For NDIS providers with 50 to 250 staff

AI governance for NDIS providers.

Know what's safe. Say yes to what saves time.

Your staff are already using AI, often without anyone signing off. We help you build the operating foundations for AI: a clear picture of what’s in use, simple rules your people can follow, and a human in charge of every decision that affects a participant.
Professional discussing AI implementation and governance on a video call

Why AI governance matters now

Your staff are already using it. Support workers tidy shift notes in ChatGPT. Coordinators draft reports with Copilot. Most of it is done to save time, not to cut corners. The risk is that nobody can say where participant information is going.

The Privacy Act is changing on 10 December 2026. Organisations covered by the Act will need to say in their privacy policy when personal information is used in automated decisions that could significantly affect people. Whether and how this applies to you is for your privacy owner to confirm.

The NDIS Commission is watching how AI is used. In February 2026 it said it does not endorse using AI to develop behaviour support plans, while not preventing compliant use. Providers need to be able to show how AI is used and who checks it.

Your board will ask. What AI are we using? What information goes into it? Who owns this? Good governance means you can answer all three, in writing.

What AI governance means for an NDIS provider

It isn't a 60-page policy that sits in a drawer. It's four things your organisation can do every day:

Know

leadership can see which AI tools are in use, by whom, and with what information.

Use

AI is part of agreed tasks, with a set human check, so it gives time back safely.

Own

a named person approves tools, and managers can explain the rules.

Protect

incidents involving AI are caught, and participants are told plainly how AI is used in their support.

The AI Safe & Ready Index scores you on these four areas in about four minutes. Take the Index

The Guardian AI Governance Framework

Our framework has six parts. We fit each one to your size, your systems and the way your teams already work.

01

Purpose and boundaries

What do we use AI for, and what will we never use it for?

02

Visibility and risk

Where is AI used today, and how risky is each use?

03

Tool approval

How do we decide whether a new tool is safe to use?

04

Incident response

What happens if AI gets something wrong, or information goes where it shouldn't?

05

Roles and accountability

Who owns each decision, and who checks the output?

06

Leadership reporting

What does the board see, and how often?

A framework on paper doesn’t make an organisation safe. People using it every day do. That’s why we build each part with your team, so it’s used, not filed.

AI supports human judgement. It doesn't replace it.

Every use of AI we help you approve has a named person who checks the output before it counts. Nothing about a participant is decided by software alone. Time saved goes back to the people you support and the staff who support them, not into cutting hours.

How we build it with you

01

01

Take the AI Safe & Ready Index (free, about 4 minutes). See your level, your exposure and the one thing to fix first.

02

02

Book a 20-minute Gap Session (free). Koray walks you through your result and your full plan, and tells you plainly whether we’re the right fit.

03

03

The AI Safe & Ready Session (2 hours). We rate every use of AI for risk and time saved. You get your AI register, a board-ready report and a 30/60/90 day roadmap. About the Session

04

04

The AI Safe & Ready Program. We put the framework in place with your team, train your leaders, and deliver at least one measured time-saver.

Work delivered

Two examples of the operating foundation we build before AI gets switched on, not hypotheticals:

01

An AI governance framework for a community services provider.

02

An incident-reporting system for a different community services provider, where AI drafts and a person reviews and submits.

Questions before you book a call

Questions CEOs ask us

Q#1 Do we need an AI policy before we start?

No. Most providers we meet don’t have one yet. We start with what’s actually happening and build from there.
No. We help you see, decide and record how AI is used. Privacy policy wording is for your privacy owner and legal adviser to confirm.
Probably more than you think. The questions are where information goes and who checks the output. The Index will show you in four minutes.

It usually speeds it up. When staff know what’s allowed, they stop guessing and start using the right tools with confidence.

The Session is two hours, with your report within five business days. The Program is scoped to your size, so we confirm the timeline in your Gap Session.
Where to start

Know what's safe. Say yes to what saves time.

Start with the Index. It's free, confidential and takes about four minutes.