Get the kit — A$297

Audit

NDIS Quality Auditor Selection: Documents You Need (2026 Guide)

To satisfy an NDIS quality auditor, SIL and disability support providers must have current policies covering the NDIS Practice Standards, evidence of staff screening and training, incident and complaint records, rights documentation, and support delivery records. Having these organised before auditor selection reduces delays and demonstrates a governance-ready organisation.

Why Document Readiness Matters Before You Select Your Auditor

Choosing an approved quality auditor is not the first step in the NDIS registration or re-registration process — document readiness is. Before you engage an NDIS Commission-approved quality auditor, your organisation must be able to demonstrate compliance with the relevant NDIS Practice Standards. Auditors assess evidence, not intentions. If your documents are incomplete, inconsistent, or undated when the auditor arrives, your audit outcome is already compromised.

From 2026, the strengthened registration framework has raised the bar. The NDIS Commission has expanded the Practice Standards to include enhanced requirements around incident management, behaviour support, governance, and rights-based practice. SIL providers, in particular, face a higher-intensity audit pathway because they deliver some of the highest-risk supports under the scheme.

The checklist below maps directly to what approved quality auditors examine under the NDIS (Providers — Registration and Practice Standards) Rules 2018 and the strengthened 2026 framework.

The Core Document Checklist for NDIS Quality Audit

1. Governance and Organisational Management

  • Organisation constitution, ABN, and legal entity documentation
  • Current board or leadership structure (including roles and responsibilities)
  • Organisational chart aligned to actual staffing
  • Conflict of interest policy and register
  • Risk management framework and current risk register
  • Business continuity and emergency management plan
  • Financial governance policies (delegation of authority, procurement)
  • Quality management policy and continuous improvement register

2. Workforce Management and Screening

  • NDIS Worker Screening Check records for all workers in risk-assessed roles (must be current and from an approved state/territory screening unit)
  • Working With Children Check records where applicable
  • Staff recruitment policy demonstrating compliance with the NDIS Code of Conduct
  • Position descriptions referencing NDIS Code of Conduct obligations
  • Induction records confirming Code of Conduct training
  • Ongoing professional development register (training logs, dates, topics)
  • Supervision and performance review records
  • Volunteer and contractor screening documentation

3. Participant Rights and Person-Centred Practice

  • Participant rights policy (referencing the NDIS Act 2013 and the National Disability Strategy)
  • Rights and responsibilities information provided to each participant (in accessible formats)
  • Consent and decision-making frameworks, including supported decision-making procedures
  • Advocacy referral pathways documented in policy
  • Privacy and confidentiality policy compliant with the Privacy Act 1988

4. Support Planning and Delivery

  • Individual support plans for each participant, linked to their NDIS plan goals
  • Assessment and intake documentation
  • Transition and exit planning records
  • Progress notes and daily records demonstrating goal-aligned delivery
  • Medication management policy and individual medication records (where applicable)
  • Mealtime management plans authorised by a health professional (SIL providers)
  • Positive behaviour support plans where restrictive practices are used (authorised by a registered behaviour support practitioner)

5. Incident Management

  • Incident management policy and procedure
  • Incident register (covering all reportable incidents as defined in the NDIS (Incident Management and Reportable Incidents) Rules 2018)
  • Evidence of reportable incidents lodged with the NDIS Commission within required timeframes
  • Records of internal investigation and corrective actions taken
  • Evidence of participant and family notification following incidents
  • Root cause analysis records for serious incidents

6. Complaints Management

  • Complaints management policy referencing the NDIS Commission's complaints framework
  • Complaints register (with dates received, categories, resolution, and timeframes)
  • Evidence of complaints information made accessible to participants
  • Feedback and complaints forms in accessible formats
  • Records of outcomes communicated to complainants

7. Restrictive Practices (SIL and High-Support Providers)

  • Register of all restrictive practices currently in use across your service
  • State or territory authorisation documentation for each regulated restrictive practice
  • Behaviour support plans prepared by a registered behaviour support practitioner
  • Evidence of regular review and reduction planning for each restrictive practice
  • Staff training records specific to behaviour support and positive behaviour approaches
  • Monthly reporting records submitted to the NDIS Commission (where required)

8. SIL-Specific Additional Documents

  • SIL assessment and rostering methodology
  • Evidence that SIL funding is aligned to the participant's NDIS plan and that support hours have been agreed with the participant's planner or LAC
  • Accommodation/SIL agreement signed by the participant or their authorised representative
  • Fire evacuation and emergency plans for each supported accommodation site
  • Property maintenance and tenancy agreements (demonstrating separation of tenancy from support provision)
  • Household governance arrangements where multiple participants share a site

How to Organise Your Documents for Auditor Presentation

  1. Map every document to a Practice Standard module. Auditors assess against the core module (applicable to all providers) plus the supplementary modules that match your registration groups. For SIL providers, the High Intensity Daily Personal Activities module and the Specialist Disability Accommodation module may also apply.
  2. Date-stamp and version-control all policies. An undated policy cannot demonstrate currency. Use a document control register that records document name, version number, approval date, and review date.
  3. Collect participant-level evidence. At audit, auditors typically select a sample of participant files. Every file should contain the support plan, consent forms, progress notes, and any incident or behaviour support records.
  4. Brief your staff before the audit. Auditors may interview workers. Staff should be able to explain your incident reporting process, how they apply the Code of Conduct, and how they support participant rights in day-to-day practice.
  5. Resolve known non-conformances before submission. Self-assess against the Practice Standards using the NDIS Commission's own guidance tools. Identify gaps, resolve them, and document the corrective actions taken — this demonstrates your continuous improvement system is active.
  6. Prepare a document index. Give your auditor a single index listing every document, its location (physical or digital), and the Practice Standard it addresses. This reduces audit duration and demonstrates organisational maturity.

