The short answer
If you support NDIS participants on your own and you want to stay compliant, the app I would reach for is Sparks Scribe, and I will say up front that I make it. The one real reason: its Safeguards tier is the only compliance layer I found here priced for a single person rather than a team, so real-time incident capture, per-client risk profiles, restrictive-practices flagging and signed consent forms cost one person's price ($39 a month including GST), not a five-seat minimum. The heavier compliance tools are built and priced for organisations: ShiftCare for agencies (five-licence minimum), Astalty for support coordinators ($64 standard seat), and Visualcare for providers (pricing on application). The cheaper solo tools, Bugal and EasyAs, do not publish incident or restrictive-practices features at all.
I run a small NDIS support provider and I am a parent of NDIS participants, so I have sat on both sides of this: the person rostering support workers, and the person whose kids those workers turn up for. When I bring someone new onto a shift, the thing that keeps me up at night is not whether they are kind. Most support workers are. It is whether, if something goes sideways at seven on a Sunday night, there will be a clear record of it in the morning.
Compliance is the part of this job nobody signs up for and everybody is measured on. Work through an agency and there is usually a manager and a system behind you. Work for yourself and you are the whole quality-and-safeguards department. This guide is written for that person, and it looks at six tools by name through one lens only: keeping you compliant and covered when it is just you. The six are Sparks Scribe, ShiftCare, Astalty, Visualcare, Bugal and EasyAs.
Two disclosures before we go further. First, I make one of these apps, Sparks Scribe, built by Sparks Support Pty Ltd, so read my take on it with that in mind. Second, everything I say about the other five comes only from their public pages, checked in July 2026. Where I could not confirm a detail, I say so instead of guessing. If you build one of these and I have something wrong, email hello@sparkscribe.app and I will fix it. And to be clear from the start: this is general information, not compliance advice. The NDIS Quality and Safeguards Commission is the authority on what your obligations actually are.
What does "compliant" actually mean when it is just you?
Strip the jargon away and the compliance load for a solo worker comes down to a handful of things you need to be able to do, and then prove you did:
- Notice and capture a notable action or incident as it happens. A record made at the time beats one reconstructed from memory a week later, every time.
- Report an incident in a structured way. Not a line buried in a text thread, but something with a date, a time and the detail that matters.
- Handle restrictive practices carefully. These carry specific reporting obligations to the NDIS Commission, so they are not something to be vague about.
- Keep consent in order. Consent that is written, dated and signed, not a "yeah, that's fine" you half remember.
- Know each participant's risks before you knock. A seizure history, a known trigger, a manual-handling limit: the things you do not want to be learning about mid-shift.
- Stay audit-ready. If you were ever reviewed, or decided to register as a provider, the evidence should already exist rather than being assembled in a weekend panic.
That is the checklist I hold any app against. The next few sections are the ones I have watched trip people up in real life, and then I will go through the apps.
The incident you have to get right the first time
Here is the scenario I think about. A participant has a fall during your shift. You help them up, you check them over, you make a call about whether they need a doctor, and you carry on because that is what the moment demands. Three weeks later a family member asks what happened, or a plan manager queries the shift, and now the quality of your record is the only thing standing between you and a very uncomfortable conversation.
What you want is to have captured it there and then: what happened, when, what you did, who you contacted. That is what people mean by real-time capture. The reason it matters is boring but real: a time-stamped record written in the moment is evidence, and a memory typed up a fortnight later is a story. When I look at an app for a solo worker, this is the first thing I check, because it is the thing that protects them when they are on their own with no one to corroborate.
Restrictive practices: the part people trip over
This is the one I see workers get wrong most often, usually without meaning to. A restrictive practice is anything that restricts the rights or freedom of movement of a participant, and its use is tightly governed, with reporting obligations to the NDIS Commission when it is unauthorised. You do not want to be discovering the rules after the fact. An app that lets you flag when something may fall into that category, so it is recorded and not quietly forgotten, is doing you a genuine favour. Not every tool here even mentions it, and I will be honest about which ones do.
