Verification
How we know who's who.
Every provider on SupportFinder starts as a row in the public NDIS register. Before a listing can earn a trust tier, we run automated checks against the data, and our team confirms key details with the provider directly. This page lays out exactly what we look at, who looks at it, and — importantly — what we don't promise.
The five tiers
A ladder of confidence — not a pass/fail grade.
Tiers are cumulative: a provider can only reach the next rung once the rungs below it are clean and current. Older checks expire on a schedule (some after a month, some after a year), so a tier is always a snapshot of recent trust signals — not a one-time stamp.
-
Not yet reviewed The listing comes straight from the NDIS provider register. We haven't been able to confirm anything beyond that. Visitors should treat the contact details as a starting point and confirm directly with the provider before engaging.
-
Owner-confirmed The provider has signed in to SupportFinder using the email address the NDIS holds for them and confirmed the listing is theirs. Strong signal of identity — only someone with access to the registered inbox could have done it — but we haven't independently reviewed the provider yet.
-
Reviewed by SupportFinder On top of owner confirmation, our team has independently reviewed the listing and confirmed at least one trust signal — for example, by inspecting the provider's website, calling their public phone number, or checking for compliance issues on the NDIS register.
-
Thoroughly reviewed Our team has multiple recent confirmations on this provider — at least three manual checks within the last 90 days, including a phone callback, plus a recent provider sign-in. The listing has been actively maintained and re-checked in the recent past.
-
In-depth verification The strongest tier. On top of every check above, our team has reviewed the provider's registration, insurance, or qualification documents, or independently confirmed their stated service area against their actual operations. Reserved for providers with a recent, in-depth audit trail.
The checks themselves
What we look at, in plain English.
Each check sits in one of three groups, depending on who confirms it. Automated checks run against every listing the moment we ingest it. SupportFinder team checks happen manually, when a member of our verification team works through the listing. Provider checks happen when the provider themselves takes an action in the portal. Each check has its own freshness window — once it's older than that, it stops counting toward the tier and the listing falls back a step.
Automated checks
Run every time we receive a fresh copy of the NDIS register, or on a schedule for checks that need to call out to other services (the website, the Australian Business Register, email DNS records).
- Listed on the NDIS provider register. The provider's ABN appears in the live, public register.
- ABN active on the Australian Business Register. The Australian Business Register lists this ABN as active.
- Has at least one published address. At least one outlet has a real address or is explicitly online-only.
- Addresses match real-world locations. Every outlet address resolves to a real point on the map — no postcode-only fallback.
- Service state matches outlet locations. The state the provider is registered in lines up with where their outlets actually are.
- Phone number looks valid. The published phone parses as a 10-digit Australian number.
- Email address looks valid. The published email has a recognisable domain and format.
- Email domain can receive mail. The email domain has a working mail server (DNS MX record).
- Website is reachable. The provider's website returns a 200-OK over HTTPS.
- Website mentions their NDIS services. The website body text refers to at least one of the services they're registered for.
- Recently active. The register marks them active, or they've self-confirmed within the last 30 days.
SupportFinder team checks
Each of these is logged with the date it was performed. Most expire after 90 to 365 days, depending on how prone that signal is to going stale.
- Phone answered by the provider. A team member called the published phone number and a person identified as the provider.
- Provider returned our callback. The provider returned a callback we requested through their listed contact channel.
- Website inspected by our team. A team member loaded the website and confirmed it's an on-brand provider site, not a generic placeholder.
- Services match NDIS registration. The services advertised on the provider's website match the NDIS service categories they're registered for.
- Service area matches actual operations. The provider's claimed service area lines up with where they actually have outlets and staff.
- No NDIS compliance issues found. Nothing is currently outstanding against this provider in the NDIS Commission's compliance and enforcement register.
- No complaints on record. No outstanding complaints against this provider in our internal tracker.
- Confirmed not a duplicate listing. A team member has checked that this isn't an alternate ABN for an existing listing.
- Documents reviewed by our team. Registration, insurance, or qualification documents have been reviewed manually by a team member.
- Provider-submitted details reviewed. Details supplied by the provider through our verification form have been reviewed and approved.
Provider checks
A provider self-attesting carries weight only because they got into the portal in the first place — and the only way in is by clicking a code we email to the address on the NDIS register. So while these are "self-reported", the act of producing them itself confirms identity. They count for less than team checks, but they're real signal.
- Provider signed in recently. The provider has signed into the portal in the last 30 days.
- Provider confirmed they're still active. The provider clicked "I'm still active" in the portal within the last 30 days.
- Contact details confirmed. The provider replied to a verification email with the confirmation code.
- Provider declared their availability. The provider answered the per-profession "Are you accepting new participants?" question.
- Profile filled out by the provider. The provider has added at least two of: a logo, a summary, opening hours.
What verification doesn't promise
An honest line in the sand.
A high tier means we have multiple, recent, dated trust signals on a provider. It does not mean we vouch for the quality of their service, the suitability of their staff for any specific participant, or that they'll be a good fit for you. Even our most thoroughly verified providers are still third parties — we are confirming they exist and are who they say they are, not endorsing them.
We don't run criminal background checks on individual workers — that's the NDIS Worker Screening role, and we surface it only as part of the NDIS Commission compliance check. We don't audit clinical practice. We don't review pricing. We don't moderate reviews (we don't host any). And we never charge providers for a tier — every check is run on the same terms regardless of who the provider is.
If you spot something that looks wrong — a phone number that doesn't reach the provider, a closed business that's still listed, a detail that's out of date — please let us know. The fastest way to keep this directory honest is for the people using it to flag what doesn't match reality.
For providers
How to climb the ladder.
If you're an NDIS-registered provider and you'd like to improve your tier, the path is straightforward — and free. Sign in to the provider portal using the email address the NDIS holds for you. From there, you can confirm your details, add a summary, upload a logo, and respond to verification requests from our team. The more current confirmations we have, the higher your tier — and the more visible your listing becomes to participants who are filtering for trust.
See For providers for the longer walkthrough.