Platform
Building the system is the easy half
These are the modules that decide whether the system is still true in eighteen months.
What keeps a management system alive
Implementation projects end. Surveillance audits do not. The modules below exist because the work between those two things is where certifications are actually lost: a review date nobody owns, an action closed on paper, an audit programme that slipped a quarter and never caught up.
Each of these is a live register with owners, dates and links to the rest of the system — not a document describing what should happen.
Modules
What you get
Internal audit management
Audit planning and execution, questionnaires, reusable templates, linked evidence and a capture review step before findings are accepted.
Risk and controls
A risk register with a configurable matrix, treatments assigned to people, and a controls register connecting treatments to the requirements they satisfy.
Document control
Versions, sub-versions and diffs, approval workflows, review reminders, team access, mandatory assignments, and a public Trust Centre for documents you choose to publish.
Improvement
Nonconformances with root cause and corrective actions, change control linked to management reviews, and ten standard reports including nonconformance trends.
People and skills
Employment lifecycle, skills management, training and courses, competency, an organogram and access management — the clause 7.2 evidence, held as records.
Suppliers and forms
A supplier register with a self-service supplier portal, a forms builder, and a standard form library covering incidents, nonconformances, access requests and feedback.