What the 2026 edition actually requires you to document, what changed from 2015, and what a small shop can safely skip
Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.
Your Shop Is Probably Doing the Work. Can You Prove It on Demand?
What paperwork does ISO 9001 actually make a small manufacturer keep? This guide answers it with the full list of ISO 9001:2026 mandatory documents and records, clause by clause, written for shops with one quality person, or none.
Here are the stakes. ISO 9001:2026 was published on September 16, 2026. The 2026 edition replaces “retain” with “available as evidence of” in its records requirements. Documents you keep current are still required wherever a clause calls for them. The change sounds like a relaxation. It isn’t.
A record that exists somewhere but can’t be produced when the auditor asks is not available. That’s the practical test: required evidence must be available when the auditor asks for it.
If you’re evaluating what to build before your first certification, or checking whether your current system holds up under the 2026 wording, start here. This guide is part of our ISO 9001 for Small Manufacturers series, which covers the standard, the documents, and the system to run it. The list is shorter than many consultants make it sound. The evidence standard is stricter than many shops expect.
From the Floor: At a smaller company I worked for, there was no formal system for what got filed. Everyone knew what had to be done, and the work was getting done. What nobody knew was what to keep on file, or where it lived. When an auditor came in, we spent the visit asking multiple people whether something had been done and who had the copy. The work was real. The evidence wasn’t available. That’s exactly the gap the 2026 wording targets.
👉 Before you write a single procedure, map what your shop actually needs. The free ISO 9001 Roadmap walks a small manufacturer from gap assessment to Stage 2 audit, so you build the required documents in the right order and skip the ones that only add binder weight.
In This Guide
- What “mandatory” means in the 2026 edition, and the wording change in the records requirements
- The complete list of ISO 9001:2026 mandatory documents you must maintain
- The complete list of records you must have available as evidence
- The 2026 changes: new requirements, and which ones explicitly call for documented information
- What ISO 9001 has never required (and what you can stop writing)
- How a 15-person shop builds this without a consultant
- A quick audit checklist and FAQ
Table of Contents
👉 Start Here (Top Resources)
- Get the standard itself. Every list on the internet, including this one, paraphrases the clauses. Your registrar audits against the actual text. Buy ISO 9001:2026 from the ANSI Webstore, and use code CC2026 for 5% off through December 31, 2026.
- Get the documents pre-built. If you’d rather adapt templates than write from a blank page, 9001Simplified’s documentation kits cover the required documents and records formats in a structure built for small and mid-size operations.
- Already certified to 2015? The ISO 9001:2026 / ISO 9001:2015 Transition Set puts both editions side by side so you can compare wording clause by clause.
What “Mandatory” Means in ISO 9001:2026
The standard doesn’t use the words “documents” and “records.” It uses documented information, and the 2026 edition now defines that term directly in Clause 3.
Two phrases tell you which kind you’re dealing with:
| Phrase in the Standard | What It Means on the Shop Floor | 2015 Equivalent |
|---|---|---|
| “Available as documented information” | A document you keep current: policy, scope, procedures, work instructions | “Maintain documented information” |
| “Documented information available as evidence of” | A record: proof something happened, locked once complete | “Retain documented information” |
| Neither phrase | No documentation required, though you may still choose to write it down | Same |
Clause 7.5 itself is essentially the same as 2015. You still identify, review, approve, distribute, protect, and control changes to documented information. What changed is the evidence test, and the new requirements elsewhere in the standard that generate new things to control.
⚠️ Clause references below follow the 2026 numbering, which is largely unchanged in Clauses 7 and 8. Confirm sub-clause lettering against your own copy of ISO 9001:2026 before you cite clauses in your procedures.
