NDIS Provider Website: What Compliance Requires You to Show

Most NDIS provider websites show everything the provider wants to show and almost nothing a participant actually needs to choose them. They list services and an "about us", then bury — or omit — the things that decide trust: pricing, the complaints process, accessibility, proof of insurance. The fix isn't a bigger site. It's publishing the handful of facts a participant is quietly looking for before they'll contact you.

This matters on two levels. As a registered provider you have public-disclosure obligations under the NDIS Commission's rules and the Code of Conduct — and those rules are the source of truth, so check the current version on the NDIS Commission website rather than trusting any blog (including this one) for the exact wording. But the bigger day-to-day cost of hiding this information isn't a regulator. It's the participant who can't tell whether you're the right fit, so they move on to a provider who told them.

What's genuinely worth publishing

Set the regulatory minimum aside for a second and ask what a participant needs to decide. In practice it's this list — and most of it overlaps with what the Commission expects you to make available anyway:

• Pricing and fees — itemised or as a range, visible without having to make contact first.
• How you deliver — in person, remote, hybrid, and any limits (areas, hours, support types you don't offer).
• Your complaints and dispute process — a named contact, a timeframe, an escalation path.
• Insurance status — confirmation you carry current professional indemnity and public liability cover.
• Staff credentials — not a full org chart, just confirmation your team holds the required accreditation.
• Your registration status — that you're a registered provider, and any conditions attached.

The Commission can review a provider's public information, and if a participant complains and your site is silent on, say, how to complain, you've handed them a stronger case. But that's the floor. Treat it as the starting point, not the goal.

Why most providers skip the detail

The most common reason is the "contact us for pricing" button. Picture a Queensland provider with that button on every service page. A participant has to email, wait, and be quoted before they know if they can even afford to engage — so plenty don't bother. The provider reads the silence as "too expensive". Usually it's not price. It's friction. People avoid the form, not the rate.

Many providers assume flexibility means secrecy — that because rates vary, they can't publish anything. You can. "Our support is typically charged per hour and varies by service type and location — here's the range, email us for a quote specific to your plan" is both transparent and honest about the variation. A blank form tells the participant nothing.

The other reason is fear: that publishing a complaints process advertises that things go wrong. The opposite is true. Participants trust a provider who clearly has a process for when something goes wrong. Hiding it signals either that you don't expect to make mistakes, or that you won't own them when you do. Transparency is the trust signal here, not the risk.

What "accessible" actually means on a provider site

Of all sectors, NDIS is the one where an inaccessible website is indefensible — your participants are the exact people a poorly built site shuts out. You don't need a perfect WCAG 2.1 AAA audit, but WCAG 2.1 level AA is the sensible target, and most of it is straightforward:

• Alt text on every meaningful image.
• Real semantic headings, not text that's just styled to look big.
• Text contrast of at least 4.5:1 against its background.
• Captions or a transcript on any video.
• A short statement of your accessibility commitment ("we aim to meet WCAG 2.1 level AA").

An inaccessible NDIS site excludes the very participants it exists to serve from finding your information independently — and that's the worst possible audience to lock out. The cheapest meaningful win: add alt text to every image and run your site through a screen reader once a year. Most providers never do either.

The complaints paragraph that buys you credibility

Publish how a participant complains and what happens next. A good version covers:

1. How to lodge it — email, phone, or form.
2. Who receives it — a named role, not "management".
3. When they'll hear back — an acknowledgement timeframe.
4. When you'll aim to resolve it — a realistic window.
5. What to do if they're still unhappy — escalation, including that they can go to the NDIS Commission.

One page, a few hundred words, findable in the main navigation — not buried in a PDF footer. It doesn't need to be elaborate. It needs to exist and be easy to find. The point isn't fewer complaints; it's that participants who feel heard early rarely need to escalate.

Insurance and stability: small statements, big reassurance

Confirm you carry current professional indemnity and public liability insurance — required cover varies, so check your own registration documents for the specifics. A simple line works: "We hold current professional indemnity and public liability cover." You don't need to publish certificate numbers; you need to confirm the cover exists.

You're not required to publish accounts or a balance sheet, and you shouldn't. But a light signal of stability reassures participants choosing someone to support them for years. Picture a Brisbane provider adding one line — "Established 2012, supporting participants across South-East Queensland" — where there was nothing before. It won't flood the inbox, but it eases the quiet worry that a provider might fold mid-support. Just keep it true: if you can't verify a number, don't print it.

Compliance is not the same as transparency

You can technically meet every obligation and still have a useless website. A complaints process so convoluted no one will use it. Staff qualifications listed in jargon only an auditor understands. Pricing "available on request" that meets the letter of disclosure and none of its spirit. Ticking the box isn't the goal — being chosen is.

So flip the question. Instead of "what's the minimum required?", ask "what would a participant need to know before they'd contact us?" Answer that clearly and compliance tends to follow on its own, because the two lists overlap almost entirely.

A plain self-check:

• Can a new participant find your rough hourly rate in under a minute?
• Can they read your complaints process without needing a lawyer?
• Can they tell which services you offer in their area?
• Do you say whether you take self-managed, plan-managed or agency-managed plans?
• Can they see, even as one example, the kind of qualifications your staff hold?

Every "no" is a participant leaving for a provider who said yes — and, often, an obligation you've quietly missed.

If you're trying to decide right now

Start at the source: read the current public-disclosure and Code of Conduct guidance on the NDIS Commission website — it's the only version that's authoritative, and it changes, so don't rely on a printout from last year. Then open your own site and tick off what's actually published. "We email it to people who ask" does not count as published.

The work is usually modest: a few hours of plain writing and one design pass to make it findable. The payoff is the part that compounds — clearer messaging, participants who arrive already confident, fewer complaints that escalate because people felt heard. And there's an honesty dividend here that suits the sector: in a field where trust is everything, being the provider who says the quiet parts out loud is a real advantage. If you'd like a second pair of eyes on your own provider site, that's exactly the kind of thing our free site audit looks at.