NDIS audit readiness mini check

Find the weak spots in your client-file evidence

This free self-check helps providers and practitioners think through the records, controls, and evidence an external registration audit conversation may look for.

It is aligned to public NDIS Commission guidance at a practical checklist level. It does not replace the NDIS Practice Standards, legal advice, registration advice, or an approved quality auditor.

What it checks

Information management and participant consent
Support records, case notes, and evidence of delivery
Client documents, expiry dates, and access control
Incident, complaint, worker, and improvement evidence
Do not enter participant names, NDIS numbers, addresses, or clinical details. This tool only needs yes, partial, no, or not applicable answers.

01 / Information Management

Can you show how each participant is informed about collection, use, storage, disclosure, access, correction, and consent changes?

The Practice Standards expect participant information to be handled with clear consent, purpose, storage, access, and correction processes.

consent formprivacy collection noticeinformation-sharing notes
Can you show how each participant is informed about collection, use, storage, disclosure, access, correction, and consent changes?

02 / Information Management

Are participant records identifiable, accurate, current, confidential, and available to the right workers when needed?

Auditors look for a proportionate information management system, not scattered files that only one person understands.

client profileaccess listrecord update history
Are participant records identifiable, accurate, current, confidential, and available to the right workers when needed?

03 / Record Keeping

Do your support/session records consistently show date, duration, support type, worker/practitioner, and what was delivered?

NDIS record keeping expects complete, accurate evidence of supports delivered and the details needed to verify claims or service history.

case notessupport logstimesheets or appointment records
Do your support/session records consistently show date, duration, support type, worker/practitioner, and what was delivered?

04 / Record Keeping

Do notes and reports connect work back to participant goals, support needs, outcomes, or plan context where relevant?

Good records should make the reason for the support understandable later, especially during review, handover, or audit preparation.

SOAP/progress notesgoal review notesplan context
Do notes and reports connect work back to participant goals, support needs, outcomes, or plan context where relevant?

05 / Client File

Can you quickly find current service agreements, plans, consent forms, reports, assessments, and expiry dates?

External audit preparation becomes harder when required documents are split across email, drives, local folders, and memory.

document registerexpiry trackerservice agreement folder
Can you quickly find current service agreements, plans, consent forms, reports, assessments, and expiry dates?

06 / Privacy And Access

Can you prove only relevant workers can access each participant file, and that access is removed when roles change?

Confidentiality depends on practical access controls, especially for teams, contractors, and changing caseloads.

user rolesclient assignment listoffboarding checklist
Can you prove only relevant workers can access each participant file, and that access is removed when roles change?

07 / Safeguards

Are incidents, complaints, feedback, actions, and outcomes recorded in a way you can review and learn from?

Registration audits commonly examine whether providers have real systems for complaints, incidents, and continuous improvement.

incident registercomplaints registeraction log
Are incidents, complaints, feedback, actions, and outcomes recorded in a way you can review and learn from?

08 / Worker Readiness

Can you show worker checks, qualifications, orientation, CPD/training, supervision, and role suitability evidence?

Verification and certification pathways both rely on documentary evidence that workers are suitable for the supports delivered.

screening checksqualification recordstraining register
Can you show worker checks, qualifications, orientation, CPD/training, supervision, and role suitability evidence?

09 / Governance

Do you keep an internal audit, review, or improvement process that is proportionate to your provider size and supports?

The governance standards expect continuous improvement and internal review, scaled to the organisation rather than copied from a template.

internal audit scheduleimprovement registermeeting notes
Do you keep an internal audit, review, or improvement process that is proportionate to your provider size and supports?

10 / Audit Readiness

If an auditor asked tomorrow, could you produce a clean evidence pack without exposing unrelated participant information?

Audit readiness is partly about having the evidence and partly about sharing it in a controlled, privacy-aware way.

evidence folderexport processredaction process
If an auditor asked tomorrow, could you produce a clean evidence pack without exposing unrelated participant information?