Consent: "they said yes" is not a record
Verbal consent that lives only in your head is not a record, it is a liability waiting for a bad day. Consent to the support itself, and consent to how you store and share someone's information, both need to be captured somewhere you can actually retrieve. When I hire, I would far rather a worker had a signed form on file than a warm memory of a conversation. So I look for whether an app lets you record and sign consent inside the tool, and whether that signing is included or billed on top.
Risk profiles: knowing before you walk in
There is a difference between organisation-level risk management, which is a provider tracking risk across a whole operation, and a per-client risk profile, which is the plain-language summary you glance at in the car before you knock on the door. As a solo worker, the second one is what keeps you and the participant safe. It is the thing that means you are not relying on remembering who has a swallowing risk or who does not like being approached from behind. Some of the apps here do organisation-level risk registers, which is not the same thing, and I will point out where that gap sits.
Audit-readiness: the folder you will wish you had kept
Most people think about audit-readiness far too late, usually the week they decide to register, or the week someone asks for records they never kept. The trick is that audit-readiness is not a task you do at the end. It is a by-product of capturing the right things as you go: incidents at the time, consent signed and filed, risk recorded, notes that show the support was actually delivered. Do that steadily and the folder builds itself. Leave it and you are reconstructing a year of work from your calendar and your memory, which is nobody's idea of a good weekend.
So which apps actually help, and which just look like they might?
With that checklist in hand, the six tools split cleanly into two groups: the ones shaped around a single worker, and the ones shaped around an organisation that happen to also be sold to individuals.
Built for one person.
Sparks Scribe, which is mine, is built in Australia for independent support workers rather than agencies, and its compliance layer is the Safeguards tier at $39 a month including GST. The reason I put it first is not loyalty, it is fit: it is the only tool here that brings real-time incident capture, incident reports, per-client risk profiles, restrictive-practices flagging and six consent forms with in-app signing together at a one-person price, with no team or licence minimum. There is an Incident Report template and a Behavioural Observation template among the note templates, so a record can start the moment something happens. The cheaper tiers sit underneath it for context: Essentials ($15 a month including GST) covers AI-assisted shift notes and NDIS-coded invoicing, and Vault ($20) adds service agreements, a document vault, a receipt vault, a kilometre log, tax tools and Xero sync. Worth saying plainly: you still set your own rates and stay responsible for checking them against the current NDIS pricing arrangements; the app applies the right code and rate, it does not police the price guide for you. For the record, it holds a 5.0 rating on the Australian App Store, more than 90,000 shifts have been booked through it, data is stored in Australia, and the 14-day trial unlocks every feature with no card required. If compliance is the reason you are shopping, this is the one I would trial first.
Bugal is aimed squarely at independent workers, which makes it the right shape for a sole trader in a way the agency platforms are not. Its published feature list is client and shift management, service agreements, invoicing, expense tracking, business visibility, and shift notes and reports. What is not on that list is the compliance layer this article is about: across Bugal's public pages I found no mention of incident reporting, restrictive-practices flagging, per-client risk profiles, consent forms or audit-readiness features (July 2026). The paid Solo plan is $35 a month (GST treatment not stated), with a free-forever plan capped at two invoices a month. Good for shifts and invoices, quiet on safeguarding.
EasyAs, from EasyAs Provider Invoicing Pty Ltd, does one job: NDIS invoicing, with every NDIS item number pre-loaded. I include it because a worker comparing tools will run into it, but on this lens it has the least to offer. Across its website and both app-store listings I found no mention of progress notes, shift notes, incident reporting or any compliance tooling (July 2026), and no AI features. Its privacy policy also states that personal information may be transferred to countries outside Australia, including the United States and European Union, while the product handles participant names and NDIS numbers. The Small plan is $19.95 a month on their website ($19.99 via in-app purchase); GST treatment is not stated. It covers the invoice, not the shift record behind it.
Built for organisations.
