Upload guide

Get the most from your snapshot: what to upload, Standard by Standard.

The free snapshot assesses up to 10 documents (50MB total, 25MB per file — PDF, DOCX or XLSX). Choose those 10 well and the snapshot tells you far more. This guide lists the highest-value documents per aged care Standard and per NDIS core-module area.

The golden rule: no personal information. Upload policies, procedures and governance documents only — never care plans, incident reports naming people, rosters, or anything containing resident or participant details. Attesta detects, rejects and discards documents with personal information; they are never stored.

Track A

Residential aged care — strengthened Quality Standards

You won't cover all seven Standards with 10 documents — and you don't need to. Prioritise Standards 2 and 5 (they carry a higher weighting in your Readiness Level), then pick documents from the Standards you're least sure about.

Standard 1 — The Person

  • Dignity, choice and diversity policy
  • Dignity of risk / supported decision-making procedure
  • Cultural safety and inclusion policy
  • Charter of rights implementation statement

Standard 2 — The Organisation weighted higher

  • Governance charter (or board charter)
  • Risk management framework
  • Incident management policy
  • Complaints and feedback policy
  • Board quality reporting template

Standard 3 — Care and Services

  • Assessment and care planning procedure
  • Care plan review policy (triggers and timeframes)
  • Transitions of care / hospital transfer procedure

Standard 4 — The Environment

  • Infection prevention and control policy
  • Cleaning and environmental services schedule
  • Preventive maintenance programme
  • Equipment safety and management policy

Standard 5 — Clinical Care weighted higher

  • Clinical governance framework
  • Medication management policy
  • Falls prevention and management policy
  • Pressure injury prevention policy
  • Restrictive practices policy
  • Deterioration recognition and escalation procedure

Standard 6 — Food and Nutrition

  • Food, nutrition and dining policy
  • Menu review procedure (incl. dietitian input)
  • Food safety programme

Standard 7 — The Residential Community

  • Workforce planning / staffing methodology
  • Recruitment and screening policy
  • Training and competency framework
  • Lifestyle, engagement and community access policy

If you can only upload 10…

Take the five Standard 2 documents, the clinical governance framework, medication and restrictive practices policies from Standard 5, your assessment and care planning procedure, and your infection prevention and control policy. That set gives the snapshot maximum signal.

Track B

NDIS providers — Practice Standards core module

The core module applies to every registered provider undergoing certification. If your registration groups carry supplementary modules (high-intensity supports, specialist behaviour support, early childhood), add one or two of those documents in place of lower-priority core items.

Rights and Responsibilities

  • Person-centred supports / participant rights policy
  • Privacy and dignity policy
  • Violence, abuse, neglect and exploitation prevention policy
  • Supported decision-making and consent procedure

Governance and Operational Management

  • Governance framework / delegations of authority
  • Risk management framework
  • Quality management system overview
  • Incident management system policy (incl. reportable incidents)
  • Complaints management policy
  • Worker screening, induction and training policy
  • Continuity of supports / emergency and disaster management plan

Provision of Supports

  • Support planning and review procedure
  • Medication management policy (if applicable)
  • Mealtime management policy (if applicable)
  • Behaviour support and restrictive practices policy

Support Provision Environment

  • Work health and safety policy
  • Infection prevention and control procedure
  • Equipment and vehicle safety policy
File hygiene

Five habits that sharpen your snapshot.

  1. Current versions only. Upload the approved, in-force version — not the draft in someone's inbox. If the document shows a review date, so much the better: Attesta uses it.
  2. No drafts, no tracked changes. A draft can't evidence anything, and tracked-changes documents assess unpredictably. Finalise first.
  3. No personal information — check attachments. Policies sometimes carry appendices with real examples. Strip anything naming a resident, participant or staff member before uploading.
  4. One document per file. A single PDF containing your whole policy manual works, but ten separate files give clearer per-standard attribution — and a clearer fix-first list.
  5. Native files beat scans. DOCX or born-digital PDF assesses more accurately than a photocopied, scanned PDF. If a scan is all you have, upload it — just expect more Medium-confidence findings.