Skip to product information
1 of 3

ISO 9001:2026 Purchasing Procedure Template

$79

A ready-written document you adapt to your business. Instant download.

A surprising amount of the trouble a business runs into comes in through the back door, from a supplier. This is how you shut it.

Used properly, this is what it does for your business:

  • ✓More customers: prove to a buyer that what went into their job was bought properly.
  • ✓More profit: no more wrong parts, late deliveries or surprise invoices from unchecked suppliers.
  • ✓Less stress: anyone can raise an order the right way without asking you.
  • ✓Look the part: when an assessor or a big customer asks how you control suppliers, you hand them the answer.

Why not a free template? Many free ones are written for a different industry, locked until you buy a tool to edit them, or built to the old edition. This one is fully editable, written for any business, and built to the 2026 edition in plain English by a former company director. One avoided mistake easily covers the cost.

Director-built, not auditor-built
Director-built, not auditor-built
Plain English, no jargon
Plain English, no jargon
Instant download, yours to keep
Instant download, yours to keep

"Plain Standards have continually under-promised and over-delivered. Outstanding service." Paul J, ATM Security

Think about the last few things that went wrong in your business. There is a fair chance at least one of them arrived from outside. The material that turned up late and held up the whole job. The batch that was not quite right and got used before anyone noticed. The subcontractor who did good work one week and poor work the next.

None of that was your doing, but all of it landed on you, and on your customer.

You cannot inspect your way out of a bad supplier, and you cannot chase every order by hand. What works is choosing suppliers with a bit of care, keeping an honest note of who is reliable, and dealing with the ones who let you down. Do that, and most of the back-door trouble simply stops arriving.

Who this is for

This is for any small or medium sized business putting an ISO 9001 quality management system in place that buys in materials, equipment or services, or uses subcontractors, where what they provide affects the quality of your own work. If a supplier letting you down would land on your customer, you need this.

This is SOP-1840, the ISO 9001 purchasing procedure: a ready-to-use document written in plain English and prepared to the requirements of the standard.

It sets out how you choose and approve suppliers, keep an eye on how they perform, and make sure that what you buy in is up to the job, so the things you bring in never let down the work you deliver. It covers how suppliers are approved and added to your approved supplier list, how to check a new supplier, how to monitor performance and act when a supplier falls short, when to remove a supplier from your list, what belongs on a purchase order, and how to check what arrives before you use it.

It is written to satisfy clause 8.4 of ISO 9001, on externally provided processes, products and services, and it comes ready to adapt to how your business actually works.

It closes the back door

Most quality problems people worry about are the ones they can see. The expensive ones often come from outside, from a supplier, and arrive before anyone is looking. This procedure gives you a simple, repeatable way to stop buying trouble, by making sure you only rely on suppliers you have actually checked, and by catching a bad delivery before it goes into a job rather than after.

Built around one small habit that pays off

At the heart of this is the approved supplier list: your own honest answer to the question, who can I rely on. The procedure shows you how to build and keep it without turning it into paperwork, so that over time you are always buying from people you have already learned to trust, rather than taking a chance every time.

Sized for a small business

You do not need a purchasing department or special software. The procedure is written for a business where one person, often the owner, does all of this, and it tells you to start with the handful of suppliers who genuinely affect your quality, not every supplier you have ever used. It asks for the least that will actually work, and no more.

See the Operator's Take before you buy

Every Plain Standards document contains a boxed note called The Operator's Take: plain advice from someone who ran real businesses first, then trained as a Lead Auditor. Here is the one from this procedure, word for word.

"The Approved Supplier List is the small habit that carries this whole procedure. It sounds like bureaucracy and it is anything but. It is simply your own honest answer to the question: who can I rely on?"

That is the difference between a document written by an operator who audits, and one written by an auditor who has never run a business. It is why you end up with a system that actually improves how the business runs, not just one that passes an audit. Fewer mistakes reach your customers, your people spend less time redoing work that went wrong, and the daily friction that wears everyone down quietly drops away. That is what you are really buying: certification you can earn, and a calmer business on the way to it.

This procedure works hand in hand with the approved supplier list it relies on.

