ISO 9001Often required
Clauses 4 to 10, in Sightadel in 55 controls. The result is a certificate from an accredited body, valid for three years. Reaching audit readiness typically takes three to six months.
View framework →Software · ISO 9001
QM software for ISO 9001.
Managed processes instead of a thick manual.
ISO 9001 software should support the quality management system in day-to-day work: quality policy and objectives, risks and opportunities, controlled documents, supplier assessment, internal audit, management review and corrective actions. This page shows what the standard requires, what to look for when choosing QM software and how Sightadel covers it.
Starting point
What matters when choosing software.
ISO 9001 structures its requirements in clauses 4 to 10: context and scope, leadership and quality policy, risks, opportunities and quality objectives, resources and documented information, operation and external providers, performance evaluation and improvement. The certificate from an accredited body is valid for three years, with annual surveillance audits.
Above all, QM software must show that the system is managed. Quality objectives need a KPI, a date and an owner. Documents need a version and approval. Suppliers are assessed not only when they are taken on, but on a recurring basis. Errors lead to corrective actions with root cause analysis and a later effectiveness check. And the management review ends with decisions, not just figures.
What the software cannot take over are management's decisions. Top management sets the quality policy, quality objectives, resources and responsibilities. Process owners must be able to explain their processes and KPIs themselves. Good QM software makes this visible instead of covering it up.
Why now
Typical reasons to tackle the topic.
01
A customer or tender requires the certificate
The framework agreement requires ISO 9001, the date is set. You need scope, quality policy, objectives, processes and a first internal audit.
02
Certificate in place, system asleep
The manual is thick, the KPIs are old, corrective actions remain open. The surveillance audit reveals this.
03
Quality depends on one person
Only the quality management representative knows the system. The audit reveals this, and if they are absent, maintenance stands still.
04
Second management system planned
ISO 27001 or a customer standard is next. Document control, internal audit and management review should be run together.
Relevant frameworks
What applies – and what it specifically requires here.
Summarised in our own words, not legal advice. The original text in its current version is authoritative.
ISO/IEC 27001Depends on the situation
The same basic structure of clauses 4 to 10. Document control, internal audit, management review and corrective actions are set up once. Many certification bodies offer a combined audit.
View framework →NIS2Depends on the situation
Supplier management and training evidence can be shared. The actual security measures, reporting channels and registration are new.
View framework →HACCPDepends on the situation
In food businesses, supplier assessment, training evidence, control of records and corrective actions feed into both systems.
View framework →Recommended order
Where to start – and what comes next.
- 1
Scope and policy
Delimit the scope, identify interested parties, adopt the quality policy. Engage the certification body early, as audit dates are allocated weeks in advance.
- 2
Gap analysis
Work through all 55 controls step by step, upload and map existing documents. Sightadel shows what is missing and who is responsible.
- 3
Processes, objectives and risks
Describe processes the way they actually run: owner, KPI, intervention threshold. Quality objectives with actual value, risks and opportunities with measures.
- 4
Control, suppliers, competence
Finalise document control, supplier assessment and competence evidence for each role. File evidence with a validity date.
- 5
Internal audit and management review
Audit all processes once, initiate corrective actions, evaluate customer satisfaction and complete the management review with decisions.
- 6
Certification audit
An independent, accredited auditor checks the documentation in stage 1 and the implementation in stage 2. They work directly in Sightadel with their own role and can never delete anything.
Selection
What to look for when choosing ISO 9001 software
Many QM programs are mainly document repositories. For ISO 9001, what counts is whether the system is managed and whether that management is evidenced.
Objectives with KPI and actual value
Quality objectives should be managed with a KPI, target value, date, owner and current status. “Increase customer satisfaction” on its own cannot be audited.
Document control with version and approval
Requirements and records need a version, approval and a review date. Check whether the software reminds you when a document is due for review.
Corrective actions with effectiveness check
A nonconformity is only closed once the cause has been eliminated and the effect checked. The software should track both with a deadline and an owner.
