy (3.1)
• Consent to Collect Information form (3.1)
• Consent to Share Information form (3.1)
• Support Delivery Policy (3.2)
• SIL Service Agreement template (3.2)
• Participant Support Plan template (3.2)
• Shift Notes / Progress Notes template (3.2)
• Shift Handover Procedure (3.2)
• Document Control Register (3.3)
• Transition Policy (3.4)

The daily progress notes side of Outcome 3.2 is where the Notes Rewriter is most useful — it rewrites support-worker shift notes into Practice-Standards-aligned language. Use it as the staff-training tool for note-writing.

Section 5: Environment & safety (SIL-specific)

Practice Standards Core Module Outcomes 4.1-4.5. The SIL-specific section that auditors check on the physical premises walk-through. Required:

• Safe Environment Policy (4.1)
• SIL House Safety Inspection Checklist — 20-item (4.1)
• Participant Money & Property Policy (4.2)
• Participant Money Register (4.2)
• Medication Management Policy (4.3)
• Medication Administration Record (MAR) (4.3)
• Restrictive Practices Register (4.3)
• Infection Prevention & Control Policy (4.5)

Section 6: Records & registers

The last section of the manual — the live-evidence layer. Without populated registers, the first 5 sections look like aspirational documents. With them, the manual demonstrates an operation that's been running. The 10 registers:

1. Incident Register — dates, classifications, root-cause analysis, corrective actions, closure status
2. Complaints Register — complaints, investigations, resolutions, improvement actions
3. Continuous Improvement Register — ongoing entries showing improvements driven by feedback, incidents, audits
4. Worker Screening Register — every staff member's clearance number, issue date, expiry date
5. Training Register — every staff member's training history
6. Code of Conduct Training Register — signed acknowledgements
7. Risk Register — current risks, likelihood, impact, controls, review dates
8. Document Control Register — every document with version, approval date, review date
9. Participant Money Register — transactions for any participant whose money you assist with
10. Restrictive Practices Register — every restrictive practice with authorisation, reporting, review

The three ways DIY manuals fail audit

1. Missing the registers section. DIY manuals copy templates for policies (easy to find online) but skip the registers (harder to find as templates). Without populated registers, the policies look unused. This is the single most common DIY failure.

2. Generic templates pasted in unchanged. Auditors recognise templates downloaded from competitor websites — they've seen them hundreds of times. A template that still says [YOUR ORGANISATION NAME] in three places, or that describes a fictitious organisation different from yours, is worse than no document. Test 3 (customisation) from our audit-mapped documents framework catches this.

3. No cross-references between sections. The Outcomes don't live in isolation. An incident reported under Section 3 (Outcome 2.4) might trigger a complaint (Outcome 1.5) and a risk-register update (Outcome 2.2). A manual where each section was written in isolation fails the cross-reference test. Our manual is built with the cross-reference map drawn first — every policy explicitly references the forms and registers it depends on.

The cheapest way to assemble one well

You have three options for getting an NDIS compliance manual built:

1. Hire a consultant. $4,400–$8,000+ for a documentation pack, billed at 40-80 hours of writing time at $100-150/hour. Highest cost, but you get a consultant who can also stay on for audit-day backup. Our consultant vs DIY guide walks through when this is the right call.
2. Write it yourself from scratch. The cheapest cash cost, but 80-150 hours of writing time and significant risk of failing the three DIY-failure modes above. Most new providers underestimate the volume of work by 3-5x.
3. Buy a structured document kit. $297 for our Complete SIL Kit, which is the 136-document compliance manual in the structure described above. You customise it with your details (4-8 hours), train staff on it (8-10 weeks at 30 minutes per fortnight), and operationalise the registers (3-6 months of live use).

For most small SIL providers (1-50 staff) the structured kit is the right call: 92% cheaper than a consultant, dramatically faster than writing from scratch, and pre-built to avoid the three DIY failure modes. The 48-hour fix-or-refund means there's no risk in checking the kit's structure against the section-by-section layout above before committing.

For the broader audit preparation timeline, see our NDIS quality audit preparation 6-month roadmap. For the audit day itself, see the audit-day checklist.