Key Takeaways
An NDIS audit preparation checklist only works if it matches the audit you're actually facing — verification, certification, mid-term, condition, or out of cycle all expect different evidence, and treating them as one generic process is where most providers lose time scrambling close to their audit date.
This guide sets out exactly what to prepare for each audit type, realistic cost and timeline figures, the most common reasons providers fail, and a practical checklist you can work through now. If you'd rather see how software keeps this evidence organised automatically, Ausvanta's compliance and audit tools are built for exactly this.
An NDIS audit is a formal assessment of whether a provider's practices meet the NDIS Practice Standards and Code of Conduct. It's carried out by an NDIS Commission-approved quality auditor (AQA), and it happens when you first register, when you renew registration, at a set mid-point in a certification cycle, or when the Commission imposes a condition requiring one.
The outcome isn't just a pass/fail stamp. The auditor's report feeds directly into the Commission's registration decision, so a poorly prepared audit can delay, restrict, or end your ability to deliver NDIS-funded supports.
Most checklists only mention verification and certification, but there are five audit types in total: verification, certification, mid-term, condition, and out of cycle. Your registration groups determine which pathway applies, and if your application mixes verification-level and certification-level groups, the whole application is assessed at the more rigorous certification level.
| Audit type | When it applies | Format | Typical cost* |
| Verification | Lower-risk, lower-complexity supports | Desktop document review, short interview, no site visit | ~$1,500–$3,000 |
| Certification | Higher-risk or complex supports (e.g. SIL, personal care, behaviour support) | Stage 1 document review + Stage 2 on-site visit and interviews | ~$5,000–$15,000 |
| Mid-term | Certification-pathway providers only, around 18 months into the 3-year cycle | Narrower review of ongoing compliance | Varies by scope |
| Condition | Imposed by the NDIS Commission during your registration period | Set by the condition itself | Varies |
| Out of cycle | Triggered outside the normal cycle, e.g. after a significant change or concern | Set by the Commission | Varies |
Cost figures are industry-reported ranges from NDIS registration consultancies, not figures published or guaranteed by the NDIS Commission. Get quotes from several approved auditors to confirm current pricing for your situation.
A verification audit is a desktop review for providers delivering lower-risk, lower-complexity supports, assessed against the Verification Module rather than a full site visit. It typically involves submitting documents remotely, followed by a short interview, with no auditor visiting your premises.
A certification audit applies to higher-risk or more complex supports, such as Supported Independent Living, personal care, and behaviour support, and runs in two stages. Stage 1 is a document review; Stage 2 is an on-site visit with interviews of key personnel and, in many cases, participants themselves.
A mid-term audit is compulsory for every certification-pathway provider, timed to start no later than 18 months into the 3-year registration period, with the Commission's own guidance recommending you engage an auditor from around the 12-month mark. Condition and out-of-cycle audits are less predictable: a condition audit is imposed by the Commission during your registration period, often where not all classes of support were witnessed at the original audit, while an out-of-cycle audit can be triggered by a significant operational change or a concern raised with the Commission.
The practical implication: if you're certification-pathway, don't treat your first audit as the finish line. Build mid-term evidence collection into your calendar from month 12, not month 17.
A thorough audit preparation checklist covers six areas: registration scope, governance and policy, workforce records, participant safeguards, incident and complaints evidence, and financial and operational sustainability. Work through each before booking your auditor, not after.
From 1 July 2026, providers delivering Supported Independent Living and certain platform or higher-risk supports must be registered with the NDIS Commission, closing a gap where some could previously operate unregistered. Existing SIL providers have been given a lodgement deadline to transition, and SIL registration follows the certification pathway — the more rigorous of the two main routes.
If this applies to you and you haven't started the process, the lead time matters more than the paperwork: certification audits can take months to schedule and complete, so starting early is the single biggest factor in meeting the deadline comfortably rather than scrambling at the end.
