Quality Audit Readiness for Customer & Certification Audits

By Josh Brook on October 26, 2026

quality-audit-readiness-customer-certification-audits

Most audit trouble is not a missing procedure. It is a training record nobody signed, a gauge that slipped past its calibration date or a corrective action still open from the last visit. Those gaps are easy to fix weeks ahead and hard to explain on the day. Quality audit readiness means knowing where you stand against every clause before the auditor arrives, for certification bodies and customers alike. See how a readiness scan works on your own records in a short audit readiness demo.

AUDIT READINESS AGENT · QUALITY AUDITS

Know Which Clause Is Weakest Before the Auditor Opens the Folder

iFactory's Audit Readiness Agent checks procedures, records and training against the standard, builds evidence by clause and answers auditor requests by voice. Your audit host still decides what the auditor sees.

Readiness scan · ISO 9001Audit in 18 days
Plant 2 · 212 records checked overnight · illustration
7.1.5 Calibration1 gauge overdue
7.2 Competence3 sign-offs missing
9.2 Internal auditProgramme on track
10.2 Corrective action2 actions past due
Close first: the two overdue actions, then the sign-offs
CERTIFICATION AUDIT PREP

Where Each Visit Sits in the Three-Year Cycle

Accredited certification follows ISO/IEC 17021-1. A stage 1 audit checks whether you are ready, often as a document review. Stage 2 is on site and tests whether the system works in practice. Surveillance follows at least once a year, with the first one due within 12 months of the certification decision, and recertification must finish before the three-year certificate expires. Each visit samples different evidence, so the preparation should differ too. Map your own audit dates with our support team.

S1
Stage 1 · readinessScope, documented information, internal audit and management review in place before stage 2
S2
Stage 2 · effectivenessOn site. Records show the system runs as written on every shift
SV
Surveillance · yearlyA sample of clauses plus follow-up on last year's findings
RC
RecertificationSimilar depth to stage 2, completed before the certificate lapses
CUSTOMER AUDIT VS CERTIFICATION AUDIT

Four Audits That Ask Different Questions

A certification auditor asks whether your system meets the standard. A customer auditor asks whether your process will deliver their part, every time. In automotive, many customers use VDA 6.3 process audits, which score each question 10, 8, 6, 4 or 0 and rate the result A at 90% or more, B at 80 to 89% and C below 80%. Downgrade rules can lower the rating when a serious weakness is found. Walk through a customer audit scope in a readiness session.

Audit
Run by
What it tests
Result
ISO 9001 certification
Accredited certification body
QMS against clauses 4 to 10, sampled across processes
Certificate, findings
IATF 16949 or AS9100
Body approved by IATF or under the IAQG scheme
ISO 9001 plus sector rules, customer-specific requirements and process performance
Certificate, strict deadlines
Customer system audit
Customer supplier quality team
Your QMS against their supplier manual
Approval or action plan
VDA 6.3 process audit
Customer or trained internal auditor
Process elements P2 to P7, from project to customer care
Rating A, B or C
Product audit
Customer or your own team
Finished parts against drawing and specification
Pass or containment
EVIDENCE PACK BY CLAUSE

Seven Clauses, Seven Folders of Proof

ISO 9001 groups its requirements into clauses 4 to 10, and an evidence pack built in the same order lets you answer any request in seconds. ISO 9001:2026 was published on 16 September 2026, with a transition to 2029. It keeps the same high-level structure and adds, among other points, defined objectives for each internal audit. This page uses the clause numbers both editions share. Confirm your transition timing with our quality support team.

4
ContextScope, interested parties, process map
5
LeadershipQuality policy, roles, authorities
6
PlanningRisks and opportunities, objectives
7
SupportCalibration, competence, documents
8
OperationOrders, design, suppliers, release
9
EvaluationInternal audit, management review
10
ImprovementNonconformity, corrective action
RECORDS GAPS AUDITORS FIND

The Five Record Sets Almost Every Auditor Samples

Whatever the scope, a handful of records come up on nearly every visit because they show whether the system is alive. Auditors usually trace a sample: pick a part, then follow the gauge that measured it, the person who made it and the action raised when it went wrong. A gap in any link breaks the trail. Check how your records link together with our audit readiness team.

