What an NDIS audit is
An independent check against the NDIS Practice Standards
To become a registered NDIS provider, and to stay one, you have to pass an audit. It is carried out by an independent, NDIS-approved quality auditor (a certification body), not by the NDIS Commission itself. The auditor measures your business against the NDIS Practice Standards and the NDIS Code of Conduct, then reports to the Commission, which makes the final registration decision.
Put simply, the auditor is answering one question: does this provider have the systems, documents and day-to-day records to deliver safe, quality supports? Registration is granted for up to three years, after which you are audited again to renew it.
The two types of audit
Verification or certification
Which pathway you go through is decided by the registration groups you apply for, not by your choice or your profession. Lower-risk groups take the lighter path; higher-risk groups take the fuller one, and if you mix them the higher-risk pathway applies. You can check which registration groups need which audit, and the Commission explains the types of audits on its own site.
Verification
The lighter, desktop-based pathway. An approved auditor reviews your documents and evidence against the Verification Module, with no site visit and no mid-term audit. It applies to lower-risk groups such as therapeutic supports, plan management, household tasks, assistive technology and home modifications.
Certification
The fuller, two-stage pathway for higher-risk supports such as personal care, supported independent living, community participation, early childhood and behaviour support. Stage one is a desktop review; stage two is an on-site visit with interviews and sampling of participants and workers. You are assessed against the Core Module plus any supplementary modules your supports trigger, and you have a mid-term audit around 18 months in.
Verification vs certification at a glance
| Compare | Verification | Certification |
|---|---|---|
| How it is done | A desktop review of your documents and evidence | Stage 1 desktop review, then Stage 2 on site |
| Assessed against | The Verification Module | The Core Module, plus any supplementary modules your supports trigger |
| Site visit and interviews | No | Yes, with sampling of participants and workers |
| Mid-term audit | No | Yes, around 18 months in |
| Example groups | Therapeutic supports, plan management, household tasks, assistive technology, home modifications | Personal care, supported independent living, community participation, early childhood supports, support coordination, behaviour support |
| Time | Usually quicker | Longer: two stages and an on-site visit to schedule |
| Cost | Priced separately, and usually less, as there is no site visit | Ten real quotes: $3,809 to $10,412 ex GST, median $5,202.50 |
How the process works
The NDIS audit process, step by step
- 1
Get ready before you apply
Most of the work happens before the audit: the policies and procedures an auditor expects, tailored to how you actually work, plus insurances, NDIS Worker Screening Checks and the Worker Orientation Module. See the documents an auditor expects to see and work through the provider registration checklist.
- 2
Apply and self-assess
Apply through the NDIS Commission portal (you log in with myID and RAM, both free to set up), pick your registration groups, and complete a self-assessment against the relevant Practice Standards. Applying is free, and the Commission explains how to apply.
- 3
Get your Initial Scope of Audit
The Commission reviews your application and emails your Initial Scope of Audit. It confirms your audit type, your registration groups, the standards you will be assessed against and what to share with the auditor. Check it carefully, and raise anything that looks wrong with the Commission before you pay for audit work. Ours, for example, noted that the on-site stage needed two auditors unless the Commission approved one for a small organisation, which affects the price.
- 4
Choose and engage an approved quality auditor
You choose an auditor from the Commission list of approved quality auditors and pay them directly. This is the main cost of registration. Shortlist a few before you apply, then get written quotes once you have your scope, broken down by Stage 1, Stage 2, report writing, travel and corrective-action review.
- 5
Stage 1: the desktop review
Every audit starts with a desktop review of your documents and evidence, and for verification that review is the whole audit. Give the auditor a tidy pack: your Initial Scope of Audit, your policies, the registers and records that show you follow them, insurance certificates and worker screening evidence.
- 6
Stage 2: the on-site audit (certification only)
The auditor visits, interviews you and your workers, talks with participants and samples records to check that your documents describe your real service. If you have no participants yet, expect a provisional outcome and a second Stage 2 once you start supporting people, usually within about three months.
- 7
Close out any non-conformities
Findings are normal. For a minor non-conformity you write a corrective action plan, usually within about 7 days, and fix it within the audit cycle. A major non-conformity is a serious or systemic gap, and you generally have about three months to rectify it through a follow-up audit. Three or more minor non-conformities in the same module can be treated as a major.
- 8
The Commission decides
The auditor sends their report and recommendation to the Commission, which makes the final decision and, if you are successful, registers you for up to three years. Certification providers then have a mid-term audit around 18 months in, and everyone is audited again to renew.
How long it takes
Plan for several months end to end, not weeks. The self-assessment, booking an auditor, the audit, the report and the Commission decision each add time. Verification is usually quicker; certification takes longer because of the two stages and scheduling the on-site visit. The part most within your control is having your documents and evidence ready before you start. More on how long registration and the audit usually take.
What it costs
Applying is free. We sent the same Commission-issued scope to ten approved quality auditors in September 2026 and their certification quotes ran from $3,809 to $10,412 ex GST, median $5,202.50 - see all ten quotes compared. Verification is the lighter, desktop-based pathway and is priced separately. On top of the audit you need insurances and worker screening, so see everything registration costs, beyond the audit. The document foundation is the part a consultant charges thousands for, and the part you can do for far less yourself.
