If you've decided to register as a Supported Independent Living (SIL) provider, the first wall you hit is paperwork. The NDIS Commission doesn't hand you a tidy list — they point you at the NDIS Practice Standards and expect you to translate dozens of pages of "outcomes" into actual documents. Most new providers have no idea where to start, and the ones who guess usually guess wrong.
Here's the honest version of what you need.
The core policies every SIL provider needs
These aren't optional. An auditor will ask for each one by name:
- Incident management policy — how you record, report and respond when something goes wrong.
- Complaints management policy — how a participant or family raises a concern, and what you do about it.
- Risk management framework — how you spot and reduce risks to participants and staff.
- Privacy and dignity policy — how you handle personal information and respect each person's choices.
- Safeguarding and abuse/neglect prevention — your most-scrutinised area in SIL.
- Medication management — if you support anyone with medication, this is non-negotiable.
- Emergency and disaster management — including fire, evacuation and continuity of supports.
What "good" looks like for each document type
It's not enough to have the document — it needs to be fit for purpose. Here's what auditors expect to see in each category:
- Incident management policy — A clear step-by-step process (notice, record, report, review), defined timeframes for reporting to the NDIS Commission, and a template your staff can fill in at the time of the incident. Blank policies with no accompanying register are a red flag.
- Complaints policy — The Easy Read version for participants, a log where every complaint is entered, and evidence that you followed up. Auditors will ask: "Show me a complaint you received. What did you do?"
- Risk management — A living risk register (not a set-and-forget document) with ratings, controls and review dates. Each participant should also have an individual risk assessment tied to their support plan.
- Safeguarding policy — For SIL, this is your most-scrutinised area. Auditors look for clear definitions of abuse, neglect and exploitation; mandatory reporting obligations; and evidence that all staff have been trained on it.
- Medication management — A medication administration record (MAR) for each participant who takes medication, signed by the support worker on duty. Verbal instructions don't cut it.
- Emergency plan — An evacuation diagram, a list of contacts, and a record showing your team completed a drill or walkthrough. The plan needs to be site-specific, not generic.
The registers and forms behind the policies
Policies say what you'll do. Registers and forms prove you actually did it. You'll need an incident register, a complaints register, a risk register, a conflict-of-interest register, consent forms, service agreements, and progress note templates — among others. This is where most DIY providers fall short: they write a policy but have nothing to show it ever happened.
The HR and worker documents
The Commission also checks how you screen, induct and supervise staff: worker screening records, position descriptions, a code of conduct, induction checklists and supervision records. The day you hire your first support worker, these need to exist.
Priority order: what to build first
If you're starting from nothing, tackle the documents in this order — it mirrors roughly how an auditor works through the quality areas:
- Step 1 — Rights and governance foundation — Privacy policy, consent forms, code of conduct, and your conflict-of-interest register. These underpin everything else.
- Step 2 — Safety and safeguarding — Incident policy and register, safeguarding policy, complaints policy and register. Auditors spend significant time here for SIL.
- Step 3 — Participant-facing documents — Service agreements and support plans. Every participant in your service needs both, signed and dated.
- Step 4 — Operational management — Risk register, emergency plan, medication management policy and medication administration records.
- Step 5 — Workforce documents — Employment contracts, position descriptions, screening records, induction checklists and supervision records.
- Step 6 — Continuous improvement — Your quality improvement register and evidence that you review your policies at least annually.
The document you're missing is never the one you'd guess. Build the full set from the start.
A realistic timeline
Most small providers who build their document library from scratch — writing and personalising each document themselves — take several months before they feel ready to book an audit. The writing isn't the only time cost: you also need to embed the processes, train your team, and start building a real evidence trail. Auditors want to see that your system has actually been running, not set up last week.
Providers who use a ready-made, pre-written document pack can cut the writing phase dramatically — but still need the embedding and evidence-building time. Whatever path you choose, starting earlier is almost always better than waiting.
How many documents is that, really?
For a typical small SIL provider, it lands at around 65 core documents — and that's before you personalise a single one to your business. Writing them from scratch is weeks of work, and a generic template you found online won't carry your organisation's name, your ABN, or anything specific to how you operate.
Not sure which ones apply to you? Our free 2-minute quiz builds a personalised checklist based on the supports you offer — so you see exactly what your business needs, not a generic list.