7.1.5 CalibrationGauge ID on the record matches a current certificate. Watch for overdue or missing gauges
7.2 CompetenceTraining and sign-off for the job the person did that day, not just a course list
9.2 Internal auditProgramme covers every process, with reports and follow-up on findings
9.3 Management reviewMinutes show the required inputs and the decisions taken
10.2 Corrective actionRoot cause, action and a check that it worked, closed on time
7.5 DocumentsThe revision on the floor is the revision that was approved

The Auditor Asks Out Loud. The Record Is Ready.

During the audit, the host asks iFactory by voice for a record. The agent finds it, reads back what it found and waits. Nothing reaches the auditor until a person on your team says so, and every record shown is logged.

Audit room · Host and iFactory
Audit host"Calibration for torque wrench TW-114, and training for the cell 4 operator."
iFactoryFound both. TW-114 was calibrated on 12 March and is in date. Work instruction WI-208 is signed off for that operator. Show them?
Audit host"Show the certificate first."
iFactoryCertificate on screen, logged as shown at 10:42. Training record held until you confirm.
MAJOR AND MINOR NONCONFORMITIES

How Findings Are Graded, and Why Repeats Matter

ISO/IEC 17021-1 defines a major nonconformity as one that affects the capability of the management system to achieve its intended results. Significant doubt about process control, or about whether products will meet requirements, can make it major. So can several minor findings against the same requirement, because together they show a systemic failure. Sector schemes add deadlines. Under the IATF rules in force since January 2025, a major needs its corrective actions submitted within 15 days and completed within 60. Review your open findings with our support team.

Major
System cannot be trusted hereA missing process, a breakdown in control or a pattern of repeats. Blocks certification until verified
Minor
A lapse, not a breakdownOne record or step missed. Needs an accepted action plan and proof at the next visit
Opportunity
Not a findingAn auditor suggestion. No action required, though worth logging
Customer audits grade differently

Customers often use their own scale, such as a VDA 6.3 percentage or a supplier score. Read the customer's audit manual before the visit and grade your own gaps the same way.

OPEN FINDINGS

Which Open Findings to Close First

With weeks to go, you cannot close everything. Rank open findings by what an auditor will weigh most: a finding raised by the same body last time, a corrective action past its own due date, anything touching product conformity, then single record gaps. A repeat finding is the one most likely to be graded major. The ranking below is an illustration, not a rule from any standard. Build your own ranking in a findings review.

Open items · Plant 2Priority score, illustration
Repeat from last audit9
Action past due date7
Touches product release6
Single missing record3
Close this weekRepeat on 10.2
OwnerQuality engineer, cell 4
Proof neededEffectiveness check record
QUALITY AUDIT READINESS TEMPLATE

A Digital Audit Binder Index for One Clause

Each clause in the evidence pack gets one index card like this. It tells the host what to show, where it lives and who can explain it, so nobody leaves the floor hunting for a file. Ask our support team for the blank index.

Clause7.1.5 Monitoring and measuring resources
EvidenceGauge list, certificates, recall schedule
Sample readyThree gauges traced to parts made last week
Out-of-toleranceImpact checks on product, with results
OwnerMetrology lead
Last checkedBy the agent overnight
GapGauge HG-31 overdue by 6 days
StatusAmber until HG-31 is recalibrated
AUDITOR REQUESTS BY VOICE

From Spoken Request to Logged Evidence

On audit day, speed and control matter equally. The agent can search faster than any person, but only your host knows the context behind a record. So the agent finds and reads back, and the host releases. The log then gives you a full list of what the auditor saw. Try the request flow in a live walkthrough.

1AskHost speaks the request in plain words
2FindAgent searches records by clause, part or person
3Read backAgent says what it found and any gap
4ReleaseHost confirms what goes on screen
5LogRecord, time and requester saved
QUALITY AUDIT READINESS BEST PRACTICES

Thirty Days Out: A Readiness Checklist

Tick these off in the month before any certification or customer audit. Most take minutes when records are already linked, and each one removes a common reason for a finding. Get a printable version from our support team.