Common Non-Conformances That Delay Registration

Non-conformance Why it matters
NDIS Worker Screening Checks expired or missing for risk-assessed roles A mandatory legislative requirement — no valid check means the worker cannot legally deliver NDIS supports
Incident register entries missing required fields (date, type, participant identifier, action taken) Auditors cannot assess reporting timeliness or follow-through without complete records
Behaviour support plans not prepared by a registered practitioner Unregistered plans do not meet the NDIS (Restrictive Practices and Behaviour Support) Rules 2018
Policies referencing superseded legislation or old Practice Standards Demonstrates that the organisation is not tracking its regulatory environment
Support plans not updated after plan reviews Indicates delivery may not reflect the participant's current goals and funded supports
No evidence of complaints information being provided to participants A rights obligation — participants must know how to raise concerns before a concern arises

Selecting Your Approved Quality Auditor

Once your documents are in order, select an auditor from the NDIS Commission's list of approved quality auditors. The Commission does not prescribe which approved auditor you must use, but providers are responsible for engaging an auditor who is approved for the relevant registration group type (verification or certification). SIL providers require certification audits — a more in-depth assessment than a desktop verification audit.

When comparing auditors, ask about their experience with SIL and high-intensity support providers, their turnaround time for audit reports, and how they handle corrective action requests before issuing a final report. A good auditor will provide clear written feedback on any non-conformances, giving you an opportunity to resolve them.

If you are building your compliance document library from scratch or need to close multiple gaps ahead of a 2026 registration deadline, ndiscompliant.com.au offers a 136-document SIL compliance kit that maps directly to the current Practice Standards — a useful starting point for organisations that want a structured baseline rather than building each policy individually.

After the Audit: What Happens Next

Your approved quality auditor submits their audit report to the NDIS Commission. The Commission then reviews the application, the audit outcome, and any additional information before making a registration decision. Where non-conformances are identified, you may be required to provide a corrective action plan. Providers who demonstrate active, documented continuous improvement are better placed to address non-conformances without having their application refused or their existing registration suspended.

Begin your document review well before your registration renewal date — at minimum six months in advance for SIL providers given the volume of evidence required.

Important: This article provides general guidance about NDIS compliance requirements. It is not legal or professional advice. Requirements may change as the NDIS Commission updates its policies and Practice Standards. Always verify current requirements with the NDIS Quality and Safeguards Commission or a registered NDIS consultant before making compliance decisions.

Frequently asked questions

How far in advance should a SIL provider start preparing documents for an NDIS quality audit?

SIL providers should begin document preparation at least six months before their registration renewal date. Certification audits for SIL involve a higher volume of evidence than verification audits, and resolving non-conformances or updating policies takes time. Starting early also allows you to brief staff and run an internal self-assessment before the approved quality auditor is engaged.

Which NDIS Practice Standards modules apply to SIL providers?

All registered providers must meet the core module of the NDIS Practice Standards. SIL providers are typically also assessed against the supplementary module for High Intensity Daily Personal Activities and, where relevant, the Specialist Disability Accommodation module. The NDIS Commission's registration groups determine which modules apply to each provider.

Does every worker need an NDIS Worker Screening Check?

Workers in risk-assessed roles must hold a current NDIS Worker Screening Check issued by an approved state or territory screening unit. The definition of a risk-assessed role covers most direct support workers and managers. Providers must maintain records of all checks and ensure they remain current — an expired check means the worker cannot legally deliver NDIS supports.

What is the difference between a verification audit and a certification audit?

A verification audit is a desktop assessment suited to lower-risk, less complex support types. A certification audit is a more intensive process that includes document review and interviews with staff and participants on-site. SIL providers delivering complex or high-intensity supports require a certification audit. The NDIS Commission specifies which audit type applies based on the provider's registration groups.

Can a provider use restrictive practices without a registered behaviour support practitioner's plan?

No. Under the NDIS (Restrictive Practices and Behaviour Support) Rules 2018, regulated restrictive practices must be covered by a behaviour support plan prepared by a registered NDIS behaviour support practitioner. Providers must also hold state or territory authorisation for each regulated restrictive practice and report their use to the NDIS Commission as required.

What happens if non-conformances are found during the NDIS quality audit?

The approved quality auditor will document non-conformances in their audit report. Depending on severity, you may be required to submit a corrective action plan to the NDIS Commission before your registration is granted or renewed. Minor non-conformances with clear corrective actions typically do not prevent registration, but unresolved critical gaps can result in conditional registration or referral for compliance action.

Keep reading

Free: the SIL Readiness Pack

A checklist and a sample policy page, sent as a download. No sequence.