Get the kit — A$297

Notes & records

NDIS group and centre based provider: documentation checklist (2026)

NDIS group and centre based providers must maintain documentation covering participant support plans, incident and complaint records, staff qualifications, restrictive practice authorisations, and risk assessments aligned to the NDIS Practice Standards. From 2026, the strengthened registration framework raises the bar — providers need audit-ready records across governance, safeguarding, and service delivery before their next quality audit.

Why documentation matters more in 2026

Group and centre based supports sit under a registration group that carries higher inherent risk than many other NDIS support types. Participants may be non-verbal, have complex support needs, or spend extended hours in a shared environment — all of which draw closer scrutiny from the NDIS Commission and its approved quality auditors.

From 2026, the strengthened NDIS Practice Standards and mandatory registration changes increase documentation obligations for providers in this space. Auditors are specifically directed to look for evidence that policies are not merely on paper but are actively implemented, reviewed, and understood by frontline staff. Gaps in documentation are the most common finding in certification audits, and they can delay or block your registration renewal.

This checklist organises the documents you need into eight categories. Work through each section systematically before your next audit or registration renewal.

1. Governance and organisational management

  • Current organisational chart showing lines of accountability and the responsible person (key personnel) named on your NDIS Commission registration.
  • Board or governing body meeting minutes demonstrating oversight of quality and safeguarding matters — at minimum annually reviewed.
  • Conflict of interest register, updated and signed off by the most senior officer at least annually.
  • Financial management policy confirming participant funds are not commingled with operational accounts (where the provider also manages funds).
  • Continuous improvement register or log, showing how complaints, incidents, and audit findings feed back into service improvement.
  • Risk register covering organisational, service delivery, and WHS risks, with nominated owners and review dates.

2. Staff qualifications, screening, and training records

Every worker who delivers group or centre based supports must be screened and sufficiently qualified. Your documentation folder must include:

  • Current NDIS Worker Screening Check clearances for all workers, including volunteers in regulated roles — stored with expiry dates tracked.
  • Police check records where required by state or territory legislation (some roles require both screening check and police check).
  • Evidence of completed NDIS Worker Orientation Module ("Quality, Safety and You") for each worker.
  • Certificates or completion records for mandatory training: manual handling, emergency evacuation, infection control, and any behaviour support-specific training required by the participant's plan.
  • First aid and CPR certificates for a sufficient number of staff on duty at each session, meeting your duty of care obligations.
  • Position descriptions for each role, reflecting actual duties and supervision requirements.
  • Supervision records — noting frequency, format (group or individual), and topics covered, especially for staff supporting participants with complex needs.

3. Participant support documentation

This is the core of what auditors examine. For each participant receiving group or centre based supports you must hold:

  1. Service agreement — signed by the participant or their authorised representative, specifying the supports to be delivered, the price, and the participant's rights under the NDIS Code of Conduct.
  2. Individual support plan or centre-specific support profile — describing how supports will be delivered in the group setting, personalised goals, and communication needs.
  3. Risk assessment — identifying risks specific to the participant in a group or shared environment and the controls in place.
  4. Emergency and evacuation plan — tailored to the participant's mobility and communication needs, with a copy accessible at the centre.
  5. Health action plan or management plan (where applicable) — for participants with epilepsy, diabetes, complex health conditions, or known allergy risks.
  6. Behaviour support plan — where a participant has one, ensure it is current, signed by an NDIS-registered behaviour support practitioner, and that all staff supporting the participant have been trained in its implementation.
  7. Consent records — covering photography, sharing of information with families or other providers, and any activities that carry elevated risk (water activities, community outings, etc.).
  8. Daily/session progress notes — contemporaneous, factual, and signed off by the worker present.

4. Restrictive practice documentation

Restrictive practices in group and centre based settings attract the highest level of scrutiny. If any participant's support involves a regulated restrictive practice, you must hold:

  • Current authorisation from the relevant state or territory authority (each jurisdiction has its own authorisation body — confirm the correct body for your state).
  • A copy of the behaviour support plan developed by a registered behaviour support practitioner that includes the restrictive practice as a last resort, with documented proactive strategies.
  • Monthly (or more frequent, as required) reporting to the NDIS Commission on restrictive practice use, via the Commission's portal.
  • Evidence of participant and/or guardian consent or guardianship order, as applicable.
  • Records of staff training on the specific restrictive practice, including when that training was completed.
  • Reduction plan — showing how the provider is working toward eliminating or reducing the restrictive practice over time.

5. Incident management records

The NDIS Commission's incident management rules require providers to have a documented system, not merely a form. Your incident folder should contain:

  • Incident management policy, reviewed at least annually.
  • Individual incident reports for every reportable incident, submitted to the NDIS Commission within the required timeframes (24 hours for priority incidents, five business days for other reportable incidents).
  • Internal incident register showing all incidents — not only those reportable to the Commission — with dates, nature of incident, actions taken, and outcomes.
  • Root cause analysis or review records for serious incidents, demonstrating that the provider has investigated and taken corrective action.
  • Evidence that participants and their support network were notified where required.

