An NDIS audit is one of the most important milestones on the path to becoming, and staying, a registered NDIS provider. Whether you are applying for registration for the first time or approaching your renewal, understanding how an NDIS audit works, what an assessor looks for and how to prepare will make the difference between a smooth outcome and a stressful scramble. This pillar guide walks you through the entire process in plain English, so you can approach your audit with genuine confidence rather than anxiety.
Before we go further, grab our free NDIS audit readiness checklist and keep it beside you as you read. It maps every point below to a practical, tick-as-you-go format so nothing slips through the cracks.
What is an NDIS audit?
An NDIS audit is an independent assessment of your organisation's compliance with the NDIS Practice Standards, carried out by an approved quality auditor. The audit confirms that your policies, procedures and day-to-day practice genuinely protect the rights, safety and wellbeing of the people you support. It is a requirement of registration with the NDIS Quality and Safeguards Commission and is repeated at renewal (typically on a three-year cycle).
Put simply, the audit asks a single question in many different ways: can you demonstrate, with evidence, that you do what your documents say you do? Auditors are not trying to catch you out. They are checking that your systems are real, consistently applied and centred on participant outcomes. A well-prepared provider with tailored documentation and a clear understanding of its own processes has every reason to expect a positive result.
Verification vs certification audits
Not every provider faces the same type of audit. The kind you undergo depends on the risk profile of the supports you deliver. There are two audit pathways.
Verification audits
A verification audit applies to lower-risk supports and services, such as some therapeutic supports, plan management or the supply of everyday equipment. It is a more streamlined, document-focused assessment against a smaller set of requirements, including things like your worker screening, qualifications, complaints handling and insurance. Verification is generally quicker and less involved than certification, though it is no less important to prepare for properly.
Certification audits
A certification audit applies to higher-risk and more complex supports, such as personal care, supported independent living (SIL), behaviour support or early childhood supports. Certification is a two-stage process:
- Stage 1 (desktop audit): The auditor reviews your documented management system remotely. They examine your policies, procedures, registers and governance framework to confirm your systems are designed to meet the Practice Standards, and to plan the on-site stage.
- Stage 2 (on-site audit): The auditor visits your operations, interviews management and workers, and (with consent) speaks with participants. They look for evidence that your documented systems are actually put into practice day to day.
The table below summarises the key differences.
| Feature | Verification audit | Certification audit |
| Applies to | Lower-risk supports and services | Higher-risk, complex or intensive supports |
| Standards assessed | Smaller, targeted set of requirements | Full applicable NDIS Practice Standards |
| Structure | Single document-based review | Stage 1 desktop + Stage 2 on-site |
| On-site visit | Generally not required | Required (Stage 2) |
| Participant interviews | Typically not required | Common (with consent) |
| Typical effort | Lower | Higher |
If you are unsure which pathway applies to you, it comes down to the registration groups you apply for. Your application will indicate whether verification or certification is required.
What an NDIS auditor actually checks
An NDIS auditor assesses your organisation against the Practice Standards and their underlying quality indicators. In practice, this means reviewing a mix of documents, registers and forms, and then testing whether they reflect reality. The main areas of focus include the following.
- Governance and operational management: your organisational structure, roles and responsibilities, continuous improvement processes, financial management and how you plan and oversee the business.
- Risk management: your risk management framework and register, showing how you identify, assess and control risks to participants, workers and the organisation.
- Incident management: your incident management system, including how incidents (and reportable incidents) are recorded, responded to, escalated and reviewed to prevent recurrence.
- Complaints management: an accessible complaints process, complaints register and evidence that feedback is used to improve supports.
- Human resources and worker screening: position descriptions, recruitment and induction records, worker screening clearances, training records and supervision arrangements.
- Participant rights and responsibilities: how you uphold privacy, dignity, choice and control, informed consent, and freedom from abuse, neglect and restrictive practices.
- Provision of supports: service agreements, support planning, assessment records and how you deliver, review and adjust supports to meet each participant's needs and goals.
Across every one of these areas, the auditor is looking for three things: a clear policy, a matching procedure, and a record or register that proves the process is being followed. Missing any one of those three is where most trouble begins.
How to prepare for an NDIS audit
Strong NDIS audit preparation is less about last-minute effort and more about having genuine systems in place. Here is a practical sequence to follow.
1. Confirm your scope and Practice Standards
Identify which registration groups you are applying for and, therefore, which Practice Standards apply. This tells you exactly what the auditor will assess and prevents you from over- or under-preparing.
2. Build a complete, tailored documentation suite
You need policies, procedures, registers and forms that cover every applicable standard and, crucially, reflect how your organisation actually operates. Generic templates that do not match your services are one of the most common causes of non-conformities. This is exactly where Veyora helps: we build every policy, procedure, register and form mapped directly to the Practice Standards, tailored to your business and delivered within 24 hours.
