The ISO 9001 records checklist: every mandatory document

One of ISO 9001's quiet strengths is that it does not drown you in mandatory paperwork. It distinguishes between documented information you maintain (living documents) and documented information you retain (records that prove something happened). Get these in place and kept current, and the documentation side of your audit is largely handled. Here is the full set the 2026 edition requires.

Documents you maintain (living)

• The scope of the QMS (4.3) — boundaries, products/services covered, and justification for any excluded requirement.
• The quality policy (5.2) — your commitment to meeting requirements and to continual improvement.
• Quality objectives (6.2) — measurable, at relevant functions and levels, with plans to achieve them.
• Information needed to operate processes (4.4, 8.1, 8.5.1) — the procedures and criteria that keep work consistent.
• Evidence of fitness for purpose of monitoring and measuring resources, and the basis for calibration where no standard exists (7.1.5).

Records you retain (evidence it happened)

• Evidence of competence (7.2) — that people doing the work are qualified.
• Records that processes ran as planned and outputs conform (4.4.2, 8.1).
• Results of requirements reviews and any new or changed requirements (8.2.3.2).
• Design and development records — inputs, controls, outputs and changes (8.3), where design applies.
• External-provider evaluation, selection, monitoring and re-evaluation (8.4.1).
• Traceability records (8.5.2), and reports of customer/provider property lost or damaged (8.5.3).
• Change control for production and service provision (8.5.6).
• Release records — conformity to acceptance criteria and who authorised release (8.6).
• Nonconforming-output records — nature, actions, concessions and the deciding authority (8.7.2).
• Monitoring and measurement results (9.1.1), internal audit programme and results (9.2.2), and management-review results (9.3.3).
• Nonconformity and corrective-action records (10.2.2).

The 'not applicable' escape hatch matters here: if you don't design, Clause 8.3 and its records simply don't apply — provided you justify the exclusion in your scope.

How Compliance One keeps them current

Every item on this list has a home in the platform. The maintained documents live in document control with review-and-sign; the records are produced by the QMS registers — requirements review, release, calibration, nonconforming outputs, customer satisfaction and the rest — each with document attachments, plus internal audit, management review and corrective action. The mandatory-documents checklist shows Present or Missing at a glance, so you are never assembling the binder the night before the audit.