All frameworks
ISOCertification · 6th edition

ISO 9001 compliance

Consistently deliver what you promise.

ISO 9001 is the world's most widely adopted management-system standard — over a million certified organisations across every industry. It specifies the requirements for a Quality Management System (QMS): the way you consistently deliver products and services that meet customer and regulatory requirements, and keep improving them. The 2026 sixth edition modernises the standard with quality culture and ethical behaviour, a clearer split between risks and opportunities, stronger management of change, and climate-change considerations — all on the same clause 4–10 spine as ISO 27001 and ISO 22301.

Start from the basics

The standard

ISO 9001:2026 — Quality Management Systems

Who needs it

Any organisation that wants to prove it can consistently meet customer requirements — from manufacturers and engineering firms to service businesses, healthcare, construction, logistics and software. It's frequently a hard requirement in tenders and supply-chain qualification, and it's the natural anchor of an Integrated Management System alongside ISO 27001, ISO 14001 and ISO 45001.

1M+

certified organisations worldwide

The basics

What is ISO 9001?

A management system, not an inspection regime: you set the context and scope, a quality policy and measurable quality objectives, then run the operational core — customer requirements, design & development (where relevant), control of external providers, production and service provision, release, and control of nonconforming outputs.

There is no Annex A and no Statement of Applicability — every clause 4–10 requirement applies unless you can justify an exclusion (most commonly Clause 8.3 Design & development, if you don't design). The applicability register records exactly that.

The 2026 sixth edition (which replaces 2015 and folds in the 2024 climate-change amendment) is verified through an initial Stage 1 and Stage 2 audit, then annual surveillance and a full recertification every three years.

Why it matters

What ISO 9001 does for your business

It opens the most doors of any standard

With over a million certificates worldwide, ISO 9001 is the quality credential customers and procurement teams recognise everywhere. For many contracts, no certificate means no bid.

It's the foundation of an integrated system

9001 shares clauses 4–10 with ISO 27001 and ISO 22301. Run them together and one set of context, leadership, planning, audit and review evidence serves them all.

It makes quality measurable

Objectives with targets, process KPIs, customer-satisfaction trends, nonconformity and corrective-action data — quality becomes something you manage on a dashboard, not a binder you dust off for the audit.

What it covers

Context & leadership

Issues (incl. climate), interested parties, scope, a quality policy, roles, and a leadership commitment to quality culture and ethical behaviour.

Plan

Risks and opportunities as separate registers (new in 2026), measurable quality objectives with plans, and planned management of change.

Operate

Requirements review, design & development, external providers, production & service provision, release, and control of nonconforming outputs.

Evaluate & improve

Customer satisfaction, analysis & KPIs, internal audit, management review, nonconformity & corrective action, and continual improvement.

The hard way

A QMS spans the whole business — a process map, quality objectives, a calibration register, customer-satisfaction tracking, nonconforming-output control, supplier evaluations, internal audits, management reviews and corrective actions — plus every mandatory record kept current and audit-ready across clauses 4–10. Held together in spreadsheets and shared drives, it's a scramble before every surveillance audit.

The easier way, with Compliance One

  • Ships the full ISO 9001:2026 clause 4–10 requirement library, enabled by default with an applicability register (exclude Clause 8.3 with justification if you don't design).
  • Includes native QMS registers — quality objectives, opportunities, process map, calibration, customer satisfaction, nonconforming outputs, change, requirements review, release, customer property, design & development, context, interested parties and organizational knowledge — most with document attachments.
  • Reuses the management-system engine you'd run for ISO 27001: internal audit, nonconformity & corrective action, management review, document control with review-and-sign, competence & training, and supplier management.
  • Pre-fills the mandatory records and cross-maps the shared Annex SL clauses to ISO 27001 and ISO 22301, so one evidence set drives your Integrated Management System.

Do it once, reuse it everywhere. Evidence you collect for ISO 9001 is automatically mapped to every other framework whose controls it also satisfies — and since these standards overlap heavily, most of that work isn't repeated.

Common questions

Does ISO 9001 have an Annex A / Statement of Applicability like ISO 27001?
No. Its requirements are the clauses themselves (4–10) and they all apply, except any you can justify excluding — most commonly Clause 8.3 Design & development if you don't design. Compliance One records this in an applicability register.
What's new in the 2026 sixth edition?
It replaces ISO 9001:2015 and incorporates the 2024 climate-change amendment. Highlights: quality culture and ethical behaviour, risks and opportunities addressed separately, stronger management of change, climate-change relevance in your context, and expanded guidance in Annex A. Our content is on the current text.
We already run ISO 27001 — how much overlaps?
A lot. Clauses 4–10 are shared Annex SL text, so context, leadership, planning, support, internal audit, management review and improvement transfer directly. Compliance One cross-maps them so you extend one system rather than build two.
Do we need the design & development requirements?
Only if you design and develop products or services. If you deliver to a fixed specification, Clause 8.3 can be excluded with justification — the platform handles that and hides the design register until it applies.

Ready to tackle ISO 9001?

See exactly how Compliance One maps ISO 9001 to your environment in a 30-minute walkthrough — and how much of it we handle for you.