How much will your NDIS audit cost?

No auditor publishes its prices and the NDIS Commission sets none, so these are ClinicComply's estimates, built from provider-reported 2026 ranges, which vary widely. For most Australian providers, a verification audit costs between AUD 1,500 and AUD 4,500 total (initial registration), while a certification audit costs between AUD 6,000 and AUD 25,000 for an initial registration with Stage 1 and Stage 2 combined. Recertification is usually 60 to 80 percent of the initial cost. Mid-term surveillance audits (certification only, around 18 months into the 3-year cycle) typically cost AUD 2,500 to AUD 6,000. Actual auditor fees vary with registration stream, registration groups, participant numbers, staff size, number of sites, travel distance, and whether you deliver higher-risk supports like Supported Independent Living (SIL) or regulated restrictive practices. All figures are AUD ex-GST. Registration with the NDIS Quality and Safeguards Commission is free; the audit is the cost.

Verification is the lower-risk audit stream. It applies to providers delivering therapy, plan management, community nursing, assistive technology, transport, and similar lower-risk supports. It is a desk audit of your documents, with no Stage 2, site visit or interviews. Certification is the higher-risk audit stream and applies to providers delivering Supported Independent Living (SIL), personal care, support coordination, early childhood supports, specialist behaviour support, or high-intensity daily personal activities. Certification includes both a Stage 1 documentation review and a Stage 2 onsite audit with interviews of participants, workers, and management. The NDIS Quality and Safeguards Commission decides which stream you fall into based on the registration groups you apply for.

NDIS approved quality auditors typically price against an auditor-day model. A base number of days is set for the stream and stage (verification initial is about 1 day total; certification initial is around 3.5 days across Stage 1 and Stage 2). Additional auditor-days are added for the number of registration groups, number of active participants, staff size, and, for certification, the sites the auditor must attend: at least the square root of your total sites, rounded up (0.6 times that at a mid-term audit), always including head office. For certification providers, further uplift is added for high-complexity services (SIL, behaviour support, restrictive practices, early childhood, high-intensity daily supports). Travel and accommodation are billed as a separate surcharge depending on whether your primary service location is metro, regional, or remote. Finally, a fixed report-writing and admin fee is added on top. Our estimator applies this same model with low, mid, and high bands so you see a defensible range rather than a single false-precision number.

No. Registration with the NDIS Quality and Safeguards Commission is free. The Commission says there is no cost to register, but you pay an approved quality auditor to complete the audit, so the audit is the cost, and that is what the estimate covers. Providers occasionally also incur incidental costs for police checks, NDIS Worker Screening clearances, insurance upgrades, and policy development; these are not counted in our auditor-fee estimate because they vary widely.

A verification audit typically takes 4 to 8 weeks end-to-end, with 1 to 2 auditor-days of actual audit activity. A certification initial audit typically takes 8 to 16 weeks end-to-end, with 3 to 6 auditor-days across Stage 1 (documentation review, usually 1 to 2 days) and Stage 2 (onsite audit, usually 2 to 4 days depending on scope). Expect additional time for auditor availability (most approved auditors book 4 to 12 weeks in advance) and for any non-conformance remediation. Recertification is faster than initial certification because the auditor already has your history; expect 6 to 10 weeks.

Only auditors on the Commission's list of approved quality auditors can audit you, and the Commission keeps that list current on its website. Auditors on the list include Global Compliance Certification, IHCA, Intertek SAI Global, Quantum Certification Services, and Global-Mark. Each auditor sets its own fee schedule and books its own auditor roster. We strongly recommend requesting written quotes from at least three auditors before committing, since quotes for the same scope can vary widely.

Yes, and the biggest lever is evidence readiness. Auditors quote on the assumption that your evidence is organised: policies in one place, version-controlled, reviewed in date, linked to Practice Standards outcomes; incident register with closed-out actions; worker screening records for every staff member; complaints log; participant service agreements; risk register; continuity of supports plans. If any of this is scattered, the auditor spends more hours chasing evidence and bills those hours to you. Other levers: bundle registration groups efficiently (do not apply for groups you will not use), consolidate sites where possible, and be ready to commit to audit dates so the auditor does not repeat scoping work. A well-organised provider can often land in the low band of their range.

