Documented information in ISO 9001
What ISO 9001 actually requires you to document, how to control it, and how to keep documentation lean and useful instead of bureaucratic.
ISO 9001:2015 replaced rigid documentation lists with the concept of documented information — the documents you need to operate and the records that prove you did. The standard is deliberately flexible: keep what adds control and value, control it properly, and improve it over time. This guide explains the principles and how to avoid drowning your system in unnecessary paperwork.
- Your document set has grown faster than it is used
- People cannot find the current version of a procedure
- You are unsure what ISO 9001 actually requires you to keep
- You want to reduce bureaucracy without losing control
Documents vs records
Documented information covers two things: documents that guide activity and records that provide evidence. Both matter, but they serve different purposes.
- Documents (procedures, policies) tell people how work should be done
- Records (results, evidence) show what actually happened
- ISO 9001 requires you to retain certain records and control both
Controlling documented information
Control is about the right version being available where it is needed, and records being protected and retrievable.
- Manage versioning, approval, and access for documents
- Protect records from loss, alteration, and unauthorized change
- Define retention and disposal so the system does not bloat
Minimum effective documentation
The goal is the least documentation that gives you reliable control — enough for competence, consistency, and evidence, no more.
- Document processes where variation would cause real risk
- Prefer clear, short, usable documents over exhaustive manuals
- Retire documents nobody uses instead of maintaining them forever
Keeping documentation alive
Documented information should improve as processes improve. Stale documents undermine trust in the whole system.
- Review documents when processes change, not only at audit
- Capture improvement suggestions from the people doing the work
- Connect documents to the processes and objectives they support
- Writing procedures for every activity regardless of risk
- Maintaining documents nobody reads because 'the auditor might ask'
- Losing version control so people work from outdated procedures
- Treating documentation as the goal rather than a support for good work
Keep documentation connected, not scattered
Cogliva keeps processes, objectives, and evidence connected in one system, so documented information supports how the business actually runs rather than living in disconnected folders. Cogliva helps you organize and improve documentation; it does not certify your system.
Keep exploring
Related guides
Product & method
Frequently asked questions
What documented information does ISO 9001 require?
ISO 9001:2015 requires certain documented information, including the scope, quality policy, quality objectives, and specific records such as evidence of competence, monitoring results, audit results, and management review outputs. Beyond the mandatory items, you keep what you need to operate effectively.
What is the difference between a document and a record?
A document guides activity and can be updated (a procedure or policy). A record is evidence of something that happened and is generally not changed (a test result or audit report). ISO 9001 refers to both as documented information.
How do we reduce documentation without failing an audit?
Keep the mandatory items, document processes where variation creates real risk, and retire documents that add no control. Auditors assess whether your documented information is suitable and effective, not whether it is voluminous.
How often should documents be reviewed?
Review documents whenever the underlying process changes and at a sensible periodic interval. Tying reviews to process changes keeps documentation accurate without creating a large annual review burden.
Lean documentation, real control
Keep what adds value, control it well, and let documentation improve alongside your processes.