Starting an NDIS service involves decisions that reach well beyond your business name and the supports you’d like to offer. Who will supervise workers? How will participants raise concerns? What happens when something goes wrong outside office hours?
Registration brings those questions into focus. It asks you to demonstrate that your organisation can deliver its proposed services safely and meet the standards that apply.
The NDIS Quality and Safeguards Commission manages provider registration, including assessing suitability and deciding whether to approve an application. An audit is part of that process, and ongoing responsibilities continue after approval.
Whether you’re preparing an application or reviewing an existing service, the useful starting point is the same: be clear about what you deliver, who is responsible and how your systems work in everyday practice.
Steps to Register as an NDIS Provider
To register as an NDIS provider, identify your proposed services, complete the Commission’s application and self-assessment, engage an approved quality auditor and undergo the Commission’s suitability review. The registration groups you apply for determine the standards and audit requirements relevant to your service. Before opening the application, write a plain-language description of your intended service. Include the people you plan to support, the tasks workers will perform, where support will happen and the skills those tasks require.
This helps you choose registration groups that match what you can deliver.
Prepare Your Organisation’s Information
The Commission’s application guidance requires an Australian Business Number, organisational and key personnel details, information about proposed supports and relevant supporting evidence. It also explains the worker screening checks required for key personnel and workers in risk-assessed roles.
Gather this information early. Inconsistent details or missing screening information can create avoidable delays.
Your preparation should also include checking whether the people responsible for rostering, supervision, complaints and incidents understand their roles. A policy is more useful when someone can explain how they would follow it during a busy shift.
Complete the Application and Self-Assessment
Use the Commission’s current application instructions and portal. Describe your arrangements accurately and support your self-assessment with evidence.
Be candid about your service scope. Applying for extra registration groups simply to broaden your marketing creates additional responsibilities that your organisation must be ready to meet.
Arrange the Appropriate Audit
The Commission provides an initial scope of audit identifying the required assessment. Broadly, verification applies to lower-risk, lower-complexity services, while certification applies to higher-risk or more complex services. Use that scope to obtain quotes from approved quality auditors.
There is no Commission registration application fee, but you pay for the independent audit. Audit costs vary, so compare what each quote includes.
Complete the Review Process
Address any issues identified through the audit and respond to requests for further information. The auditor submits a recommendation, but the Commission makes the registration decision after considering the application and suitability of the organisation and its key personnel.
If approved, read the certificate and conditions carefully. They define the scope of your registration and the obligations attached to it.
Requirements to Become an NDIS Registered Provider
An applicant must demonstrate suitability, meet the NDIS Practice Standards relevant to its proposed supports and complete the required assessment process. Requirements depend on the services involved, so preparation should follow your actual registration scope.
The practical question is whether your organisation can turn its written commitments into reliable support.
Imagine a participant’s usual worker calls in sick before a morning shift. Your continuity arrangements should help the team identify an appropriate replacement, communicate with the participant and escalate any support gap. Staff shouldn’t have to invent that process on the day.
The following areas deserve particular attention when preparing your service.
| Area | What to Be Ready to Explain |
| Governance | Who makes decisions, oversees quality and acts on identified risks. |
| Worker suitability | How you check screening, qualifications, training and competence for assigned tasks. |
| Participant choice | How people influence their support and receive information they can understand. |
| Complaints | How someone raises a concern and how it is followed through. |
| Incident management | How workers respond, record events and escalate concerns promptly. |
| Service continuity | What happens when staffing, equipment or other arrangements change unexpectedly. |
| Information management | How records remain accurate, accessible to authorised people and protected. |
The precise evidence required will depend on the applicable standards and audit scope. During certification audits, auditors may examine records, observe practice and speak with staff and participants about how services operate.
Match Worker Capability to the Support
A broad job title doesn’t establish competence for every task. Your preparation should connect each proposed support with the qualifications, training, supervision and escalation arrangements it needs.
For example, saying “our workers support people with complex needs” gives little detail. Explaining how workers are prepared for a particular participant’s support tasks is much more useful.
The NDIS Code of Conduct applies to both registered and unregistered providers and their workers. Registration is therefore part of a wider responsibility to deliver safe, respectful support.
Plan for Responsibilities After Approval
Registration needs ongoing attention. Keep your certificate, conditions, renewal dates and audit requirements visible to the people responsible for managing them.
Providers that initially complete a certification audit generally require a mid-term audit 18 months into their registration period. Other audits may also be required in particular circumstances.
A useful internal review asks whether your records reflect what happens in practice. If a complaint exposed a communication gap, can you show what changed? If a worker needed further training, can you show how that was completed and checked?
What Are the Reporting Obligations for NDIS Service Providers?
Registered NDIS providers must notify the Commission of reportable incidents and relevant organisational changes, meet any service-specific reporting requirements and maintain supporting records. Reporting obligations differ by event and service type, so assign responsibility for each requirement rather than treating reporting as one general administrative task.
Reportable Incidents
Reportable incidents include events that happened—or are alleged to have happened—in connection with delivering NDIS supports or services. Recording an incident internally does not replace notifying the Commission when notification is required.
The Commission specifies these notification timeframes:
| Reportable Incident | Notification Deadline After Becoming Aware |
| Death or serious injury of a person with disability | Within 24 hours |
| Abuse or neglect | Within 24 hours |
| Unlawful sexual or physical contact, or assault | Within 24 hours |
| Sexual misconduct, including grooming | Within 24 hours |
| Unauthorised restrictive practice, or use inconsistent with a behaviour support plan, without resulting harm | Within five business days |
| Such a restrictive practice resulting in harm | Within 24 hours |
Additional information is generally required through the five-day report within five business days of awareness. Providers should follow the Commission’s instructions for the relevant incident category.
Build an escalation process that works outside normal office hours. Workers need to know who to contact immediately, and the responsible person needs a backup when unavailable.
Because allegations are included, waiting for an internal investigation to finish can mean missing a reporting deadline.
Changes to the Organisation or Service
Registered providers must notify the Commission of relevant changes, including changes to key personnel, ownership, service locations and the supports delivered. Significant events affecting service delivery or suitability also require notification.
This can include a serious staffing shortfall or a decision to stop delivering services. It helps to make regulatory notification a specific step in operational decisions, with a named person responsible for checking the requirement and completing it.
Restrictive Practice Reporting
Providers implementing regulated restrictive practices have additional reporting duties. Monthly reporting includes reporting when an authorised practice was not used, and reports are due within five business days after the end of the month. Unauthorised use follows the reportable-incident pathway.
Keep these reporting processes distinct so a monthly submission isn’t mistaken for an incident notification.
Records and Follow-Up
Accurate records help explain what happened, how the participant was supported and what action followed. They also make it easier to identify recurring issues and improve the service.
For each reporting process, establish:
- Who reviews the information and submits the report.
- How deadlines are tracked.
- Where supporting records are stored.
- Who responds to further requests.
- How agreed actions are checked and completed.
A report marked “submitted” is one step. The organisation still needs to follow through on the issues it identified.
Preparing Your Next Step
Start with the Commission’s current registration guidance and your proposed service scope. Map each requirement to a responsible person, supporting evidence and a process staff can use.
For an existing provider, review what has changed since registration: your services, workforce, leadership and reporting arrangements. Good governance shows up in the everyday details: clear communication, capable workers and concerns that receive a timely response.
For another way to stay engaged with NDIS topics, explore Steadway’s NDIS podcast as an additional resource alongside the Commission’s official guidance.
