When an auditor asks for your documentation, they’re not browsing. They have a list. Under the strengthened Aged Care Quality Standards, that list is longer and more specific than it used to be. Every document needs to be current, accessible and backed by evidence that it’s being used in practice.
This aged care documentation checklist covers every category a home care provider needs on file to pass an audit under the strengthened Quality Standards. When an auditor asks for your documentation, they’re not browsing. They have a list. Every document needs to be current, accessible and backed by evidence that it’s being used in practice.
At a glance: Home care providers need documentation across nine categories: governance and management, consumer care plans, service agreements, incident management, complaints management, risk management, workforce compliance, financial and prudential management, and privacy and consent. Each category has specific requirements under the strengthened Quality Standards.
The 9 Documentation Categories
- Governance and management
- Consumer care plans
- Service agreements
- Incident management records
- Complaints management records
- Risk management documentation
- Workforce compliance records
- Financial and prudential management
- Privacy and consent documentation
1. Governance and Management
Your organisational governance documents set the foundation for everything else. Auditors start here.
What you need on file: Board or management committee structure, terms of reference and meeting minutes. Quality management framework. Continuous improvement plan with evidence of actions taken. Strategic plan or business plan. Organisational chart showing reporting lines. Delegation of authority register.
What auditors check: That governance isn’t just documented but active. Minutes show decisions being made. The improvement plan has entries from the last 12 months. The quality framework links to measurable outcomes.
2. Consumer Care Plans
Care plans are the most scrutinised category under the strengthened standards. We covered the full requirements in our post on digital care planning for home care providers.
What you need on file: Individual care plan for every active consumer, developed with consumer input. Documented goals, preferences and support needs. Review dates and evidence of regular review. Progress notes linked to care plan goals. Evidence of consumer or representative involvement at every review.
What auditors check: Plans are person-centred, current and actively guiding service delivery. They interview consumers and frontline staff to verify.
3. Service Agreements
Every consumer must have a signed service agreement before supports begin.
What you need on file: Signed agreement for every active consumer. Agreement covers services, pricing, schedule, cancellation policy and consumer rights including the Statement of Rights. Pricing reflects current rates and complies with IHACPA caps.
What auditors check: Agreements are compliant, signed and current. Any pricing changes have been discussed with and agreed by the consumer.
If your documentation across these first three categories has gaps, your audit is at risk. Book a 15-minute walkthrough with FlowLogic to see how compliance tracking keeps every document current and accessible.
4. Incident Management Records
Both the strengthened Quality Standards and the Serious Incident Response Scheme (SIRS) require comprehensive incident records.
What you need on file: Incident management policy and procedure. Incident register with every incident logged (reportable and non-reportable). For each incident: date, time, description, staff involved, consumer involved, response actions, outcome and follow-up. Evidence of pattern analysis (quarterly at minimum). Evidence that findings led to practice changes.
What auditors check: Incidents are recorded consistently, reported within required timeframes (24 hours for Priority 1 under SIRS) and used to improve care. Gaps in the register or missing follow-up actions are red flags.
5. Complaints Management Records
The standards require a complaints system that is accessible, responsive and documented.
What you need on file: Complaints management policy and procedure. Complaints register with every complaint logged. For each complaint: date received, description, investigation steps, resolution, communication back to the complainant and timeframe. Evidence that complaints inform service improvement.
What auditors check: Complaints are taken seriously, investigated promptly and resolved. The complainant is told the outcome. If your complaints data lives in someone’s email inbox, it won’t pass audit.
6. Risk Management Documentation
Risk management must be active and current, not a document written at registration and never touched again.
What you need on file: Organisational risk register, reviewed quarterly at minimum. Risk assessments for each consumer’s home environment and service delivery. Hazard identification and reporting process. Business continuity plan. For more detail on building effective risk assessments, see our NDIS risk assessment guide (the principles apply to aged care too).
What auditors check: The risk register has entries from the last 12 months. Consumer-specific risk assessments are current. New risks are added as they emerge. This is one of the top five documentation types auditors prioritise.
7. Workforce Compliance Records
Every worker delivering services must have current, verified credentials.
What you need on file: Worker screening clearances (police checks, NDIS Worker Screening where applicable). Qualifications and professional registrations. First aid and CPR certificates. Medication competency records. Training completion records (including orientation, manual handling, infection control). Signed code of conduct acknowledgements.
What auditors check: Every credential is current. Expiry dates are tracked. Workers can’t be rostered without valid clearances. Your workforce tracking system should produce this data in minutes, not days.
8. Financial and Prudential Management
Providers in registration categories 4 and 5 must demonstrate compliant financial management.
What you need on file: Financial and Prudential Management System documentation. Quarterly budget tracking across all Support at Home funding buckets. Published price list on My Aged Care and your website, reviewed every two months. Evidence of price review documentation (even when no prices changed). Claims submission records with audit trails.
What auditors check: Budgets are tracked accurately. Prices comply with caps. Financial reporting is current. Claims match service delivery records.
9. Privacy and Consent Documentation
Consumer information must be collected, stored and shared in compliance with privacy legislation.
What you need on file: Privacy policy. Consent forms for information collection and sharing. Records of how consent was obtained (informed, voluntary, documented). Data breach response plan. Information handling procedures.
What auditors check: Consumers understood what they consented to. Consent is recorded and retrievable. Staff know the privacy procedures.
How to Use This Checklist
Work through each of the nine categories. For each one, check whether the documentation exists, is current (reviewed or updated within the last 12 months) and can be produced within 24 hours if an auditor requests it.
If more than two categories have gaps, prioritise governance, care plans and incident management first. These are the three areas most likely to generate non-conformity findings.
We covered the broader compliance picture in our post on Support at Home compliance and the strengthened Quality Standards.
Don’t Wait for the Audit to Find the Gaps
The providers who pass audits cleanly are the ones who self-assess regularly. Use this checklist quarterly. Fix what you find. Document what you’ve fixed. That’s what continuous improvement looks like in practice.
Book a demo with FlowLogic to see how we help home care providers keep every document category current, centralised and audit-ready from one platform.
Frequently Asked Questions
What documentation do aged care auditors check first?
Governance, care plans and incident management records are typically the first three categories assessed. Gaps in any of these generate the most non-conformity findings.
How often should documentation be reviewed?
At least annually for policies and governance documents. Care plans should be reviewed every 90 days to 6 months depending on the consumer’s needs. Risk registers should be reviewed quarterly. Price lists must be reviewed every two months.
What happens if a document can’t be found during an audit?
It’s treated as if it doesn’t exist. A missing consent form, incident record or care plan review is a non-conformity finding regardless of whether the document was created but lost or never created at all.
Do the same documentation requirements apply to all home care providers?
The Core requirements apply to all registered providers. Additional requirements around financial and prudential management apply to providers in registration categories 4 and 5.
Should all documentation be digital?
There’s no requirement for digital documentation, but paper-based systems consistently fail on accessibility, currency and evidence of continuous improvement. Digital systems make it significantly easier to produce audit evidence quickly.
How long should aged care documentation be retained?
Minimum seven years for most document categories, including incident records, complaints records, financial data and consumer records.
Not sure if your documentation is audit-ready? Book a demo with FlowLogic to see how we centralise every document category in one platform.
