ISO 9001
ISO 9001 for the small business that just got asked.
ISO 9001:2015 is the quality management system a tender or head contractor often names. PolicySystem writes the quality policy and runs document control, internal audit and management review beside WHS and environment. We are not a certification body.
What the software gives you
A quality policy with version, owner, review date, and draft versus issued. The same registers and CAPA log as the rest of the pack, so quality findings do not live in a separate folder. Internal audit can score the 9001 clauses you selected.
What we are not
We do not issue JAS-ANZ certificates. You still engage an accredited body for Stage 1 and Stage 2 if the tender wants the cert on the wall. This is not SWMS, not inspections and not a $30k consultant who writes a manual and leaves.
Who asks a small business for ISO 9001
Head contractors on commercial construction. Councils and state government buyers through tender portals. Facilities managers who prequalify cleaners, trades and maintenance contractors. Mining and utilities supply chains. They rarely explain why. The clause in the tender usually reads "the tenderer shall hold, or be working towards, certification to ISO 9001". "Working towards" is where most small businesses start, and it is exactly what a live system with dated records lets you claim honestly.
What ISO 9001:2015 actually asks for
The standard is written in ten clauses. Clauses 1 to 3 are scope and definitions. The work is in clauses 4 to 10: the context of your business and who your interested parties are (4), leadership and a quality policy (5), risks, opportunities and quality objectives (6), the people, equipment and documented information you need (7), how you actually deliver the work and handle nonconformities (8), monitoring, internal audit and management review (9), and improvement through corrective action (10). Every one of those maps to a policy or a register in PolicySystem, so nothing sits in a gap.
The records an assessor asks to see
- A quality policy signed by the most senior person, under document control.
- Quality objectives that are measurable, and evidence you track them.
- A register of nonconformities and corrective actions (CAPA) with owners and due dates.
- At least one internal audit against the clauses, with findings closed or in progress.
- Minutes of a management review that used real numbers from the registers.
- Training and competence records for the people doing the work.
- Controlled documents: version, owner, review date, draft versus issued.
How it works in PolicySystem
You answer a short questionnaire: legal name, ABN, industry, states, headcount and the work you do. AI writes the quality policy and the supporting procedures as drafts, numbered and controlled. You approve them. The registers for CAPA, training, evidence and incidents are live from day one, and the AI internal auditor scores the ISO 9001 clauses so you can see the gaps before a certification body does. Management review is built from the same data. Everything exports to PDF with your logo for a tender submission.
Common mistakes that cost a Stage 1
Buying a template pack and never running it. A policy dated the week before the audit with no records behind it. A CAPA log with nothing in it (assessors read that as nobody looking, not perfection). No management review minutes. Uncontrolled Word files with three "final" versions. Each of those is a thing this software makes hard to do by accident.
Where to next
ISO 45001 · ISO 9001 and 45001 for tenders · ISO certification cost · ISO 14001 · Document control
Common questions.
ISO 9001:2015 is the international standard for a quality management system. It asks you to say how you deliver work consistently, keep the records that prove it, check yourself (internal audit), and have management review the results. It does not tell you how to clean a floor or wire a switchboard. It asks you to define your process and stick to it.
Only when someone with buying power asks for it. That is usually a head contractor, a government or council tender, or a large facilities manager. If nobody has asked, a WHS management system is often the better first step. If a tender has asked, the clock is running and this is how you build the system without a consultant.
The documents take an afternoon here. The certificate takes longer because a JAS-ANZ body wants to see the system running: records, an internal audit and a management review. Plan on two to three months of running the system before Stage 2 if you are starting from nothing.
Yes, and most small businesses should. The two standards share the same structure (clauses 4 to 10), so one document register, one CAPA log, one internal audit and one management review cover both. Certification bodies audit them together as an integrated system, which is cheaper than two separate audits.
One GST-inclusive monthly subscription with no onboarding fee. The JAS-ANZ body quotes their audit separately. There is no consultant day rate.