NDIS audits are stressful. But the findings that come out of most audits are not mysterious or unpredictable — they tend to cluster around the same issues, across provider after provider. The good news: all of them are preventable.

Here are the ten most common compliance mistakes we see — and exactly how to fix each one.

Mistake 1 — Shift Notes Not Completed Within 24 Hours

#1 Most Common Finding

NDIS Practice Standards require shift notes to be contemporaneous — meaning completed close to the time of service, not written days later. Auditors look at the timestamp on shift notes relative to the shift time. A pattern of late notes is an immediate red flag.

Fix it: Make shift note completion part of the shift itself — not something workers do later. Software that auto-generates and flags overdue notes is the most reliable solution. Manual reminders don't scale.

Mistake 2 — Generic Shift Notes That Don't Reference Goals

"Support provided" is not a compliant shift note. Every note needs to reference the specific support delivered and connect it to the participant's active NDIS goals. Auditors check whether your documentation shows genuine goal-directed support — not just that someone turned up.

Fix it: Your note template should include a mandatory field linking the shift to a participant goal. If you're using software, this should be built into the note-creation flow.

Mistake 3 — Claims Don't Match Service Delivery Records

If you billed the NDIA for Community Access but your shift notes describe in-home personal care, that's a discrepancy that auditors will find. The NDIA cross-references billing data against service delivery records — and so do auditors.

Fix it: Every claim needs a matching service delivery record. Before submitting to the NDIA, your billing system should automatically verify that each claim corresponds to a completed and documented shift.

Mistake 4 — Expired NDIS Worker Screening Clearances

All NDIS support workers need current NDIS Worker Screening clearances. Clearances expire. Staff change. Without a system that tracks expiry dates, it's easy for a clearance to lapse without anyone noticing — until an auditor checks.

Fix it: Maintain a live register of all staff clearances with expiry dates. Set automated alerts 60 days before expiry. This is one of the easiest compliance items to automate.

Mistake 5 — Service Agreements Not Current or Unsigned

A service agreement needs to be current (matching the participant's active NDIS plan funding), signed by the participant or their authorised representative, and aligned to the support types you're actually delivering. Missing signatures or outdated agreements are common findings.

Fix it: Track service agreement status in your participant management system. Flag agreements that haven't been renewed when a participant's plan is updated. Review all agreements before an audit cycle.

Mistake 6 — Using Outdated NDIS Price Guide Rates

The NDIA updates the NDIS Price Guide regularly. Billing at last year's rates — even accidentally — creates compliance issues and may result in overpayment or underpayment depending on the direction of the change.

Fix it: Your billing system should update automatically when the Price Guide changes. If you're maintaining pricing manually, assign someone responsible for checking the NDIS website each time an update is published.

Mistake 7 — Staff-to-Participant Ratios Not Documented for High-Intensity Supports

For high-intensity support services, the required staff-to-participant ratios must be documented in your service delivery records. This is particularly important for group activities and complex support environments.

Fix it: Build ratio documentation into your rostering system. Every shift that involves high-intensity support should have the ratio recorded at the time of scheduling — not reconstructed afterwards.

Mistake 8 — Incident Reports Filed Late or Not at All

Reportable incidents must be notified to the NDIS Commission within specific timeframes — some within 24 hours. Late or missing incident reports are a serious compliance failure and can trigger escalated audit scrutiny.

Fix it: Your incident reporting process needs to be simple enough that staff complete it immediately. Complex forms don't get completed in a crisis. Build in a clear escalation path so the right people are notified automatically.

Mistake 9 — No Evidence of Participant Goal Reviews

NDIS Practice Standards require that participant goals are reviewed regularly and that this review is documented. If your records don't show goal review conversations — with dates, outcomes and participant input — auditors will flag it.

Fix it: Schedule goal reviews in your participant management system and create a record of each review. Even a brief documented conversation counts — the key is that it's recorded and dated.

Mistake 10 — Records Not Easily Retrievable During an Audit

This one is often overlooked. Auditors may request records going back 2–3 years. If your documentation is spread across paper files, email threads and disconnected spreadsheets, the time it takes to pull everything together creates problems — even if the records themselves are compliant.

Fix it: Centralise your documentation in a single system. Every participant record, shift note, billing history and incident report should be searchable and exportable in seconds — not hours.

The Common Thread

Look across these ten items and you'll see the same pattern: most compliance failures are systems problems, not people problems. Providers who get audit findings aren't usually doing the wrong thing — they're running on tools that make it too easy for things to slip through.

Ausvanta was built to close these gaps — automated shift notes, live compliance scoring, real-time alerts, and centralised records that are always audit-ready. If you'd like to see how it works for an organisation your size, book a 15-minute demo.