NDIS registration

NDIS policy templates: the policies a provider needs

Policies and procedures are part of becoming a registered NDIS provider, and they are one of the first things an auditor asks to see. But you do not need every possible policy, and a folder of generic templates will not get you registered on its own. The documents you need depend on the supports you deliver and your audit pathway, and whichever ones apply, they have to match how your business actually runs. This guide lists the full document set most small providers work from, shows which are core and which are service-specific, flags the ones that need qualified review, and explains what an auditor actually checks.

You do not need every possible policy

It is easy to assume registration means producing a giant binder of every policy you can find. It does not. What you are assessed on depends on three things:

• Your registration groups. The classes of support you apply to deliver shape which standards and documents apply to you.
• Your audit pathway. Whether those groups put you on the verification or certification pathway changes how much evidence you are assessed against.
• The services you actually deliver. A policy only applies if it reflects something you genuinely do.

A lower-risk provider on the verification pathway usually needs a smaller evidence set than a certification provider delivering higher-risk supports. But smaller does not mean none. Even a sole trader on verification still needs the core governance, privacy, incident, complaints and safety policies, and the records that show those policies are used. The aim is a document set that genuinely fits your work, not the longest list you can assemble.

Quick answer: the categories most providers need

Across almost every small provider, the document set falls into six groups. Most providers need the first five; the sixth only applies if you deliver specific higher-risk supports.

The 57 documents, by category

Here is the full set, with what each one is, who usually needs it, and its risk level. Treat it as a reference to tick against your own services, not a list to complete blindly.

Core, service-specific, and the rest

Reading down the table, the Foundation documents are the ones almost every provider needs: how you are governed, how you protect information, how you handle incidents and complaints, how you keep people safe, and the participant-facing basics like a service agreement and consent. If you are a small or lower-risk provider, this is the bulk of what you need.

Service-specific documents only apply if you do that thing - a transport policy if you drive participants, a money and property policy if you handle their funds. Staff and employment documents only start to matter once you take on workers, so a solo provider can leave most of them until they hire. Registers and evidence are not optional extras - they are the logs that prove your policies are real. And the Higher-risk documents need qualified review, covered next.

Higher-risk documents that need qualified review

Most of these documents are general governance and operational policies you can confidently tailor yourself. A few are different. They cover supports where a mistake can seriously harm a participant, so a general template is a starting point only, and an appropriately qualified person should be involved.

• Medication management.If you support participants with medication, you may need participant-specific directions, worker training for the medications and routes you actually support, and review by an appropriately qualified person such as a registered nurse, pharmacist or the participant’s prescriber.
• Mealtime management and dysphagia. Supporting mealtimes where there is a swallowing or choking risk may require participant-specific mealtime plans and input from a health practitioner such as a speech pathologist or dietitian.
• Restrictive practices. The use of regulated restrictive practices is highly regulated. If you use them, you need to understand your obligations around registration, an authorised behaviour support plan, state or territory authorisation, activating the practice in the NDIS Commission portal, monthly reporting, and reportable incidents.

On that last point: unauthorised use of a regulated restrictive practice is itself a reportable incident. Where there is harm, urgent (24-hour) reporting timeframes may apply; where there is no immediate harm, the 5 business day process may apply. The exact obligations change with the situation, so confirm the current requirements with the NDIS Commission and get qualified advice for the states or territories you operate in.

Some higher-risk supports also need participant-specific clinical frameworks and supplementary-module evidence that no general document pack can safely standardise. If that is your situation, the documents are only one part of what you will need, and they do not replace clinical, legal or specialist audit advice.

What auditors actually check

An audit is not a document review. An approved quality auditor is checking whether your policies are real - whether you understand them, follow them, and can show evidence that you do. Depending on your pathway and supports, they may look at:

• Your policies and procedures, and whether they match how you actually work
• Completed registers - incidents, complaints, risk and conflicts of interest
• Staff files and worker screening evidence
• Induction and training records, including the NDIS Worker Orientation Module
• Service agreements and participant consent records
• Support plans and progress notes, where you deliver direct support
• Incident and complaint records, and how you responded to them
• Your risk register and continuous improvement records

The thread running through all of it is evidence of practice. An auditor is far more interested in a handful of policies you genuinely follow, with the records to prove it, than a thick binder of templates nobody has read. A policy saved in a folder and never used is the thing that fails an audit, not the fact that it began as a template.

Free NDIS templates you can preview

You do not have to take any of this on trust. Some of these documents are free to see right now, before you pay anything:

• A free service agreement template. Our NDIS service agreement template is free and needs no signup. Pre-fill your details, then download the Word file or copy the text. It is one of the 57 documents in the pack.
• A real policy, free to download. You can download a sample Conflict of Interest Policy (a Word file, no signup) to judge the quality and depth for yourself.
• Preview the whole set with your own branding. On the registration pack page you can preview every one of the 57 documents free, pre-filled with your business name and logo, and only pay the one-off $50 if you want to unlock and edit them.

Writing your own vs using templates

You can write every policy yourself. If you know the Practice Standards well and have the time, that is a valid path; the trade-off is the hours it takes and the gaps that are easy to miss. Templates exist to remove the blank-page problem and give you the structure and language the standards expect.

This is also where people weigh up a consultant. A consultant may help with scoping your registration, tailoring documents to your service, getting you audit-ready, and navigating complex or higher-risk supports. A template pack reduces the drafting burden, but you still need to review, adapt and follow the documents yourself. For many straightforward small-provider registrations, the templates plus the free guidance on this site are enough. For complex or higher-risk supports, paying for qualified advice on those specific areas can be money well spent. There is more in our guides on what registration costs and registering without a consultant.

This guide is general information to help you prepare for NDIS provider registration. It is not legal, clinical or compliance advice, and it is not affiliated with the NDIS Commission or the NDIA. Rules change - check the current requirements with the NDIS Quality and Safeguards Commission, and get advice from an appropriately qualified person for your situation.