PublishedISO 9001:2026 published 16 Sept 2026 · 2015 certificates must transition by 30 Sept 2029What changed →
Internal Auditor course (ISO 19011:2026):free until 31 Oct · then $59 for three monthsStart free now →
Quality auditor in a white coat and safety glasses reviewing a checklist by soft window light

Practical quality — no buzzwords

Understand the requirement. Produce the evidence. Pass the audit.

Free clause guidance for 8 standards, free narrated training, editable toolkits and two free apps — written by working auditors, in plain English.

What do you need to do?

Free while in beta

Two free apps on one workspace

Sign in once with your email — no password, nothing to install — and your team shares the same workspace for audits and maintenance.

Audit Manager

Plan the audit programme, anchor every finding to the clause it breaches, and drive each nonconformity through a reviewed closure.

  • ✔Campaigns with auditor assignments you can track
  • ✔Major and Minor findings raise a numbered NC automatically
  • ✔Aging tracker, KPIs and four printable reports
See how it works

Job Cards

Maintenance job cards raised at the machine on a phone, worked by a technician and confirmed by production.

  • ✔A live machine board the whole team can see
  • ✔Occurred → started → ended on every breakdown
  • ✔MTTR, MTBF, availability and downtime reports
See Job Cards

Free training, no sign-up

Narrated, practical and free to watch — the kind of clear explanation that usually costs a seat at a training day.

New in Clause Insights

All articles →
Information SecurityThe Statement of Applicability, explained — what ISO/IEC 27001 clause 6.1.3 requires, the four ways an SoA fails Stage 1, and how to build one from the risk registerThe Statement of Applicability fails more Stage 1 audits than any other ISO 27001 document, because most organisations produce the wrong one: 93 rows marked applicable with 'best practice' as the reason. Here is what clause 6.1.3 actually asks for, the five-step process the SoA records, the four failure modes auditors spot in minutes, and a method that derives the SoA from the risk register — with a free gap checklist whose Annex A tab is a first draft.3 October 2026Information SecurityISO/IEC 27001:2022 Annex A explained: the 93 controls in plain English, theme by theme, with the 114-to-93 map and the attribute tagsAnnex A is not a checklist — it is the reference set you compare your risk-based control selection against. This walk through all four themes explains what each group of controls is for, which matter most for a 50-to-500-person organisation, where the eleven new-in-2022 controls landed, how the 2013 edition's 114 controls became these 93, and what the ISO 27002 attribute tags are good for. With a free A3 quick reference of all 93 controls.3 October 2026Information SecurityPOPIA section 19 and ISO 27001: how the standard evidences the law — and why a certificate is not complianceSection 19 of POPIA reads like a description of an information security management system — identify the risks, keep safeguards in place, verify them, update them. This article maps the Act's security, operator, notification and Information Officer duties to the ISO/IEC 27001:2022 clauses and Annex A controls that evidence them, is exact about what no certificate covers, and comes with a free POPIA ↔ ISO 27001 crosswalk.3 October 2026

Stuck on something at your site?

Got a quality, safety or compliance problem you need help with?

Whether it's an audit finding you can't close, a process that keeps producing the same defect, or a system that only exists on paper — tell us what you're dealing with. We'll look at the problem and suggest a practical way forward, or put you in touch with people we trust who can help.

Email hello@qlause.app

No sales pitch, no obligation — we read every message.