ShiftCare is a care management platform for agencies, and it does publish incident management: its pages describe customisable incident forms that support workers can log from the mobile app, with the more advanced incident features sitting on its higher tiers (July 2026). I could not confirm restrictive-practices flagging, per-client risk profiles or in-app consent signing from the ShiftCare pages I could access in July 2026, so I am not claiming those either way. The catch for a solo worker is the pricing floor. Every ShiftCare plan carries a minimum of five licences, even if you are the only person on the account, and invoicing sits on the Professional plan, which works out at roughly $65 to $75 a month excluding GST for one person depending on billing. You end up paying for a team of five to get compliance tooling designed for teams. If you want the head-to-head detail, I have written a Sparks Scribe vs ShiftCare comparison.
Astalty is a platform for NDIS support coordinators and providers, and it publishes a dedicated compliance and risk page. It describes an incident register where incidents logged by staff flow in, the ability to mark whether a matter is reportable to the NDIS Quality and Safeguards Commission, and a live risk register with controls assigned to risks. Two things for a solo worker to note. That risk register is organisation-level risk management, which is not the same as a per-client risk profile you check before a shift, and the compliance page does not mention restrictive practices or consent forms (July 2026), while e-signatures are $1 each on top. The standard seat is $64 per user per month; a restricted support-worker profile is $30. More in my Sparks Scribe vs Astalty comparison.
Visualcare is NDIS and aged-care management software built for providers and agencies. On compliance it leans on audit readiness: its pages describe audit-ready logs and generating compliance data for teams managing multiple participants and workers. For a single support worker the issue is fit and cost. It is an organisation platform, its pricing is not published (pricing on application), and I could not verify per-client risk profiles, restrictive-practices flagging or in-app consent signing from the Visualcare pages I checked in July 2026. It is the system you adopt when you become an agency, not when you are one person between shifts.
The compliance features at a glance
Collected from public pages in July 2026, through one lens: compliance for a solo worker. "Not confirmed" means I could not verify the detail from official public pages and chose not to guess.
| App | Who it is really built for | Incident records | Restrictive practices | Signed consent | Cost for one person |
|---|---|---|---|---|---|
| Sparks Scribe | Solo support workers | Captured in real time, plus incident report template | Flagging inside Safeguards | Six forms, signing included | $39/month incl GST (Safeguards) |
| ShiftCare | Agencies and teams | Customisable incident forms, logged from mobile app | Not confirmed | Not confirmed | ~$65 to $75/month ex GST (Professional, min 5 licences) |
| Astalty | Support coordinators and providers | Incident register, mark reportable to NDIS Commission | Not mentioned on compliance page | E-signatures $1 each; consent forms not mentioned | $64/month standard seat ($30 restricted profile) |
| Visualcare | NDIS providers and agencies | Audit-ready logs; incident detail not published on pages I checked | Not confirmed | Not confirmed | Pricing on application |
| Bugal | Solo and independent workers | Not mentioned on public pages | Not mentioned | Not mentioned | Free (2 invoices/month) or $35/month |
| EasyAs | NDIS invoicing (any provider) | Not mentioned on any published page | Not mentioned | Not mentioned | From $19.95/month (website) |
All details collected from each vendor's public pages in July 2026 and simplified for comparison; prices and plans change, so check the vendor's own pages before deciding. "Not confirmed" means I could not verify the detail from official public pages and chose not to guess.
Where I land: if you are one person and safeguarding is the reason you are choosing a tool, you want compliance features at a one-person price. That points me to Sparks Scribe's Safeguards tier. The agency platforms do more, but they charge you as if you were an agency, and the cheap solo tools stay quiet on the very features this article is about.
Frequently asked questions
As an independent support worker, what records am I actually responsible for keeping?
If you deliver supports on your own, you are your own quality-and-safeguards function. In practice that means being able to produce shift notes that show what you did, an incident record if something went wrong, evidence that the participant consented to the support and to how you handle their information, and enough about each participant's risks that you were not walking in blind. Registered providers have formal obligations under the NDIS Practice Standards; even if you are not registered, those same records are what protect you if a participant, plan manager or the NDIS Commission ever asks. This is general information, not compliance advice, and the NDIS Quality and Safeguards Commission is the authority on your obligations.
Do I have to report an incident if I work for myself and not an agency?
