ISO 9001 is ISO’s requirements standard for quality management systems, and ISO now lists ISO 9001:2026 as the current edition in place of ISO 9001:2015. A machine shop is certified to it by an independent certification body, never by ISO itself, once its quality system meets the standard’s requirements.
For a job shop, the value of ISO 9001 is practical: a documented way to take in an order, confirm the requirements, make and inspect the part, trace it, and deal with anything that goes wrong. This guide covers what the standard is, what changed with the new edition, how certification actually works, and how quality records connect to the insurance side of the business.
What ISO 9001 is and who publishes it
ISO describes the ISO 9000 family as ISO 9001 together with a set of supporting quality management standards, all published by its technical committee ISO/TC 176 and its subcommittees. ISO 9001 is the requirements standard, the one a shop is audited against. ISO 9000 sets out the fundamental concepts and vocabulary, and other standards in the family give guidance.
Understanding that split saves time. When a customer’s purchase order says a supplier must hold a quality management system certified to ISO 9001, it is the requirements standard that matters. The other documents help you interpret and improve the system, but the certificate is issued against ISO 9001.
The 2026 edition replaces 2015
ISO’s own page for ISO 9001:2015 marks that edition withdrawn, with ISO 9001:2026 named as its replacement, and ISO’s quality management pages list ISO 9001:2026 and ISO 9000:2026 as the current editions. A shop building its first quality system today should build to the current edition rather than copy a system written for the old one.
If your shop already holds a certificate to the 2015 edition, the practical question is how and when your certification body will audit you against the new one. Ask it directly, get the answer in writing, and plan the internal work so the change is handled as part of normal management review rather than as a scramble before the next audit.
The principles the standard rests on
According to ISO, the ISO 9000 standard defines seven quality management principles that all the other standards in the family are based on. ISO names several of them on its overview page: a strong customer focus, the active involvement and buy-in of top management, a process-oriented approach, and a commitment to continuous improvement.
For a machine shop, those principles translate into ordinary habits. Customer focus means reviewing each drawing and purchase order before accepting it. Management involvement means the owner signs off on the quality objectives and reviews how the shop is doing against them. A process approach means quoting, planning, machining, inspection, and shipping are each defined, with clear handoffs. Continuous improvement means nonconformances and customer complaints lead to changes in how work is done, not just to reworked parts.
Certification bodies, not ISO, issue certificates
ISO is explicit on its certification page: it does not perform certification or issue certificates, and certification is performed by external certification bodies, so a company cannot be certified by ISO. ISO defines certification as written assurance from an independent body that a product, service, or system meets specific requirements, and accreditation as the formal recognition that a certification body operates according to international standards.
ISO also notes that the ISO logo is a registered trademark that cannot be used outside ISO unless explicitly authorized, and that a shop wishing to show its certification should contact the certification body that issued the certificate. Keep your marketing and quotes consistent with that: describe the certificate, name the certification body, and use only the marks it authorizes.
Choosing and checking a certification body
ISO gives three checks for choosing a certification body: evaluate several of them, check whether each uses the relevant conformity assessment standard, and check whether it is accredited. ISO adds that accreditation is not compulsory and that a body without it is not necessarily disreputable, but accreditation provides independent confirmation of competence.
Ask each candidate for a written quote for the same scope, the audit schedule, the number of audit days it expects for your site, and how it handles findings. Ask whether your key customers accept its certificates, because a certificate your customer does not recognize does not solve the problem that sent you looking. Keep the correspondence; it becomes part of your supplier file and answers questions a customer’s quality department may raise later.
Scoping a quality system for a job shop
Scope is the decision that shapes everything else. A job shop that only machines to customer prints has no design function, while a shop that designs fixtures or products for customers does, and the scope statement should say which applies. Define the sites, the processes, and the kinds of work the certificate will cover, and keep the scope honest, because a scope that claims more than the shop does can lead to audit findings and customer confusion.
Build the documented processes around what the floor already does well, and write them in the language the floor uses. Contract review, purchasing and supplier control, production planning, inspection and test, calibration of measuring equipment, control of nonconforming parts, and corrective action are the areas a job shop’s system has to cover well. Shops that set up inspection and records from the first order, as described in our start-up guide for machine shops, have much of this in place already.
Real-World Scenario: A ten-person job shop receives a new customer’s supplier requirements, which call for a quality management system certified to ISO 9001. The owner scopes the system to contract machining only, documents the processes the floor already follows, runs them long enough to build records, and requests quotes from several certification bodies for the same scope. The shop picks an accredited body its customer recognizes and schedules the audit with its first internal audit already on file.
Internal audit, review, and corrective action
Three parts of the system keep it working between certification audits: internal audit, management review, and corrective action. Schedule internal audits of each process across the year, and use someone who does not run that process to do the audit. Hold management review on a fixed calendar, with the quality objectives, audit results, customer feedback, and open corrective actions on the agenda. Treat each nonconformance and customer complaint as a problem to solve at its cause, and record what changed, who changed it, and how you confirmed the fix worked.
Keep those records where an auditor can follow them from the original problem to the verified fix, because they are the evidence that the system runs between audits and not just during them.
When aerospace work adds requirements
Aerospace customers bring their own quality standard. The International Aerospace Quality Group describes its 9100 standard as standardizing quality management system requirements to the greatest extent possible, primarily for the aviation, space, and defense industries, and as usable where a quality system with additional requirements over an ISO 9001 system is needed. For a machine shop, that makes an ISO 9001 system the base on which aerospace requirements are added.
If you plan to quote aerospace or defense parts, ask the customer which quality standard its purchase orders require before you choose a certification path. Defense work can also bring federal registration duties that have nothing to do with quality; our guide to ITAR registration for machine shops covers them. Certification can also figure in a shop’s value when it is sold; see why certifications matter to buyers.
Quality records and the insurance file
A working quality system produces the records that defend a products claim: contract review, inspection results, material certifications, lot traceability, and corrective actions. When a machined part fails in a customer’s assembly, those records show what left your shop and how it was checked, which matters to the general liability response. When a part meets its drawing but misses what the customer expected, the same records sit at the center of a manufacturers errors and omissions claim, which our article on manufacturers E&O explains in more detail.
The same supplier agreements that ask for certification tend to set insurance terms as well; the insurance terms customers write into supplier agreements are laid out in a separate guide. For how we write coverage for contract machining, see machine shop insurance, and ask for a quote whether or not your shop is certified yet.