What the Commission expects
The Commission addresses bought policies directly on its apply for registration page, under "Using consultants, advice services or purchased policies". You are responsible for the content of your application. If you used purchased policies, the Commission expects that you:
- were substantially involved in preparing the application and documents,
- understand what you have submitted and can explain it if asked,
- can show the suitability of your organisation without relying on the expertise of the seller, and
- gave responses that are specific to your organisation, not a direct copy of purchased documents.
It also says your policies must accurately reflect how your organisation will deliver NDIS supports. The consequences are real. The Commission says an application may be refused, and that it can add a condition requiring a new certification audit, Stages 1 and 2, with a new self-assessment. Providing false or misleading information in an application is a contravention of the NDIS Act, and the 2026 amendments added higher penalties for it. See our explainer on NDIS Commission enforcement powers.
How to adapt a template, step by step
- Start with your scope. Work out your registration groups and the modules they bring in. Set aside documents for modules you will not be audited against.
- Describe a normal week. Write down what your workers do, with whom, where and with what equipment. Every procedure should match that account.
- Replace the generic with the specific. Put in your real roles, names, forms, systems and escalation points. Delete roles you do not have, and write down who covers when someone is away.
- Cut and add. Remove services you do not offer. Add anything your service needs that the template lacks, such as a procedure for a risk unique to your supports.
- Make the documents agree. Your incident procedure, risk register and improvement register should point to each other. Contradictions are a classic finding. Our page on the templates library shows how individual documents connect.
- Check the rules are current. Timeframes, categories and group codes change. Confirm them on the Commission's website rather than trusting the template.
- Brief your workers. A policy nobody has read is not a policy. Walk the team through the documents that apply to them, and write down that you did.
- Start the registers. Begin recording incidents, complaints, risks and improvements as soon as you can, so the paperwork has evidence behind it.
- Practise explaining it. Have someone ask you and your key personnel to explain the policies, as an auditor would.
Warning signs of a template that has not been adapted
- Another organisation's name, a placeholder or a bracketed instruction is still in the text.
- Roles, committees or software appear that your organisation does not have.
- The policy covers services you do not provide, and omits ones you do.
- Procedures describe steps your workers have never heard of.
- Documents contradict each other, for example on who reports an incident.
- Wording matches other providers' documents line for line.
- There are policies but no registers, records or forms behind them.
- Timeframes, group codes or references are out of date or for the wrong state.
How auditors test that policies are used
The Commission's description of the quality audit process says the focus moves quickly from what your policies say to what happens in practice. Auditors test that in four ways:
- Registers. They trace entries in your incident, complaints and improvement registers back through your procedures.
- Staff interviews. They ask workers what they would do in a given situation and compare the answers with your documents.
- Participant files and interviews. They read service agreements, risk assessments and notes, and speak with participants about whether they feel safe and understand their supports.
- Observation. In a certification audit they may watch support being provided to see whether it matches the participant's plan.
Our audit checklist lists the evidence to have ready.
Keep your documents yours after the audit
Adapting is not a one-off job. Registration runs for years, with a mid-term audit for certified providers, and your services will change. Set review dates on every document, and assign each one to a named person. When you add a service, change a system or learn something from an incident, change the document that describes it. The best evidence that a policy belongs to you is a revision history showing you have used it.
Templates speed things up, but they do not replace the work
Be honest with yourself about what a template does. It gives you structure, coverage of the Practice Standards and a faster route past the blank page. It cannot know your workers, your participants or how you really run your day. Adapting it takes time, and you cannot hand that time to anyone else without risking exactly what the Commission warns about.
Our package of 220+ editable Word documents covers the Core Module and Modules 1 to 5. It does not guarantee registration, and you must edit every document to match your own practice. If you are weighing options, read our comparison of templates, consultants and doing it yourself.
This page is general information based on NDIS Commission and government sources at the date shown. It is not legal or professional advice, and the rules can change. Check the NDIS Commission's current requirements and read our disclaimer.