ISO 9001:2026 Mandatory Documents: What You Must Maintain
These are the documents. Short list. Each one has to be current, approved, and available where it’s used.
| Clause | Required Document | Small-Shop Reality |
|---|---|---|
| 4.3 | Scope of the QMS, including justification for any requirement you determine doesn’t apply | One page. Name your products, sites, and any exclusions (design is the common one for build-to-print shops) |
| 4.4 | Documented information to support the operation of your processes | Your call on depth. A process map plus key work instructions is usually enough |
| 5.2 | Quality policy | One page. Must reflect your context and be implemented, not just signed |
| 6.2 | Quality objectives | A short table: objective, owner, resources, deadline, how you’ll measure it |
| 8.1 | Documented information to the extent necessary to have confidence that processes have been carried out as planned | Travelers, routers, inspection plans. Practical advice: write acceptance criteria down rather than leaving them in the lead hand’s head |
| 8.5.1 | Documented information defining the characteristics of the products to be produced, the services to be provided, or the activities to be performed, and the results to be achieved | Drawings, specs, work instructions, and customer requirements at the point of use |
That’s six. A 12-person machine shop can often cover the first four in a handful of pages. Clauses 8.1 and 8.5.1 are where your real operating documents live, and many shops already have them in some form.
Common finding in practice: The work instruction exists, but the revision on the machine doesn’t match the revision in the master file. That’s a Clause 7.5 control failure, not a missing document, and it’s one of the easiest findings to prevent.
The Records: What Must Be Available as Evidence
Beyond the ISO 9001:2026 mandatory documents above, this is the longer list, and it’s where small shops get written up. Every row below is a record your registrar can ask to see.
| Clause | Required Record | What an Auditor Will Sample |
|---|---|---|
| 4.4 | Evidence that processes are carried out as planned | Completed travelers, signed-off routers |
| 7.1.5.1 | Fitness for purpose of monitoring and measuring resources | Gauge list with status |
| 7.1.5.2 | Basis for calibration or verification when no national or international standard exists | Your method for in-house verification |
| 7.2 | Evidence of competence | Training, qualifications, welder certs, sign-offs |
| 8.1 | Evidence that operational processes have been carried out as planned | Completed job travelers, inspection records at each operation |
| 8.2.3 | Results of the review of customer requirements, and any new requirements | PO and contract review records |
| 8.3 | Design and development inputs, controls, outputs, and changes (if design applies) | Design reviews, verification, validation |
| 8.4.1 | Evaluation, selection, monitoring, and re-evaluation of external providers | Approved supplier list plus the results behind it |
| 8.5.2 | Unique identification of outputs, when traceability is a requirement | Heat numbers, lot numbers, serial logs |
| 8.5.3 | What happened when customer or external provider property was lost, damaged, or unsuitable | Customer-supplied material reports |
| 8.5.6 | Review of production changes, who authorized them, and actions taken | Change log tied to the job |
| 8.6 | Release of products, with evidence of conformity and the person who authorized release | Final inspection and release records |
| 8.7.2 | Nonconforming outputs, actions taken, concessions, and who decided | NCRs, MRB dispositions |
| 9.1.1 | Results of monitoring and measurement | KPI data, inspection results |
| 9.2.2 | Implementation of the audit program and the audit results | Audit schedule, reports, findings |
| 9.3.3 | Results of management review | Minutes, decisions, actions |
| 10.2.2 | Nature of nonconformities, actions taken, and corrective action results | CAR log with root cause and effectiveness check |
From the internal auditor’s chair — I’m a certified ISO 9001 internal auditor with 25+ years in heavy industrial manufacturing — the “available” test is simple: pick a record type, ask for a sample, and see how long it takes. If the answer depends on who’s on shift, the record isn’t really available.
Common finding in practice: The training matrix shows who attended a class. It doesn’t show anyone is competent. Clause 7.2 asks for evidence of competence. A sign-off from a supervisor who watched the operator do the job is stronger evidence than an attendance sheet.
Common finding in practice: The approved supplier list exists, but there’s no record of the criteria used to approve anyone or any results behind the approval. Clause 8.4.1 wants the evaluation, not just the list.
