Evidence for your ISO 9001 audit.
Documented information your auditor can follow: procedures written out, confirmed by the people who use them.
What they ask, and what you can show.
Clause 7.5 of ISO 9001:2015 covers documented information. The ISO 9001 Auditing Practices Group’s guidance lists what it covers: identification and description, format, review and approval, access, retrieval and storage, and change control. Here is what Entrilla keeps for each.
Identification and description
They ask Clause 7.5: each document can be told apart and says what it is.
In Entrilla Each process has a name, department, owner role, trigger and frequency; each step says who, which system and how long.
Format
They ask Clause 7.5: a format and medium that suit the document.
In Entrilla The map, the written procedure beside it, and the export as JSON, Markdown and CSV, with BPMN 2.0 export too.
Review and approval
They ask Clause 7.5: documents are reviewed, and agreed before use.
In Entrilla The people who do the work confirm each step, signed in as themselves; a review date flags each process when it falls due.
Access, retrieval and storage
They ask Clause 7.5: the right people can find and use it.
In Entrilla Five access levels, access limited to chosen departments or processes, and a one-file export of everything.
Change control
They ask Clause 7.5: changes are controlled.
In Entrilla Edit a step and its sign-off drops until someone confirms it again; versions are named and compared; an admin can lock a process; every change is logged.
HACCP plans (food businesses)
They ask The routines behind each critical control point.
In Entrilla Each check written out by role, confirmed by the people who do it, every change logged. The readings stay in your monitoring records.
Fictional example
Customer complaint to corrective action.
A made-up process, each step described by role. In Entrilla, each step shows who confirmed it and when.
- Customer service officer: Logs the complaint in the CRM.
- Quality coordinator: Decides whether it needs a corrective action.
- Production supervisor: Finds the cause with the team on the line.
- Quality coordinator: Records the action and its due date.
- Operations manager: Checks the action worked at the next management review.
What Entrilla keeps
The record, on every plan.
- Written procedures. Each process can carry a written procedure, drafted by the AI from the map or written by you, and printed from your browser.
- Sign-offs tied to a login. People confirm their steps signed in as themselves. Each step keeps their name and the date; only they or an editor can take it off.
- Review dates. Set a process to be re-checked every 3 months, 6 months or yearly. When it falls due, the map shows Review due.
- Every change logged. Edit a step and its sign-off drops until someone confirms it again. Edits, sign-offs, versions and locks are logged with the person and the time.
- Versions and lock. Name a version, compare it with today or bring it back. An admin can lock a process so nobody edits it.
- Export. One file holds every process, who confirmed each step and when, the versions, the written procedures and the activity log.
Questions
Questions about this review.
Which edition of ISO 9001 does this page follow?
ISO 9001:2015, clause 7.5. ISO published a 2026 edition; if you hold a 2015 certificate, there is a transition period, and your certification body will tell you your date.
Can our procedures live in Entrilla?
Yes, the ones you map: each is written out, confirmed by the people who use it, versioned, lockable and logged. Your certification body decides on certification; Entrilla gives you evidence for it.
How does HACCP fit?
The same record works for a HACCP plan’s routines: each critical control point check written out by role, confirmed by the people who do it, every change logged.