NDIS verification vs certification audit.
You registered for cleaning and transport. You added personal care because a participant asked. Your next audit is now a two-stage certification — on-site, with worker and participant interviews — instead of the desktop review you were expecting. The audit type follows your registration groups, not your preference, and one certification-level support makes your entire registration a certification. This guide explains the two audit paths, how the NDIS Commission assigns them, and the rule that catches providers out most often.
Verification is a desktop document review for providers delivering lower-risk supports such as plan management or equipment. Certification is a two-stage audit — desktop plus an on-site visit with worker and participant interviews — required for higher-risk supports like personal care, SIL, or behaviour support. The NDIS Commission assigns your audit type based on your registration groups, not your preference.
The short answer
Verification is a lighter, mostly desktop audit for providers delivering lower-risk supports. Certification is a deeper, two-stage audit — including an on-site visit and interviews — for providers delivering higher-risk or complex supports like personal care, supported independent living, behaviour support and support coordination. The NDIS Commission decides which one you need from the registration groups you apply for — and if any single group needs certification, your whole registration is certification.
What is a verification audit?
A verification audit is the lighter-touch pathway. It is usually a desktop assessment — an approved quality auditor reviews a defined set of documents you submit, rather than spending days on site. It applies to providers whose supports carry a lower safeguarding risk: less intensive personal contact, less complexity, lower vulnerability of the people relying on them.
Instead of the full NDIS Practice Standards, a verification provider is assessed against a smaller, defined evidence set — things like worker screening, insurance, complaints and incident handling, and the relevant module for their support type. It is faster, cheaper, and most providers can complete it without an on-site visit.
Typical supports that fall under verification (always confirm against the current NDIS Commission list):
- —Plan management
- —Assistive products, equipment and low-cost assistive technology
- —Minor home modifications and household tasks (such as cleaning and gardening)
- —Assistance with travel and transport arrangements
- —Interpreting and translation
- —Vehicle modifications
What is a certification audit?
Certification is the rigorous pathway, and it is a two-stage process. Stage 1 is a desktop review of your policies, procedures and systems. Stage 2 is the main audit — usually on site — where the auditor tests whether what is written on paper actually happens in practice. That includes interviewing your workers and, with consent, the participants you support.
Certification providers are assessed against the full applicable NDIS Practice Standards — the Core Module plus any supplementary modules that match the supports they deliver (for example, the modules for high intensity daily personal activities, specialist behaviour support, or implementing behaviour support plans). It is more thorough because the supports involve closer personal contact, accommodation, restrictive practices or more vulnerable cohorts.
Typical supports that require certification (always confirm against the current NDIS Commission list):
- —Assistance with daily personal activities and personal care
- —Supported Independent Living (SIL) and assistance in shared living
- —Specialist Disability Accommodation (SDA)
- —Specialist behaviour support and implementing behaviour support plans
- —High intensity daily personal activities (such as complex bowel care, ventilation, PEG feeding)
- —Support coordination and specialist support coordination
- —Early childhood supports and group or centre-based activities
The two audits compared
| Verification | Certification | |
|---|---|---|
| For | Lower-risk, lower-complexity supports | Higher-risk or complex supports |
| Format | Mostly desktop / document review | Two stages: desktop + on-site |
| Interviews | Generally none | Workers and (with consent) participants |
| Assessed against | A defined evidence set / verification module | Full NDIS Practice Standards (Core + modules) |
| Relative cost | Lower | Higher (more audit days) |
| Mid-term audit | No | Yes — around 18 months in |
| Registration term | Up to 3 years, then re-verify | Up to 3 years, then recertify |
Exact requirements, modules and timing are set by the NDIS Commission and your approved quality auditor, and they change from time to time. Treat this as an orientation, not the final word.
How the NDIS decides which one applies
You do not pick your audit type — it follows from the registration groups you apply to deliver. Each registration group is classed by the NDIS Commission as either verification or certification, based on the risk of the support. When you start your application in the NDIS Commission portal, the system works out the audit type from the groups you select.
