Quick answer
Does ISO 9001 require mandatory procedures?
ISO 9001:2015 requires documented information to the extent needed for an effective QMS—not a fixed list of six procedures. In practice you still need a quality policy, quality objectives, scope, and retained records of audits, nonconformities, competence, and management review. Write what you do. Do not buy a 90-SOP pack for a 12-person company.
What documented information do ISO 9001 auditors expect?
Maintain (keep current): the scope of the QMS, the quality policy, quality objectives, and whatever process documentation you need so people can work consistently. Retain (keep as evidence): monitoring results, internal audit reports, management review records, competence/training evidence, nonconformity and corrective action records, and calibration or process-control records where they apply.
Clause 7.5 is the rule: documented information shall be controlled. Version, owner, approval, and retrieval matter more than a pretty template. Shared-drive chaos is why documentation becomes painful before an audit.
Why “six mandatory procedures” is outdated
ISO 9001:2008 named specific documented procedures. ISO 9001:2015 replaced that with documented information scaled to the organization. Consultants who still sell a mandatory document-control procedure, record-control procedure, internal audit procedure, and so on are selling 2008 muscle memory.
You may still write those procedures if they help. A small shop can cover document control in one short work instruction. A 400-person plant may need more. The auditor tests effectiveness, not page count.
Keep documents cheap: draft with AI, control in software
The expensive mistake is paying someone to invent processes you do not run. Describe how orders are taken, how work is checked, and how complaints are closed. 4ES Hub AI drafts candidate documents; you edit until they match the floor. Then version control, training links, and audit trails live in the same system—$399/month instead of a documentation project.
Use the ISO 9001 checklist to see clauses, then store only what supports those clauses. More on lean implementation: ISO 9001 for small business.
Frequently asked questions
How many documents does ISO 9001 require?
There is no fixed number. ISO 9001:2015 requires documented information necessary for the QMS to operate and to show results. A small company may run on a short set of policies, process maps, and records. A complex plant will need more.
Is a quality manual mandatory in ISO 9001:2015?
No. A quality manual is optional. Many organizations still keep a short one because it helps new staff and auditors navigate scope, processes, and interactions.
Do we need a documented internal audit procedure?
Not by name. You must plan and conduct internal audits and retain evidence. A short procedure helps consistency; it is not a 2008-style mandatory document.
How does 4ES Hub help with ISO 9001 documents?
4ES Hub stores controlled documents with version history, approvals, and training links. AI can draft first versions from a description of your business so you are not starting from a generic 90-SOP pack.
Draft the documents you will actually use
Try 4ES Hub free. Let AI propose documented information, then control versions, training, and audit evidence in one place.
Try free — start now