Guide 08 · independence

Can an approved NDIS quality auditor also help me write my policies?

Last verified: 12 August 2026 · Applies to: providers choosing between preparation support and an independent approved-auditor engagement.

Short answer: Keep the preparation role and the independent audit decision clearly separated. An auditor can explain its audit process and evidence expectations within its own written scope, but a provider should not rely on the same decision-maker to create the policies and evidence it later assesses without first resolving the independence question. Ask what the auditor will and will not do, who makes the decision, and whether another provider should prepare the work.

Why the boundary matters

Policy preparation and auditing answer different questions. A consultant helps the provider describe its operating model, configure policies and registers, organise client-owned evidence and prepare written responses. An approved auditor assesses evidence within the audit process and keeps its own decision. If one person writes the controls, chooses the evidence and then evaluates whether those controls are adequate, the provider may have a difficult independence and credibility question even if the documents look polished.

Clearharbour's own published boundary is simple: it is a compliance consultancy, not an approved quality auditor, and it never audits the same provider it consults. That is an operating decision rather than a statement about every possible auditor arrangement. The provider should ask the proposed auditor directly about its current scope, independence safeguards and any work it offers before or after an audit.

Questions to ask in writing

1. Are you being engaged to audit this provider, or only to provide general information about the audit process?
2. Will the same people who prepare, edit or approve our policies assess those policies or the related evidence?
3. What work is included in the auditor's written engagement, and what work is explicitly excluded?
4. Who contracts with and pays the auditor? The provider should understand that the auditor is a separate engagement and that preparation fees do not replace the auditor fee.
5. If we use another consultant to prepare the material, what evidence format, request process and communication route should we follow?
6. What happens if the scope, support type, site, module or evidence volume changes?

Written answers are easier to retain with the scope matrix and engagement documents. They also prevent a casual comment about “audit readiness” from becoming an assumed outcome promise.

What a preparation consultant should do

A preparation consultant should begin with the provider's actual entity and operating model. The work may include a pathway and scope matrix, a configured policy suite, a self-assessment draft, an evidence index, interview prompts, written responses to auditor requests and a remediation tracker. The consultant should label assumptions, ask for client approval and distinguish its artifacts from client-generated records.

The consultant should not sign the provider's attestation, invent historical evidence, backdate a record, represent that a control operates when it has not been implemented, or decide what the auditor or Commission will accept. The provider remains responsible for implementation, worker practice, service delivery, truthful records and factual submissions.

What the provider should retain

• The auditor's written proposal, scope, fee and independence or conflict explanation.
• The preparation consultant's scope matrix, exclusions, evidence-owner list and assumptions.
• A record of which files were drafted by the consultant and which were generated by the provider's real operations.
• Questions and written answers about changed scope, additional modules, sites, sampling or remediation.
• The final provider-approved response and the auditor's own requests or reports.

Common mistakes

• Choosing a preparation provider because it implies it can influence the later audit decision.
• Assuming an auditor's general guidance is a pre-approval of the provider's policies.
• Failing to tell the consultant or auditor when the actual support model changes after the scope is agreed.

When a written readiness view helps

The free scorecard is a neutral first step when the provider is unsure whether it needs preparation, ongoing maintenance or response support. It is a desktop diagnostic, not an auditor opinion or regulator decision. The report can show the six readiness dimensions and the material limits so the provider can ask a better written scope question next.

Related: audit types, costs and evidence and non-conformity response. This guide is operational information, not legal advice; last verified 12 August 2026.