NDIS Worker Compliance: The Silent Audit Gap That Catches Most Providers

Most NDIS providers think worker compliance means getting the Worker Screening Check on file when a new worker starts. That's the easy part — the screening check is a hard gate, no provider hires a worker without one.

The audit gap that actually catches providers is the calendar problem.

Different compliance items have different cadences. Each worker has a different start date. Multiply across 20-40 workers and the math gets ugly fast. By the time an auditor asks "show me the current Worker Screening Check status for every worker who delivered a shift in the last 90 days", most providers are scrambling through three spreadsheets, a HR folder, and what the operations manager thinks she remembers about who renewed last month.

The worker who's been on shift this week with an expired check is the finding nobody saw coming.

The 4 compliance items every NDIS worker needs (and their cadences)

Every worker delivering NDIS support needs to maintain a current status across at least these four items [NDIS-CHECK: list current at ndiscommission.gov.au/workers, confirm before relying on for an audit]:

For some support categories there are additional requirements — Cert IV in Disability or equivalent for community-access supports, medication-administration training for specific supports, restrictive-practice authorisation training where applicable. Those compound the calendar further.

The point isn't the list. It's that each item has a different cadence, each worker has a different start date, and the compliance status changes silently between renewals.

Why most providers fail this audit gap

The pattern we see repeatedly in provider conversations:

• Worker Screening Check expiries live in an HR spreadsheet. The HR person reviews it monthly, in theory. In practice, the review gets skipped during busy weeks and the next reminder lands at 30 days out, which is already a rush.
• First Aid + Manual Handling live in the same spreadsheet but get less attention because they don't gate NDIS work as visibly. By the time a worker realises their First Aid lapsed, they've done 3-4 shifts on it.
• Worker Orientation Module completion dates are scattered. The module is completed when the worker is onboarded, the completion date might be saved to email, might be in a separate compliance folder, might just be a manager's memory.
• No single calendar view exists. The data is technically all there. It's just distributed across enough places that nobody sees the whole expiry picture at once.

The system breaks at scale. With 5 workers, the spreadsheet works. With 15 workers, it works but with occasional gaps. With 30+ workers, it stops working — there are too many expiry dates, in too many places, and not enough manager attention to catch them all.

What the auditor actually checks (and how they catch the gap)

NDIS audits don't sample randomly. The auditor follows a specific pattern designed to expose calendar-tracking gaps:

1. Pull the shift roster from the last 90 days. The auditor wants every shift that happened.
2. Pull the worker list for the same window. Every worker who delivered at least one shift.
3. For each worker, ask for the current compliance status across the four items above, on the date of each shift they delivered.

That last step is the killer. The auditor doesn't just want to see today's status. They want to confirm the worker was compliant on the day they delivered the support — which means historical compliance status, not point-in-time.

If you can produce a spreadsheet that shows "Worker A had a current Worker Screening Check from 2024-03-01 to 2029-02-28, and delivered shifts X, Y, Z within that window" — you pass.

If you can produce today's compliance status but can't reconstruct historical status for the audit window — that's a finding. Common cause: the spreadsheet gets updated when a worker renews, but the previous expiry date is overwritten. The historical record is gone.

The system that catches it (the operational pattern, not the software)

The providers we've talked to who pass cleanly on this audit gap all do the same three things:

1. Single source of truth for compliance status

One system, not three. Worker Screening Check expiry, First Aid expiry, Manual Handling expiry, Worker Orientation Module completion date — all in the same place, attached to the worker record. When the auditor asks for a worker's status on a specific date, the answer is one query, not three.

2. Cadence-aware reminder system

Each compliance item has a different cadence. The reminder system has to respect that — 60 days out for items where renewal involves booking external courses (First Aid, Manual Handling), 90 days out for the Worker Screening Check because the process can take 4-6 weeks.

A single "30 days out" reminder doesn't work because some items have a 4-week renewal lead time that requires planning earlier.

3. Hard block on shift assignment if compliance lapses

The expiry calendar is one half. The other half is preventing a worker with a lapsed compliance item from being assigned to a shift they're not currently authorised to deliver. The system has to check status at the moment of assignment, not just at renewal time.

If the rostering system and the compliance tracker don't talk to each other, you can have a perfect compliance dashboard and still assign a worker with an expired check to a shift. That gap is where the audit finding hides.

What this means for your audit prep

If you're 90 days out from an audit and reading this — three things to check this week:

1. Pull your worker list and the four compliance items for each. If it takes more than 30 minutes, that's the audit gap. Most providers find that one or two compliance items aren't tracked for every worker.

2. Pick 5 random shifts from the last 90 days. Confirm the worker's compliance status was current on that shift date. If you can't easily reconstruct historical status, your tracking system overwrites instead of versioning — fix that before the auditor finds it.

3. Check the reminder cadence. Are reminders going out 30 days before expiry? That's too late for First Aid (course bookings take weeks). 60 days out should be the minimum for non-Worker-Screening-Check items, 90 days out for the Worker Screening Check itself.

The NDIS Audit Preparation Checklist (PDF) covers the full pre-audit operational sweep, including the worker compliance section in more detail with the auditor-readiness questions to test yourself against.

How Tendaroo handles worker compliance

We built worker compliance into Tendaroo because every provider conversation surfaced the same calendar-gap problem. The system maintains expiry calendars per worker, generates reminders at the right cadence per compliance item, versions historical compliance status (so the audit reconstruction is one query), and blocks shift assignment if a worker's required compliance has lapsed.

We've written separate honest comparisons against ShiftCare, SupportAbility, and Lumary, including how each handles worker compliance and where they leave gaps.

If you want to walk through your current compliance tracking setup with a founder who actually built the system: start a 30-day free trial — no credit card, no demo gate. We're founder-led right now, so the onboarding call is with someone who can look at your current spreadsheet and tell you straight whether you have an audit gap before the auditor finds it.