NDIS Policies and Procedures: What Providers Actually Need

Documented policies and procedures are mandatory for NDIS registration, auditors assess your compliance with the Practice Standards largely through them. This guide lists the documentation a registered provider needs, organised by Practice Standards area, and explains what auditors expect each document to do.

Last updated: 11 June 2026

The four layers of NDIS documentation

A compliant documentation system has four layers, and audits test all of them:

  1. Policies, your organisation's commitments and rules (what you do and why).
  2. Procedures, step-by-step instructions staff actually follow (how, who, when).
  3. Forms and templates, service agreements, consent forms, assessments, care plans, checklists.
  4. Registers and records, the living evidence: incident registers, complaints logs, training records, completed forms.

The most common audit failure isn't a missing policy, it's a policy with no procedure, form, or register behind it. Auditors call this a system that "exists on paper only."

Core documentation every registered provider needs

Rights and safeguarding

  • Participant rights and person-centred supports policy
  • Privacy, dignity, and confidentiality policy with consent forms
  • Independence, informed choice, and supported decision-making procedure
  • Violence, abuse, neglect, exploitation, and discrimination prevention and response procedure
  • Easy-read participant handbook and rights information

Governance and risk

  • Governance framework and delegations of authority
  • Risk management policy, methodology, and organisational risk register
  • Conflict of interest policy and register
  • Business continuity and emergency/disaster management plan
  • Information management policy covering records, retention, and data breaches

Quality, incidents, and complaints

  • Quality management and continuous improvement policy with improvement register
  • Incident management procedure aligned to the NDIS reportable incident rules, with register and notification forms
  • Complaints and feedback procedure with register and easy-read complaint forms
  • Internal audit schedule and templates

Workers

  • Recruitment, screening, and induction procedures
  • NDIS Worker Screening policy with clearance register
  • Training and competency framework with training register
  • Code of conduct, position descriptions, and performance management procedure
  • Supervision and support arrangements

Service delivery

  • Intake, access, and exit procedures with eligibility and prioritisation rules
  • Service agreement template in accessible language
  • Individual risk assessment and support planning templates
  • Progress note standards and templates
  • Transition planning procedure for entries and exits

Support environment

  • Work health and safety policy and procedures, including home-visit safety
  • Infection prevention and control procedure
  • Medication management policy, administration records, and error procedure
  • Mealtime management procedure where relevant
  • Participant money and property safeguards
  • Vehicle and equipment safety and maintenance logs

Module-specific documentation

Specialist registration groups add a documentation layer each. The Practice Standards modules drive what's needed:

  • Module 1, high intensity supports: clinical procedure for every skills descriptor you deliver (complex bowel care, enteral feeding, tracheostomy, catheter, ventilator, subcutaneous injections, complex wounds, dysphagia), health care plan templates, RN delegation and oversight framework, and competency assessment records.
  • Modules 2 and 2a, behaviour support: functional behaviour assessment templates, behaviour support plan development procedures, restrictive practice authorisation and reporting processes, implementation and monitoring records, and a restrictive practices register.
  • Module 3, early childhood supports: family-centred practice framework, developmental assessment templates, family collaboration and goal-setting records, and transition plans.
  • Module 4, specialised support coordination: coordination procedures for complex needs, crisis planning and response procedure, conflict of interest controls, and multi-agency communication records.
  • Module 5, SDA: dwelling enrolment records, tenancy management framework, property maintenance schedules, and dwelling-level emergency procedures.

Build, buy, or commission?

Three realistic options, honestly compared:

  • Write your own. Cheapest in cash, most expensive in time, typically several weeks of focused work, and it demands real familiarity with the Practice Standards quality indicators. Risky as a first-time provider; reasonable if you've worked in NDIS quality roles before.
  • Start from a professional template package. The middle path most new providers take. A complete, standards-mapped set arrives finished; you customise names, roles, and operational detail to match your business. Our package covers all of the documents listed on this page , Core Module plus Modules 1 to 5, 220+ documents in editable Word format, for a one-time $1,500.
  • Commission a consultant. Highest cost ($5,000–$15,000+), useful when your registration is genuinely complex, multiple sites, clinical governance, or restrictive practices from day one.

Whichever route you choose, the rule auditors apply is the same: documents must reflect how your organisation actually operates. Customisation isn't optional, it's the difference between a template and your policy. See how our process works, or check what auditors will ask for in the audit checklist.

Frequently Asked Questions

How many policies does an NDIS provider need?
There's no fixed number in the rules, you need documented systems covering every Practice Standards outcome in your audit scope. In practice, a certification-pathway provider typically ends up with 30 to 60 policies and procedures plus the forms, templates, and registers that support them, and more when specialist modules apply. Complete document sets, like our 220+ document package, also include the operational paperwork: care plans, consent forms, checklists, and registers.
Can I just download free NDIS policy templates?
Free templates exist, but they're usually fragments: a policy here, a form there, rarely mapped to current Practice Standards outcomes and almost never covering specialist modules. Auditors flag generic documents that don't match your registration groups. Whatever the source, your documents must be customised to how your organisation actually operates.
Do unregistered providers need policies and procedures?
They aren't audited, but they still must comply with the NDIS Code of Conduct, work health and safety law, and privacy law, all of which are far easier to demonstrate with documented procedures. Plan managers and participants also increasingly ask unregistered providers for evidence of incident and complaints processes before engaging them.
How often should NDIS policies be reviewed?
Annually is the common convention, plus immediately after incidents, complaints, legislative changes, or audit findings that expose a gap. Auditors look for version control and review dates, a policy suite all dated the week before the audit is a red flag, while staggered, genuine review records signal a working quality system.

Related Guides

Need Audit-Ready NDIS Registration Documents?

Our complete package includes 220+ editable policies, procedures, forms, and registers covering the Core Module and Modules 1 to 5. One-time payment of $1,500 AUD.

See What's Included View Pricing