Recurring supplier assessment
Criteria, frequency and results of the assessment belong in one place, with a reminder of the next assessment of critical suppliers.
Internal audit and management review as dates
The audit programme and management review should be planned as recurring cycles and results filed as evidence.
Process owners work in it themselves
If only the quality management representative has access, the system remains a one-person task. Look for roles that let business units work on their part directly.
How Sightadel helps
The features that make the difference here.
Guided assessments
Clauses 4 to 10 in 55 controls, each as a question with an explanation and an industry template from many years of consulting and certification practice.
Learn more →Evidence archive
Documents and records with version, validity date and a reminder before expiry. One piece of evidence can also be linked to requirements from ISO 27001 or HACCP.
Learn more →Action plans
Nonconformities in operation and audit findings become measures with an owner, a deadline and an effectiveness check. The activity log shows who did what and when.
Learn more →Vendor risk
Suppliers with assessment, evidence and a reminder of the reassessment. This covers the control of external providers under clause 8.
Learn more →AI templates
The AI makes suggestions from data you have already entered or imported, for example for the quality policy or process descriptions. You accept, change or add to them. You set objectives and responsibilities.
Learn more →Custom frameworks
You set up customer-specific quality requirements or company standards as a custom framework. They use the same evidence and measures as ISO 9001.
Learn more →Effort and duration
An honest estimate.
- Taking over an existing system3–6 weeks
- Upload and map documents, set owners and review dates, transfer the audit programme and open measures.
- New build up to certification3–6 months
- Around three months if management is behind it and one person has at least one day per week available. Without that, it tends to become a six-month project.
- Integrating a second management system3–6 months
- With ISO 27001, risk assessment and information security measures are added. Leadership, document control, audit and review are run together.
The ranges are based on experience, not a commitment. The biggest factors are the number of processes and sites, your starting point and support from management.
What you license · typically Professional
Quality management with several process owners typically works with ISO 9001 in the Professional edition. Small businesses with few people involved should check whether Basic is enough. If HACCP or NIS2 is added, it permanently costs less because ISO 9001 is already licensed. ISO 27001 is excluded.
Licence per framework, minimum term one year, payable monthly or annually. You will find all prices, discounts and a calculator on the pricing page. Fees of a certification or audit body are charged separately.
Questions and answers
Questions about ISO 9001 software
More in our FAQ or directly via our contact form.
Do I need software for ISO 9001?
The standard does not prescribe software. It requires controlled documents, measurable objectives, an internal audit, a management review and traceable corrective actions. QM software pays off as soon as several process owners are involved and deadlines should not depend on one person.
Excel or QM software?
Excel and a file folder are enough to get started. It becomes tedious with versions, approvals, review dates and open corrective actions. Existing spreadsheets and Word documents can be imported into Sightadel.
How much does ISO 9001 software cost?
Sightadel is licensed per framework and edition, annually. The current amounts are on the pricing page. On top come the costs of the certification body. You can try it free for 14 days, without payment details.
Does the software replace consultants or auditors?
No. Sightadel guides you through the requirements. You choose consultants from the partner network in the app or bring your own. The certification audit is carried out by an independent, accredited body from the partner network or your own. Sightadel does not certify and receives no commission.
What stays with management?
Quality policy, quality objectives, resources, responsibilities and the decisions of the management review. The standard requires these decisions from top management. Sightadel flags these points and files the decisions as evidence.
Can ISO 9001 and ISO 27001 be run together?
Yes. Both follow the same basic structure. Document control, internal audit, management review and corrective actions are set up once and used for both frameworks. More on this on the page on ISO 27001 software.
Which roles are there?
Admin, Consultant (internal or external), Contributor, Viewer and Auditor. Process owners work as Contributor, management follows along as Viewer, and the auditor has their own role: read, comment, edit after approval – never delete.
Content reviewed by experts on 10 October 2026 · Not legal advice. The standard or law in its current version is authoritative.
Start with one standard.
14 days, full access, no payment details. Everything you set up carries over into the paid plan.