Most audit failures aren't about having no policy — they're about not being able to prove the policy is actually followed. Auditors routinely ask for implementation evidence, not just the document itself: training attendance records, meeting minutes, or specific case examples.
Choose an auditor from the NDIS Commission's list of approved quality auditors, with direct experience in your specific registration groups. Request a written quote and a realistic timeline, and book well ahead of your renewal date — certification audits need lead time to schedule the on-site visit.
The hardest part of most audits isn't knowing what's required — it's finding the evidence fast when it's spread across spreadsheets, email threads, and paper files. Centralising incident reports, staff screening dates, service agreements, and participant records in one platform means evidence is retrievable in minutes, not days.
Ausvanta's compliance and audit tools are built around exactly this: a single, exportable record of what was delivered, to whom, by which screened and trained staff member, so audit evidence is a byproduct of daily operations rather than a separate scramble.
Audit preparation goes wrong when providers treat it as a once-every-three-years event instead of an ongoing discipline. Know which of the five audit types applies to you, build evidence collection into your calendar well before the audit date (especially for mid-term audits), and focus on proving your policies are lived practice, not just paperwork.
If you want to see how a connected system keeps this evidence audit-ready day to day, you can book a demo or start a free trial with Ausvanta.
What is an NDIS audit?
An NDIS audit is a formal review of whether a provider meets the NDIS Practice Standards and Code of Conduct. It's carried out by an NDIS Commission-approved quality auditor, and it's a mandatory part of registering, renewing registration, or responding to a condition the Commission has imposed.
What's on an NDIS audit preparation checklist?
A complete checklist covers governance and policies, staff screening and training records, participant service agreements and risk assessments, incident and complaints records, financial and insurance documents, and evidence that your day-to-day practice matches what your policies say.
What is the difference between a verification and certification audit?
A verification audit is a document-only desktop review with no site visit, for lower-risk supports. A certification audit is more involved, with a Stage 1 document review followed by a Stage 2 on-site visit and interviews, for higher-risk supports like SIL and personal care.
How long does an NDIS audit take?
Based on industry-reported figures, verification audits typically take around 6 to 12 hours of auditor time, while certification audits can run from 12 to 36 hours depending on complexity. Initial registration outcomes can take anywhere from 4 to 6 weeks after a verification audit, or several months after certification.
How much does an NDIS audit cost?
Reported industry figures put verification audits at roughly $1,500 to $3,000, and certification audits at roughly $5,000 to $15,000, depending on your registration groups and organisation size. Get quotes from a few NDIS Commission-approved auditors to compare, since the NDIS Commission itself doesn't set a fixed fee.
When does a mid-term audit happen?
A mid-term audit applies only to certification-pathway providers, and under the Provider Registration Rules it must start no later than 18 months into the 3-year registration period. Commission guidance points to engaging an auditor from around the 12-month mark to allow enough lead time.
What are the most common reasons providers fail an NDIS audit?
Common reasons include outdated or missing policies, workers without current screening checks or training records, incomplete participant risk assessments or service agreements, gaps in incident and complaints records, and an inability to show evidence that policies are actually being followed in practice.
Is NDIS provider registration becoming mandatory for more providers in 2026?
Yes. From 1 July 2026, providers delivering Supported Independent Living (SIL) and certain platform or higher-risk supports must be registered with the NDIS Commission, where some could previously operate unregistered. Existing SIL providers have been given a lodgement deadline to transition.
Can software help with NDIS audit preparation?
Software that centralises participant records, incident reports, staff qualifications, and service agreements in one system makes evidence easy to retrieve during an audit, instead of chasing documents across spreadsheets, email, and paper files at the last minute.
How do I choose an NDIS-approved quality auditor?
Confirm the auditor is on the NDIS Commission's list of approved quality auditors, check they have experience with your specific registration groups, request a quote and timeline, and book early — certification audits in particular need lead time to schedule the required site visit.
Start your free 14-day trial — unlimited users, no credit card required.