3. Organise your evidence
Auditors will ask to see records in action, so keep your registers current and your files easy to locate. Staff records, worker screening clearances, service agreements, incident and complaints logs, and continuous improvement notes should all be up to date and readily accessible.
4. Brief your team
Everyone the auditor might speak with should understand your key processes: how to report an incident, how to handle a complaint, how privacy is protected and where to find relevant documents. Confident, consistent answers from staff carry real weight.
5. Run an internal or mock audit
Test yourself before the auditor does. An NDIS internal audit means working through the Practice Standards yourself (or with support) to find and fix gaps early. Our free NDIS audit readiness checklist is the perfect starting point for a self-assessment, and our audit-ready documentation packages give you the tailored evidence base to back it up.
Common reasons providers fail an NDIS audit
Understanding where others stumble is one of the best ways to protect yourself. The most frequent issues include:
- Generic or mismatched documents that describe processes the provider does not actually follow.
- Incomplete registers for incidents, complaints, risks or continuous improvement, or registers that exist but are never used.
- Gaps in worker screening and HR records, such as missing clearances, induction records or training evidence.
- Weak governance, with unclear roles, no continuous improvement activity, or no evidence of management oversight.
- No evidence of practice, where a policy exists on paper but there are no records showing it in action.
- Staff who are unfamiliar with key processes, undermining confidence that systems are embedded.
The reassuring news is that almost all of these are preventable with the right preparation. If an auditor does identify a non-conformity, it is usually recorded with a corrective action and a timeframe to fix it, rather than an outright failure. Addressing the issue within the required period generally keeps your registration on track.
How to pass an NDIS audit
If you take one thing from this guide on how to pass an NDIS audit, let it be this: alignment. Your policies, your procedures, your records and your team's day-to-day behaviour all need to tell the same story. When an auditor can trace a requirement from a policy, to a procedure, to a completed record, to a staff member describing it in their own words, you have demonstrated genuine, embedded compliance, and that is precisely what a positive audit result requires.
To give yourself the strongest possible footing, make sure your documentation is complete, current and tailored, your evidence is organised, and you have tested yourself with an internal audit beforehand.
Timeline expectations
Timeframes vary depending on your audit type, the size of your organisation and auditor availability. As a general guide, you will scope your registration groups, engage an approved quality auditor and agree on a schedule, then complete the audit itself: a single document-focused review for verification, or the Stage 1 desktop assessment followed by the Stage 2 on-site visit for certification. Any non-conformities are then addressed within the auditor's specified timeframe before the auditor provides their outcome to the NDIS Commission, which makes the final registration decision.
The most controllable part of that timeline is your readiness. Providers who begin with complete, tailored documentation and a clear self-assessment move through each stage far more smoothly than those preparing from scratch. Because Veyora delivers your full, tailored documentation suite within 24 hours, you can remove weeks of preparation delay and focus on getting audit-ready fast.
Get audit-ready with confidence
You do not have to navigate your NDIS audit alone. Veyora builds every policy, procedure, register and form you need, tailored to your services and mapped to the NDIS Practice Standards, delivered within 24 hours and backed by our pass your audit or your money back guarantee. Explore our audit-ready documentation packages to see how quickly you can be prepared.
The best first step is free. Download our free NDIS audit readiness checklist and start working through your readiness today, one clear item at a time.
Please note: Veyora provides documentation, training and audit-support services. We are not an approved quality auditor and are not affiliated with the NDIS Quality and Safeguards Commission.
Frequently asked questions
What is an NDIS audit?
An NDIS audit is an independent assessment of your organisation's compliance with the NDIS Practice Standards, conducted by an approved quality auditor. It confirms that your policies, procedures and everyday practice keep participants safe and uphold their rights, and it is required both to become a registered NDIS provider and to renew your registration.
What does an NDIS auditor check?
An NDIS auditor checks your organisation against the applicable Practice Standards, reviewing areas such as governance, risk management, incident and complaints management, human resources and worker screening, participant rights, and the provision of supports. In each area they look for a clear policy, a matching procedure and records or registers that prove the process is genuinely followed.
How do I prepare for an NDIS audit?
Confirm which Practice Standards apply to your registration groups, build a complete and tailored documentation suite, keep your registers and evidence current and organised, brief your team on key processes, and run an internal or mock audit to catch gaps early. Using a structured readiness checklist and tailored, audit-ready documentation makes the whole process far more manageable.
What happens if I fail my NDIS audit?
If an auditor identifies non-conformities, they are usually recorded with corrective actions and a timeframe to resolve them, rather than resulting in an outright failure. In most cases you can fix the issues within the required period and keep your registration on track. The final registration decision rests with the NDIS Commission based on the auditor's findings, which is why thorough preparation beforehand is so valuable.