ISO 9001:2026 Documentation in the Philippines: Right-Sized QMS Documentation Built or Updated to the 2026 Standard

Written from the ISO 9001:2026 standard (sixth edition, published 16 September 2026). Reviewed by Kaushal Sutaria, Lead Auditor, Sterling International Consulting.

ISO 9001:2026 documentation is the set of documented information the sixth edition, published on 16 September 2026, requires an organisation to have available and to have available as evidence: eight points of the first kind and nineteen of the second, the same set as ISO 9001:2015 under new wording. No quality manual, no documented procedures and no management representative are required. Sterling builds documentation sets to the 2026 standard for first-time systems and updates 2015 sets for the transition, right-sized and process-based, on paper, on a shared drive or on Effivity where the client wants a platform, from Makati, Cebu and Davao.

What documented information ISO 9001:2026 requires

ISO 9001:2026 requires the same documented information as ISO 9001:2015, expressed differently. Where the 2015 text said “maintain” and “retain”, the 2026 standard says “shall be available as documented information” for the eight points you write and keep current, and “documented information shall be available as evidence of” for the nineteen points that show the system ran. Annex A.2 e) explains the change in wording, and it adds no new document or record.

The eight points of the first kind are the documents that define the system: the scope, the information that supports the operation of the processes, the quality policy, the quality objectives and the documented information the organisation itself determines necessary for the effectiveness of its system, together with the other points that fix what the system is. The nineteen points of the second kind are the records that prove the system operated: the fitness of monitoring and measurement resources, competence, the results of operational controls, the review of customer requirements, design and development, the control of externally provided processes, products and services, production and service provision, release, nonconforming outputs, the results of monitoring and measurement, the internal audit programme and results, management review, and nonconformities and corrective actions. The documented information page lists every point with its clause reference.

Three things the standard does not require deserve saying plainly, because the Philippine market is full of offers built on the opposite claim. It does not require a quality manual. It does not require documented procedures for any process. It does not require a management representative or a document that names one. A system can be conforming with a scope statement, a policy, objectives, a process map with the information each process needs, the registers the changed clauses call for and the nineteen kinds of record, and nothing else. The plain-English requirements page shows what each clause asks for in ordinary language.

The 2015 to 2026 documentation changes

For an organisation with a working ISO 9001:2015 documentation set, the transition is a set of updates to documents you already have, not a new set. Eight items carry the changes: the scope statement’s wording, the quality policy, the risk and opportunity registers, the change-plan template, the management review agenda and minutes, the awareness material, the internal audit checklist, and every reference to 10.3 or to a 2015 item letter.

Document	Update for ISO 9001:2026	Clause
Scope statement	Replace the reference to ISO 9001:2015 with ISO 9001:2026; content otherwise unchanged; record any justification for non-applicability against the 2026 clause numbers	4.3
Context and interested-party records	Add the determination of whether climate change is relevant, with reasoning; record which interested-party requirements the system addresses	4.1; 4.2 c) and NOTE
Quality policy	Reword so that the policy visibly takes the organisation’s context into account and supports its strategic direction; keep a trace from objectives, decisions and resource allocations back to it to show it is implemented	5.2.1 e); 5.2.2 d)
Risk register	Split into two: risks determined, analysed and evaluated with actions proportionate to the potential impact on the intended results of the system, disruption considered; opportunities determined, analysed and evaluated with actions appropriate to context	6.1.1; 6.1.2 with NOTE 1; 6.1.3
Change-plan template	Add fields for the availability of resources and information, the communication of the change, how its effectiveness is monitored and evaluated, and how the results are reviewed	6.3 c), e), f), g)
Management review agenda and minutes	Add changes in the needs and expectations of interested parties as an input; separate the effectiveness of actions on risks from the effectiveness of actions on opportunities; split the analysis that feeds them	9.3.2 c), g), h); 9.1.3 e), f)
Awareness and induction material	Add the organisational quality culture and ethical behaviour, using top management’s own statement of what it expects	7.3 e); 5.1.1 i) with NOTE 2
Internal audit checklist	Rebuild to the 2026 clauses and item letters; no reference to 10.3	9.2
Every other reference to 10.3 or to 2015 item letters	Update procedures, process cards, forms, training records and the document register that cite 10.3 (absorbed into 10.1), 6.1 (now 6.1.1 to 6.1.3), or item letters in 5.1.1 (now a) to l)), 5.3 (now a) to f)), 7.3, 9.1.3 and 9.3.2	10.1; 6.1; 5.1.1; 5.3; 7.3; 9.1.3; 9.3.2

