NDIS Compliance for New Providers: Your First 90 Days

Congratulations on becoming a registered NDIS provider. It's a significant achievement, and you should be proud of reaching this milestone. But here's what every experienced provider will tell you: registration is just the starting line. The real work — building a robust compliance framework that protects your participants and your business — begins now. This guide breaks down exactly what you need to do in your first 90 days to set yourself up for long-term success.

Days 1–30: Establish Your Compliance Framework

Your first month is all about laying the groundwork. Think of this as building the foundation of your house — get it right now, and everything else becomes easier. Get it wrong, and you'll be patching cracks for years.

Policies and Procedures

You'll need documented policies and procedures that align with the NDIS Practice Standards. At a minimum, this includes incident management, complaints handling, risk management, and governance. Don't just download generic templates — tailor them to your specific services and the participants you support. Your policies need to reflect what you actually do, not what a template says you should do.

Staff Records and Worker Screening

Every person who works with participants needs to be properly screened and documented from day one. This means setting up a centralised staff records system that captures qualifications, certifications, and clearances. All workers in risk-assessed roles must hold a valid NDIS Worker Screening Check, and you need a system to verify these before anyone starts delivering services. This is non-negotiable — it's a core requirement of the NDIS Commission.

Days 30–60: Onboard Your Staff Properly

With your framework in place, month two is about making sure every team member is compliant and competent. Staff onboarding is where many new providers stumble — they hire quickly to meet participant demand but skip the compliance steps that matter most.

Collect All Required Documents

For each staff member, you should be collecting and verifying their NDIS Worker Screening Check, Working with Children Check (where applicable), first aid and CPR certificates, professional registrations, proof of qualifications, and evidence of mandatory training completion. A platform like Ready Set Compliant can streamline this process by letting staff upload their own documents and automatically tracking what's been received and what's still outstanding.

Training and Orientation

Every worker must complete the NDIS Worker Orientation Module and understand the NDIS Code of Conduct before they begin delivering supports. Set up a structured induction process that covers your organisation's policies, incident reporting procedures, and participant rights. Document that each worker has completed this training — auditors will ask for evidence.

Credential Tracking

Set up a system to track when credentials expire. First aid certificates, CPR, professional registrations, and worker screening checks all have expiry dates. If you're not actively monitoring these, you'll end up with staff delivering services on expired credentials — a serious compliance risk. Automated expiry tracking takes this burden off your plate and ensures nothing slips through the cracks.

Days 60–90: Prepare for Your First Audit Cycle

By month three, you should be thinking about audit readiness. Your first NDIS audit may still be months away, but the providers who perform best are the ones who treat compliance as continuous, not something to scramble for when the auditor calls.

Conduct an Internal Audit

Walk through your own organisation as if you were the auditor. Are all staff files complete? Are policies up to date and being followed? Can you produce evidence of training, screening, and qualifications on demand? Identify gaps now while you have time to fix them.

Build a Continuous Improvement Plan

Auditors expect to see that you're not just compliant today, but that you have systems in place to stay compliant and improve over time. Document the gaps you found during your internal audit, the actions you took to address them, and your plan for ongoing monitoring. This demonstrates maturity and builds auditor confidence.

Common Mistakes New Providers Make

After working with hundreds of NDIS providers, these are the pitfalls we see new organisations fall into time and again:

• Relying on spreadsheets: A shared spreadsheet might seem fine with three staff, but it quickly becomes unmanageable. There's no version control, no automated reminders, and no audit trail.
• Not tracking expiry dates: Credentials expire. If you don't have a system that alerts you before they lapse, you're operating on borrowed time.
• Waiting until audit time to collect documents: Trying to gather months of missing paperwork in a panic before an audit is stressful and often results in gaps that can't be filled.
• No system for new staff onboarding: Every new hire should go through the same compliance onboarding process. Without a standardised workflow, things get missed.
• Assuming registration means compliance: Registration proves you met the requirements at a point in time. Ongoing compliance requires ongoing effort and systems.

Setting Yourself Up for Long-Term Success

The providers who thrive under the NDIS framework are the ones who invest in proper systems early. Compliance software built specifically for NDIS providers — like Ready Set Compliant — replaces the spreadsheets, manual follow-ups, and filing cabinets with automated tracking, staff self-service uploads, and real-time compliance dashboards. It means you can see exactly where your organisation stands at any moment, not just when someone remembers to update the spreadsheet.

Your first 90 days set the tone for your entire compliance journey. Build the right habits now, invest in the right tools, and you won't just survive your first audit — you'll walk into it with confidence. The goal isn't just to be compliant on paper. It's to build an organisation where compliance is embedded in how you work every single day, so you can focus on what really matters: delivering outstanding support to your participants.