Take the free quiz →Common mistakes to avoid
- Downloading a generic template and submitting it unchanged — Placeholder text, wrong organisation names, and policies that don't match your actual practice are audit red flags. Every document must be personalised.
- Writing policies without the matching registers — A beautiful incident management policy means nothing without an incident register that shows real entries. Both pieces must exist.
- Leaving NDIS Worker Screening too late — Screening checks take time to process. Apply well before you need your workers on the floor.
- Using the same support plan for every participant — Each person's plan must reflect their individual goals, preferences and risks. A photocopy with the name changed is not a personalised plan.
- Forgetting to review documents annually — Outdated policies can count against you. Your quality improvement process should include scheduled reviews with dates recorded.
Participant-facing documents you might overlook
Most checklists focus on policies and registers. But there's a whole category of participant-facing documents that are just as important — and easier to forget. These include:
- An Easy Read complaints brochure — The standard complaints policy isn't accessible to every participant. An Easy Read version (simple language, pictures or icons) demonstrates that you've actually made complaints accessible, not just written a policy about it.
- A participant handbook — A plain-English guide to your service: who you are, how you work, what participants can expect, and how they can raise concerns. Auditors look for this as evidence that participants genuinely know their rights.
- Exit and transition plans — If a participant leaves your service, they should have a plan for what happens next. This is especially important in SIL, where housing and support are interlinked.
- Feedback forms — A mechanism for participants to provide feedback (positive or negative) beyond the formal complaints process. Simple surveys, regular check-ins recorded, or a suggestion box. The form itself is less important than the habit of asking.
The certification audit process, step by step
Understanding how the audit actually works helps you prepare more calmly. Here is the typical sequence for a SIL certification audit:
- Application to the NDIS Commission — You apply through the Commission's portal and select your registration groups (in this case, SIL). The Commission will confirm the scope of your registration and refer you to the audit process.
- Choosing an approved quality auditor — You select an auditor from the Commission's list of approved quality auditors. You arrange and pay for the audit yourself. Shop around — prices and availability vary.
- Document review (desktop audit) — The auditor reviews your policies and documents before visiting. Gaps identified here can often be addressed before the on-site visit.
- On-site audit — The auditor visits your service, interviews you and your staff, and may speak with participants (with consent). This is where the "does it actually work?" question gets answered.
- Audit report — The auditor produces a report with findings: which outcomes are met, and which have non-conformities. Major non-conformities need to be resolved before registration is granted.
- Commission decision — Once any non-conformities are addressed and the auditor confirms this, the Commission makes the registration decision.
What to do in the first week after registration
Getting your registration certificate is a milestone worth celebrating. But the week after is also when smart providers lock in the habits that will keep them registered. Here's what to do immediately:
- Update your marketing and service agreement templates — You can now describe yourself as a registered NDIS provider. Update your website, your intake forms, and any promotional material accordingly.
- Notify your current participants — Share the good news. For plan-managed and self-managed participants, it may open up new options. For participants seeking an agency-managed arrangement, it means you can now support them.
- Set a calendar reminder for your mid-term review — Mark the approximate date of your mid-term review in your calendar now. You don't want to be caught off-guard.
- Review any non-conformities from your audit — If you had minor non-conformities that were noted but didn't block registration, address them now. Don't let them sit.
- Keep using your registers and systems — The single biggest mistake after registration is relaxing and letting the evidence trail lapse. Your next audit is already counting down.
Keeping your registration once you have it
Registration isn't a one-time achievement — it needs to be maintained. Registered providers are subject to mid-term reviews and renewal audits on a regular cycle. You also have ongoing obligations: reporting notifiable incidents to the Commission, renewing worker screening checks before they expire, and keeping your documents current. The organisations that find this easiest are the ones who treat compliance as part of how they run the business every day, not as something that only matters when an audit is coming.
The providers who thrive long-term are the ones who build their compliance habits into the business from day one — not the ones who scramble every three years when the renewal audit looms. Start as you mean to go on, and registration stops being a burden and becomes a badge of confidence in the quality of your service.
You can absolutely assemble all of this yourself. But if you'd rather get the full pack — all 65 core documents, written to the Practice Standards and personalised to your organisation — that's exactly what we built NDIS Ready to do.
See exactly which documents you need
The free quiz takes two minutes and gives you a personalised checklist plus three sample documents to download immediately.
Start the free quiz →