Is Your NDIS Practice Ready for a Financial Audit?

What triggers an NDIS audit?

A participant complaint, unusual claims or a payment-integrity review can lead to requests for evidence. Separately, registered providers undergo audits against the NDIS Practice Standards as part of registration requirements. These are not the same as an audit of your financial statements. Ask which process applies before assembling your records.

You do not need to predict when a review will happen. You need a repeatable way to show what was delivered, what was agreed and why the amount claimed was payable.

What records does the NDIA expect to see?

Keep records sufficient to establish who received the support, what was delivered, when it happened and who provided it. Check the evidence requirements for the particular support. Contemporaneous records are easier to rely on than notes reconstructed after a query arrives.

• Service delivery notes created at the time of delivery — not written up at the end of the week
• Staff rosters and timesheets that match the claim dates and hours
• Participant-signed or electronically verified service agreements
• Evidence that the services claimed actually match what participants agreed to receive
• Invoices and payment receipts that correspond to NDIA payment records line by line

Check claims against the current pricing schedule, support catalogue and applicable claiming rules. A price cap is a maximum, not a requirement to charge that amount. Your agreed fee may be lower. Assign someone to review billing settings whenever the rules change.

What do your financial systems need to handle?

Cloud-based accounting platforms can track income and expenses by participant and service type. That matters because it lets you produce a clean, participant-level view of your financials quickly — which is exactly what an auditor will want. Manually maintained spreadsheets can do the same job if they are well structured, but they are harder to defend and easier to get wrong under pressure.

• Payroll records showing superannuation contributions are up to date and ATO-compliant
• GST handling that correctly identifies which services are GST-free under the NDIS
• Separate tracking of NDIS income versus other funding sources (private, Medicare, state)
• A clear audit trail for any cancellations, including short-notice cancellations — see our post on what providers can and cannot claim for short-notice cancellations
• Bank reconciliations completed and signed off at least monthly

The practical standard is: if an auditor arrived tomorrow, could you produce a clean participant-level financial summary within 48 hours? If not, that is where the work needs to happen.

What is the financial exposure if something goes wrong?

The NDIA can require repayment of amounts it determines were incorrectly claimed. That can be a significant sum for a provider who has been operating for some time with systematic pricing or record-keeping errors. The NDIS Commission can impose civil penalties, suspend or cancel registration, and refer matters for criminal investigation where fraud is involved.

Beyond the direct financial exposure, an audit that uncovers problems typically results in a period of intensive monitoring. That means extra reporting obligations, tighter oversight of claims, and management time that is not going toward running the practice. The reputational impact with participants and referrers is harder to quantify but real.

The cost of getting financial systems in order before an audit is nearly always less than the cost of dealing with findings after one.

How does a fractional CFO help with NDIS compliance?

Most NDIS providers do not need a full-time CFO to manage compliance. What they do need is someone who understands NDIS pricing rules, knows what financial records hold up under audit, and can set up systems that produce clean reporting without creating a second job for the practice manager.

A fractional CFO can review your current financial controls against the NDIS Practice Standards, identify gaps before an auditor does, set up participant-level reporting, and train your team on what records need to be created and when. That work also overlaps with broader financial management — understanding your real margins per service type, managing payroll compliance, and planning cash flow. See our overview of what a fractional CFO does for a healthcare business if you want to understand the full scope.

If you want to talk through where your practice stands and what needs to change, the contact form at /#contact is the right place to start.