You still need to document what happened. Formal reportable-incident obligations to the NDIS Commission sit with registered providers, and the use of an unauthorised restrictive practice carries reporting obligations, so if either applies to you, check the Commission's current guidance. Regardless of registration, an accurate, time-stamped record written at the time is the thing that holds up later. Sparks Scribe's Safeguards tier, which I make, captures incidents in real time and keeps them with your other records. ShiftCare and Astalty publish incident tools too, but priced for agencies and coordinators rather than a single worker.
How do I record consent properly when it is just me?
Verbal consent that lives only in your memory is not a record. What you want is consent that is written down, dated and signed, and kept somewhere you can find it again. Sparks Scribe includes six consent forms with in-app signing on its Safeguards tier, with the signing part of the price. Astalty offers e-signatures at $1 each on top of its seat price. I could not confirm in-app consent signing from the public pages of ShiftCare, Visualcare, Bugal or EasyAs (July 2026), so ask before you rely on it.
Which of these apps is actually built for one person, not a whole agency?
Sparks Scribe (mine) and Bugal are the two here built and priced around a single independent worker. EasyAs is single-user but does one job, NDIS invoicing. ShiftCare is an agency platform with a minimum of five licences on every plan. Astalty is built for support coordinators and providers at $64 a standard seat ($30 for a restricted support-worker profile). Visualcare is provider software with pricing on application. For compliance features at a one-person price, that narrows the field quickly.
What would make me audit-ready if I ever decided to register as a provider?
Audit-readiness is really just keeping the right records as you go, so the evidence already exists instead of being reconstructed under pressure: incidents captured at the time, consent signed and filed, risk information recorded, and notes that show the support was delivered. Sparks Scribe's Safeguards tier is pitched around exactly that. Provider platforms like Visualcare lean on audit-ready logs too, but they are built for organisations. Registration and auditing requirements are set by the NDIS Quality and Safeguards Commission, so treat this as general information and confirm the specifics with them.
Is a cheaper app like Bugal or EasyAs enough for compliance?
For invoicing and day-to-day admin, possibly. For the compliance layer this article is about, their public pages come up short. Across Bugal's pages I found client and shift management, service agreements, invoicing, expenses and shift notes, but no incident reporting, restrictive-practices flagging, per-client risk profiles or consent forms (July 2026). EasyAs is an invoicing product with no notes or incident features published at all. If safeguarding is why you are shopping, price is not the number that matters most.
What does compliance software realistically cost for one support worker?
It swings on whether the tool is built for a person or an organisation. Sparks Scribe's Safeguards tier is $39 a month including GST for a single worker, with incident capture, per-client risk profiles, restrictive-practices flagging and six signed consent forms included. Astalty is $64 a month for a standard seat ($30 for a restricted profile) plus $1 per e-signature. ShiftCare works out at roughly $65 to $75 a month excluding GST for one person because of its five-licence minimum. Visualcare does not publish pricing. Bugal ($35 a month, or a free plan capped at two invoices) and EasyAs (from $19.95 a month on their website) are cheaper but do not publish the compliance features.
Where is my participants' data stored?
It varies by vendor, so read the privacy policy before you enter anyone's details. Sparks Scribe stores its data in Australia. EasyAs's privacy policy states that personal information may be transferred to countries outside Australia, including the United States and European Union, while the product handles participant names and NDIS numbers. I have not verified where ShiftCare, Astalty, Visualcare or Bugal host their data, so ask each of them directly.
Can an app flag restrictive practices for me?
Sparks Scribe publishes restrictive-practices flagging inside its Safeguards tier. Astalty's compliance and risk page describes an incident register and marking whether a matter is reportable to the NDIS Commission, but does not mention restrictive practices on that page (July 2026). I could not confirm restrictive-practices flagging from ShiftCare's public pages (July 2026). Visualcare, Bugal and EasyAs do not mention restrictive-practices flagging on the pages I checked (July 2026). Restrictive practices carry reporting obligations to the NDIS Commission, so verify anything you plan to rely on.
Once your compliance is sorted, the everyday habit that carries most of the load is a good shift note. Here is my guide on how to write NDIS shift notes, with examples, and my wider comparison of the best apps for independent support workers.