NDIS therapeutic supports provider: audit preparation (2026)

What auditors are checking for therapeutic supports providers in 2026

If your organisation delivers NDIS therapeutic supports — including occupational therapy, speech pathology, psychology, physiotherapy, behaviour support, or allied health services — you are subject to an approved quality audit as part of the NDIS Commission's registration and renewal cycle. From 2026, the strengthened NDIS Practice Standards framework applies increased scrutiny to how providers demonstrate outcomes for participants, particularly those with complex needs or those who are at risk.

An approved quality auditor does not simply check whether you have policies on paper. They assess whether your systems are genuinely implemented, whether workers understand their obligations, and whether participants experience the protections those systems are meant to deliver. This article walks you through precisely what is assessed and where therapeutic supports providers most commonly fall short.

The two-module audit framework for therapeutic supports

Therapeutic supports providers are audited against two components of the NDIS Practice Standards:

• Core Module — applies to all registered NDIS providers regardless of the supports they deliver.
• Specialist Support Module — Therapeutic Supports — additional requirements specifically addressing the planning, delivery, and review of therapeutic interventions.

The Core Module covers rights and responsibilities, governance and operational management, the provision of supports, and support planning. The Therapeutic Supports module adds requirements around individualised assessment, evidence-based practice, measurable goal-setting, and coordination with other providers in a participant's support network.

Step-by-step audit preparation process

1. Map your registration groups to the correct standards

   Confirm which registration groups your organisation holds. Therapeutic supports span multiple groups (for example, therapeutic supports and behaviour support are distinct registration groups with different audit pathways). Verify with the NDIS Commission portal that your registration accurately reflects the services you deliver, because discrepancies are a common audit finding.

2. Conduct an internal gap analysis against each Practice Standard

   Work through every standard and quality indicator in the Core Module and Therapeutic Supports module. For each indicator, document the evidence you currently hold and identify gaps. This exercise should involve clinical leads, the compliance officer, and frontline practitioners — not just management.

3. Audit your worker screening and training records

   Every worker who delivers NDIS supports must hold a valid NDIS Worker Screening Check. Auditors will sample your worker records. Ensure your register is current, that checks have not lapsed, and that any volunteers or contractors with more than incidental contact with participants are also screened. Training records must show completion of the NDIS Worker Orientation Module and any mandatory training specific to the supports delivered.

4. Review your support plans and clinical documentation

   The Therapeutic Supports module requires that assessments are individualised, goals are measurable and participant-directed, and progress is reviewed at agreed intervals. Auditors will examine a sample of participant files. Each file should contain a current support plan, evidence of participant (and where relevant, supporter) involvement in planning, progress notes that connect to stated goals, and documentation of any changes to the therapeutic approach and the reasons for those changes.

5. Test your complaints and incidents system end-to-end

   Auditors assess whether your complaints and incident management systems are genuinely accessible to participants, not merely documented. Walk through the process as if you were a participant or their family member. Check that your reportable incident obligations to the NDIS Commission are understood by all relevant workers — including the timeframes for initial notification and follow-up reporting — and that your records demonstrate those timeframes have been met in historical incidents.

6. Review your restrictive practices governance (where applicable)

   If any therapeutic support provided by your organisation involves the use of regulated restrictive practices, you must demonstrate robust authorisation, monitoring, and reduction planning processes. The NDIS Commission pays close attention to whether providers are working toward reducing and eliminating restrictive practices rather than maintaining them as default responses.

7. Prepare your governance evidence

   Auditors will review board or leadership oversight of quality and safety. This includes evidence that governance bodies receive and act on quality data, that there is a documented continuous improvement process, and that risks are formally identified and managed. Meeting minutes, risk registers, and quality improvement logs are commonly requested.

8. Schedule a pre-audit mock review

   Before the formal audit, conduct a structured internal review using the auditor's assessment framework. Identify remaining gaps and resolve them. This step significantly reduces the likelihood of a non-conformance finding.

What auditors most commonly find non-conformant in therapeutic supports providers

Evidence checklist for the audit day

• Current certificate of registration and registration group schedule
• Organisational policies mapped to each NDIS Practice Standard
• Worker screening register with check numbers and expiry dates for all workers
• Training records — NDIS orientation module, mandatory safeguarding, and any clinical training
• Sample of participant files (auditors typically select these): support plan, assessment, progress notes, review documentation, consent forms
• Complaints register and records of outcomes
• Incident register and evidence of NDIS Commission notifications with timestamps
• Restrictive practices authorisation documentation (if applicable)
• Risk register and quality improvement log
• Governance meeting minutes demonstrating quality oversight
• Participant feedback records and evidence of how feedback has been acted upon
• Sub-contractor agreements confirming their compliance obligations

The 2026 strengthened framework: what is changing

The NDIS Commission's strengthened Practice Standards, progressively introduced from 2024 and continuing through 2026, place greater emphasis on participant outcomes rather than process compliance alone. For therapeutic supports providers, this means auditors are increasingly interested in whether therapy goals are being achieved, whether participants are exercising genuine choice and control in their therapeutic programs, and whether providers are using evidence-based approaches that are documented and reviewed.

Mandatory registration requirements that were deferred in earlier years are also being progressively applied to previously unregistered providers. If your organisation has not previously been registered and you deliver therapeutic supports to NDIS participants, you should verify your current obligations with the NDIS Commission, as the landscape is changing and non-registration where registration is now required carries significant risk.

Providers who need a comprehensive starting point for their documentation will find that ndiscompliant.com.au offers a 136-document compliance kit covering the full range of NDIS Practice Standards requirements — a practical resource for organisations that want to build their evidence base efficiently rather than starting from scratch.

After the audit: responding to findings

If your audit produces a non-conformance finding — major or minor — you are required to submit a corrective action plan to the auditor within the timeframe specified. Major non-conformances require remediation before registration can be granted or renewed. Do not treat a minor non-conformance as inconsequential; patterns of minor findings across an organisation signal systemic issues that the Commission takes seriously at the next audit cycle.

Use any findings as an input to your continuous improvement log. Document the root cause, the corrective action taken, the person responsible, and the date by which the action will be verified as complete. This demonstrates to the Commission that your quality management system is genuinely functioning rather than static.