One of the most common questions providers ask before an audit is:

“What documents do I actually need?”

And honestly, it’s a good question.

Because passing an NDIS audit is not just about having policies.

Auditors want to see:

• policies,

• evidence,

• records,

• registers,

• reviews,

• and proof that your systems are actually being used.

This guide breaks down the key documents providers should prepare before audit day, including:

• core policies,

• operational records,

• evidence auditors commonly request,

• and the most overlooked documentation gaps.

If you haven’t already, start with the broader preparation guide here:
👉 NDIS Audit Checklist 2026: The Complete Step-by-Step Guide

Why Documentation Matters in an NDIS Audit

Your documentation tells auditors:

• how your organisation operates,

• how participants are protected,

• and how risks are managed.

Good documentation creates confidence immediately.

Poor documentation creates concern — even when services themselves are good.

Auditors assess whether your systems are:
✔ documented
✔ implemented
✔ reviewed
✔ understood by staff

The Three Types of Documents Auditors Expect

Most providers think only about policies.

But auditors usually assess three categories of documentation.

1. Governance Documentation

This explains how your organisation is managed.

Examples include:

• policies and procedures

• organisational structure

• document control register

• business continuity plans

• risk management systems

These documents explain:
👉 what your organisation says it does

2. Operational Documentation

This shows how your systems work in practice.

Examples include:

• incident forms

• complaints records

• risk assessments

• supervision records

• participant files

• training records

This is the evidence layer.

If you’re unsure what counts as evidence, read:
👉 NDIS Audit Evidence: What Auditors Actually Expect to See

3. Continuous Improvement Documentation

Auditors also want proof that your organisation reviews and improves systems over time.

Examples include:

• internal audit records

• continuous improvement plans

• meeting minutes

• corrective actions

• policy reviews

Core Policies Providers Should Have Ready

Most audits expect providers to have policies covering:

• Incident Management

• Risk Management

• Feedback and Complaints

• Privacy and Confidentiality

• Human Resources

• Participant Rights

• Work Health and Safety

• Emergency and Disaster Management

Behaviour support providers may also require:

• Restrictive Practices Policy

• Behaviour Support Plan procedures

If applicable, see:
👉 NDIS Module 2 Explained
👉 NDIS Module 2A Explained

Evidence Documents Auditors Commonly Request

This is where providers often struggle.

Auditors usually ask to see examples of:

• completed incident reports

• complaints records

• staff training evidence

• supervision logs

• participant consent forms

• risk assessments

• meeting notes

The key word is:
👉 completed

A blank template does not prove implementation.

Registers Auditors Often Review

Auditors commonly request:

• Incident Register

• Complaints Register

• Risk Register

• Training Register

• Continuous Improvement Register

They want to see:
✔ entries
✔ updates
✔ review dates
✔ follow-up actions

Participant Documentation Auditors May Request

Participant files often include:

• service agreements

• consent forms

• risk assessments

• progress notes

• onboarding records

Auditors may check whether:

• records are current,

• information is secure,

• and participants are involved in decision-making.

Staff Documentation Auditors Commonly Review

Auditors may request evidence of:

• worker screening checks

• induction records

• training completion

• supervision

• qualifications

This helps confirm workers are safe and appropriately supported.

Common Documentation Mistakes

The most common issues auditors identify include:

❌ outdated policies
❌ empty registers
❌ inconsistent forms
❌ no evidence of review
❌ duplicate document versions
❌ staff unable to explain documents

This is why documentation should support real practice — not just compliance.

Preparing Staff Alongside Documentation

Documentation alone will not pass an audit.

Staff should also understand:

• key processes,

• where records are stored,

• and how systems work.

If you need help with this:
👉 How to Prepare Your Team for NDIS Audit Questions

Want to Make Audit Preparation Easier?

Many providers spend hundreds of hours building audit documentation manually.

Swell Policy Studio packs are designed to provide:

• audit-ready policies,

• structured templates,

• evidence registers,

• and systems aligned with the NDIS Practice Standards.

Explore the Packs

🛒 View all NDIS Policy Packs

📘 View Core Module Packs

🧩 Explore Module 2, 2A & Module 4 Packs

Final Thoughts

The providers who feel most confident during audits are not always the biggest providers.

They’re usually the providers whose systems are:
✔ organised
✔ consistent
✔ documented clearly
✔ supported by evidence

When your documentation reflects real practice, audits become much easier.