← Notes · · auto
Clause 7.5 Decoded: Document Control for Small Manufacturers
Clause 7.5 is shorter than you think. Here is what it actually requires, and a register that stops documents going stale.
The auditor found it himself. Bottom of the folder, a work instruction for the press line dated four years back, signed by a supervisor who left in 2022. The standard itself had not changed. The machine had. That is roughly how most document control non-conformances happen: not a policy failure, just a piece of paper nobody remembered to look at.
What clause 7.5 is actually asking
ISO 9001:2015 clause 7.5 covers “documented information,” which is the standard’s term for anything you write down to support your quality management system. It splits into three sub-clauses.
7.5.1 says you need documented information the standard explicitly requires, plus anything you have decided is necessary for your QMS to work. That second part matters. You are not required to document everything, only what is needed for your system to function consistently.
7.5.2 deals with creating and updating. When you produce or revise a document, it needs an appropriate title or reference, a date or version number, and sign-off by someone with authority to approve it.
7.5.3 is where most businesses trip up. It covers control: the document must be available where it is needed, protected from accidental change, and reviewed at planned intervals. It must be clear which version is current, and obsolete versions must not be in active use.
That last point is the one that catches the press line work instruction.
What an auditor actually looks for
When a third-party auditor walks your site, they are not expecting a sophisticated electronic system. A competent auditor knows that a small manufacturer with twenty people is not running the same infrastructure as a tier-one automotive supplier.
What they do expect is evidence that you know what documents you have, that you know which version is current, and that someone, somewhere, has looked at each document within a reasonable period. “Reasonable” is not defined by the standard, which is intentional. Twelve months is a common interval for quality-critical documents. Some lower-risk items might go two years without a review being an issue.
What they cannot accept is a folder full of documents with no version history and no record of when they were last checked. That is not a documentation problem. It is a control problem.
Why documents go stale in small businesses
In a company with a dedicated quality team, document reviews get scheduled, chased, and logged. In a business where the quality manager also handles supplier approvals, customer complaints, and covers the line when someone is off, document reviews sit on the list until they do not.
The mechanism that causes the failure is not laziness. It is the absence of a trigger. Nobody sends a reminder when a document’s review date passes. The document does not flag itself. The folder just sits there.
A register that chases its own reviews
The simplest fix is a document control register built so that overdue reviews become visible without anyone having to go looking. Not a software platform, not a subscription. A spreadsheet that colour-codes by status and tells you what needs attention this month.
The SafetyDeskStudio Document Control Register is built for exactly that. You log your documents once: the title, the owner, the current version, the last review date, and how often it needs reviewing. The register calculates the next due date and highlights anything overdue. You open it at the start of the month and the work is already sorted.
It covers the control requirements of clause 7.5.3, gives you a ready audit trail, and takes about an afternoon to populate for a typical small manufacturer. There is no software to install and no ongoing cost.
If you are preparing for certification or trying to tighten up ahead of a surveillance audit, it removes the main failure mode: documents that were reviewed in good faith once, then forgotten.
Keeping the rest of your system tidy
Document control sits inside a broader quality system. If your processes are generating waste or your shop floor has visible organisation problems, a tidy document register will not fix those on its own. The six operational problems that drive most manufacturing non-conformances are worth mapping before your next internal audit. And if you are not yet sure where your losses are actually coming from, the losses calculator is a useful place to start before your next management review. A clean document system and a clear picture of where time and material are disappearing tend to produce a better audit outcome than either one alone.