Worried that AI will jeopardise your ISO 9001 certification? It's a fair worry — assessors care about documented, controlled processes, and "the AI did it" is not a controlled process. The good news: used carefully, AI can make your quality documentation stronger, not weaker. Here's the short version — and where to get the rest.
The clauses that actually matter
An assessor doesn't ask "do you use AI?" — they ask about clauses. The ones AI most often touches are 7.5.2/7.5.3 (creating and controlling documented information), 8.5.1 (control of production and service provision), 7.1.6 (organisational knowledge) and 6.1 (risk). Match every AI-touched activity to its clause, the control the clause demands, and the record a sampling auditor could pull, and "we use AI" becomes "we control this like everything else."
A safe first use
Start where the risk is lowest and the paper trail is clearest — drafting or tidying documentation that a named person already reviews and approves:
- AI produces a draft (a procedure, a summary, a first-pass record).
- A named, competent person reviews and approves it — exactly as they would a human colleague's draft.
- The approval is recorded, as your system already requires.
Nothing about your audit trail changes. You've simply added a drafting step before the existing human control — and human control is what the standard cares about.
What an assessor will want to see
- A short written statement of where AI is used and where it isn't.
- The human review/approval step, evidenced as usual.
- A note on data handling — what goes into the tool, and why that's acceptable.
Get those in place and AI becomes a documented, controlled enhancement to your quality system — which is precisely the story you want to tell at your next audit.
The full picture — where this guide ends and the full ebook begins
This page is deliberately short: it is the free orientation, not the whole book. The complete treatment — the full clause-to-control map, two worked scenarios (including a real audit exchange and a nonconformity followed to a closed CAPA), three ready-to-adopt templates (an AI-use procedure, a "where AI is/isn't used" statement, a document-control checklist), sample illustrative records, a vendor/tool assessment rubric, a ten-question audit rehearsal and a 5-week readiness plan — lives in one place: Quality-Safe AI for ISO 9001, a genuine ~28-page ebook, free to download in full. This field guide and that ebook used to be two thin, overlapping documents; they are now one real one, and the download button below points at it.
Sources
- ISO 9001:2015 Quality management systemsInternational Organization for Standardization · as of July 2026
- Guidance for organisations (data protection)UK Information Commissioner's Office · as of July 2026