Two further items are often overlooked. The organisational knowledge record, where one exists, should show how knowledge is retained, applied and shared (7.1.6), not only listed. The customer communication procedure or matrix should cover contingency actions including disruptions to provision, and name the channels used, since the 8.2.1 NOTE recognises websites, social media and FAQs as customer communication (8.2.1 e) and NOTE). The clause-by-clause register is the full list of changes the update is checked against.

How Sterling builds a documentation set to the 2026 standard

Sterling builds documentation from the processes outward, with the people who run them, to the ISO 9001:2026 standard. A lead auditor maps the processes and their owners, drafts each document with the owner rather than for them, checks the set against every “shall be available” point, and controls it on the client’s medium: paper, a disciplined shared drive or Effivity where a platform is wanted. The result is a set auditors can follow and staff will use.

Stage	What Sterling does	What you get
Process mapping	Identifies the processes, their sequence and interaction, their inputs and outputs, their owners and the information each needs to operate	A process map and one process card per process
Drafting with owners	Writes the scope, policy, objectives, registers and process information with the person who runs each process, in the language the process uses	Documents that describe what happens, not what a template says should happen
New instruments	Builds the risk and opportunity registers to 6.1.2 and 6.1.3, the change plan to 6.3 a) to g), the management review pack to 9.3.2 c), g) and h), and the awareness content to 7.3 e)	The four instruments that carry most of the 2026 changes
Conformity check	Checks the set against the eight “shall be available as documented information” points and the nineteen “as evidence of” points, and against every changed clause in the 2026 standard	A cross-reference from every requirement to the document or record that answers it
Control	Sets up creation, updating and control of documented information on the client’s chosen medium, including Effivity where a platform is wanted	A controlled set with versions, approvals and access
Handover and training	Trains document owners and internal auditors on the set and on the 2026 clauses	Owners who can maintain the set without Sterling

The set is right-sized by design. A small service organisation may need twenty documents and the nineteen kinds of record; a multi-site manufacturer with design responsibility needs more, because 8.3 applies and the operational controls are more numerous. The number is decided by the processes, not by a template, and Sterling does not sell a manual. Clients who want a short system description for customers or tender files can have one, but it is not a quality manual and the standard does not ask for it. Where Sterling is engaged for the whole transition, this work is delivered inside Sterling Revise™, whose week 1 gap assessment and week 2 gap report decide which documents change before any drafting starts; the migration service page describes it.

What a documentation set built from 18 September 2026 looks like

A documentation set built now, for a mid-sized Philippine organisation certifying for the first time, has no 2015 residue, no quality manual and no procedures that exist only for the auditor. It is built to the 2026 standard from the first document, which matters because from 31 March 2028 initial certifications may be issued only to ISO 9001:2026, and a system built to 2015 in 2026 would need a transition within a year of its first certificate.

Component	Content	Clauses answered
Scope and context record	Scope statement citing ISO 9001:2026; internal and external issues including the climate-change determination; interested parties, their requirements, and which of those the system addresses	4.1; 4.2 c); 4.3
Quality policy and objectives	A policy that reflects context and strategic direction; measurable objectives with plans; the trace from objectives to policy	5.2.1 e); 5.2.2 d); 6.2
Leadership and roles record	How top management promotes quality culture and ethical behaviour and risk-based and opportunity-based thinking; roles under 5.3 a) to f), including who reports on opportunities for improvement	5.1.1 i) and k); 5.3 e)
Process map and process cards	Sequence and interaction; per process the owner, inputs, outputs, resources, criteria, monitoring, risks and opportunities, and the information the process needs	4.4
Risk register and opportunity register	Two registers, each with determination, analysis, evaluation, actions and evaluation of effectiveness	6.1.1; 6.1.2; 6.1.3; 9.1.3 e) and f)
Change plan	One template covering 6.3 a) to g), used for every planned change	6.3
Support records	Monitoring and measurement resources, competence, awareness including quality culture and ethical behaviour, communication, organisational knowledge retained, applied and shared	7.1.5; 7.1.6; 7.2; 7.3 e); 7.4
Operational documents	Only where the process needs them to operate consistently: work instructions, specifications, inspection plans, external provider controls, customer communication including contingency actions and disruptions to provision	8.1 to 8.7, including 8.2.1 e)
Audit programme and checklist	Programme, 2026 checklist, reports, corrective actions	9.2; 10.2
Management review pack	Agenda with every 9.3.2 input including c), g) and h); minutes with 9.3.3 outputs	9.3
Improvement log	Nonconformities including complaints, corrective actions, improvement of products, services and processes with future needs and expectations considered; no reference to 10.3	10.1; 10.2