👉 Supplier records are a common gap in small-shop audits. Run the free Supplier Quality Checklist against your approved supplier list before your next audit, and close the evaluation gaps while there’s still time to generate the records.
If you are building records from scratch → design the form so it captures the required content (who, what, result, date) the first time. Retrofitting fields onto a year of old records doesn’t work.
2026 Changes: New Requirements and Recommended Evidence
The 2026 edition adds and expands several requirements. A requirement to do something doesn’t automatically mean the standard requires a specific record proving it. The column below answers one narrow question: does the standard explicitly require documented information for this item? Where it doesn’t, a short record is still the easiest way to show an auditor the requirement is implemented, but it sits outside your ISO 9001:2026 mandatory documents list.
| Clause | 2026 Requirement | Explicit Documented Information? | Recommended Evidence for a Small Shop |
|---|---|---|---|
| 4.1 | Determine whether climate change is a relevant issue (carried in from Amendment 1:2024) | No. Requirement to determine; record recommended | A dated entry in your context review with the determination and the reason |
| 4.2 | Determine which interested party requirements the QMS will address | No. Requirement to determine; record recommended | A column on your interested parties list |
| 6.1.2 / 6.1.3 | Risks and opportunities handled separately, with planned actions and effectiveness evaluation | No. Requirement to act; record recommended | Two short registers, or two clearly separate sections |
| 6.3 | Planning of changes expanded, including communication, effectiveness, and review of results | No. Requirement to act; record recommended | A change record that doesn’t stop at “approved” |
| 7.3 | Awareness of quality culture and ethical behavior, for everyone doing work under your control | No. Requirement to act; record recommended | Toolbox talk records and induction content, plus people who can explain it |
| 9.2.2 | Objectives defined for each internal audit | Yes, for the audit program and audit results. Defining objectives is a requirement to act | One objective line on every audit plan |
| 9.3 | Management review inputs expanded, including changes in interested party needs | Yes, for management review results (9.3.3). The expanded inputs are a requirement to act | An agenda that tracks every required input, with minutes that follow it |
Two cautions. First, the climate change requirement is a determination, not a carbon program. A fabrication shop that decides climate isn’t a relevant issue for its QMS can say so, though recording the reason is good practice. Second, quality culture under Clause 7.3 is tested by talking to people on the floor, not by checking a poster on the wall.
If you are already certified to ISO 9001:2015 → many of your records tables likely need a terminology edit, not a rebuild. Put your hours into the opportunities register, the change record, and the management review agenda.
👉 Not sure whether your current system covers the 2026 additions? The free Manufacturing Compliance Checklist gives you a fast gap score across ISO 9001 and related shop-floor requirements. Run it before you schedule the transition audit, not after.
What ISO 9001 Has Never Required (So Stop Writing It)
Template packs built on the 2008 edition still circulate. Here’s what neither the 2015 nor the 2026 edition requires, and none of it belongs on your ISO 9001:2026 mandatory documents list:
| Item | Required? | Why Shops Still Keep It |
|---|---|---|
| Quality manual | No | Some customers ask for one in supplier questionnaires |
| Six mandatory procedures | No (that was ISO 9001:2008) | Habit, and old templates |
| Management representative | No. Clause 5.3 requires responsibilities to be assigned and communicated | Some customers still ask for a named contact |
| A procedure for every task | No. Clause 7.5.1 scales documentation to your size and complexity | Over-cautious consultants |
Keeping a short quality manual for customer questionnaires is fine. Writing 40 procedures because a template folder had 40 files is how small shops end up with a system nobody follows.
“We’re Too Small to Write All This” — The Real Workload
Small shop owners raise this one, and it’s a fair concern. Here’s the honest math.
The ISO 9001:2026 mandatory documents are mostly one-pagers. The records list looks long, but many of those records likely already exist in your shop as travelers, NCRs, inspection reports, and cert packages. The work isn’t creating records. It’s making sure each record captures the required content, lives in one known location, and can be produced in minutes.
