What an approved quality auditor does
The NDIS Commission does not audit providers itself. When you apply for registration, or renew it, an approved quality auditor checks whether you meet the NDIS Practice Standards that apply to your registration groups, then sends a report and recommendation to the Commission, which makes the decision.
Approved quality auditors are private certification bodies, not part of the Commission. They are accredited by the Joint Accreditation System of Australia and New Zealand (JASANZ), which manages the scheme for the Commission and monitors auditors, and their audit staff must complete the Commission's auditor training.
How to find one
The Commission publishes the official list on its Find an auditor page, with each company's phone, email, website and ABN. Every auditor on the list works Australia wide. Only bodies on that list can carry out NDIS registration audits, so check the list rather than relying on a company's own claims.
The Commission is not currently accepting applications from new auditing bodies. It paused new applications as part of the wider reforms and says it will keep that decision under review during 2026, so the list is not growing at the moment.
Quotes and engaging an auditor
After you submit your registration application, the Commission gives you an initial scope of audit that says which audit you need and which standards apply. Then:
- Contact several auditors from the list and ask for a quote. The Commission's guidance says auditors provide a free, no obligation quote
- Compare price, timing and experience with your type of supports
- Accept a quote and give that auditor your unique application reference number so they can associate with your application in the portal
- Agree the final scope of audit with the auditor before the audit starts
- You are free to choose and change your auditor, and auditors must not try to influence that choice
What happens in the audit
A verification audit is a desktop review and needs at least one auditor. A certification audit needs at least two auditors and includes an onsite stage, with visits, staff file sampling and interviews with workers and participants, who are included unless they opt out.
Each standard is rated from 0 to 3: 3 conforms with elements of best practice, 2 conforms, 1 is a minor non conformity and 0 is a major non conformity. If you receive a 0 or 1, you must give the auditor a corrective action plan within seven calendar days of their request.
The auditor must submit the report to the Commission within 14 days of finishing a verification audit, and within 28 days of a certification or mid term audit. If an auditor identifies a critical risk to participant safety, they must notify the Commission immediately or within 24 hours.
Independence and conduct
Auditors follow a code of conduct in the NDIS auditor guidelines. They must report accurately and without bias, must not accept any inducement, gift or commission from an interested party, and must not promote business interests they are connected to. An auditor assesses you, but is not there to consult or coach you.
If you have a complaint about an approved quality auditor, the Commission has a process for it. The NDIS Act also allows the Commission to make a banning order against an auditor whose approval has been revoked.
Tips for choosing an auditor
- Ask how many audits they have done for your registration groups and size of business
- Ask for a breakdown of auditor days and travel costs, especially if you have several sites
- Check their availability against your timeline. For certification, the onsite stage should happen within 3 months of the desktop stage
- Ask how they handle participant interviews, including accessible communication
- Budget for the mid term audit if you need certification, and for renewal three years later