The figures are ClinicComply's estimate, built from provider-reported 2026 fee ranges, which vary widely. The NDIS Commission publishes no day rates and does not set prices for audit services, and approved quality auditors quote from your scope of audit rather than publishing prices. It is built to be defensible: you can show the breakdown to your board and explain exactly why each line was added. It is not a quote. Actual quotes from auditors vary with commercial positioning, auditor seniority, specific interpretation of your scope, and current market conditions. Treat our mid-point as a useful planning number, and always get three written quotes before committing. We update the model when we notice structural changes in auditor pricing (typically once or twice a year).

Stage 1 is a desktop documentation review. The auditor examines your policies, procedures, registers, service agreement templates, risk management framework, continuity plans, incident and complaints processes, worker screening records, and governance arrangements. The Stage 1 report flags areas where more evidence is required at Stage 2. Stage 2 is the onsite audit. The auditor visits your premises (and a sample of participant homes or service locations where applicable), interviews participants, workers, clinicians, and management, observes practice, and tests your systems in action. The Stage 2 report details conformances and any non-conformances. A major non-conformance prevents certification until it is closed or downgraded, which must happen within three months. You can be certified with a minor non-conformance if your corrective action plan is accepted, and it must be closed by the mid-term or recertification audit. Some auditors quote Stage 1 and Stage 2 separately; others quote a combined fee.

Certification providers only. About 18 months into your 3-year certification cycle, the NDIS Commission requires a mid-term surveillance audit. This is a scaled-down onsite audit, usually about 1 to 1.5 auditor-days, focused on a sample of Practice Standards rather than the full set. Typical cost is AUD 2,500 to AUD 6,000 depending on scope and travel. Verification providers do not have a mid-term audit; they simply re-audit at renewal every 3 years. Our estimator reflects this.

You do not choose. The NDIS Commission decides based on the registration groups you apply for. Supports classed as higher-risk or complex (SIL, personal care, support coordination, behaviour support, restrictive practices, early childhood, high-intensity daily personal activities) require certification. Lower-risk supports (therapy, plan management, community nursing, household tasks, transport, assistive technology, innovative community participation) require verification. If you apply for a mix of both, you will be audited under certification. Section 20 of the NDIS (Provider Registration and Practice Standards) Rules 2018 and the Commission's registration groups page are the authoritative references for which stream each support falls under.

Non-conformances are not directly charged by the auditor, but closing them out takes your time and can delay your registration. Major non-conformances (for example, no working-with-children checks for staff in early childhood, or missing restrictive practices consent) can require a follow-up audit that auditors bill separately (typically 0.5 to 1 auditor-day, AUD 1,000 to AUD 2,500). The best defence is a clean evidence pack before audit, which is why compliance platforms like ClinicComply exist.

Verification providers re-audit every 3 years. Certification providers have a mid-term surveillance audit at the 18-month mark and recertify at 3 years. Both streams require you to maintain compliance continuously, not just around audit dates, because the Commission can conduct unannounced compliance visits or investigations at any time following a complaint or notifiable incident.

No. The estimator is a planning tool built from the published NDIS audit rules and provider-reported 2026 auditor fee ranges. It is not legal, regulatory, or audit advice. Specific obligations and costs vary with your organisation, scope, location, and individual auditor. For binding advice, contact the NDIS Quality and Safeguards Commission (call 1800 035 544) or request quotes from the approved quality auditors listed on the Commission's website. Use the estimator to scope what you should budget for, not as proof you have budgeted correctly.

Your inputs are used client-side to compute the estimate. If you submit your email, we create a Resend contact record in our Australian-data-residency region (Sydney) and send you the email with the full breakdown and notes included. We do not store your specific inputs, and we do not host a temporary results page; the email you receive is the full, self-contained artefact. If you opt in, you join our occasional NDIS compliance updates list and can unsubscribe from any email. If you do not opt in, we use your email only to send the estimate.