How to become a registered NDIS provider: a step-by-step guide

Do you need to register at all?

Registration is required for some supports and some participants, and optional for others. In general, providers working with participants whose plans are managed by the NDIA, and providers delivering certain higher-risk supports, must be registered. Providers working only with self-managed or plan-managed participants may be able to operate unregistered, although they must still follow the NDIS Code of Conduct.

The rules have been changing as part of ongoing NDIS reforms, so always confirm the current position against the NDIS Commission's own guidance before you commit to a pathway. A wrong answer here is expensive: registering for supports you do not need adds audit cost and obligations, while delivering a support that requires registration without it is a compliance breach.

Step 1: Define your scope and registration groups

Your scope is the list of supports you will actually deliver, expressed as registration groups. Scope drives almost everything that follows: the type of audit, the modules that apply, the evidence you need and the cost.

Choose scope based on capability, not ambition. Every registration group you apply for has to be backed by competent people, governance, risk controls and records. It is usually wiser to register for a focused set of supports and add more later than to apply broadly and struggle at audit.

Step 2: Build organisation-specific policies and evidence

The NDIS Practice Standards describe what a quality, safe provider looks like. Auditors look for evidence that your organisation meets each applicable standard in practice, not just on paper.

Useful evidence connects each requirement to a policy, a working process, a live record and a named owner. Generic document packs bought off the shelf rarely survive audit, because they describe an organisation that does not exist and key personnel cannot explain them.

• Governance and operational management: roles, delegations, risk and continuous improvement
• Participant rights: privacy, consent, decision-making and complaints
• Provision of supports: intake, planning, service agreements and exit
• Workforce: NDIS Worker Screening, induction, training and supervision
• Incident management and reportable incidents

Step 3: Apply through the NDIS Commission portal

Applications are lodged online through the NDIS Commission portal. You provide details about your organisation and key personnel, select the registration groups you are applying for, and complete a self-assessment against the applicable standards.

The applicant must be substantially involved in the application and able to explain what is submitted. After lodgement you receive an initial scope of audit, which confirms the audit type and the standards and modules that apply to your organisation.

Step 4: Complete an independent audit

You then engage an NDIS-approved quality auditor yourself. Auditors are independent of the Commission and of any consultant who helped you prepare.

There are two audit types. A verification audit is a desktop review suited to lower-risk, lower-complexity supports. A certification audit is more thorough, usually includes interviews and site visits, and applies to higher-risk supports. The auditor produces a report with findings and any non-conformities that need to be addressed.

Step 5: The Commission's registration decision

The Commission considers the audit outcome and assesses the suitability of the organisation and its key personnel before deciding whether to grant registration. If approved, you receive a certificate of registration that sets out your registration period, the supports you are registered for and any conditions.

No consultant, auditor or provider can guarantee this outcome. Anyone who promises registration is overstating what they control.

Step 6: Stay compliant after registration

Registration is the start of an operating rhythm, not the finish line. Registered providers must keep meeting the Practice Standards, report certain incidents, maintain worker screening, handle complaints, and prepare for renewal and, for certification providers, mid-term audits.

The providers who find renewal easy are the ones whose evidence is created by everyday work: incident registers, training records, risk reviews and improvement logs that stay current all year.

Frequently asked questions