Skip to the page content
AuditFit

NDIS audit evidence, found in your documents

Menu

Help

If I use this, is my client going to get through their audit?

No, and nothing here will ever tell you otherwise. This tool reads a client's documents against the published standards, shows the passage behind each find and what looks missing, and writes a report of what you decided. It does not reach a conclusion about the client and it does not anticipate one.

The published terms put it this way:

Every position in a report is yours to approve, reject or edit, and yours is what the report says. Registration is determined under the NDIS Quality and Safeguards Commission's process, and nothing here changes that.

Quoted from the legal page.

You show a document as attached to a requirement. Does that mean it is any good?

No. A line marked Found means AuditFit located a passage that seems to answer the requirement, and nothing more. It has not judged whether the document is current, whether it is complete, or whether it is enough. That reading is yours, and a Found line opens the document at the passage it relied on so you can make it.

The published terms say so, and they are the terms we are bound by:

AuditFit will sometimes miss evidence that's there, and will sometimes report something as covered when it isn't. That's why every position is yours to overturn and why the report shows the passage rather than just an answer.

Quoted from the legal page.

If I bring my provider clients into your tool, are you going to sell to them behind my back?

No. The commitment is written down, and the part of it that can be enforced in code is enforced in code rather than promised: a provider you bring here is marked as yours and is excluded from every outreach list, and a build-failing check stops one entering a sendable pool.

The commitment, in the words it was made in:

Your clients are yours. We will not approach the providers you bring here, we will not use your client list to market to anyone, and nothing we send to your clients goes around you — because we send them nothing.

Where do my clients' documents actually live, and who can read them?

On servers in Australia, encrypted, with each customer's material separated from every other customer's and encrypted under a key derived for that customer alone. The separation is enforced in the code and checked by the build rather than being a matter of policy.

The published terms state the position:

Your material is encrypted at rest and in transit, access is limited to what running the product requires, and we keep backups off the machine that serves you.

Quoted from the legal page.

How hard is it to get my material back out and stop using you?

Everything you put in comes back out, in full and readable, whenever you ask. Deleting a client or the whole account removes the stored content and the removal is checked against the disk rather than reported as done.

One thing the terms say plainly rather than glossing: a backup copy is kept so a hardware failure does not take your material with it, and something you deleted stays in that copy until the copy expires, which is within thirty days. The published terms:

Our backups are kept for thirty days and no longer, so a copy of anything we delete is gone within thirty days of the deletion too.

Quoted from the legal page.

Does this thing email my clients without me seeing it first?

No. It never writes to your clients. A chase, a checklist or a request for a provider is written here and handed to you; you press send, and it leaves from your own address, under your own name.

What it does send goes only to you and the people you invite onto your book: the invite, a link to reset a password, the monthly message about your book, invoices and payment notices, and reminders before a book that has lapsed is deleted.

The written position:

They press send. It leaves from their address.

Is this meant to replace me?

No. This tool holds a provider's records, sorts them against the published standards, and shows you what is there and what is not. It does not form a view about the provider, it does not write your advice, and it does not talk to your client. The reading of what it shows is the part you are paid for, and it is left to you deliberately.

The home page says it in four words:

You make every call.

Quoted from the home page.

The page came back with a word in brackets that I do not understand. Have I broken something?

You have not broken anything, and nothing you typed has been lost. That message means some of the questions on that page have no answer chosen yet — nothing more than that. Each line under it names one of those questions in the words it was asked in: find them further down the page, choose an answer for each, and send it again.

The word in brackets was ours and it should never have been on your screen. It was an internal name for the question, out of the form's own definition, and there was nothing on the page called that — so it was not something you could find and not something you needed. It was taken off on 21 August 2026: each line now names the question and stops. If you are still seeing a bracket, the page in front of you is one your browser kept — reload it.

The message you saw starts like this, with the number of questions still to answer:

Please fix 3 answers

Quoted from the free Records check.

It refused my email address, but it is my address. What is wrong with it?

The address is almost certainly right and there is almost certainly a stray space in it — before it, after it, or in the middle where it is hard to see. Click into the box, take the space out, and send it again.

The page names the defect rather than the address, so whatever it says is the thing to change. It is fussy about this one field, and not about much else, because it is what you sign in with afterwards:

That address has a space in it, and an email address has none. Check for one pasted in by accident.

Quoted from the sign-up page.

What are the rules for the password? Does it need capitals and symbols?

There is one rule and it is about length. Nothing is required of the characters themselves — no capital, no symbol, no digit — and a phrase you can remember is a better password than a short one with symbols in it.

The page says the same thing where it refuses one:

Your password needs to be at least 12 characters. There are no other rules — no capitals, no symbols, no digits required. A phrase you can remember is a good password.