Part of a complete ISO 9001:2026 system

This document works alongside the rest of your system. Documents that pair naturally with it:

New to this? See what ISO 9001 requires.

A note on where this fits

This is one core document, and it is genuinely useful on its own. A complete, certifiable quality management system is more than any single document: it needs the full set, including the quality manual and the system-level documents. If you decide to go all the way, The ISO 9001 Certification-Ready System brings the whole thing together. This is a sensible step, not the finish line.

Why buy from us

  • ✓Built by a company director, not an auditor. Written by someone who ran real businesses before building management systems, so what you get works in the real world, not just on paper.
  • ✓Written in plain English. No jargon, no clause-speak. If you are new to ISO 9001, it will make sense on day one.
  • ✓The Operator's Take, in every document. Look inside any Plain Standards document and you will find a boxed note called The Operator's Take: a short, plain comment from someone who has run businesses, explaining why this document actually matters to yours, and how to get real value from it, not just tick a box for an auditor. No other provider gives you this, because it comes from having sat in the chair.
  • ✓Honest, unaccredited, and clear about it. A genuine route to a working system, with no false claims and nothing hidden.

Frequently asked questions

What is the purchasing procedure in ISO 9001?

The purchasing procedure in ISO 9001 sets out how a business selects its suppliers, monitors how they perform, and makes sure what it buys in meets requirements before it is used. Its purpose is to stop poor materials, equipment or subcontracted work from undermining the quality you deliver to your own customers. In the standard it falls under clause 8.4 on externally provided processes, products and services. In plain terms, it is how you make sure a supplier's mistake does not become your customer's problem.

What is clause 8.4 of ISO 9001?

Clause 8.4 of ISO 9001 covers externally provided processes, products and services, meaning anything you buy in or subcontract that affects the quality of your own work. It asks you to control your external providers: to choose them on defined criteria, to make clear exactly what you are ordering, and to check that what arrives meets your requirements. This purchasing procedure is written to satisfy that clause in a way a small or medium sized business can actually run.

What is an approved supplier list?

An approved supplier list is a simple record of the suppliers you have checked and are happy to buy from for work that affects your quality. It is the core of supplier control in ISO 9001, because it means you buy from providers you have already assessed rather than choosing afresh, and taking a risk, every time. A supplier earns a place on it by evaluation, by a good history with you, or by being specified by your customer, and comes off it when they let you down and will not put it right.

How do you evaluate a supplier for ISO 9001?

You evaluate a supplier by checking, before you rely on them, that they can meet your quality requirements and make commercial sense. This can be done by sending them a supplier evaluation form to complete, by visiting or checking their premises, by drawing on a good history you already have with them, or because a customer or manufacturer has specified them. The check is recorded and kept on file, and satisfactory suppliers are added to your approved supplier list. The depth of the check should match how much the supplier affects your quality.

What should a purchase order include?

A purchase order should tell the supplier exactly what you need, so the wrong thing cannot turn up. That normally means the supplier's details, the quantity, type and grade of what you are buying, and any special requirements such as material certificates, inspections or packaging, along with any drawings or specifications. Being precise at the point of ordering is the cheapest way to avoid receiving the wrong goods, because it removes the room for a costly assumption.

Written by Mike Armstrong, senior ISO consultant, former company director, and founder of Plain Standards. In over 30 years running companies at director level, Mike built his own management systems to drive profit long before he adopted ISO 9001, so he comes at this from the owner's side, not the auditor's. Plain Standards helps small and medium sized businesses get ISO certified without a consultant.

  • 5 stars: 3 (75%)
  • 4 stars: 1 (25%)
  • 3 stars: 0 (0%)
  • 2 stars: 0 (0%)
  • 1 star: 0 (0%)
S
Sophia Kincaid

Best investment we made this year

F
Frederick Steadman

Found it very useful, thank you

P
Peter Chilcott

This was the missing piece of the jigsaw for us and it served us well

D
David Wolfhome

What a great procedure. Adapted to my business with almost zero changes (just my name and logo) and a couple of tiny additions. SO glad it covers 2026 too