Rostery

What is Verification audit?

A verification audit is the NDIS registration audit for providers that deliver only lower-risk, lower-complexity supports. An approved quality auditor reviews the provider's documents against the verification module of the NDIS Practice Standards, without an onsite visit, and reports the result to the NDIS Commission.

Many providers on the verification pathway are already professionally regulated, for example practitioners registered with AHPRA or a professional body, so their competency is already monitored and the audit focuses on core systems.

Providers delivering any higher-risk support need a certification audit instead.

Who needs a verification audit

The NDIS Commission's initial scope of audit tells each applicant which audit applies, based on the registration groups or support classes they apply for. A verification audit applies when every support the provider will deliver is classed as lower risk and lower complexity.

If even one registration group needs a certification audit, the provider goes through certification for its registration.

How it works

  1. Engage an NDIS Commission approved quality auditor.
  2. Provide the required documentary evidence, as listed in the Commission's required documentation guide for the verification module.
  3. The auditor completes a desktop review of that evidence. There is no onsite visit.
  4. The auditor submits the audit report to the Commission within 14 days of finishing the audit.
  5. The Commission decides the registration application.

What the auditor checks

The verification module covers four areas:

  • Human resource management, including the qualifications and experience of the people delivering supports
  • Risk management
  • Complaints management and resolution
  • Incident management

Have the documents current and consistent before you book the auditor, and check that every worker in a risk-assessed role holds a current screening clearance.

Changing your supports later

Registration is tied to the supports you were audited for. If you want to add supports or services during your registration period, you may need an out of cycle audit, and adding a higher-risk support moves you onto the certification pathway with its two-stage audit and mid-term audit.

The NDIS Commission can also require a condition audit at any time during registration.

How Rostery helps

Rostery keeps worker screening and qualification records with expiry tracking, and an incident register with deadlines, so the documents a verification auditor asks for are current and in one place.

Questions people ask

Is a verification audit done onsite?

No. It is a desktop review of documents by an approved quality auditor.

How long does the auditor have to submit a verification audit report?

Up to 14 days after completing the audit.

What is the difference between a verification and a certification audit?

Verification is a document review for lower-risk supports against the verification module. Certification is a two-stage audit, including an onsite visit, for higher-risk supports against the core and supplementary modules.

Checked against the official sources on 2 October 2026. Rules change: confirm the current position with the agency before you rely on it.

Related terms

Certification auditA certification audit is the NDIS registration audit for providers delivering higher-risk or more complex supports. An approved quality auditor assesses the provider against the core module and relevant supplementary modules of the NDIS Practice Standards in two stages, including an onsite visit with staff and participant interviews.NDIS Practice StandardsThe NDIS Practice Standards set the quality requirements registered providers must meet, covering rights and responsibilities, governance and operational management, the delivery of supports, and the provider’s environment. Registered providers are audited against the standards relevant to the registration groups they hold.NDIS CommissionThe NDIS Quality and Safeguards Commission is the independent body regulating NDIS providers and workers. It registers providers, enforces the NDIS Practice Standards and Code of Conduct, operates worker screening, receives reportable incidents and complaints, and can ban individuals or revoke a provider’s registration.NDIS Worker Screening CheckThe NDIS Worker Screening Check is a national assessment of whether a person poses a risk to people with disability. It is required for workers in risk-assessed roles with registered providers, is issued by a state or territory screening unit, is valid for up to five years, and can be cancelled or revoked if new information comes to light.Capacity BuildingCapacity Building is the NDIS budget category funding supports that build a participant’s skills and independence rather than assisting with daily tasks. It covers therapy, employment supports, improved living arrangements, and support coordination. Unlike Core, funding is allocated to specific sub-categories and cannot be moved between them.

Rostery handles this in practice

SCHADS interpretation, NDIS price-guide validation, claiming and the evidence an audit asks for — built for Australian providers.