The first time a provider registers, the audit is about potential. The auditor is asking whether your systems are designed well enough to keep participants safe. By the time your certificate comes up for renewal, the question has changed. Now the auditor wants to know whether those systems actually worked, every week, for years.
That shift catches many providers off guard. The policies that passed the first audit are still on file, but staff have come and gone, services have grown, registers have gaps and the Practice Standards themselves may have moved on. A renewal audit tends to find all of it.
At Angels Compliance and Training Services, we support NDIS providers across Australia through registration, renewal and ongoing audit compliance. This guide explains how the renewal process works, what is different about being audited the second time, and how to prepare so your registration continues without disruption.
Why Renewal Is a Different Kind of Audit
Registration with the NDIS Quality and Safeguards Commission is granted for a set period, shown on your certificate of registration. Before that period ends, you must apply again, and the Commission will reassess your organisation through a fresh quality audit and suitability assessment.
The mechanics look familiar: a self-assessment, a scope of audit, an approved quality auditor and a decision from the Commission. What changes is the evidence. In a first audit, a well-drafted incident procedure and a template register can be enough to show readiness. At NDIS registration renewal, an auditor expects to see that procedure in use: incidents recorded, reviewed and reported, complaints resolved and learnt from, training completed and refreshed, and participant plans reviewed on time.
In short, renewal tests your track record. Three years of operating history is either your strongest evidence or your biggest exposure, depending on how consistently your systems were followed.
How the Renewal Process Works
The NDIS Commission’s published renewal process follows a clear sequence.
You can start your renewal application in the NDIS Commission Portal once six months or less remain before the renewal date on your certificate. You’ll update your organisation’s details, including corporate structure, outlets and key personnel, then complete a self-assessment against the NDIS Practice Standards that apply to the supports you deliver.
After you submit, the Commission sends an initial scope of audit that confirms whether you need a verification audit or a certification audit. You then engage an approved quality auditor, who conducts the audit and submits the outcome through the portal. The audit must be completed within the timeframe set out on your certificate.
Alongside the audit, the Commission assesses the suitability of your organisation and key personnel, considering matters such as banning orders, relevant convictions, insolvency and adverse findings. It may ask for further information before making a decision.
One detail matters more than any other: if you apply before your registration period ends, your registration continues until the Commission decides your application. Miss that deadline and your registration may lapse, which can mean pausing registered supports and starting again as a new applicant.
What Has Probably Changed Since Your Last Audit\
Most providers look quite different at renewal than they did at registration. Before you start your self-assessment, take stock of what has shifted, because each change affects your audit.
Your services may have expanded into new registration groups, locations or support types, any of which can widen your audit scope or move you from verification to certification. Your workforce has almost certainly turned over, so the people who built your systems may no longer be the people running them. Your key personnel may have changed through new directors, managers or ownership, each of whom must now pass the Commission’s suitability assessment.
The rules may have changed too. The NDIS Commission has introduced mandatory registration for some supports, such as supported independent living, along with additional practice standards for those supports. If your policies were written before those changes, they may not reflect the standards you will now be audited against.
NDIS re registration is not a copy-and-paste exercise. Treat it as an opportunity to bring your systems up to date with both your business and the current rules.
Seven Areas to Review in the Six Months Before You Renew
The six-month application window is useful, but it is not long if gaps need fixing. These are the areas we review first with providers preparing for renewal.
- Your current scope against what you actually deliver. Compare the registration groups on your certificate with the supports you deliver today. Remove groups you no longer use and confirm whether new services need to be added. An accurate scope keeps your audit focused and your costs in check.
- Your incident management records. Auditors will sample incidents from across your registration period. Check that each one was recorded, assessed, reported where required and followed up, and that reportable incidents reached the NDIS Commission within the required timeframes.
- Your complaints register. An empty complaints register rarely reassures an auditor; it usually suggests feedback isn’t being captured. Show how participants can raise concerns, how complaints were handled and what improved as a result.
- Worker screening and training records. Confirm every worker in a risk-assessed role holds a current NDIS Worker Screening Check, that orientation and induction are recorded, and that refresher training, such as manual handling, medication or infection control, is up to date for the people who need it.
- Participant files. Review a sample of files for current service agreements, support plans, risk assessments, consent and progress notes. Plans that haven’t been reviewed in years are one of the most common findings at renewal.
- Policies against current standards. Check that your policies reflect the Practice Standards and any supplementary modules that apply to your supports today, not the version you registered under. Make sure they also describe how your organisation operates now.
- Your continuous improvement evidence. Auditors look for an organisation that learns. Pull together evidence of internal audits, participant feedback, staff meetings and the changes you made in response. If regular self-assessment against the Practice Standards hasn’t been part of your routine, the months before renewal are the time to start.
Planning Your Timeline Backwards
The safest way to approach renewal is to work backwards from the date on your certificate.
Start your internal review well before the six-month window opens, so any gaps are fixed before you submit your self-assessment. Lodge your application early in the window rather than in its final weeks, which protects the automatic extension and gives you room to respond to the Commission’s questions. Engage your auditor as soon as you receive your scope of audit, because auditor availability can tighten quickly, particularly when mandatory registration changes push many providers into the market at once.
Finally, brief your team. Staff interviews are a key part of certification audits, and workers who joined since your last audit may never have been through one.
Five Renewal Traps That Put Registration at Risk
These are the issues we see most often when providers come to us late in the renewal cycle.
- Leaving the application until the final weeks. Applying late leaves no margin for portal issues, missing information or a busy auditor. The automatic extension only applies if your application is in before your registration expires.
- Reusing your original self-assessment. Your self-assessment should describe your organisation as it is today. Recycled answers that don’t match current operations are easy for an auditor to test and can undermine your whole application.
- Forgetting to update key personnel. New directors, managers or owners need to be listed and assessed. An outdated key personnel record can delay the suitability assessment and the final decision.
- Ignoring findings from your previous audit. Auditors may check whether non-conformities raised last time were genuinely closed and stayed closed. A repeat finding suggests corrective actions didn’t stick.
- Treating compliance as a three-yearly event. Providers who only think about the Practice Standards at audit time usually find gaps that span years. Records can’t be recreated retrospectively, so the fix is a steady routine of reviews throughout your registration period.
Getting Support When It Counts
Some providers manage renewal comfortably in-house, particularly those with an experienced quality manager and well-kept registers. Others find that an outside review uncovers gaps that are hard to see from the inside, especially after rapid growth or staff turnover.
If you decide to get help to renew NDIS registration, look for support that starts with an honest review of your evidence rather than a new set of templates. The goal is not just to pass this audit, but to build routines that make the next one straightforward.
How Angels Compliance and Training Services Can Help
Angels Compliance and Training Services is a compliance consultancy based in Gosnells, Western Australia, supporting NDIS and DVA providers across Australia. We help providers prepare for renewal by reviewing their scope, records and policies against the current NDIS Practice Standards, closing gaps before the audit and preparing teams for auditor interviews. We also support new registrations, audit compliance and staff training.