ISO 9001
What the quality management standard actually requires, clause by clause, and which of those records get kept as the job runs rather than rebuilt before the audit.
ISO 9001 is the ISO standard for quality management systems. It asks an organization to understand its context, manage its work as interacting processes under Plan-Do-Check-Act, address risks and opportunities, and keep documented information proving the product met requirements. Certification is granted to the organization by an accredited certification body.
Requirements for a quality management system: document control, corrective action, management review, and continual improvement.
International Organization for Standardization (ISO)
Any organization of any size in any sector. Clause 4 lets you scope the system to what you actually do, and clause 8.3 can be excluded outright if you do not design product, which is the normal position for a build-to-print shop. Certificates are issued against ISO 9001:2015.
Third-party certification by a body accredited under the IAF multilateral arrangement, after a two-stage initial audit followed by annual surveillance and a three-year recertification cycle. Self-declared conformity is permitted by the standard but is rarely accepted by a customer who asked for a certificate.
Any organization that wants to demonstrate it can consistently deliver product that meets customer and regulatory requirements. Often required by customers as a condition of doing business.
| Requirement | Module | What It Does |
|---|---|---|
| Clause 8.5.2 identification and traceability | Inventory | The clause asks you to identify output through production and retain the documented information needed to keep traceability where it is a requirement. Receiving records the lot and the certificate that arrived with it, every issue to a job preserves the link, and completions assign serials. The genealogy comes out of the transactions themselves, so an auditor pulling a shipped part backward to its material does not depend on anyone having maintained a parallel log between audits. |
| Clause 8.5.1 control of production | Production | Operators clock on to an operation at a terminal and record quantities, scrap, time and inspection results at the machine. That covers the clause's demand for monitoring at the stages needed to verify criteria have been met, and for the appointment of competent persons, because every transaction records who posted it and when. The quality record and the cost record come from one entry, so the floor is not filling a traveler and then a screen. |
| Clause 8.7 control of nonconforming output | Quality | A failed inspection raises a nonconformance classified by severity, with the disposition recorded against the job and the lot that produced it. The clause wants the nonconformity described, the action taken, any concession, and the authority that decided; the record carries all four. Correction, segregation, return and concession are recorded as the disposition, and the quantity dispositioned stays tied to the lot rather than being adjusted away. |
| Clause 10.2 nonconformity and corrective action | Quality | Systemic failures escalate from the nonconformance into an 8-D corrective action, so containment, root cause, the action taken and the verification of effectiveness hang off the defect that triggered them. That is the chain 10.2.2 asks you to retain. The dates on each step are what an auditor reads to decide whether containment was real or whether the record was filled in the week before the surveillance visit. |
| Clause 7.5 documented information for the as-built part | Engineering | Bills of material and routings are versioned and effective-dated, and a new revision supersedes rather than overwrites, so a job closed two quarters ago still reports the structure and sequence it was built to. That is revision control, not the routed approval and distribution workflow clause 7.5.3 implies for controlled documents. Procedures, work instructions, forms and the approval record for an engineering change stay in whatever document system you use today. The practical split is that WorkCell can tell an auditor what a job was built to, but not who approved the drawing that changed it. |
| Clause 8.4 externally provided processes and products | Purchasing | A supplier catalog holds what each vendor is approved to provide, purchase orders are written against it, and receiving ties the delivery back to the lot and its certificate. The clause also wants criteria for evaluation, selection and re-evaluation of suppliers, and the records of that evaluation. Because every receipt and every nonconformance carries its vendor, delivered quality and on-time performance are live data rather than a hand-kept spreadsheet, and they move out through the REST API into whatever scorecard your registrar or customer wants to read. |
Clause 8.6 says product is not released until planned arrangements have been completed, and asks for the record of conformity plus the person who authorised release. An auditor samples shipments and expects recorded inspection results against the characteristics the plan called for, the sampling basis, and a name. Inspection templates and AQL plans supply the basis, and the operator entry supplies the result and the attribution.
Where traceability is a customer or statutory requirement, the auditor picks a part and walks it backward: the receipt, the certificate that came with the material, every job it was issued to, the operations it passed through, and what it became. In WorkCell that is one query against the genealogy rather than a reconciliation of receiving logs against paper travelers in a filing cabinet.
The auditor samples open and closed records and tests whether disposition, containment, root cause and effectiveness verification were genuinely completed rather than closed administratively. Severity-classified nonconformances and 8-D records carry that chain with dates, each attached to the job and lot that generated it. Expect to be asked why a recurrence happened on a corrective action you had already marked verified.
Clause 7.5.3 covers approval, distribution, revision status and retention of controlled documents, and clause 7.1.5.2 covers measurement traceability of your gages. Neither document control nor calibration management is built in WorkCell. Put both in the gap analysis and keep them where they are, because an uncontrolled work instruction on the floor is a finding regardless of which system was supposed to hold it.
Clauses 6.1, 9.2 and 9.3 are the ones a registrar reaches for first, and they all turn on evidence rather than on minutes. The required inputs to a management review are process performance, conformity of product, nonconformities and corrective actions, and supplier performance, and every one of those comes out of WorkCell as live data rather than a number somebody assembled the week before the meeting. Training and competence sit on the employee record, and the operations each person is cleared to run sit with them.
Does ISO 9001 require a documented quality manual?
No. The 2015 edition dropped the mandatory quality manual and the six required procedures, replacing them with documented information you determine is necessary for the system to work. Most shops keep a manual anyway because customers and registrars ask for one, but the standard no longer names it.
Can buying a system make us ISO 9001 certified?
No software confers certification. ISO 9001 certification is granted to your organization by a certification body accredited under the IAF arrangement, following an on-site audit of how your people actually work. A system can hold the evidence an auditor samples; the programme, the audit and the certificate remain yours.
What does risk-based thinking actually require us to produce?
Clause 6.1 asks you to determine risks and opportunities and plan actions to address them, but it does not mandate a formal risk register or a named methodology. Auditors look for evidence the thinking happened and changed something, which is why the strongest answer is a nonconformance trend that led to a corrective action and a revision that closed it. That chain is already in WorkCell, dated end to end.
How much traceability does clause 8.5.2 demand?
Only as much as your customers, regulators or your own processes require. The clause mandates identification of output always, and traceability where it is a requirement. If a customer asks for lot traceability, WorkCell records the lot at receiving and keeps the link through every issue, completion and shipment.
Which ISO 9001 requirements does WorkCell cover?
The clauses a registrar spends the day sampling: control of production and service provision, identification and traceability from material lot to shipped serial, monitoring and measurement with recorded results against the characteristics checked, control of nonconforming output with its disposition, corrective action with verification of effectiveness, control of externally provided processes through an approved supplier catalog, and the documented information behind all of it versioned with effective dating. The quality policy, the procedures and the registrar audit stay yours.
Keep the records as the work happens.
Tell us which clauses your last surveillance audit flagged and we will tell you straight which records WorkCell would hold and which ones you would still keep elsewhere.