To prepare for an NDIS audit in Australia, confirm which audit type you face (verification or certification), reconcile your incident and complaints registers against Commission notifications, verify every worker screening clearance, update your policies and continuous improvement log, and make sure your records map to the NDIS Practice Standards. NDIS audit software shortens this from a frantic month to a daily habit by capturing audit evidence as you work.
Picture the email landing on a Tuesday. Subject line: your renewal audit has been scheduled. You have six weeks.
For one provider in Brisbane, that email arrived while she was mid-roster, three staff short, and quietly hoping the audit was still a year away. It wasn't. What followed was the kind of month nobody puts on a brochure: late nights rebuilding a spreadsheet, chasing a support worker's expired first-aid certificate, and discovering that two incidents from last winter were never formally closed.
She passed. Barely. And she swore she'd never do it that way again.
Here's the thing about NDIS audits. They feel like an exam you can cram for, but they're really a measure of how you've operated all along. The good news is that preparation is entirely learnable, and the right NDIS audit software turns the whole exercise from a panic into a non-event. Let's walk through exactly how.
What NDIS audit software actually does
Before the prep plan, a definition worth getting right.
NDIS audit software is a system that captures, organises, and time-stamps the evidence a registered provider needs to prove compliance with the NDIS Practice Standards. It pulls your incidents, complaints, worker screening, service agreements, staff credentials, and payroll records into one place, and crucially, it shows when each record was created and what changed.
That last part is the whole point. An auditor doesn't just want to see a record. They want to trust it hasn't been tidied up the night before. A spreadsheet can hold data. It can't prove the data is honest. Purpose-built audit software can.
Think of it as the difference between telling an auditor you've been compliant and showing them. One is a claim. The other is evidence.
The two NDIS audit types, and which one you're facing
Your preparation depends entirely on your audit type, and providers who skip this step prepare for the wrong exam.
Verification audit | Certification audit | |
|---|---|---|
Who gets it | Lower-risk supports (plan management, basic equipment, some therapies) | Higher-risk or complex supports (personal care, SIL, behaviour support) |
Structure | Document and desktop review | Two stages, including an on-site visit |
Measured against | Verification module requirements | Full NDIS Practice Standards and Quality Indicators |
Effort | Lighter | Heavier and longer |
On-site interviews | Usually not | Yes, staff and participants |
If you deliver personal care or supported independent living, assume a certification audit. That means a Stage 1 desktop review of your systems, followed by a Stage 2 on-site visit where the auditor interviews your team and checks whether your actual practice matches your written policies. For the room-by-room breakdown of that visit, our guide to what NDIS auditors check covers it in detail.
The official NDIS Commission guidance on audit types confirms which path applies to your registration groups. Check it early, because it sets everything else.
How much does an NDIS audit cost?
Money is the question everyone wants answered and few sites answer honestly, so here's the straight version.
Audits in Australia are conducted by approved quality auditors, which are commercial bodies, not the Commission. That means fees vary by your provider size, the number of registration groups you hold, and the auditor you choose. There's no fixed government price.
As a working guide:
Audit type | Commonly reported cost range | What drives it up |
|---|---|---|
Verification audit | A few hundred to roughly $1,500 | More registration groups |
Certification audit (small provider) | Roughly $3,000 to $6,000 | Number of sites and supports |
Certification audit (mid to large) | $6,000 to $15,000 and beyond | Multi-site, complex supports, larger workforce |
So when someone searches "how much does an NDIS verification audit cost," the honest answer is: get two or three quotes from approved quality auditors, because the spread is real. Treat any single figure online as a starting point, not a promise.
A common follow-up: is an NDIS audit tax deductible? Generally yes, an audit fee is an ordinary business expense, but confirm your specifics with a registered tax agent. That's their call, not ours.
The bigger cost, though, isn't the auditor's invoice. It's the staff hours lost to last-minute preparation, and the far larger cost of failing. Which brings us to the question that keeps owners awake.
How do you know if you're actually compliant?
Most providers have a gut feeling about their compliance. The gut is usually wrong, in one direction or the other. Here's a sharper test. Walk through these red flags honestly:
Your incident register has gaps. Incidents recorded but never investigated or closed. Or worse, a Priority 1 incident notified to the Commission after the 24-hour deadline.
A worker screening clearance is "pending." One unverified clearance on an active roster is a serious non-conformity on its own.
Your policies are older than your newest staff member. A policy last reviewed in 2019, unsigned by your Authorised Executive Officer, tells an auditor the system isn't alive.
Your continuous improvement log is empty. An empty log doesn't read as "nothing went wrong." It reads as "nothing was recorded."
Your evidence lives in four places. Rostering in one app, payroll in Xero, compliance in a shared drive, incidents in an inbox. On audit day, you're the human glue.
