How to become a registered NDIS provider in 2026: the honest timeline

Registered or unregistered – decide this first

The NDIS has two kinds of provider. Unregistered providers can deliver supports to participants who self-manage or use a plan manager, as long as they hold an ABN, follow the NDIS Code of Conduct, hold NDIS Worker Screening where required and use a compliant service agreement. Registered providers have been audited against the NDIS Practice Standards and can also serve participants whose plans are managed by the National Disability Insurance Agency (NDIA), and can deliver the supports that must be delivered by a registered provider – behaviour support, supports involving restrictive practices, Specialist Disability Accommodation and, increasingly, supported independent living and platform-based services as the registration reforms roll out.

Registration is not a badge of quality on its own, but participants, support coordinators and plan managers use it as a shortcut. It also unlocks the agency-managed segment, which many new providers underestimate – roughly one in ten participants – and it protects you as the Commission moves towards a graduated, risk-based registration model in which more provider types are expected to register. If you plan to be in this sector for more than a year, registering early is usually cheaper than retrofitting later.

The seven steps, in the order that actually works

1. Structure, ABN and insurance

Most providers register a company (ASIC fee around $600) rather than trading as a sole trader, because directors’ liability, staff employment and the Commission’s governance expectations all sit more comfortably with a company. Apply for an ABN (free), register for GST if you expect turnover over $75,000 (most NDIS supports are GST-free, but you still register), and arrange public liability, professional indemnity and – the moment you employ anyone – workers’ compensation. Auditors ask to see current certificates of currency.

2. Worker screening and checks

Every worker in a risk-assessed role needs an NDIS Worker Screening Check, applied for through your state or territory screening unit and linked to your organisation in the NDIS Worker Screening Database. Clearances last five years and are portable between employers. Add a Working With Children Check if you will support children, and complete the free NDIS Worker Orientation Module – Quality, Safety and You for every worker. Applications take anywhere from a few days to several weeks depending on the state; start them the same week you register the company.

3. Choose registration groups honestly

Registration groups describe the supports you may deliver – for example 0107 Assistance with Daily Personal Activities, 0125 Participation in Community, Social and Civic Activities, 0106 Assistance in Coordinating or Managing Life Stages, 0104 High Intensity Daily Personal Activities. The groups you select decide which Practice Standards modules you are audited against, which decides your audit type and cost. Every extra group is extra evidence you must produce. Register for what you will deliver in the first year and add groups later through a variation.

4. Write the documents before you touch the portal

The application asks you to complete a self-assessment against the Practice Standards. Each response is a claim the auditor will test. Policies, procedures, registers, service agreements, a participant handbook, an incident-management system, a complaints process, a continuous-improvement plan, a risk register and a business continuity plan should exist – and be in use – before you describe them. Providers who lodge first and write later are the ones whose audits drag past six months.

5. Lodge in the NDIS Commission Applications Portal (via PRODA)

The application collects organisation details, key personnel (with suitability declarations), registration groups, the self-assessment and your evidence. On submission the Commission issues an Initial Scope of Audit document, which you give to approved quality auditors to quote against.

6. Engage an approved auditor and be audited

Only auditors approved by the Commission can audit you. Get three quotes; prices vary considerably. For a verification audit the auditor reviews documents remotely. For a certification audit there are two stages: Stage 1 is a desktop review of your systems; Stage 2 tests whether you actually do what the documents say, through interviews with you, your workers and – where you have them – participants. New providers with no participants yet are audited on their systems and receive a shorter initial certification with a follow-up audit once services start.

7. Respond to findings, then the Commission decides

The auditor reports to the Commission. Minor non-conformities need a corrective action plan; major non-conformities must be closed before a recommendation to register. The Commission then assesses suitability and issues a certificate of registration listing your groups and conditions, typically for three years. Renewal applications must be lodged before expiry, with a fresh audit.

Verification or certification – which one are you?

The audit type is set by the risk of the registration groups you choose, not by your size. Verification applies to lower-risk supports – therapy delivered by a registered health professional, plan management, household tasks, some assistive technology – and is a document review against the NDIS Practice Standards Verification Module. Certification applies to higher-risk, hands-on supports and is a full assessment against the Core Module plus any Supplementary Modules your groups trigger.

The supplementary modules are: Module 1 High Intensity Daily Personal Activities; Module 2 Specialist Behaviour Support; Module 2A Implementing Behaviour Support Plans; Module 3 Early Childhood Supports; Module 4 Specialised Support Coordination; Module 5 Specialist Disability Accommodation. Each adds outcomes, evidence and audit time – and Module 1 in particular expects documented competency for every high-intensity skill you list, such as complex bowel care, enteral feeding or subcutaneous injections, against the Commission’s skills descriptors.

What it really costs to get registered

Where applications stall – and how to avoid it

• Template packs lodged unedited. Auditors recognise them instantly. A policy that names a service you don’t deliver or a position you don’t have is a finding, not a pass.
• Over-scoping registration groups. Ten groups means ten sets of evidence. Start narrow.
• Key personnel gaps. Every director and senior manager must pass the Commission’s suitability assessment; undisclosed bankruptcies, bans or convictions surface late and delay everything.
• No participant-facing documents. Service agreement, easy-read participant handbook, consent forms, complaints information and incident reporting information must exist even before your first participant.
• Slow responses to findings. The clock keeps running while corrective actions sit in an inbox. Aim to close minors within a week.
• Treating the self-assessment as a form. It is a set of claims you will be tested on. Answer with references to your actual documents and registers.