Where small shops lose time is building forms and procedures from a blank page. That’s where a documentation kit earns its cost.
If you are a small shop building your first QMS → start from a kit and cut it down to fit your operation. 9001Simplified gives you the policy, procedures, and records formats in one package, so your hours go into tailoring the system to your shop instead of formatting templates. For a deeper look at the trade-offs, see our 9001Simplified Review (2026) and ISO Implementation Packages vs. Consultants.
If you are under customer pressure to certify fast → buy the standard and the kit in the same week, write the six documents first, and start generating records immediately. Your Stage 2 auditor will want to see records over time, not records created the week before.
Once the System Is Running: Keeping Records Available
Building the documents is a one-time job. Keeping records available is every day.
Many small shops start on shared drives and spreadsheets, and that works until it doesn’t. The warning signs are familiar: two versions of the same work instruction, a CAR log nobody updates, and training records spread across three supervisors’ desks.
Once your documentation is built and you’re running the system day to day, software that ties document control, audits, corrective actions, and KPIs together can make the “available as evidence” test far easier to pass. QualityWeb 360 is ISO 9001 management software with modules for document control, internal audits, CAPA, and KPIs. Submit your company through our referral page to start a conversation.
Where to Get the Standard
Don’t build your ISO 9001:2026 mandatory documents from a summary, including this one. The clause wording is what your registrar audits against.
ISO 9001:2026 on the ANSI Webstore is listed at $321 for the PDF as of October 2026. Apply code CC2026 through the ANSI coupon link for 5% off through December 31, 2026. ANSI serves buyers worldwide, and many standards are available in multiple languages, which matters if your crew or customers work outside English.
If you need more than one standard, ANSI’s packages are the better value. Look at the ISO 9001 Quality Management for Small Businesses Package — ANSI Webstore, or browse ANSI standards bundles to buy related standards together for less than purchasing separately.
For more on buying and legal access, see Do You Need to Buy ISO 9001 to Get Certified? and Buy ISO Standards in 2026.
External References
ISO describes the 2026 revision on its ISO 9001 overview page.
ANSI summarizes the revision in its ISO 9001:2026 update.
Transition dates are set by Global ACI in its ISO 9001:2026 transition requirements.
The climate change wording in Clause 4.1 came from the 2024 climate action amendments published by ISO’s Joint Technical Coordination Group.
You can verify a certification body’s accreditation through ANAB.
✅ Quick Audit Checklist: ISO 9001:2026 Mandatory Documents and Records
✅ Scope written, with justification for any requirement that doesn’t apply
✅ Quality policy current, approved, and communicated
✅ Quality objectives documented with owner, timing, and measure
✅ Acceptance criteria written down for key operations
✅ Product characteristics and specs available at the point of use
✅ Competence evidence for every role affecting quality, not just attendance
✅ Gauge list and calibration status current
✅ Supplier evaluation criteria and results on file, not just an approved list
✅ Release records show who authorized release
✅ NCR and CAR records show actions, root cause, and effectiveness
✅ Audit plans include an objective for each audit
✅ Management review agenda covers every 2026 input
✅ Climate change determination made, with the reason recorded as good practice
✅ Risks and opportunities addressed separately
✅ Every record has an owner and a known location, and you can pull a sample in minutes
Frequently Asked Questions
How many ISO 9001:2026 mandatory documents are there?
Six areas require documents you maintain: scope (4.3), process support information (4.4), quality policy (5.2), quality objectives (6.2), operational planning information (8.1), and product characteristics (8.5.1). Beyond those, the records table above lists 17 record requirements. Published counts vary depending on how the requirements are grouped and whether design and development applies to your shop.
Does ISO 9001:2026 require a quality manual?
No. A quality manual hasn’t been required since the 2015 edition, and the 2026 edition didn’t bring it back. Some customers still ask for one in supplier questionnaires, so a short manual can be a commercial decision, not a certification requirement.