You can't run the 10-second test. Pick a staff member. Try to produce their clearance, qualifications, and training status in ten seconds. If you can't, neither can your system.
If two or more of those land, you have findings waiting to happen. That's not a reason to panic. It's a map of what to fix first.
What happens if you fail an NDIS audit?
Let's name the fear directly, because the search data shows it's the real one. People genuinely worry about what happens if their NDIS provider fails an audit.
Failing rarely means instant shutdown. It usually means non-conformities, graded by severity:
Minor non-conformity. A small gap, like a single missing document. You'll get a corrective action and a short window to fix it.
Major non-conformity. A systemic gap, like multiple late incident notifications. This triggers a corrective action plan and a follow-up audit to confirm you've fixed it.
Serious or repeated non-conformity. This is where it escalates. The Commission can place conditions on your registration, suspend it, or in the worst cases cancel it. Individuals can face banning orders, and the NDIS Act allows civil penalties.
Losing registration is the outcome behind the fear, and it's serious: you can't bill the NDIS, your participants need new providers, and your team's jobs are at risk. But it's the end of a long road of ignored warnings, not the result of one imperfect audit. Providers who engage with their corrective actions almost always keep their registration.
The lesson isn't to fear the audit. It's to make sure your evidence is in order long before the auditor knocks.
Your six-week NDIS audit preparation plan
When that scheduling email lands, here's the sequence that works. Run it in order, because each step surfaces the gaps the next one depends on.
Week 1: Confirm scope and reconcile incidents.
Confirm your audit type and registration groups. Then reconcile your incident register against your Commission notifications. Every reportable incident lodged on time, investigated, and closed. This is the first thing most auditors sample, so it's the first thing you fix. Our NDIS incident reporting audit guide breaks down the register fields auditors check first.
Week 2: Verify every worker screening clearance.
Check every staff member in a risk-assessed role has a portal-verified NDIS Worker Screening Check. No "pending," no exceptions. Stand down anyone whose clearance can't be confirmed until it is.
Week 3: Audit your participant files.
Pull a sample of files. Each needs a current service agreement, dated consent, current goals, and a recent review. Thin files are a quiet, common failure.
Week 4: Refresh policies and the improvement log.
Confirm every policy is dated, version-controlled, and signed by your AEO. Populate your continuous improvement log with real entries from the past twelve months, the gaps you found and what you did about them.
Week 5: Run an internal mock audit.
Sit a staff member down and ask them your own policy questions. How do they report an incident? How do they handle a complaint? If their answers surprise you, that's the gap an auditor will find too.
Week 6: Compile your evidence pack and breathe.
Assemble everything in one place, mapped to the Practice Standards. If you're running NDIS audit software, this step is mostly automatic. If you're on spreadsheets, this is the all-nighter. Auditpilot's audit preparation resources are a reasonable companion for the manual route.
How NDIS audit software changes the maths
Here's where the software question stops being abstract. Every step above either happens automatically or happens manually at 11pm. The platform you use decides which.
Before you buy any NDIS audit software, run these five tests. Including on ours. Any vendor who won't let you test them in a trial has answered the question for you.
The 10-second test. Find a staff member's clearance, qualifications, and training status in under ten seconds.
The Sunday shift test. Show the SCHADS calculation for a past casual Sunday shift: base rate, casual loading, penalty rates, in order, with the formula visible. If the answer is "check Xero," that's a no.
The deleted-row test. Change an incident record, then ask the system who changed it and when. No answer means no audit trail.
The budget test. Try to roster a shift past a participant's plan budget. A warning you can click past is advice. A block is control.
The standards map test. Ask where the evidence for a specific Practice Standard lives. A pause means the mapping doesn't exist.
A platform that passes all five turns audit prep from an event into a property of your daily operation. For the full buyer's comparison, see our guide to the best NDIS compliance software in Australia.
Insert image here: the five-test scorecard providers can take into vendor demos. Alt text: "Five tests to run on NDIS audit software before buying, including the SCHADS Sunday shift test."
Which software do auditors and providers actually use?
A quick untangling, because the search results conflate two different things.
Approved quality auditors (the firms that audit you) use their own internal audit management tools. You can't buy those and you don't need to. What you need is provider-side software that produces the evidence those auditors will ask for.
When providers browse the Australian NDIS software market, the options fall into three honest buckets:
The toolkit stack. A rostering app plus Xero or MYOB plus a shared drive. Familiar and fine for very small operations. The hidden cost is that your evidence lives in four places and you reconcile it under pressure.
NDIS practice management platforms. ShiftCare, Brevity, Vertex360. Strong on rostering and claiming. Compliance is present but partial, and payroll is usually delegated outward.
