How to handle gaps in evidence for NDIS audit preparation
Short answer: find gaps by sampling your records the way an auditor would, then close each one going forward with a corrective action that has an owner and a date. Do not rewrite or backdate old records. Label a late entry as late, and record what you cannot recover. The NDIS Commission says a non-conformity is not a failure, but it does have to be corrected.
Key takeaways
- Find gaps before the auditor does by sampling participant files and tracing one incident end to end.
- Sort each gap into one of four types: missing, weak, unlinked or late. The fix differs for each.
- Fix forward. A late entry should show the real date it was written. Never alter or backdate an earlier record.
- Track every gap as a corrective action with an owner, a due date and proof it was closed.
- A major non-conformity must be fixed within 3 months, so a gap you already know about is cheaper to close now.
How do I handle gaps in evidence for NDIS audit preparation?
Find the gaps by sampling your own records, sort them by type, close them going forward and record what cannot be recovered. This guide covers each step. For the wider preparation sequence, see NDIS audit readiness and how to prepare by building evidence daily.
- Sample like an auditor. Pick five participant files across your registration groups. For each, follow the chain from care plan goal to shift note to risk to incident to review. The Commission describes auditors tracing a reported incident through your records, so trace one yourself.
- Sort each gap by type. Use the table below.
- Close it going forward. Complete the missing review, correct the practice, and raise a corrective action with an owner and due date.
- Be honest about what you cannot recover. If a note was never written, do not create one now as if it were written then. Record the gap, what you did about it and when.
- Prove it closed. Keep the evidence that the fix happened, such as the completed review or the next sampled notes that now meet the standard.
What types of evidence gap do auditors find?
| Gap type | Example | How to close it |
|---|---|---|
| Missing | No note for a shift, or no review of a care plan that is due | Complete the review now and date it today. Record why the original is missing. Do not write a note for a shift you cannot accurately recall |
| Weak | A note that says “had a good day” and names no support or goal | Fix the practice from now on: check notes before they are saved. Leave the old note as it is and record the finding |
| Unlinked | An event described in a shift note with no incident record, or a note that never names the goal it supports | Open the incident record now with its real date, assess reportability, and notify if required. Link the records going forward |
| Late | A note or incident record entered days after the event | Show the actual entry date. A late record that says it is late is more credible than one that hides it |
The “fix forward” rule is good practice, not a Commission instruction. It follows from the Practice Standards outcome that participant information is “identifiable, accurately recorded, current and confidential”, which a backdated record is not (core module).
What does a 90-day evidence readiness timeline look like?
| When | Focus | Output |
|---|---|---|
| 90 days out | Sample five participant files. Trace one incident. Check every care plan and risk review date | A list of gaps sorted by type, each with an owner |
| 60 days out | Complete overdue reviews. Open missing incident records. Start checking notes before they are saved | Corrective actions in progress with due dates |
| 30 days out | Run a mock audit on a fresh sample. Confirm earlier fixes held | A second gap list, shorter than the first |
| 7 days out | Assemble the audit pack and confirm staff can describe how they document and report | A pack built from records that already exist. See what an audit pack should contain |
Ninety days is a planning figure, not a Commission requirement. The Commission’s one hard timeframe here is that a major non-conformity must be fixed within 3 months (types of audits), which is a reason not to leave known gaps until the audit.
Which records should the evidence check cover?
The Commission says the auditor decides what to request, so confirm the list with your approved quality auditor. This checklist maps the usual records to the Practice Standards outcomes they support, so you can check each is present and current.
| Record | Practice Standards outcome it supports | Check |
|---|---|---|
| Participant information and shift notes | Information management: information “identifiable, accurately recorded, current and confidential” | Specific, accurate, entered promptly |
| Risk register and risk assessments | Risk management: risks “identified, analysed, prioritised and treated” | Control, owner and review date on each risk |
| Incident records and notifications | Incident management, under the Incident Management and Reportable Incidents Rules 2018 | Reportability assessed and notified on time |
| Care and support plans | Support planning: risk assessments documented and reviewed, plan reviewed annually or earlier | Current, reviewed, goals reflected in notes |
| Complaints and feedback records | Complaints management | Resolution and action recorded |
| Corrective actions | Quality management | Owner, due date, proof of closure |
How does NoteGate help close evidence gaps?
NoteGate is documentation compliance software that works alongside the system you already use. It checks shift notes, incident reports and care plans before they are saved, so weak or unlinked records are caught while the worker still remembers the shift. It tracks corrective actions with an owner and a due date, and builds an audit pack from accepted records. It supports documentation governance and does not determine whether a provider is compliant. NoteGate never writes shift notes or incident reports. See the NoteGate audit pack and NDIS audit evidence.
Frequently asked questions
Can I add a missing shift note after the event?
Only if you can write it accurately, and it must show the real date it was entered. Do not create a note that appears to have been written at the time. If you cannot recall the shift, record the gap and what you did about it instead.
Does a gap in my evidence mean I will fail the audit?
No. The Commission says a non-conformity does not mean the provider has failed. It means something needs to be corrected. A major non-conformity must be fixed within 3 months.
How many files should I sample before an audit?
There is no required number. The approved quality auditor decides its own sample. Five files across your registration groups is a practical internal check.
Should I fix old records or only new ones?
Fix practice going forward and leave old records unaltered. Record the finding and the corrective action against the gap.
Sources
- Types of audits (NDIS Quality and Safeguards Commission, retrieved 28 September 2026)
- Core module: Provider governance and operational management (NDIS Quality and Safeguards Commission, retrieved 28 September 2026)
- NDIS Practice Standards (NDIS Quality and Safeguards Commission, retrieved 28 September 2026)
- Reportable incidents (NDIS Quality and Safeguards Commission, retrieved 25 September 2026)
Related
Catch gaps while the shift is fresh
Book a 20-minute walkthrough, or choose a plan.
Book a 20-minute walkthroughChoose a plan