For an organisation that already has a 2015 set, the same table is the target state; the table of changes above is the route to it. The implementation service page covers first-time systems as a whole, and the first-time certification page explains why building to 2026 is the only sensible choice now.

Common mistakes in ISO 9001:2026 documentation

Three mistakes account for most of the documentation failures Sterling’s auditors see, and all three are more expensive after the 2026 edition than before it: the copy-paste manual, the set that keeps 2015 numbering, and the procedure nobody follows. A fourth, over-documentation, is the Philippine market’s habit rather than a mistake of the transition, and it makes the other three worse.

The copy-paste manual. A quality manual bought or borrowed from another organisation, with the standard’s clauses restated as “the company shall”, proves nothing about your system and gives an auditor a list of claims to test. Under the 2026 standard it fails faster, because 5.2.1 e) requires the policy to reflect your context and strategic direction, 5.1.1 i) requires leadership to promote your quality culture and ethical behaviour, and 6.1.3 requires your opportunities to be evaluated; none of that can be copied. The standard does not require a manual at all.

2015 numbering. A set that still cites ISO 9001:2015, refers to 6.1 as one sub-clause, cites 10.3, or uses the 2015 item letters in 5.1.1, 5.3, 7.3, 9.1.3 or 9.3.2 tells the transition auditor at a glance that the changes have not been worked through. The fix is mechanical, which is why it is Step 6 of the transition checklist, and there is no excuse for it in an audit in 2028.

Procedures nobody follows. A documented procedure that describes a process differently from the way it runs creates a nonconformity every time it is audited. The 2026 standard requires no documented procedures; where you keep one, it should describe the process as it is, be owned by the person who runs it, and be short enough to be read. The same applies to forms invented to satisfy an imagined auditor: if nobody uses the form, the record it was meant to create does not exist.

Over-documentation. The most common failure in Philippine sets is not too little but too much: three copies of a form in circulation, records that cannot be found when the auditor asks, a manual that nobody has opened since certification. A disciplined shared drive with naming rules and access control is acceptable to any auditor; a platform such as Effivity is better where records are numerous or multi-site, provided it is maintained; a cabinet of binders is fine for a small organisation. The medium does not matter to the standard; the control does.

Documentation for a transition versus a new build

For a transition, Sterling updates rather than rewrites: the table of changes is applied to the documents you have, the registers are split or rebuilt, the four new instruments are introduced, the clause references are corrected, and the rest is left alone if it works. For a new build, Sterling drafts the full set from the processes outward. In both cases the set is checked against the ISO 9001:2026 standard before the internal audit that precedes the certification body’s audit.

The two engagements are priced differently and scoped differently. A transition update is scoped from the gap analysis, which the gap analysis service delivers on its own or as week 1 of Sterling Revise™; a new build is scoped from the process map. Neither is priced before the scoping, and neither includes the certification body’s fees, because Sterling does not certify. Where the set is to live on Effivity, the platform is configured during the control stage rather than after the documents are written, so that the registers and forms are built as platform records from the start. The training page covers the document-owner and internal-auditor training that ends every engagement.

To scope a documentation engagement, use the contact page, call +63 977 815 1204 or email info@iso-philippines.com. The first conversation covers whether you are transitioning or building, your sites and processes, and where your documents live now.

Frequently asked questions

Can you build our documentation directly to ISO 9001:2026? Yes. Sterling builds first-time documentation sets to the ISO 9001:2026 standard of the sixth edition, from the process map outward, with no 2015 residue. That is the only sensible choice for a system started now: from 31 March 2028 initial certifications may be issued only to ISO 9001:2026, and a system built to 2026 passes a 2015 audit if your certification body’s accreditation has not yet been extended when you are ready.