Did the change from “retain” to “available as evidence” reduce what I have to keep?
No. The records you need are essentially the same. The change sharpens the test: a record that exists but can’t be produced on request doesn’t meet the requirement. Give every record type an owner, a location, and a retention period.
How long do I have to keep ISO 9001 records?
The standard doesn’t set retention periods. You decide, based on customer contracts, statutory and regulatory requirements, and product life. Many manufacturing customers specify retention in purchase order terms, so check your flow-downs before setting your own periods.
Can my records be electronic?
Yes. ISO 9001 is media-neutral. Electronic records work as long as they’re protected from unintended changes, backed up, and retrievable when needed.
Do I need written procedures for every process?
No. Clause 7.5.1 lets you scale documentation to your size, process complexity, and the competence of your people. A small shop with experienced operators may need far fewer procedures than a large multi-site plant. Write procedures where inconsistency would cause nonconformances.
We’re certified to ISO 9001:2015. Do we need to rewrite our documents?
Mostly no. Many changes are terminology edits in your records tables and procedures. The real work is the new risk and opportunity separation, the expanded change planning, quality culture awareness, audit objectives, and the expanded management review inputs. Global ACI requires certified organizations to complete transition by September 30, 2029. Your certification body may set earlier dates, so confirm with them directly.
When do new certifications have to use ISO 9001:2026?
Under Global ACI requirements, new and initial accredited certifications must use ISO 9001:2026 from March 31, 2028. Certification bodies may set earlier cut-offs, so confirm the date your registrar is using before you choose which edition to build to. For a first-time build today, building to 2026 avoids a second transition.
📥 Free Resources
- ISO 9001 Roadmap — Step-by-step implementation guide for manufacturers building or improving a quality management system.
- Manufacturing Compliance Checklist — Practical compliance reference covering key ISO, OSHA, and quality requirements for production environments.
- Supplier Quality Checklist — Evaluation tool for assessing supplier quality controls and flow-down compliance before audits or new contracts.
Not Sure What to Do Next?
🔹 Still figuring out what your shop needs? Start with the ISO 9001 Roadmap, then read the full ISO 9001 for Small Manufacturers guide to see how the standard, the documents, and the system fit together.
🔹 Ready to build the documents? Skip the blank page. A 9001Simplified documentation kit puts the required policy, procedures, and records formats in your hands so you can tailor instead of draft.
🔹 Need the standard first? Get ISO 9001:2026 from the ANSI Webstore with code CC2026, or save on multiple titles with an ANSI standards bundle.
🔹 Already certified and drowning in spreadsheets? Look at QualityWeb 360 for managing document control, audits, and corrective actions day to day.
For related reading, see ISO 9001:2026 Is Here: What Manufacturers Need to Do Right Now, ISO 9001 Documentation Toolkit 2026: Buy Now or Wait?, and What Happens If You Fail an ISO 9001 Audit?
The ISO 9001:2026 mandatory documents list isn’t the hard part. Six documents and a set of records many shops already generate. The hard part is making every one of them available the moment someone asks. Build to that test and the audit becomes a conversation instead of a scavenger hunt. That’s the standard The Standards Navigator holds every guide to: clear requirements, shop-floor reality, no padding.
The Record You Can’t Find Is the Record You Don’t Have
Shops that struggle with ISO 9001 documentation usually aren’t missing the work. They’re missing the evidence, scattered across desks, drives, and the memory of whoever was on shift.
Shops that pass cleanly decided early where every record lives and who owns it. The audit is just a retrieval exercise.
The Standards Navigator covers ISO 9001:2026 for small manufacturers from the standard itself to the documents and the system that runs them, written by a practitioner who’s been on the receiving end of the auditor’s questions.
👉 Get updates on the ISO 9001:2026 small manufacturer series
👉 Be first to access new checklists, template guidance, and transition resources
Industrial Compliance. Clearly Explained.
