NDIS Audit Compliance Support for Registered Providers

Home
NDIS Audit Compliance Support for Registered Providers

Comprehensive Internal Audit and NDIS Compliance Support

Stay Compliant, Stay Confident

Your audit outcome is decided long before the auditor arrives. It’s decided by whether your policies match what your staff actually do, whether your registers are current, and whether you can produce evidence on request.

Angels Compliance & Training delivers NDIS compliance services that close those gaps before an approved quality auditor finds them. We run a full NDIS internal audit against the Practice Standards that apply to your registration groups, hand you a written report with every finding, and give you a corrective action plan you can work through step by step.

Not sure where you stand?

Book a free 20-minute consultation. We'll tell you honestly whether you're audit-ready or not.

Book a free consultation

What is an NDIS compliance audit?

An NDIS compliance audit is a formal assessment carried out by an approved quality auditor to determine whether your organisation meets the NDIS Practice Standards for the supports you’re registered to deliver. The NDIS Quality and Safeguards Commission uses the auditor’s report to decide whether to grant, renew, or vary your registration.

There are two pathways, and which one applies depends on the risk level of your supports:

Verification audit

Lower-risk supports. A desktop review of your documentation and evidence. No site visit in most cases.

Certification audit

Higher-risk supports. Stage 1 desktop review, then Stage 2 on-site with staff and participant interviews.

Not sure which applies to you? Read our breakdown of verification vs certification audits.

An internal audit is different. It’s the rehearsal — run by us, not the Commission, with no consequence to your registration. It’s where you find out what would have gone wrong.

The NDIS compliance standards we assess against

Every internal audit is scoped to your registration. We assess against the Core Module — which applies to every registered provider — plus any supplementary modules attached to your registration groups.

Core Module — applies to all providers

1. Rights and responsibilities

Person-centred supports, dignity, privacy, independence, consent.

2. Governance and operations

Risk management, quality systems, information management, continuity.

3. Provision of supports

Access, support planning, service agreements, responsive delivery.

4. Support environment

Safe environments, equipment, waste and infection management.

Supplementary modules — where they apply

High Intensity Daily Personal Activities

Specialist Behaviour Support and Implementing Behaviour Support Plans

Early Childhood Supports

Specialist Support Coordination

Specialist Disability Accommodation

Verification Module (for verification-pathway providers)

We also assess against the NDIS Code of Conduct, the incident management and reportable incidents rules, worker screening obligations, and complaints management requirements — because auditors do.

Our NDIS internal audit process

Five stages. Most providers complete the audit in two to three weeks.

1
Scoping
We confirm your registration groups, the modules that apply, your audit pathway, and your due date. Scope drives everything after this.
2
Document review
We read your policies, procedures, forms, registers, participant files, and staff records against each applicable quality indicator — the same evidence an auditor requests.
3
Practice review and staff interviews
We check whether your documented systems match daily practice, and whether your team can explain them. This is where most providers are exposed.
4
Written report and corrective action plan
Every finding is rated by severity, mapped to the standard it breaches, and paired with a specific instruction, an owner, and a due date. Not "improve your governance" — the actual fix.
5
Close-out and continuous improvement
We verify each corrective action is genuinely closed, then build a Continuous Improvement Plan so your evidence trail keeps building between audit cycles.

NDIS audit compliance checklist

Work through this before your audit. If you can’t answer yes to an item — with evidence, not intent — it’s a gap.

Governance and risk

☐Policies reviewed within the last 12 months, with version control and a review date
☐Risk register current, with treatments assigned and reviewed
☐Continuous Improvement Plan showing dated, closed actions
☐Conflict of interest register maintained

Workforce

☐NDIS Worker Screening clearance for every risk-assessed role, with expiry tracked
☐NDIS Worker Orientation Module completed and evidenced for all staff
☐Training register current, including refreshers
☐Position descriptions, contracts, and signed Code of Conduct on file

Participant records

☐Signed service agreements matching current pricing arrangements
☐Support plans with goals, reviewed at the stated interval
☐Consent forms current and specific
☐Progress notes contemporaneous, factual, and legible

Incidents, complaints, and behaviour support

☐Incident register complete, with reportable incidents lodged inside the required timeframe
☐Complaints register showing outcomes and closure, not just receipt
☐Behaviour Support Plans current and authorised where required
☐Restrictive practices reported monthly, with no unauthorised use

Want it as a printable PDF? Download the NDIS audit & compliance checklist.

NDIS provider compliance: the gaps we find most often

Across the internal audits we run, the same failures repeat. None are exotic. All are avoidable.

Generic policies nobody follows

Bought templates with the vendor’s language still in them. Auditors recognise them instantly, and staff can’t explain a policy they’ve never read.

Registers that stop halfway

Incidents and complaints logged but never closed out. An open register with no outcome recorded reads as a system that doesn’t work.

A Continuous Improvement Plan written the week before

Everything dated within the same fortnight. It signals the opposite of continuous improvement.

Worker screening gaps

Expired clearances, or staff in risk-assessed roles without one. This is a straightforward non-conformity every time.

Thin progress notes

“Client had a good day.” Notes must evidence the support delivered against the plan and the claim.

Service agreements out of date

Unsigned, or still quoting superseded rates after a pricing update. Read our 2026 pricing schedule breakdown.

Why providers choose our NDIS compliance services

We’re a compliance consultancy, not an approved quality auditor. That distinction matters: an approved quality auditor can’t advise you and then certify you, so NDIS audit companies are limited to assessing what you present. We work the other side — building the evidence before you’re assessed.

Findings you can act on

Every gap comes with a named fix, an owner, and a date — not a rating out of five.

Documents that survive scrutiny

Written for your operation and your registration groups, in language your staff use.

Support after the report

We stay through close-out and can train your team to run the next internal audit themselves.

Australia-wide, WA-based

Remote audits nationally, on-site across Perth and WA.

Our comprehensive internal audit and compliance support service is designed to ensure your organization is well-prepared for certification audits and ongoing compliance requirements.

Partner with Us for Your Next NDIS Audit

Let us help you stay compliant, prepared, and focused on what matters most—supporting your participants. Our professional team offers the insights, tools, and hands-on guidance to help you meet all audit requirements confidently.

Get in touch today to learn how we can support your next internal audit and NDIS audit compliance process.

Frequently asked questions

How often should we run an NDIS internal audit?

At minimum annually, and again three to four months before a scheduled certification or renewal audit. Annual internal audits are also evidence of the governance and continuous improvement your Core Module requires — so the audit itself becomes part of your compliance record.

What's the difference between an internal audit and an NDIS compliance audit?

An internal audit is your own review — run by you or a consultant, with no consequence to your registration. An NDIS compliance audit is conducted by an approved quality auditor and reported to the Commission, where the outcome affects your registration.

How long does an internal audit take?

Two to three weeks from scoping to report for most providers. Larger organisations with multiple registration groups take longer. Closing out the corrective actions depends on how many gaps we find and how quickly your team works through them.

What does an NDIS internal audit cost?

It depends on your registration groups, the number of modules in scope, staff and participant numbers, and whether you need remote or on-site delivery. We quote a fixed fee after a free scoping call — no hourly billing.

Can you help if we've already received non-conformities?

Yes. We review the auditor’s findings, build the corrective action evidence, and help you respond within the timeframe you’ve been given. Bring us the report and we’ll work backwards from it.

Do you work with providers outside Western Australia?

Yes. Internal audits are delivered remotely for providers Australia-wide. On-site attendance is available across Perth and regional WA.