When registration looms, the tempting shortcut is obvious: buy a complete set of NDIS policies from a consultant or a template shop, drop your logo on top, and tell yourself the paperwork is handled. It feels like de-risking. Sometimes it's even necessary as a starting point. But it quietly introduces a different, bigger risk — one that only shows up on audit day, when it's too late to fix.
Here's the uncomfortable truth about certification: an auditor doesn't grade your documents on how good they look. They grade whether the documents are true. And a policy is only "true" if the way your team actually works matches what the page says. Bought templates are, by definition, written for a generic provider — not for how you run your homes. The gap between the template and your reality is exactly what evidence triangulation is designed to find.
A template describes someone else's provider
A purchased restrictive-practices policy might describe an authorisation workflow, forms, and roles that don't exist in your organisation. On paper it's immaculate. Then the auditor asks a support worker to walk through what they'd actually do — and the answer doesn't match the document, because the document was never about your team. That mismatch is a non-conformance, and no amount of polish prevents it.
Why "your own policies" is the stronger position
When your policies describe how you genuinely operate, three things get easier at once:
- Your staff can speak to them. They're not reciting a document; they're describing their job. Under questioning, that authenticity is unmistakable — and it's what auditors are actually testing.
- Your evidence lines up. When the policy reflects your real workflow, your records naturally match it, because they came from the same reality. Triangulation stops being a trap and starts being a strength.
- You can maintain them. You understand a policy you wrote or adapted, so you can keep it current when things change. A template you've never internalised drifts out of date the moment your practice evolves.
None of this means you must write every policy from a blank page. Adapting a good starting document to how you truly work is completely legitimate — the key word is adapting. The failure mode is adopting a template wholesale and never making it yours.
How to make your own policies audit-ready
Map what you actually do
Before touching a document, describe your real process for the high-stakes areas — incidents, restrictive practices, medication, complaints, safeguarding. How does it work on a Tuesday night in your home, with your staff? That reality is the thing your policy has to describe.
Make the policy match the practice (or fix the practice)
Where your document and your reality disagree, you have two honest choices: change the document to reflect what you do, or change what you do because the policy describes better practice. What you can't do is leave them contradicting each other — that contradiction is what gets found.
Make sure your team can speak to it
A policy only counts if the people delivering support understand it. Walk your staff through the key practices, and check they can explain — in their own words — what they'd do. If they can't, the policy isn't real yet, whoever wrote it.
Build the evidence trail behind each policy
A policy without evidence is just a claim. For each one, know what proves it's operating: the incident register behind your incident policy, the training records behind your restrictive-practices policy, the current risk assessments behind your risk framework. That verified evidence — not the document alone — is what carries the audit.
The bottom line
Bought policies solve the wrong problem. They make your folder look finished while leaving the real question — can you prove this is how you operate? — unanswered. Passing an NDIS audit isn't about owning the best-looking documents; it's about being able to stand behind the ones you have, with evidence and a team that lives them. Start from your reality, make your policies true, and back them with verified evidence. That's an audit position no template can buy you.