Audit-ready operating systems. One platform where every workflow produces evidence by default. Newer AI-led entrants like NDIS Pulse sit here too, alongside CareVisor.
The right bucket depends on your size. Sole trader with three participants? A careful spreadsheet still works. Running 10 or more staff with an audit inside twelve months? The calculation changes, because the evidence you'll need in that audit is being created, or missed, every single shift between now and then.
Insert image here: a real CareVisor compliance dashboard screenshot showing the audit readiness score. Alt text: "CareVisor NDIS audit software dashboard showing real-time audit readiness for an Australian provider."
Where CareVisor fits
CareVisor is the audit-ready operating system for Australian NDIS providers, built in Sydney by operators who have sat on the provider side of Quality and Safeguards Commission audits. Rostering, incident reporting, claiming, participant management, and SCHADS payroll all produce time-stamped audit evidence as a by-product of daily work.
Three things in CareVisor don't exist together anywhere else: a SCHADS formula audit trail logged per shift, a hard budget block at the point of rostering, and a compliance dashboard that shows your audit readiness in real time, before an auditor ever sees it.
It isn't right for everyone, and we'll say so plainly. But if your last audit prep felt like that Brisbane provider's month, it was built to make sure the next one doesn't.
The bottom line
Preparing for an NDIS audit comes down to a single discipline: capture your evidence as you work, so audit day is a confirmation rather than a reconstruction. The audit type sets the depth, the costs are real but survivable, and failing is the end of a long road of ignored warnings, not one bad week.
The providers who breeze through aren't luckier. Their systems simply remembered everything, so they didn't have to.
See where you stand in 7 days. Start a free CareVisor trial, load your real data, and check your audit readiness score on day one. Ahmed personally walks every trial provider through their results on day 6. No credit card, no lock-in until you choose one.
Start your free 7-day trial → Click
FAQS
1. What is NDIS audit software?
NDIS audit software is a system that captures, organises, and time-stamps the compliance evidence a registered provider needs for an NDIS audit. It consolidates incidents, complaints, worker screening, service agreements, staff credentials, and payroll records into one place, and shows when each record was created or changed.
2. How do I prepare for an NDIS audit in Australia?
To prepare for an NDIS audit, confirm your audit type, reconcile your incident and complaints registers against Commission notifications, verify every worker screening clearance, update policies and your continuous improvement log, then run an internal mock audit. NDIS audit software automates most of this by capturing evidence as you work.
3. What are the two main NDIS audit types?
The two main NDIS audit types are verification and certification. A verification audit is a lighter document review for lower-risk supports. A certification audit applies to higher-risk supports like personal care or supported independent living, and runs in two stages, including an on-site visit.
4. How much does an NDIS verification audit cost?
An NDIS verification audit typically costs from a few hundred dollars to around $1,500, depending on your registration groups. Certification audits cost more, commonly $3,000 to $15,000 or higher for larger providers. Fees are set by approved quality auditors, not the NDIS Commission, so get two or three quotes.
5. How often do NDIS providers get audited?
NDIS registration lasts up to three years, and providers are audited at initial registration, again at a mid-term review for certification, and at renewal before registration expires. A serious incident or complaint can also trigger an unscheduled audit at any time.
6. What happens if you fail an NDIS audit?
Failing an NDIS audit rarely means instant shutdown. It usually results in non-conformities graded minor or major, with a corrective action plan and a follow-up audit. Serious or repeated breaches can lead to conditions on registration, suspension, or in the worst cases, cancellation.
7. How do I know if my NDIS organisation is compliant?
You can test NDIS compliance by checking for red flags: gaps or late notifications in your incident register, pending worker screening clearances, policies not reviewed in 12 months, an empty continuous improvement log, and evidence spread across multiple disconnected tools. Two or more signals findings waiting to happen.
8. Is NDIS audit software worth it for small providers?
NDIS audit software is worth it once you reach around 10 staff or face an audit within 12 months, because audit evidence is created every shift. Very small providers may manage with spreadsheets, but the cost of failing an audit far outweighs a monthly software subscription.
About CareVisor
CareVisor is the audit-ready operating system for Australian NDIS providers, built in Sydney by NDIS operators who have prepared for and passed Quality and Safeguards Commission audits firsthand. Every workflow maps to the NDIS Practice Standards. The evidence auditors ask for, including your incident register, worker screening verifications, service agreements, SCHADS payroll calculation order, and continuous improvement log, is captured by default with a time-stamped audit trail. Used by providers from Sydney to Perth, CareVisor turns NDIS audit preparation from a once-a-year scramble into a daily operational habit. Start your free 7-day audit-readiness trial at carevisor.com.au.
