ONGOING COMPLIANCE & INTERNAL AUDIT

Compliance Isn't
a One-Time Event.

Most providers put enormous effort into getting registered — then treat compliance as something to deal with when the next audit comes around. That gap is exactly where problems build. We help registered providers stay compliant year-round, not just when it's urgent.

Don’t Wait for an Audit to Fix Compliance

Small gaps turn into big problems when ignored. We help you stay ahead, reduce risk, and keep your business protected.

Spot issues before auditors do
Stay aligned with NDIS requirements
Avoid penalties, delays, or registration risks
Book a Free Strategy Call
Trusted by 500+ providers
Three people sitting at a table indoors having a discussion, with a laptop and notebooks on the table.

The Compliance Reality

Registration Proves You Were Compliant on One Day. Ongoing Compliance Proves It Every Day After.

The NDIS Commission requires registered providers to maintain their compliance continuously. That includes annual internal audits, active continuous improvement records, current documentation, and evidence that your systems are actually being used — not just existing on paper.

Policies written for registration that no longer reflect how the business operates
Incident and complaint registers that exist but haven't been maintained
Staff changes that weren't followed by proper induction and training documentation
Annual internal audits that are required — but have never actually been done
Practice Standards that have been updated since the original audit

What's Required

What the NDIS Commission Actually Expects from Registered Providers

Many registered providers don't have a full picture of what ongoing compliance actually requires. These aren't optional — they're conditions of your registration.

Annual Internal Audits

The Practice Standards require you to internally audit every applicable indicator at least annually. Not as preparation for an external audit — as an ongoing obligation. Most providers don't do this. Many don't know they're supposed to.

Active Continuous Improvement

Your quality management system must show evidence of continuous improvement — not just a register that exists. Auditors look for records of what was identified, what was actioned, and what changed as a result.

Current Documentation

Policies and procedures must reflect how your business actually operates — not how it operated on registration day. As your services, staff, or practices evolve, your documentation must keep pace.

SERVICE OVERVIEW

Three Ways We Help You Stay Audit-Ready

Choose the level of support that fits where you are in your certification cycle — or combine them for continuous, year-round coverage.

Internal Audit Service

We review your systems before the real audit, identify gaps, and help you fix them with clear, compliant documentation.
Full assessment against every relevant Practice Standard indicator
Evidence file review for each compliance requirement
Simulated assessor interview — the exact questions you'll face
Continuous improvement and incident register review
Written gap report with severity ratings
Prioritised corrective action plan
Remediation support until all gaps are resolved

Recertification Preparation

We prepare your business ahead of recertification so you stay ready, organized, and avoid last-minute stress.
Full readiness assessment against your registration scope
Documentation gap identification and remediation
Policy updates to align with current Practice Standards
Evidence compilation and file organisation
Pre-audit mock interview coaching
Compliance training for key staff
Ongoing support through the assessment process

Ongoing Compliance Monitoring

We continuously monitor your compliance so you stay aligned and audit-ready throughout the year.
Quarterly compliance health checks and reviews
NDIS Practice Standards update monitoring
Document revisions when standards change
Staff compliance training support
Quality management system oversight
Incident and complaints process monitoring
SUPPORT

Ongoing Compliance — What Registered Providers Ask

Is an internal audit actually mandatory — or just best practice?
It's mandatory. The NDIS Practice Standards require registered providers to conduct internal audits of every applicable indicator annually as part of their quality management system. Many providers don't realise this is a formal requirement — not a suggestion. If an external auditor finds no evidence of internal audits having been conducted, it results in a non-conformance finding.
We passed our registration audit — do we still need this?
Absolutely. Passing registration means your business met the standards at that point in time. But operations evolve — staff change, documents age, and standards are updated. An internal audit assesses whether how your business runs today still aligns with the Practice Standards, not just how it was set up on registration day. This gap is exactly where most providers are most exposed.
How is your internal audit different from what an external auditor does?
Our internal audit simulates the external process — but in an environment where findings lead to remediation, not formal compliance notices. You get the same scrutiny, the same questions, and the same level of assessment — but with us supporting you through every gap we find. By the time the real external audit arrives, there are no surprises because we've already found and fixed everything.
When is the best time to book a compliance review?
Ideally, at least 3–6 months before any mid-cycle review or recertification audit. This gives you enough time to action findings and produce evidence of continuous improvement — which itself demonstrates a functioning quality management system to external assessors. That said, an internal audit at any point is better than none. The earlier you know your gaps, the earlier you can address them.
What happens if the audit finds serious gaps?
We work through them with you. The gap report is the beginning of the process, not the end. We support you through remediation — updating documentation, building missing systems, training staff, and producing evidence of corrective action. We don't identify problems and leave you to solve them alone.

Not sure which service is right for you?

Book a free 30-minute call. We'll ask a few questions and tell you exactly which path makes sense — with no pressure to buy anything.