Why audit preparation takes a fortnight

For NDIS and care providers, audit pain is almost never about the care delivered. It is about evidence that was never captured in one place, and a process that lives in one person's head.

Ask a care provider how long audit preparation takes and you usually get two answers in one sentence: about a fortnight, and the name of the person who does it. Both halves of that answer are the problem.

The work itself is rarely what takes the time. The support was delivered, the shift happened, the note was written. What takes the fortnight is finding the evidence afterwards and assembling it into something an auditor can follow.

The evidence exists, it is just scattered

Participant records sit in one system. Rosters sit in a spreadsheet. Progress notes sit wherever the team writes them. Claim records sit in the portal. Each is fine on its own. Nothing joins them, so proving that a particular support was delivered to a particular participant on a particular day means opening four things and matching them by hand.

Do that across a sample of participants over a review period and you have your fortnight. Nothing was done wrong. The records were simply never connected to each other.

Captured at the time, or reassembled later

There are only two ways to have evidence. Capture it as the work happens, or reconstruct it afterwards from whatever was left behind. Most providers are doing the second, which is the slow, stressful one, and occasionally it cannot be done at all.

When the roster, the participant record and the evidence of delivery are one record rather than three, preparing for an audit turns into reviewing something that already exists. That is the whole change. It is not a compliance product, it is where the capture happens.

The single-person problem

The risk we see more often than a failed audit is that one person understands how the whole arrangement fits together. They know which spreadsheet is the authoritative one, which column was repurposed two years ago, and which participants have an arrangement that does not match the template. If they are on leave when the audit lands, or they resign, that knowledge leaves with them.

This is a continuity problem wearing a compliance costume, and documentation does not solve it. Systems do, because a system holds the process itself rather than a description of it.

Where AI helps, and where it must not

It helps at the edges, and the edges are worth a lot. Turning a support worker's rough notes into a properly structured progress note for them to check and approve. Flagging a shift with evidence missing before the claim goes out rather than after. Reading across records to find the ones that do not have what they need. Summarising and noticing are what these systems are genuinely good at.

It must not decide anything about a participant's supports, funding or risk. Those are judgement calls with real consequences for a person, they need a named human decision-maker, and an auditor will want to know who made the call and on what basis. Draw that line explicitly and write it down, because an unwritten line moves.

The privacy part people miss

Care providers hold health information, and that means the Privacy Act applies regardless of turnover. The small business exemption that covers a lot of businesses under three million dollars does not help here. In practice that means knowing where participant information is processed, keeping it out of tools nobody has approved, and being able to say what happened to it if you are asked.

Where to start

Not by buying a compliance system. Pick one obligation you currently evidence by hand and change how that evidence gets captured. If a support worker can record what happened on a phone at the time, onto the participant's record, you have removed a fortnight's reassembly for that one obligation. Then do the next one. Providers who start with a system and work backwards to the obligations tend to end up with both the old spreadsheets and a new system.

The short version

Audit pain is a capture problem, not a paperwork problem. Move the capture to the moment the work happens, join the roster and the participant record and the evidence into one record, and get the knowledge out of one person's head. The audit then costs you a review instead of a fortnight.