ISO 9001:2026 required documents & records
ISO 9001 is deliberately not prescriptive about how many documents you need — it requires you to keep documented information "to the extent necessary" for the QMS to work. Still, a few items are explicitly required, and auditors expect a predictable set of records. Here is the full picture for ISO 9001:2026.
Documented information explicitly required
- Scope of the QMS (4.3);
- Quality policy (5.2) and quality objectives (6.2);
- Information needed to support the operation of processes (4.4);
- Evidence that processes are carried out as planned and that products/services conform (8.1, 8.5, 8.6);
- In 2026, evidence that supports the promotion of a quality culture and ethical behaviour and awareness of it (5.1.1, 7.3).
Records auditors expect (retained documented information)
- Competence and training (7.2);
- Monitoring and measuring resource / calibration results (7.1.5);
- Results of internal audits (9.2) and management review (9.3);
- Nonconformities and corrective actions / CAPA (10.2);
- Customer requirements review and, where relevant, design outputs (8.2, 8.3);
- Evaluation and monitoring of external providers / suppliers (8.4).
Documents that are not strictly required but expected in practice
Most organizations also maintain, because they make the system work and auditable: a quality manual, the context analysis and interested-parties register, the risk register (6.1.2) and the opportunity register (6.1.3), system procedures, and forms (nonconformity, CAPA, 8D, supplier evaluation).
What the 2026 edition adds
Compared with 2015, plan to show: evidence of the quality culture and ethics, an opportunity register kept separately from risks, alignment of objectives with the strategic direction, and — if relevant — a note on climate change in the context. A transition & gap assessment is the fastest way to confirm you have everything.
Frequently asked questions
How many documents does ISO 9001:2026 require?
There is no fixed number. A handful of items are explicitly required (scope, policy, objectives, and evidence that processes and products conform), plus the records listed above. Beyond that, you keep documented information 'to the extent necessary'.
Is a procedures manual mandatory?
No specific procedures are mandated by name, but you must control your processes. In practice most organizations keep a set of system procedures because it makes the QMS consistent and auditable.
What is the difference between a document and a record?
A document tells you how to do something (policy, procedure, form). A record is evidence that something was done (a completed form, an audit report). ISO calls both 'documented information'.
Do you provide all these documents?
Yes — IMSToolkit packages include the required documents, the expected records as ready forms and registers, and the 2026 additions, in editable Word and Excel.
Every document you need for ISO 9001:2026
The IMSToolkit ISO 9001:2026 package includes the required documents, the expected records as ready forms and registers, the risk and opportunity registers and the audit checklist — English and Romanian, instant download.
See the package — from €55