Thirty days before the audit
QUALITY AUDIT READINESS EXAMPLES

Three Gaps Found Before the Auditor Did

These are illustrations of typical catches, not customer case studies. Your own scan will show your own pattern. Talk through your last audit report in a short review call.

Clause 7.2
New hire on the audit routeAn operator moved to a new cell had no sign-off for its work instruction. The supervisor signed off after a witnessed run.
Clause 10.2
A repeat in the makingLast year's minor on label control had an action, but no effectiveness check. The check was done and recorded before the visit.
Clause 9.3
Review with a missing inputMinutes skipped supplier performance. A short addendum review closed the gap with a dated decision.
TURNKEY AI DEPLOYMENT

Readiness Agent and AI Server, Racked on Your Site

iFactory delivers the Audit Readiness Agent turnkey. A pre-configured NVIDIA AI server ships racked and ready with the agent, clause maps and voice models loaded, so quality records stay inside your plant. You rack it, plug in power and Ethernet, and the AI is live. To scope it for your sites and standards, ask our support team for a turnkey quote.

What's Included
  • Pre-configured NVIDIA AI server, racked and ready
  • Clause maps for ISO 9001, IATF 16949 and AS9100
  • Links to training, calibration, document and CAPA records
  • Nightly readiness scan with gap list by clause
  • Evidence packs built per audit and per customer
  • Voice request handling with host release and log
  • 24×7 remote monitoring of the server and models
Live in 6–12 weeks
Wk 1–4
Connect and Map

Server installed, record sources linked and clauses mapped to your procedures.

Wk 5–8
Scan and Check

First readiness scans run and gaps checked with your quality team.

Wk 9–12
Rehearse and Go Live

Mock audit with voice requests, hosts trained, nightly scans switched on.

HOW iFACTORY FITS

Quality Audit Readiness Software That Works Every Day

The agent fits around the records you already keep and the people who host your audits. See where it plugs in during a guided product tour.

1
Checks against the standard. Procedures, records and training are compared with each clause every night.
2
Builds evidence by clause. Packs are ready for certification bodies and for each customer.
3
Answers by voice. Hosts ask for records out loud and confirm before anything is shown.
4
Ranks open findings. Repeats and overdue actions rise to the top of the list.
1000+
Industrial clients running iFactory
99.9%
Platform uptime across quality records
6-12 wks
From racked server to nightly readiness scans
FREQUENTLY ASKED QUESTIONS

What Quality Managers Ask About Audit Readiness

What does quality audit readiness actually mean?
It means you can show, at any time, that each clause of your standard is met and that last visit's findings are closed. In practice that is current records, linked evidence and a short list of known gaps with owners. You can see a readiness scan on sample records when you book a 30-minute demo.
How is a customer audit different from a certification audit?
A certification audit tests your system against a standard such as ISO 9001. A customer audit tests whether your process will deliver their parts, often with their own checklist or a VDA 6.3 process audit. The evidence overlaps, but the questions and grading do not.
Does the agent send anything to the auditor on its own?
No. It finds records and reads back what it found, then waits for the host to release them. Every record shown is logged with the time and the request. Your team stays in charge of the conversation. Hear how the confirm step sounds when you walk through it with our team.
Which standards can it check against?
ISO 9001 is the base, with clause maps for IATF 16949 and AS9100 on top. Customer manuals and customer-specific requirements can be added as their own checklists. The mapping is reviewed with your quality team during setup.
What about the move to ISO 9001:2026?
The 2026 edition was published in September 2026 with a transition period to 2029. The high-level structure stays the same, so evidence built by clause carries over, and new points such as internal audit objectives can be added to the map. Our support team can review your transition plan.
How do we start?
Pick your next audit and run a scan on the clauses it will sample. Close what it finds, then rehearse the audit day with voice requests. Most plants start with one site and one standard. To scope that first step, see it on your own records.

Be Ready for the Next Audit, and the One After It

Nightly scans, evidence by clause and voice requests your host controls. Delivered turnkey on an NVIDIA server and live in 6 to 12 weeks.

Readiness summary · illustration
Next auditISO 9001 surveillance
Clauses at amber7.1.5, 7.2, 10.2
Open findings4, ranked by priority
Evidence packsBuilt by clause, host released
Every record shown to an auditor is logged

Share This Story, Choose Your Platform!