ISO 9001 Required Documents: The Full Mandatory List for 2026
In short: ISO 9001 required documents are fewer than people think. ISO 9001:2026 insists on only a handful: your scope, quality policy and quality objectives, plus records that prove the work happened, such as training, audits, reviews and corrective actions. The quality manual and most written procedures are optional, though auditors often expect some. Write only what's required and you save hours of paperwork. Get our ISO 9001 templates and skip weeks of writing documents nobody needs.
I've run businesses and I've audited them, so I've seen both ends of it. Some firms are buried under procedures nobody reads. Others have done everything right but can't prove it, because a single record is missing. Neither problem comes from the standard itself. The trick is knowing exactly which documents ISO 9001 actually asks for, and which ones are just habit. So here's the full list, with the mandatory and optional ones clearly marked, one business owner to another.
Documents and records: the one distinction that matters
ISO 9001 calls all its paperwork "documented information", but it splits into two kinds, and it helps to keep them apart.
- A document tells people how things are done or what you are aiming for, such as your quality policy. You keep it up to date as the business changes.
- A record is evidence that something happened, such as a training record or the minutes of a management review. Once written, you keep it and do not change it.
The 2026 edition rewords how it asks for both, but the list itself barely moved. If your system met the 2015 list, it is very close to meeting this one.
The mandatory list for ISO 9001:2026
Everything below is required by the standard itself. The clause column is there for your auditor; you never need to learn the numbers yourself. Items marked "if it applies" are only required where your business actually does that activity.
Required documents (the ones you keep up to date)
| Document | What it is, in plain English | Clause | Required? | In the complete pack |
|---|---|---|---|---|
| Scope of the quality system | A short statement of what your system covers: which products, services and sites, and anything in the standard that genuinely does not apply to you, with the reason. | 4.3 | Yes | Quality Manual |
| Information to run your processes | Whatever written guidance your people need to do the work consistently. The standard leaves the amount up to you. | 4.4 | Yes, as much as you need | Procedures and Work Instruction Template |
| Quality policy | Your one-page statement of what quality means to your business and the commitment behind it. | 5.2 | Yes | Quality Policy |
| Quality objectives | The measurable quality targets you are working towards, and how you will get there. | 6.2 | Yes | Quality Objectives Template, KPI and Objectives Tracking Log |
Required records (the evidence you keep)
| Record | What it is, in plain English | Clause | Required? | In the complete pack |
|---|---|---|---|---|
| Measuring equipment checks | Proof that the gauges and instruments you use to check work are calibrated or verified. | 7.1.5 | If it applies | Equipment Calibration Register |
| Competence of your people | Proof that people doing work that affects quality are trained and competent. | 7.2 | Yes | Competence and Training Record |
| Planned work carried out | Enough evidence to show work was done as planned. | 8.1 | Yes, to the extent needed | Quality Plan Template |
| Review of customer requirements | Proof you checked you could meet what the customer asked for before you agreed to it. | 8.2 | Yes | Customer Requirements Review Checklist |
| Design and development | Records of how you designed a product or service, if you design your own. | 8.3 | If it applies | Design and Development Procedure and Design and Development Record (both optional) |
| Supplier evaluation | How you choose, check and keep an eye on your suppliers and subcontractors. | 8.4 | Yes | Supplier Evaluation Form, Approved Supplier List |
| Traceability | Being able to trace a job or batch back through its materials and process, where this is required. | 8.5 | If it applies | Your own job records, guided by the Operational Planning and Control Procedure |
| Customer or supplier property | A record if anything belonging to a customer or supplier is lost, damaged or unusable. | 8.5 | If it applies | Nonconformance Report |
| Changes to production or service | What changed, who authorised it, and any action taken. | 8.5.6 | Yes | Change Record |
| Release of products and services | Proof work was checked and passed before it went to the customer, and who released it. | 8.6 | Yes | Inspection and Release Record |
| Nonconforming outputs | What went wrong, what you did about it, and who decided. | 8.7 | Yes | Nonconformance Report, Nonconformance Register |
| Monitoring and measurement results | The results of what you measure, such as customer satisfaction and your quality targets. | 9.1 | Yes | KPI and Objectives Tracking Log, Customer Satisfaction Survey |
| Internal audits | Your audit programme and the results of each audit. | 9.2 | Yes | Internal Audit Programme and Schedule, QMS Internal Audit Checklist |
| Management review | The results of your regular review of how the system is performing. | 9.3 | Yes | Management Review Agenda and Minutes |
| Problems and corrective actions | What went wrong, what you did to fix the cause, and whether it worked. | 10.2 | Yes | Corrective Action Request, Corrective Action Register |
Want every document and record on this list ready to adapt? The complete ISO 9001:2026 pack has all 42, written for business owners.