The rule that catches providers out
If any one of the registration groups you apply for requires certification, your entire registration becomes a certification audit — even if everything else you do would only need verification. A provider that mostly does cleaning and transport but adds personal care will be certified, not verified. Plan your registration groups deliberately.
The audit cycle over a registration
Registration is not a one-off. It runs for up to three years, and certification carries an extra checkpoint in the middle:
Initial audit
Verification or certification, done before you can be registered. Certification is the two-stage process.
Mid-term audit (certification only)
Around the 18-month mark, certified providers have a lighter mid-term audit to confirm they are still meeting the Practice Standards. Verification providers do not have this.
Renewal audit
Before the registration period ends, you re-verify or recertify to continue. This is a fresh audit, so the evidence has to be current — not the same files from three years ago.
The practical lesson: audit readiness is a year-round state, not a fortnight of scrambling before the auditor arrives. Our audit readiness guide covers what to keep current between audits.
Which do I need?
Use this as a quick orientation, then confirm with the NDIS Commission:
Likely verification
You only deliver lower-risk supports — plan management, equipment and assistive technology, home modifications, household tasks, transport, interpreting — with no personal care, accommodation, behaviour support or support coordination.
Likely certification
You deliver any personal care or daily personal activities, SIL or SDA, behaviour support, high intensity supports, support coordination, early childhood supports, or group-based activities.
Most providers who employ support workers to deliver direct support will be on the certification pathway, because personal care alone triggers it. If you are still deciding which registration groups to apply for, read how to become a registered NDIS provider first.
How to prepare for either audit
Whichever path you are on, auditors look for the same thing: evidence that you do what your policies say. That evidence is far easier to keep current inside your NDIS provider software than across scattered folders. The common pillars are:
- —Worker compliance — screening clearances, qualifications and credentials, all current and on file. See worker screening.
- —Service agreements with every participant, current and signed. See service agreements.
- —Incident and complaint records — captured, reported in time and resolved. See incident management.
- —Service delivery records — progress notes that match the supports you claimed. See writing progress notes.
For the full picture of what an auditor asks to see, read our NDIS audit readiness guide and our overview of NDIS compliance software.
For NDIS providers using practice management software
Rostrel keeps the evidence auditors ask for — worker screening clearances, signed service agreements, incident reports, and progress notes — continuously current and linked to each participant and support delivered. Whether you are on the verification or certification pathway, Rostrel surfaces gaps in your compliance record before an auditor does, so preparation is an ongoing state rather than a last-minute scramble.
Frequently asked questions
Can I choose verification to save money?
No. The audit type follows the registration groups you apply for, not your preference. The only way to be on the verification pathway is to deliver only supports that the NDIS Commission classes as verification — which means not registering for any certification group, such as personal care.
Do I have to be registered at all?
Not always. Unregistered providers can deliver to plan-managed and self-managed participants without an audit, but they cannot support agency-managed participants and cannot deliver some supports that require registration. Registration — and its audit — is what lets you work with the full participant base.
How long does a certification audit take?
It varies with your size and the number of registration groups, sites and participants. The on-site stage for a small provider is often one to a few days, with preparation and the report adding weeks around it. Your approved quality auditor will scope the audit days when they quote.
What happens if the audit finds problems?
Auditors record non-conformities by severity. Minor ones usually come with a corrective-action period to fix them; major ones can hold up registration until addressed. The auditor reports to the NDIS Commission, which makes the final registration decision.
Confirm the current rules
This is general information, not registration or legal advice. The registration group classifications, the Practice Standards modules and the audit process are set by the NDIS Quality and Safeguards Commission and change over time. Always confirm the current requirements with the NDIS Commission and an approved quality auditor before you rely on them.
Stay audit-ready all year
Rostrel keeps worker clearances, service agreements, incidents and progress notes current and linked to the support you deliver — so whether you are verified or certified, the evidence an auditor asks for is already there, not reconstructed the week before.
Book a 20-minute demo