How to Become an NDIS Provider: Registration Explained

Becoming an NDIS provider means one of two things, and the first job is working out which. For some supports you have to register with the NDIS Quality and Safeguards Commission, pass an audit, and hold a certificate. For many others you can operate unregistered, provided you still meet the Code of Conduct and the laws around your work. Knowing which path applies to you shapes everything that follows.

Who has to register

Registration is mandatory for a defined set of supports, not for everyone. You have to register if you deliver specialist disability accommodation, specialist behaviour support, plan management services, supports to agency-managed participants, or supports involving regulated restrictive practices. Aged care providers supporting scheme participants fall in here too.

If your services sit outside that list, registration may be a choice rather than a requirement. Plenty of providers deliver therapy, daily supports, or assistive technology without registering. The deciding factor is what you deliver and to whom, so map your services against the mandatory list before anything else.

The registration pathway, step by step

The pathway has a clear shape. Step one is understanding the information and evidence you need, including which audit type applies to your services. Step two is applying to the NDIS Quality and Safeguards Commission and choosing the registration groups that match what you offer. Your application is then audited and assessed. Step three connects you to the NDIA so you can deliver and claim. Step four is renewing your registration when the period ends.

Two things sit underneath that pathway. Before you apply, key personnel and any workers in risk-assessed roles need to hold, or have applied for, an NDIS worker screening clearance. And your services map to registration groups, which define exactly which support types you are registered to deliver. There are thirty-six of these groups, organised into general, professional, home and vehicle modification, and assistive technology sets, and they are listed by the Commission and against support items in the Pricing Arrangements document.

Verification versus certification: the two main audits

The audit is where the risk of your services decides the effort. The Commission uses several audit types, and which one applies is set by the registration groups you choose.

A verification audit is the lighter path. It applies to providers delivering only lower-risk, lower-complexity supports, and it is a desktop review of documentary evidence by an approved quality auditor. Many providers on this path already meet professional regulation requirements, such as practitioners registered with a national board.

A certification audit is the fuller process, for higher-risk or more complex supports. It runs in two stages. Stage one is a desktop audit, where the auditor requests information and evidence, usually off-site. Stage two is an onsite audit, where the auditor looks at how your policies and procedures work in practice through records, site visits, staff and participant interviews, and observation. Beyond these two, the Commission also uses mid-term, condition, and out-of-cycle audits at different points in a registration period.

One practical note: the Commission does not set audit prices. You are encouraged to get quotes from several approved quality auditors and compare before you commit.

The unregistered option

Not registering is a legitimate route for supports that do not require it. Unregistered providers can be paid from self-managed and plan-managed funding, which covers a large share of participants. What they cannot do is bill agency-managed budgets, since agency-managed participants generally need to purchase through registered NDIS providers.

Unregistered does not mean unregulated. The NDIS Code of Conduct applies to registered and unregistered providers alike. It requires honesty and integrity, and it counts misleading marketing to participants as a breach. For a store or practice that deals with participants, getting the language right is a trust signal as much as a compliance one.

After you register: renewals and staying compliant

Registration is a period, not a permanent badge. Once you hold a certificate, the work shifts to keeping it, which means renewing before the period ends and continuing to meet the standards your registration groups carry.

The Code of Conduct runs the whole time, registered or not. On top of it, registered providers meet the NDIS Practice Standards relevant to their supports, keep worker screening current for key personnel and workers in risk-assessed roles, and stay ready for the audits that punctuate a registration period. Providers who completed a certification audit at the start, for instance, face a mid-term audit partway through, and the Commission can call a condition audit at any point.

Changing what you deliver has its own path too. If you want to add or change the supports you offer mid-period, that can trigger an out-of-cycle audit against the new registration groups. None of this is designed to catch you out. It is the routine upkeep of running a compliant practice, and building it into your calendar keeps renewal from turning into a scramble when the period runs down.

Working out your path

Start by listing your services and checking them against the mandatory-registration list. If any require registration, the pathway above is your route, and the audit type follows from your registration groups. If none do, weigh the value of registration against the effort, remembering that agency-managed work needs it.

To map it against your own services, the NDIS registration wizard walks through the decision, and the For Providers guide collects the invoicing, rates, and practice-running material alongside it. For the funding rules your participants live with, how NDIS funding works and NDIS plan management are useful background.

Whether a particular support can be claimed depends on the participant’s individual plan, their goals, and how their funding is managed. Their plan manager or support coordinator can confirm what applies.