Not required, but auditors often expect them
This is where a lot of the confusion comes from. None of these are demanded by the standard, but a good number of auditors and larger customers expect to see them, and several make the system far easier to run.
- The quality manual. No longer required, but still expected by many auditors and large clients, and the clearest way to show how your whole system hangs together.
- Written procedures for document control, records, internal audit, corrective action and management review. The old 2008 edition required six of these; since 2015 they are optional. Many businesses still keep them because they make the work repeatable.
- A context and interested parties register. The standard asks you to understand your context, but not to write it down. Writing it down is the easiest way to show an auditor you have.
- A risk and opportunity register. Same again: required thinking, optional paperwork, and the 2026 edition now treats opportunities separately from risks, which a register shows neatly.
- A dated note of your climate change decision. You must consider whether climate change is relevant to your business, a requirement that arrived with the February 2024 amendment rather than new in 2026. Recording the decision with a reason is not required, but it answers the auditor's question in seconds.
- A master document index so everyone knows which version is current.
For a closer look at which procedures are worth writing and which you can safely skip, see our guide to ISO 9001 procedures.
Keep it lean
The standard does not reward volume. You are certified on what you do, not on how much you wrote. Keep a document only if it helps someone do the work, and a record only if you would genuinely want the evidence later. A lean system your team actually uses saves time every week and stands up better at audit than a thick folder nobody opens.
Not sure what you already have?
Many businesses already keep some of these records without realising it. Our Gap Analysis walks you through 28 questions and shows you exactly which items on this list you already cover and which you are missing, so you only spend on what you need.
Find out exactly what you are missing with the ISO 9001 Gap Analysis.
Frequently asked questions
What documents are mandatory for ISO 9001:2026?
ISO 9001:2026 requires four documents: the scope of your quality system, the information needed to run your processes, your quality policy and your quality objectives. On top of those it requires a set of records, such as training, internal audits, management reviews, supplier evaluations and corrective actions, and the full list fits on a single page. A few records only apply if your business does that activity, such as design or calibration.
Is a quality manual mandatory for ISO 9001?
No, a quality manual has not been mandatory since the 2015 edition, and that remains true in 2026. Even so, many auditors and larger customers still expect one, because it shows how the whole system fits together in one place. Many businesses find it worth keeping.
How many mandatory documents are there in ISO 9001?
ISO 9001:2026 requires four documents, plus a set of records, and the full list fits on a single page. The exact count of records depends on how you group them and on what your business does, because some, such as design or calibration, only apply if you carry out that activity.
What is the difference between a document and a record in ISO 9001?
A document tells people how something is done or what you are aiming for, and you keep it up to date. A record is evidence that something actually happened, and once made it is kept unchanged. ISO 9001 calls both "documented information".
Are procedures mandatory in ISO 9001:2026?
No specific written procedures are mandatory in ISO 9001:2026. The standard only asks for whatever information your people need to run your processes consistently. Many businesses still keep a small set of procedures because they make the work repeatable and auditors expect them.
Get every required document and record in one go, ready to adapt to your business. See the complete ISO 9001:2026 pack.
About the author
Written by Mike Armstrong, senior ISO consultant, former company director, and founder of Plain Standards. In over 30 years running companies at director level, Mike built his own management systems to drive profit long before he adopted ISO 9001, so he comes at this from the owner's side, not the auditor's. Plain Standards helps small and medium sized businesses get ISO certified without a consultant.