Does ISO 9001:2026 require a quality manual? No. Neither the 2026 edition nor the 2015 edition requires a quality manual. If you keep one, update its scope statement, its clause references and its description of the risk, opportunity and change processes, and remove any reference to 10.3. If it merely restates the standard, the transition is the moment to replace it with a short system description or nothing at all.

How many documents does an ISO 9001:2026 system need? The standard fixes eight points where documented information shall be available and nineteen where it shall be available as evidence; it does not fix a number of documents. A small service organisation may meet them with about twenty documents and its records; a multi-site manufacturer with design responsibility needs more. The number follows the processes, and the documented information page lists the required points.

Are there new mandatory documents in ISO 9001:2026? No. The set of required documented information is the same as in 2015, re-expressed as “shall be available as documented information” and “shall be available as evidence of” (Annex A.2 e)). The new requirements, such as the split of risks and opportunities, the planning of changes and awareness of quality culture and ethical behaviour, are met through instruments you already keep, updated, and through records of operating them.

Should we run ISO 9001:2026 on QMS software such as Effivity? ISO 9001:2026 does not name software, but its additions are evidence-heavy: separate risk and opportunity registers, change plans with a review step, retained organisational knowledge and new management review inputs, each with an evidence trail. A controlled shared drive can pass an audit; a purpose-built platform passes it with far less effort. Effivity, our group’s low-code GRC and ISO automation platform, gives every 2026 requirement a home with versions, approvals and an audit trail built in, and Vegam AI, our AI-native process automation platform, takes the routine work of reminders, follow-ups and record assembly off your team. Sterling sets both up under its Automate™ service, usually during the transition gap work, so the audit becomes a report rather than a hunt.

How long does a documentation update for the transition take? For a maintained 2015 set, the update to the eight changed items usually takes a few consultant-days after the gap analysis, and the wording changes are made first because they are quick. The records that show the updated instruments in operation take longer, because they are produced by running the system, and they set the date of the internal audit and the transition audit rather than the documentation work itself.

Who owns the documents after Sterling leaves? Your process owners. Every document is drafted with the person who runs the process, and the engagement ends with training for document owners and internal auditors so that the set is maintained without Sterling. A set that only a consultant can maintain fails at the first surveillance audit after the consultant has gone, which is why Sterling does not write documents for people who will not read them.

Will the certification body accept documentation on a shared drive? Yes, provided it is controlled: documents are identified, approved, versioned, available where needed and protected from unintended change, and records are retrievable when the auditor asks. The 2026 standard is neutral about the medium. What auditors reject is uncontrolled documentation, whether it is on paper, on a drive or on a platform nobody maintains.

Read next

The documented information page for the full list of required points; the clause-by-clause register for every change the update is checked against; the transition checklist for the nine steps including the document list; the gap analysis service that scopes a transition update; the implementation service for first-time systems; and the ISO 9001:2026 playbook for the transition as a whole.

Sources

ISO 9001:2026, Quality management systems — Requirements, sixth edition, published 16 September 2026 (36 pages; ISO catalogue stage 60.60): clauses 4.1, 4.2 c) and NOTE, 4.3, 4.4, 5.1.1 i) and k) with NOTE 2, 5.2.1 e), 5.2.2 d), 5.3 e), 6.1.1, 6.1.2 with NOTE 1, 6.1.3, 6.2, 6.3 a) to g), 7.1.3 NOTE, 7.1.5, 7.1.6, 7.2, 7.3 e), 7.4, 7.5, 8.1 to 8.7 including 8.2.1 e) and NOTE, 9.1.3 e) and f), 9.2, 9.3.2 c), g) and h), 9.3.3, 10.1, 10.2, Annex A.2 e). ISO 9001:2015 and ISO 9001:2015/Amd 1:2024 for the comparison. Global ACI-TECH-3-TR 2029-09-30 (M), Transition Requirements for ISO 9001:2026, version 1.0, issued 4 September 2026, published by Global ACI on 16 September 2026 (verified on global-aci.org and in the document on 18 September 2026), for the 31 March 2028 and 30 September 2029 dates. Effivity, the group’s QMS software (https://www.effivity.com/). No Philippine regulation is cited on this page.