Sorting your insurance?
Public liability and professional indemnity are part of getting NDIS-registered. BizCover lets you compare cover from multiple insurers and buy online in a few minutes. Quote referral code Bluetail at signup.
Compare insurance on BizCoverCommon mistakes and barriers
Where providers come unstuck
Treating the documents as the finish line
An auditor checks whether you actually follow your policies, not just that you have written them. Recorded incidents, closed-out complaints, training logs and supervision notes are the evidence they sample for.
Generic, untailored policies
A template that does not match how you really operate stands out immediately. Every document needs to reflect your supports, your participants and the way you work.
No evidence trail
New providers often have the policies but nothing to show them in action yet. The registers and forms are how you build that trail from day one.
Registering for more than you can evidence
Adding high-risk supports pushes you into the certification pathway and can trigger supplementary modules and specialist clinical frameworks you may not be ready for. Start with the scope you can genuinely back up.
Leaving the prerequisites late
Insurances, NDIS Worker Screening Checks, the Worker Orientation Module and myID/RAM portal access all take time, and an auditor will ask to see them. Start them early.
Underestimating cost and time
Booking an auditor late, or being surprised by the certification price, is a common stumble. Knowing the rough figures up front lets you plan instead of panic.
Why this is harder than it should be
The real barrier is the fog, not the work
Here is the thing almost no one says out loud: the requirements are public. The Practice Standards, the rules, the guidelines, the auditor list, all of it is published by the NDIS Commission. The problem is that it is scattered across dozens of pages and written in a way that makes a capable person feel like they need to hire help. So they pay a consultant around three thousand dollars, and a big slice of that is a set of policies and templates, dressed up to look far harder than it really is.
There is a genuine shortage of free, clear resources that walk a small provider through doing this themselves. That gap is the whole reason Bluetail exists. We are building the open path: an affordable, pre-filled document foundation, a step-by-step DIY registration guide, and a full compliance system to keep you audit-ready afterwards, with the founder registering a brand-new provider from scratch on camera so you can watch exactly how it is done. The audit itself is the one thing we cannot give away, because that has to be independent. Everything leading up to it, we can.
Common questions
NDIS audits, answered
How much does an NDIS audit cost?
The audit is the main unavoidable cost, and you pay an approved quality auditor directly. Applying to the NDIS Commission itself is free, and the Commission does not set prices for audit services. In September 2026 we sent the same Commission-issued Initial Scope of Audit to ten approved quality auditors and their certification quotes ranged from $3,809 to $10,412 excluding GST, with a median of $5,202.50 - only two of those included travel. A verification audit is the lighter, desktop-based pathway and is priced separately from certification. The part most providers get overcharged for is the document foundation, and that is exactly what bluetail makes affordable.
How long does NDIS registration and the audit take?
Plan for several months end to end rather than weeks. The application and self-assessment, finding and booking an auditor, the audit itself, the auditor writing their report, and the Commission making its decision each add time. Verification is usually quicker because it is document-based. Certification takes longer because of the two stages and scheduling the on-site visit. Getting your documents and evidence in order early is the part most within your control.
What is the difference between a verification and a certification audit?
It comes down to the registration groups you apply for, not your profession. Verification is the lighter, desktop-based pathway for lower-risk groups such as therapeutic supports, plan management, household tasks, assistive technology and home modifications. Certification is the fuller pathway for higher-risk groups such as personal care, supported independent living, community participation, early childhood supports, support coordination and behaviour support. Certification is assessed against the Core Module plus any supplementary modules your supports trigger, and includes an on-site visit with interviews.
What is an Initial Scope of Audit?
It is the document the NDIS Commission emails after you submit your registration application. It confirms your audit type (verification or certification), your registration groups, the standards you will be assessed against and what to share with the auditor. You give it to approved quality auditors to get quotes, so check it carefully and raise anything that looks wrong with the Commission before you pay for audit work.
Do unregistered NDIS providers get audited?
No. Unregistered providers do not go through the registration audit. They still have to follow the NDIS Code of Conduct, and the NDIS Commission can act on complaints about them. Some supports can only be delivered by registered providers, and the new NDIS laws are expected to progressively expand mandatory registration to higher-risk supports from July 2027.
Can I pass an NDIS audit without paying a consultant?
Yes. The requirements are published openly by the NDIS Commission, so none of it is secret. Plenty of providers register without a consultant. What you need is the document foundation an auditor expects, tailored to how you actually work, plus the day-to-day records that show you follow it. A consultant assembles that for you and charges accordingly. You can do the same work yourself, which is the whole reason bluetail exists.
How often do I need to be re-audited?
NDIS registration is granted for up to three years. You go through another audit before it expires to renew your registration. Certification providers also have a mid-term audit around 18 months in; verification providers do not. Staying audit-ready between audits, by keeping your records and registers current, makes each renewal far less stressful than starting from scratch.
This guide is general information, not legal advice, and the NDIS Commission is the source of truth. These documents prepare you for NDIS registration. They don’t register you. Becoming a registered provider also requires insurances, worker screening checks, the NDIS Worker Orientation Module, myID/RAM portal access, a free application to the NDIS Commission, and passing an audit by an approved quality auditor. We give you everything documents can do; the rest is up to you.