Quoted from the sign-up page.

The page asks me to drop in a folder and nothing happens when I click. What do I do?

Nothing is wrong with your documents and nothing has been sent anywhere. Choosing a whole folder, with its subfolders kept in the shape you have them, needs something some older browsers and some locked-down work laptops will not do.

Documents go in on each client's page inside your book, under Drop the whole folder here. If Choose a folder does nothing, press Choose files beside it and pick the files themselves; every one is still read. If you are still stuck, write to the address on the contact page.

Drop the whole folder here

Quoted from your book, which you see once you are signed in.

Is there a limit on how much I can send at once?

Yes. Every place on this product that takes something from you has a limit on how much it will take in one go, and going over it is refused rather than half-accepted. Nothing you sent in a refused attempt is kept.

For a client's evidence folder the limit is stated on the drop itself, before you choose the folder, and a folder over it goes in as two or three parts that are joined here into one folder — so the limit costs you an extra press and never costs you a document.

Everywhere else — a typed answer, a question, a form — the refusal is the same two sentences:

That was more than this page can take in one go. Nothing you sent has been stored. Send less at a time and try again.

Quoted from the free Requirements list.

Could another consultant using this see my clients' files?

No. Each practice's clients are held separately and encrypted under a key derived for that practice alone, and a request for a client that is not in your own book is refused whether the client exists somewhere else or was never real at all.

That last part is the part that matters, and it was tested rather than asserted: asking for a client that belongs to another practice and asking for one that does not exist produce the same refusal, in the same words, so nothing can be learned by guessing.

That client is not in your book.

Quoted from your book, which you see once you are signed in.

When I hand a report to my client, whose name is on it?

Yours. The document your client reads carries your name and your advice, and this business does not appear on it. Nothing here is sent to your client either — you hand over what you choose to hand over.

Every entry on it is yours to confirm or reject before you hand it over, and the report prints your decision with our reading kept underneath it.

It is written into the product commitment in the words it was made in:

The document your client reads carries your name and your advice; ours appears nowhere on it.

If I start on the founding rate, am I tied into anything?

No. The founding rate is a rate and not a contract. It is held for the first twelve months from the day you start and then becomes the standard monthly rate; both amounts, the length of the lock and the last day the offer is open are printed on the Pricing page and the sign-up page, before you are asked for anything.

You are not committed for those twelve months. The subscription is billed a month at a time and you can stop it whenever you want, and the published terms say what that means:

Cancel any time; your subscription runs to the end of the period you've paid for, and there's no part-month refund.

Quoted from the legal page.

Do you see or keep my card details?

No. Your card is never entered on a page of ours. No page here has a field for a card number, this business never receives one, and there is nothing to keep.

What comes back to us is confirmation that a payment settled and what it was for. The published terms list what we hold about you, and a card is not on it:

We hold your name, your practice name and your email so you can sign in and so we can write to you about your account.

Quoted from the legal page.

What do I give my accountant for this?

What you get is a payment confirmation: what you were charged, for what, when, and a reference. It states on its own face exactly what it is, what it is not, and the reason — which is a matter of what this business is registered for today rather than anything about your purchase.

That document is what your accountant needs for the payment itself. If your circumstances mean you need something further, write to the address on the contact page and say so. The confirmation puts it plainly:

Keep this. It is what you were charged, for what, and when.

Quoted from the payment confirmation, which you are given once you have paid.

What if I buy the report and it is no use to me?

The one-off report can be refunded within 14 days of buying it if it has not been generated yet; after 14 days, or once it has been generated, it cannot be refunded.

If you have a subscription and the service did not work for you in a period you were billed for, say what happened and it is either fixed or that period is refunded. The position, in the words it was set in:

The one-off readiness report is refundable within 14 days if it has not yet been generated. If the service did not work for you in a billing period, tell us what happened and we will fix it or refund that period.

What happens to my clients' documents if you go out of business?

Your documents are yours, and getting them back has never depended on this business continuing to exist. Export everything held for your practice, in full and decrypted, at any time — one file, every client, whether or not your subscription is running. Not on request, not after a notice period, and not in a format only we can read.

If this service ever closed, you would get the terms that already apply to any book here that stops: your book becomes read-only for 30 days and the export goes on working the whole time, and we write to you before the 30 days are up, while you can still take it all with you.

After the 30 days, everything your book held is deleted. Delete it yourself from your own book whenever you like, or ask us and we will.

This is not written for the occasion. It is the policy the page you subscribe on already states, before you pay rather than on the way out, in these words:

If you cancel, your book becomes read-only for 30 days and the export goes on working the whole time.

Quoted from the sign-up page.

Not answered? Write to hello@auditfithq.com