6. Complaints management records

  • Complaints management policy — accessible to participants in plain English (and alternative formats where needed).
  • Complaints register covering the date received, nature of the complaint, steps taken to resolve, outcome, and timeframe.
  • Evidence that participants were informed of their right to complain to the NDIS Commission if not satisfied with your internal resolution.
  • Annual review of complaint trends, with documented actions taken to prevent recurrence.

7. Physical environment and equipment records

For centre based providers, the physical environment is part of the audit. Document:

  • Premises safety inspection records — at least annually, with a qualified inspector where fire, electrical, or structural safety is involved.
  • Evacuation diagram, posted in the centre and tested with staff (fire drill records).
  • Accessible equipment maintenance logs — hoists, wheelchairs, sensory equipment, therapy aids — with service dates and any out-of-service periods noted.
  • Vehicle safety records if transporting participants to and from the centre, including driver licence checks and vehicle roadworthy records.
  • Infection control procedures — particularly relevant since the pandemic underscored the risks of communal settings.

8. Quality auditor expectations: common non-conformances

Based on publicly available NDIS Commission guidance, the most frequent documentation findings in group and centre based settings include:

  • Behaviour support plans that are out of date or not yet trained to staff delivering the supports.
  • Restrictive practice reporting missing from the Commission portal despite practices being in use.
  • Incident reports that describe the event but lack evidence of investigation or corrective action.
  • Service agreements that have not been updated after a participant's NDIS plan was reviewed.
  • Staff training records that cannot be located or are incomplete for existing employees.
  • Complaints register not maintained — providers relying on memory rather than a documented log.

Address each of these before your audit window opens. Auditors assess evidence of practice, not just the existence of a policy document.

Pulling it together

A practical approach is to create a participant-level folder (physical or digital) for each person and an organisational-level folder for governance, staffing, and facility documents. Conduct an internal self-audit at least six months before your registration renewal date, using your checklist as a scoring tool.

If you are building your documentation suite from scratch or identifying significant gaps, ndiscompliant.com.au offers a 136-document audit-ready SIL and group-provider compliance kit that covers the full Practice Standards across all eight categories above — which can substantially reduce the time needed to reach audit readiness.

The 2026 strengthened framework is not a bureaucratic hurdle — it reflects the genuine risks that arise when vulnerable people are supported in group environments. Thorough documentation is the evidence that your organisation takes those risks seriously and acts on them every day.

Important: This article provides general guidance about NDIS compliance requirements. It is not legal or professional advice. Requirements may change as the NDIS Commission updates its policies and Practice Standards. Always verify current requirements with the NDIS Quality and Safeguards Commission or a registered NDIS consultant before making compliance decisions.

Frequently asked questions

What registration group covers group and centre based supports under the NDIS?

Group and centre based supports fall under NDIS registration group 0136 (Group and Centre Based Activities). Providers must be registered and are subject to certification audits against the relevant NDIS Practice Standards, including the High Intensity Daily Personal Activities standards where applicable.

How long must a group and centre based provider retain participant records?

The NDIS Practice Standards require records to be retained for a minimum of seven years from the date they were created, or seven years after a participant turns 18 if they were a child at the time. Some state and territory laws impose longer retention periods — always check the longest applicable requirement for your jurisdiction.

Do all workers in a group setting need an NDIS Worker Screening Check?

Yes. Any worker who delivers NDIS supports or who has more than incidental contact with NDIS participants must hold a current NDIS Worker Screening Check clearance. This applies to employees, contractors, and volunteers in regulated roles. Providers must not allow uncleared workers to commence work in a regulated role.

What is the reporting timeframe for a priority reportable incident in a group setting?

Priority reportable incidents — including the death of a participant, abuse, neglect, unlawful sexual or physical contact, and use of unauthorised restrictive practices — must be reported to the NDIS Commission within 24 hours of the provider becoming aware of the incident. A full written report is due within five business days.

Does a group activity require a separate risk assessment for each participant?

Yes. While a general risk assessment covers the activity or environment, each participant must have an individual risk assessment that identifies their specific risks in the group context — including communication barriers, health conditions, or behaviours of concern — and the controls in place to manage those risks safely.

What changes does the 2026 strengthened NDIS Practice Standards introduce for group providers?

The strengthened framework (progressively applying from 2026) raises expectations around governance, worker screening, behaviour support, and the depth of evidence required at audit. Providers should monitor NDIS Commission announcements for the specific commencement dates applicable to their registration group and update their policies and documentation accordingly.

Keep reading

Free: the SIL Readiness Pack

A checklist and a sample policy page, sent as a download. No sequence.