Mid-term Audits for NDIS Certification providers to confirm ongoing compliance and maintain registration.
Need help? Call usÂ
Registered NDIS providers with Certification must complete a Mid-term Audit within 18 months of their registration date.
The Mid-term Audit checks how you are implementing your services in practice and whether you continue to meet the NDIS Practice Standards and Quality Indicators.
A Mid-term Audit is not required for Verification‑level providers or providers who only have SDA (Specialist Disability Accommodation) in scope.
The Mid-Term Audit is also a useful checkpoint to see how your systems are working in day-to-day practice. It helps confirm that previous non-conformities have been addressed and identify improvements before your renewal audit.
Your mid-term due date is shown on your Certificate of Registration and in the NDIS Quality and Safeguards Commission’s Provider Portal. The due date is calculated 18 months after your registration approval date, and GCC recommends starting around 6 months before that date so there is time to secure preferred audit dates and prepare properly.
If GCC completed your previous audit, GCC may contact you ahead of time to begin planning and quoting for the mid-term audit.
Mid-term audits generally apply to registered providers on a certification pathway, based on their registration conditions and audit scope. In practice, that means providers who completed a certification audit and are required to maintain registration through the mid-term review process.
Providers on a verification pathway generally do not have a mid-term audit requirement, so the mid-term section is most relevant to certified providers.
A Mid-Term Audit focuses on whether your organisation continues to meet the NDIS Practice Standards in day-to-day service delivery, not only whether your policies and procedures are written correctly.
The auditor reviews how your systems are being implemented in practice and whether your records, staff actions and participant support evidence align with your documented processes.
A Mid-Term Audit focuses on whether your organisation continues to meet the NDIS Practice Standards in day-to-day service delivery, not only whether your policies and procedures are written correctly.
The auditor reviews how your systems are being implemented in practice and whether your records, staff actions and participant support evidence align with your documented processes.
GCC helps registered NDIS providers confirm their audit scope, prepare the required evidence and complete their Mid-term Audit before the applicable due date.
Complete and lodge your NDIS provider registration application via the NDIS Commission’s online portal.
After submitting your application, you will receive an Initial Scope of Audit document by email.
Send your Initial Scope of Audit to GCC so we can confirm that your pathway is Verification and prepare a tailored quote.
You will also receive information explaining audit steps, expected timelines, and costs.
GCC provides a checklist & booking form to help you prepare.
You will need to:
If any documents are missing, you typically have a short period (for example, 7 days) to provide additional evidence to the auditor.
The verification audit is conducted remotely as a desktop document review.
Your auditor reviews the evidence provided to confirm how you meet the Verification Module of the NDIS Practice Standards and Quality Indicators.
After the audit:
The NDIS Commission reviews the audit report along with your application and decides whether to approve your registration.
The Commission does not provide a fixed approval timeframe, as each application is different. For status updates, you contact the NDIS Commission directly.
An NDIS mid-term audit supports ongoing quality and safeguarding and is completed about 18 months into the registration period for providers who undertook a certification audit; it checks continued compliance with the NDIS Practice Standards. Organisations should confirm the correct audit pathway for their service type and expect periodic reassessment to maintain alignment with evolving requirements.
Protect your data, meet client requirements, and unlock enterprise opportunities.
Learn MoreApproved Quality Auditing Against the NDIS Practice Standards to Support Provider Registration and Ensure Safe, High-Quality Disability Services
A Desktop-Based Audit for Lower-Risk NDIS Providers to Confirm Compliance with the NDIS Practice Standards and Support Provider Registration
A Mandatory Mid-Cycle Audit Conducted 18 Months into Registration to Ensure Ongoing Compliance with the NDIS Practice Standards and Quality Indicators
A Re-Certification or Re-Verification Audit Conducted at the End of the 3-Year Registration Cycle to Renew and Maintain NDIS Provider Registration
A Re-Certification or Re-Verification Audit Conducted at the End of the 3-Year Registration Cycle to Renew and Maintain NDIS Provider Registration
Only providers with Certification (not Verification‑only or SDA‑only) require a Mid-term Audit, usually 18 months into their three‑year registration.
