NDIS audit checklist for small providers and sole traders

Most NDIS providers fail audits for the same handful of reasons. None of them are complicated. They are all documentation problems, and they are all preventable if you know what auditors look at.

This guide is a practical checklist for sole traders and small providers who either have an audit coming up or have just registered and want to know what good looks like. It also explains what auditors flag most often and how that connects to the daily task of writing notes.

Which audit applies to you

Two main types of audit run under the NDIS Practice Standards.

Verification audit. For lower-risk supports and lower-complexity providers. Most sole traders and small providers fall into this group. The audit is conducted remotely. You submit documents, the auditor reviews them, and you have a phone interview. Happens every three years.

Certification audit. For higher-risk or complex supports such as Supported Independent Living, behaviour support, and some allied health services. Two stages: a document review plus an onsite visit. Auditors interview workers and participants in person. There is a mid-term audit at 18 months as well as the full audit every three years.

If you provide community access, daily living assistance, or transport supports, you are most likely looking at a verification audit. If you deliver SIL or specialist behaviour support, you are looking at certification.

The seven-section audit checklist

This is the core. Work through each section before your audit. Anything you cannot tick off is a gap to close.

A. Worker screening

• All workers have a current NDIS Worker Screening Check (NDIS WSC).
• Expiry dates are tracked. Anything within six months of expiring is flagged.
• All workers have completed the NDIS Worker Orientation Module.
• Records are stored securely and can be retrieved on request, not buried in someone's email inbox.
• Contractors and volunteers are screened to the same standard as employees.

B. Progress notes and documentation

• Notes are written by the worker who delivered the support, not by a manager filling in afterwards.
• Notes are written promptly. Same day where possible.
• Notes reference the participant's NDIS goals.
• Notes are specific and observable, not generic or copy-pasted.
• Notes are stored securely with timestamps that match the shift, not the date the note was written.
• No identical notes appear across multiple shifts.

C. Incident management

• Reportable incidents are logged and reported to the NDIS Commission within the required timeframes.
• Near-misses are documented even if they do not reach the threshold of a reportable incident.
• An incident register is maintained and up to date.
• Workers can describe what counts as a reportable incident if asked.

D. Complaints management

• A complaints register exists and is maintained.
• Participants have been informed of their right to complain.
• Information on how to contact the NDIS Commission is available to participants.
• Complaints are documented even if resolved informally.

E. Policies and procedures

• Policies cover privacy, incident management, complaints, code of conduct, and work health and safety.
• Policies are current. Each one is dated and version-controlled.
• Workers have been trained on the policies and the training is documented (signed acknowledgements, training records, or both).

F. Participant files and support plans

• A current support plan exists for each participant.
• The support plan is person-centred and references the participant's goals.
• A signed service agreement is on file for each participant.
• Participant consent is documented, including for sharing information with other providers where relevant.

G. Worker qualifications and training

• Required qualifications are documented for each registration group you deliver under.
• First aid and manual handling certifications are current.
• Mandatory training is completed: Worker Orientation Module plus any registration-group-specific requirements.

What auditors flag most often

Four patterns come up over and over in audit reports.

1. Progress note quality. This is the number one documentation problem. Generic, vague, or copy-pasted notes are the most common non-conformance finding by a wide margin. An auditor who reviews twenty notes and finds the same three sentences repeated across different days will flag it on the spot.

2. Missing or lapsed worker screening. Easy to fix in principle, easy to miss in practice. Especially common for contractors and casuals. An unscreened worker delivering NDIS supports is a serious non-conformance, and auditors know to check the dates.

3. Policies that exist on paper but are not implemented. Having a complaints policy is not the same as workers knowing what to do when a participant wants to complain. Auditors will interview your workers. If your team cannot describe your complaints process in their own words, the policy alone does not help you.

4. Support plans not aligned to NDIS goals. Supports should clearly relate to what is in the participant's NDIS plan. If your notes and support plans do not reference the goals, the auditor cannot see the connection between the support you are delivering and what the participant is funded for.

What this means for your progress notes

Most of the documentation side of an audit is decided before the audit starts. If your team writes good notes consistently, the audit reveals notes that meet the standard and you have nothing to scramble for. If your team writes vague or copy-pasted notes, no last-minute documentation push will fix the pattern.

A few habits that work in practice:

Build the goal reference into the template. If the field is right there on the form, workers fill it in. If it is an afterthought, they skip it.

Review a sample monthly. Pick five random notes and check them against the checklist above. Patterns become visible quickly. If three of Marcus's notes all say the same thing, something is off.

Address the patterns, not the individual notes. A worker who writes vague notes will write twenty more vague notes if you only correct one.

Billa helps here directly. Every note produced through Billa includes a goal reference field by default and structures observations consistently. The notes are timestamped, audit-ready, and goal-aligned out of the box.

Next steps

For the underlying rules behind everything in this checklist, the plain-English guide to the NDIS Practice Standards walks through what the Core Module actually requires.

For workers writing notes day-to-day, the NDIS progress note template gives you a structure that matches what auditors look for.