ISO Audit Evidence and Document Records UK

What FileGuard supports

• Document storage with version history, so a current document and its prior versions are both available.
• Review and renewal dates with reminders, for example annual policy reviews or supplier reassessments.
• Evidence — certificates, reports, training records — attached to the item or record it supports.
• Role-based access, so people see the records relevant to them, and an activity log of changes.

What certification still requires

FileGuard is evidence organisation, not a quality or information security management system. ISO certification still depends on things FileGuard does not do for you:

• A certification body audit, carried out by an accredited external auditor.
• Internal audits carried out by your own team or an appointed internal auditor.
• Management review meetings, with their own agenda, minutes and follow-up actions.
• Corrective action (CAPA) workflows — raising, investigating and closing non-conformities — which FileGuard does not run as a dedicated workflow.

If you need CAPA workflows, risk registers or built-in ISO frameworks, a dedicated ISMS or QMS platform may be a better fit than FileGuard for that part of the work.

ISO 9001 and ISO 27001 — similar record needs, different content

Both standards rely on controlled documents, scheduled reviews and evidence that recurring activities happened on time. ISO 9001 tends to lean more on process documents and equipment calibration — see calibration certificates — while ISO 27001 leans more on access control and information asset records. The record-keeping pattern in FileGuard is the same either way: an item, its evidence, and its review date.

Before an audit

Use the audit record checklist to review what you have on file against what your auditor is likely to ask for, and to assign any gaps to an owner before the audit date.

Security and hosting

If your certification body or customer asks about hosting or security arrangements, see FileGuard security information — further hosting details are available on request.

Frequently asked questions