In-house compliance suits providers with a skilled, stable team and time set aside to run their own systems, while an external consultant suits providers who need specialist knowledge quickly or lack that capacity. Many NDIS and aged care providers end up with a mix of the two.
This article compares the three options honestly, including where a consultant is the wrong choice. It then looks at what usually works for small providers and for providers who are growing.
What each option involves
In-house compliance means your own staff run the system. Usually that is a compliance or quality lead, supported by an operations manager and the owner or board. They write and review policies, keep the registers, run internal audits and prepare for external audits.
An external consultant does some or all of that work for you. That can be a one-off project, such as a gap analysis or a pre-audit review, or ongoing support with policy updates and register reviews.
A mix keeps the day-to-day work in-house and brings in a consultant for specific jobs: setting systems up, independent reviews, or advice when the standards change.
Whichever option you choose, the provider stays accountable. The NDIS Quality and Safeguards Commission and the Aged Care Quality and Safety Commission hold the registered provider responsible for compliance. A consultant can do the work, but the provider cannot hand over the responsibility.
When in-house compliance works well
In-house compliance works best when you already have someone who knows the standards, your team is stable and your leaders review risk and quality regularly. Your own staff know your participants or residents, your services and your culture. They can fix a procedure the same week a frontline worker points out a problem.
The knowledge also stays in the organisation. Staff who wrote the onboarding checklist and the incident procedure can explain them at audit, which counts as evidence in its own right.
The risks are real too. Compliance is often shared out to administrative or operations staff who have other jobs. When the one person who understands the system leaves, the registers can stall. Internal teams also get used to their own systems, so gaps become hard to see.
- Write down who owns each policy and register, so the system survives staff changes.
- Keep a compliance calendar with review dates, owners and follow-up actions.
- Have someone outside the team check your evidence against the standards now and then.
What an external consultant adds, and its limits
A consultant brings knowledge built across many providers. They see how auditors read evidence, which gaps come up often and how other organisations have solved them. That speeds up setup work and makes a pre-audit review more independent than one your own team runs.
The limits matter as much. A consultant does not know your services as well as your staff do. A generic policy pack or register dropped in from outside can miss how you actually work, and that shows up at audit when staff cannot explain a procedure. Ongoing support also costs money, and you depend on the consultant being available when you need them.
- Agree in writing who is responsible for updating each document and register after the engagement.
- Ask for policies to be written around your services, and have your staff test them before sign-off.
- Make sure your team can run the system without the consultant once the work is done.
How the three options compare
| Factor | In-house | External consultant | A mix |
|---|---|---|---|
| Who runs it day to day | Your own staff | The consultant, for the agreed scope | Your own staff |
| Knowledge of your services | Strong | Has to be learned | Strong |
| Knowledge of the standards | Depends on who you employ | Usually strong | Strong, with outside checks |
| Speed to set up systems | Slower if starting from scratch | Faster | Faster |
| Independent view of your evidence | Hard to get | Built in | At set review points |
| Risk when a key person leaves | High | Low for the provider, but you depend on the consultant | Lower, if duties are documented |
| Cost pattern | Ongoing staff time and training | Project or ongoing fees | Staff time plus occasional fees |
| Suits | Stable teams with in-house expertise | Urgent gaps, new providers, one-off projects | Most small and growing providers |
For small providers
In a small provider, compliance usually sits with the owner or one manager who also runs rosters, finances and intake. Time is the constraint more than knowledge. A full-time compliance role is rarely affordable, and an ongoing consultant retainer may not be either.
A mix often fits best. Use a consultant to set up policies, registers and an audit calendar that match your services, then run them yourself. Bring the consultant back for a review before each audit or when the standards change. If your owner already knows the standards well and has time each week for compliance work, keeping it fully in-house is a sound choice.
- Be honest about how many hours a week anyone can give to compliance.
- Check your audit history. Repeated findings in the same area suggest you need outside help there.
- Keep the system simple enough that one person can run it.
For growing providers
Growth changes the question. A new site, a new service type or a jump in worker numbers adds registers, onboarding and risks faster than a small team can absorb. Policies written for one service stop matching the next one.
At this stage, many providers build an in-house role and use outside support for specific jobs: mapping policies to a new service before it starts, running an independent internal audit, or preparing for ISO certification. Once the organisation is large enough, a dedicated internal quality team usually becomes better value than relying on outside help for routine work. Our post on scaling NDIS services safely covers growth planning in more detail, and our business growth strategy work looks at compliance capacity alongside the commercial plan.
- Before adding a site or service, check that policies, registers and onboarding cover it.
- Decide which compliance tasks will stay in-house and which you will buy in, and write it down.
- Review the split each year as your size and services change.
If you want to work out which option fits, our NDIS consultant services and aged care consultant services cover one-off projects and ongoing support. We quote a fixed fee after a free 15-minute call. Book a call.
Frequently asked questions
Can a consultant take over our compliance responsibility?
No. A consultant can do much of the work, but the registered provider remains accountable to the regulator.
Is in-house compliance cheaper than using a consultant?
It depends on your size and needs. For routine work in a larger organisation, in-house staff are often better value. For setup work or occasional reviews, a consultant can cost less than a permanent role.
What does a mixed approach look like in practice?
Your staff keep the policies and registers current day to day. A consultant sets systems up, reviews your evidence before audits and advises when the standards change.
How do we know when to change our approach?
Look at your audit findings and your workload. Repeated findings, a key person leaving or a new service or site are all signs it is time to review the split.