Yes. You can usually complete your Mid-term Audit up to 6 months before the due date, which can make scheduling easier and reduce pressure closer to the deadline.
If you do not complete the audit by the due date, you may be in breach of registration conditions and your certification may be suspended, withdrawn, or cancelled by the NDIS Commission.
Review your previous audit report, address any outstanding non‑conformities, ensure key policies and procedures reflect current practice, and make sure participant and staff files are up to date and accessible.
Will the Mid-term Audit be on‑site or remote?
The approach depends on your scope, risk profile, and current NDIS Commission guidance; GCC will confirm the format when scheduling your audit.
After the Mid-term Audit and report submission, you continue with your usual registration period until your next scheduled audit, which is typically your Renewal (re‑certification) audit before your registration expiry date.
01
02
Global Compliance Certification (GCC) is a leading independent certification body for Quality, Safety, Environment, Information Security, Privacy, Food Safety, NDIS and other Management Systems accredited by JASANZ.
An NDIS Mid-Term Audit is the point where a registered provider must show that the systems assessed during certification are still working in everyday service delivery. It is not enough for policies to remain saved in a folder. The audit looks at whether staff follow them, records are kept consistently, participant safeguards are active, and the organisation continues to meet the relevant NDIS Practice Standards.
For most providers on the certification pathway, the Mid-Term Audit takes place 18 months into the registration period. Waiting until the deadline is close can make preparation more difficult, particularly when participant interviews, site visits, staff availability or corrective actions need to be coordinated. Starting early gives your organisation time to confirm the audit scope, review previous findings and make sure current practice matches documented procedures.
The audit generally focuses on provider governance and operational management. Depending on your registration conditions and previous audit results, it may also cover Practice Standards linked to earlier non-conformities or additional areas identified by the NDIS Commission. This means the scope may not be identical for every provider.
Auditors may review participant files, worker records, incident and complaints registers, risk assessments, training evidence, internal audits, management reviews and records showing how services are monitored. They may also speak with key personnel, workers and consenting participants to understand whether the organisation’s processes are being applied consistently in practice.
Common Mid-Term Audit issues often develop gradually after registration. Policies may no longer reflect the way the business operates, staff files may be incomplete, incidents may not be followed through correctly, or previous corrective actions may not have been fully embedded. Changes to key personnel, participant numbers, locations or registration groups can also create gaps if documents and responsibilities have not been updated.
Reviewing the previous certification audit report is an important part of preparation. Any earlier non-conformities should have clear evidence showing what was corrected and how the improvement has been maintained. Auditors need to see more than a one-off response. They need evidence that the revised process has become part of normal operations.
Missing the applicable Mid-Term Audit deadline can place a provider’s registration conditions at risk. The NDIS Commission may take compliance action where a provider does not commence or complete the required audit process within the relevant timeframe. Providers should confirm the date shown in their registration information and engage an Approved Quality Auditor early enough to complete the audit and address any findings before the deadline.
A Mid-Term Audit can also help identify problems before they become more serious at renewal. It provides an opportunity to test whether governance, record keeping, staff practices and participant safeguards have kept pace with changes in the organisation. Addressing gaps at this stage can make the future re-certification audit more manageable and reduce the risk of unresolved compliance issues.
GCC is an Approved Quality Auditor providing NDIS Mid-Term Audits to registered providers across Australia. GCC confirms the applicable scope, reviews updated information about your organisation and prepares a tailored quote based on your registration groups, participants, workers, locations and audit requirements. Once the audit is complete, the report goes through technical review before being submitted to the NDIS Commission.
If your Mid-Term Audit due date is approaching, provide GCC with your registration and audit information as early as possible. This allows the team to confirm the required scope, arrange suitable audit dates and explain what evidence needs to be available before the audit begins.
