1. Home
2. Guides

Verification and certification audits compared

Your registration groups decide your audit. 23 groups need a verification audit and 15 need a certification audit.¹ One certification group makes the whole application a certification audit.¹

Verification audit

A verification audit is a desktop review of documents by an approved quality auditor. It is for lower risk, lower complexity supports.²

Certification audit

1. Stage 1A desktop audit: the auditor asks for information and evidence, usually off-site.²
2. Stage 2An onsite audit: the auditor looks at how you carry out your policies and procedures. This can include viewing records, visiting your sites, interviewing staff and participants, and observing supports. The Stage 2 onsite audit should take place within 3 months after Stage 1 is complete.²

What auditors do

Depending on your supports, an audit can include site visits to your head office and the places you deliver supports, inspection of sites and equipment, participant interviews, worker interviews, a review of your documents, and requests for more information.²

Auditors look for evidence that your systems work in practice, such as incident reports, complaints records, training logs and supervision notes. A policy on its own is not enough.²

Auditors sample staff files and check worker screening clearances, qualifications, induction records, and ongoing training and supervision.²

Results and findings

The audit report rates each standard and quality indicator: 3 conforms with elements of best practice, 2 conforms, 1 minor non-conformity, 0 major non-conformity.²

A major non-conformity must be fixed within 3 months. Registration does not progress until it is fixed and the audit is complete. A minor non-conformity has a longer period, and registration can continue.²

The auditor sends the report to the NDIS Commission up to 14 days after a verification audit, and up to 28 days after a certification or mid-term audit.²

After registration

Providers registered after a certification audit have a mid-term audit. It covers governance and operational management, any standard that needed a corrective action plan, and any other standard the Commission asks for. The Commission says to start preparing 12 months after your registration date; the auditor's final report must reach the Commission within 18 months.²

Registration lasts 3 years. You can apply to renew in the 6 months before it ends. If you apply before the end date, your registration stays valid until the Commission decides. If you apply after it, your registration has lapsed while the new application is assessed.³

Cost

Registering with the NDIS Commission is free. You pay the approved quality auditor. The cost depends on the size of your organisation and how many participants you support. The Commission does not set audit prices and suggests getting quotes from several auditors.²

Questions

Sources

1. Registration groups or classes of support, NDIS Commission
2. The quality audit process, NDIS Commission
3. Renew your registration, NDIS Commission

Last reviewed 3 October 2026. Rules change: check the sources before you act.

Based on content from the Federal Register of Legislation and the NDIS Quality and Safeguards Commission website, © Commonwealth of Australia, licensed under CC BY 4.0. CareHelm summarised it in plain English. Check the linked sources for the official text. For the latest legislation go to legislation.gov.au.