NDIS verification vs certification audit: which one do you actually need?

If you are registering or re-registering as an NDIS provider, the first thing that decides your cost, your timeline and your stress level is which audit pathway you are on: verification or certification. They are not two names for the same thing. One is a desk review that can be done in a few weeks. The other is a two-stage audit with someone visiting your service. Here is how to tell which is yours.

What a verification audit is

A verification audit is a document-only review by an NDIS approved quality auditor. There is no on-site visit, no participant interviews, and no observation of your service. The auditor checks whether your documentation meets the relevant Practice Standards outcomes. Because there is nothing to schedule on-site and the scope is narrower, it is the faster and cheaper pathway, often completed in around four to eight weeks.

Verification is for providers delivering lower-risk, lower-complexity supports and services only, things like some therapeutic supports, plan management, or low-risk assistance, where the Commission accepts that a paperwork review is enough assurance.

What a certification audit is

A certification audit is the more thorough pathway, for providers delivering higher-risk or more complex supports. It runs in two stages:

• Stage 1 (off-site): the auditor reviews your documentation, policies, systems and readiness against the Practice Standards.
• Stage 2 (on-site): the auditor visits, interviews staff and participants (with consent), and looks for evidence that what is written down is actually happening in practice.

Certification is assessed against the NDIS Practice Standards, the core module plus whatever supplementary modules apply to your registration groups (for example, the SIL, high-intensity, or behaviour support modules). It runs on a three-year cycle with a mid-term surveillance check, so it is an ongoing relationship, not a one-off.

How to tell which one you need

Your registration group(s) decide it, not your size or your preference. Each registration group is classified as verification or certification. So:

1. List the supports you deliver and map them to their registration groups.
2. If every group is verification-class, you are on the verification pathway.
3. If any single group is certification-class, your whole application goes down the certification pathway, even if everything else would have qualified for verification.

That last point catches providers out. Adding one higher-risk service to an otherwise low-risk registration moves you to the harder, more expensive audit for the entire registration.

If you do SIL, the answer is already decided

Supported Independent Living is a certification support. If you deliver SIL, you are on the certification pathway, full stop. And the timing now matters: from 1 July 2026, registration is mandatory for SIL (the new registration group 0138) and platform providers, with an apply-by deadline of 1 October 2026. Delivering SIL unregistered once the regime applies is a criminal offence, not a paperwork slip. (We cover the dates in the SIL registration deadline and what the standards demand in the new SIL Practice Standards.)

Verification vs certification at a glance

	Verification	Certification
For	Lower-risk, lower-complexity supports	Higher-risk or complex supports (incl. SIL)
Process	Document-only desk review	Two stage: Stage 1 off-site + Stage 2 on-site
On-site visit	No	Yes
Participant interviews	No	Yes (with consent)
Assessed against	Relevant Practice Standards outcomes	Practice Standards core + supplementary modules
Typical timeframe	~4-8 weeks	Longer (two stages to schedule)
Cycle	Per registration term	3 years + mid-term surveillance

The part that actually decides a certification audit

Here is what providers underestimate. In a certification audit, Stage 2 is not a document check, it is a reality check. The auditor is testing whether the practice described in your policies is genuinely happening. They pick a participant, a date and a standard, and they go looking for the evidence that the support ran the way you say it does, in your shift notes, your incident records, your goal progress, your medication and screening records.

This is why providers walk in with a tidy policy folder and still pick up non-conformities. A policy proves intent. The record proves practice. The most common audit findings are not missing policies, they are thin or non-contemporaneous notes, incident trails that stop at "recorded" without the follow-up, and screening or training that can't be produced on the day. (More on that in what audit-ready actually means and shift notes that survive an audit.)

So the real question is not "verification or certification." Once you know your registration groups, that is decided. The real question is whether your everyday evidence would survive the test the auditor runs. That is the work, and it is the work you can actually control.

How Clearline helps

Clearline is built for the certification reality. Care is captured in seconds on the floor, in the worker's own words, and the audit evidence assembles itself, per participant, per Practice Standard, so when the Stage 2 auditor asks for a participant on a date against a standard, the answer already exists. The compliance and audit features are included for every provider, free for your first two participants.

Knowing your pathway is step one. Being able to prove your practice is the step that passes the audit.

FAQ

This article is general information, not legal or compliance advice. Audit pathways and registration rules change. Always confirm your obligations and your registration groups with the NDIS Quality and Safeguards Commission.

Get these posts in your inbox.

One email a week. NDIS compliance, registration deadlines, audit prep. Unsubscribe any time.

Subscribe