Business Records Table
Business Records Table
Below are listed required / suggested management system records that can be used to demonstrate the effective
operation of the QMS and/or provide objective evidence of process effectiveness. The ISO references shown in bold*
indicate compulsory ISO 9001 records.
Customer Records of Customer Reviews, Surveys and 8.2.1 3 yrs Quality Records/
Satisfaction Feedback Customer Files
Audit Corrective Actions (cross ref to quality 8.2.2* 3 yrs Quality Records File
reports A/R)
Monitoring and Quality System Performance Feedback 8.2.3 Ongoing Quality Records File
Measurement of
Processes Internal Process Monitoring Records 8.2.3 3 yrs Quality Records File
(MRM etc)
Monitoring and Evidence of Conformity Against Acceptance 8.2.4* 3 yrs Customer Files
Measurement of Criteria (including person(s) authorising
Product release of product), e.g. Sign-off Sheets /
Acceptance Records
Monitoring and Conformity of Service / Support Activities 8.2.4* 3 yrs Customer Files
Measurement of Against Acceptance Criteria (SLAs, surveys,
Service support information)
Control of NC Records of Non-conforming Products/ 8.3* 3 yrs Quality Records File
Product/Service Service and any Associated Actions
Concessions (if any – QR) 8.3* 3 yrs Quality Records File
NC Product Supplied to Customer (QR inc. 8.3* 10 yrs Quality Records File
S/N, product identification, recipients and
actions)
Analysis of Data Evidence of Analysis of Data from CSAT, 8.4 3 yrs Quality Records File
Product Conformance, Process/ Service
Trends and Supplier Performance
Continual Evidence of QMS Continual Improvement (Q. 8.5.1 3 yrs Quality Records File
Improvement objective trend, audit results, management
review data etc and QRs)
Corrective Action Records of Corrective Actions Taken 8.5.2* 3 yrs Quality Records
(includes customer complaints - (QR)) File / Database
Preventive Action Records of Preventive Actions Identified, 8.5.3* 3 yrs Quality Records File
Risk Mitigation and any Actions Taken (QR).
Notes
1. The retention period specified should be the minimum required for contractual, legal, customer or trend
analysis reasons.
2. The Location / Holder needs to be considered from an accessibility and retrieve-ability point of view.
3. Records and evidence that indicate appropriate control and monitoring of any outsourced processes may also
need consideration.