A small manufacturer can use AI to draft most ISO 9001 documentation, namely procedures, work instructions, the internal audit checklist and the management review pack, then pay a consultant only for the parts that need outside judgement: scoping, a gap review and a mock audit. AI drafts, your quality manager owns, and the certification body decides.
The catch is that AI writes confident descriptions of processes it has never seen. A procedure that says "the operator records the result on form QF-07" when nobody does that will fail the audit faster than a missing procedure. So the real decision is not AI versus consultant. It is which jobs need someone who knows how your shop runs, and which only need clean writing.
What the standard asks you to write down, and what it leaves alone
ISO 9001 is the quality management standard most customers ask for. The current edition is ISO 9001:2026, the sixth, which ISO published on 16 September 2026; the 2015 edition and its 2024 climate amendment were withdrawn the same day. Firms already certified to 2015 have a transition period (LRQA and NQA, both certification bodies, give 30 September 2029 as the end), but a manufacturer starting now should write to the 2026 text. Ask your certification body which edition it will audit a new client against before you start.
The new edition is an evolution rather than a rewrite. ISO says it improves clarity, puts more weight on quality culture and leadership, and separates risks from opportunities. Certification-body summaries add that it keeps the ten-clause structure, carries forward the 2024 requirement to decide whether climate change is a relevant issue for your organisation's context, strengthens the planning of changes to the system, and still mandates no procedures. It asks for "documented information" that you decide is needed for the system to work, plus specific items it names. That distinction saves a small firm a lot of writing, so get it straight before you ask AI for anything.
One AI-specific trap follows from the timing. Chat assistants learned mostly from text written about the 2015 edition, so ask one for "ISO 9001 requirements" and it may quote withdrawn wording or miss the new opportunities clause. Buy the 2026 standard, paste its table of contents into the chat, and tell the assistant to use only those clause titles.
Items the 2015 edition named explicitly, which published comparisons say keep their clause numbers in 2026 (the only new number is 6.1.3, for opportunities; confirm each in your copy):
- the scope of the quality management system (clause 4.3)
- the quality policy (5.2) and quality objectives (6.2)
- evidence of calibration or verification of measuring equipment where traceability is required (7.1.5)
- evidence of competence (7.2)
- results of reviewing product requirements, and design records where you design (8.2, 8.3)
- evidence of conformity of purchased items and of production control where you need it (8.4, 8.5)
- records of nonconformities and corrective actions (10.2)
- the internal audit programme and results (9.2) and management review outputs (9.3)
Everything else is your call. A twelve-person machine shop with stable operators may need four short procedures and a handful of work instructions. A forty-person assembler with temporary staff will need more. Start by listing what you genuinely need, not what a template pack contains.
The Complete Excel Course with AI Integration
From formulas and pivot tables to Power Query, DAX, VBA and AI with Copilot, ChatGPT and Claude — hands-on from the first lesson.
By Sagnik Bhattacharya and Virginia Thorn, Primetime Emmy Award winner
Buy nowSorting the jobs: AI, you, or a consultant
Here is the split I would use for a plant of 10 to 50 people. The right-hand column is where the money goes.
| Job | AI can draft it | Quality manager must | Consultant worth paying for? |
|---|---|---|---|
| Process map and scope statement | Tidies your notes into prose | Decide what is in and out of scope | Yes, if you have several sites or outsource key steps |
| Procedures (document control, purchasing, nonconformity) | Yes, from your described steps | Check every step against what happens on the floor | Rarely |
| Work instructions | Yes, from photos and operator notes | Have an operator follow them cold | No |
| Risk and opportunity register | Prompts and first-pass entries | Judge likelihood and impact | Sometimes, for a sector-specific view |
| Internal audit checklist | Yes, by process and by clause | Add shop-floor questions | No |
| Internal audit itself | Summarises findings | Observe, interview, sample records | An outside auditor for a day if nobody is independent |
| Gap review against the standard | Weak at this | Supply real documents | Yes, this is the best-value consultant day |
| Mock audit before certification | No | Attend and respond | Yes, one day |
| Customer-specific or industry add-on requirements | Can summarise a supplied document | Interpret it | Yes, if the add-on is new to you |
The pattern is that AI helps with writing and structuring, while consultants help with judgement and with knowing what auditors actually look for. If your documents already exist in some form, AI is mostly a tidy-up tool. If you have nothing and nobody who has ever seen an audit, a consultant's first two days are cheap insurance.
Drafting a procedure from your own notes
Never ask AI for "an ISO 9001 purchasing procedure". You will get a generic page that sounds right and describes nobody. Feed it your own words instead. Ask the buyer to talk through the process into a phone recording, transcribe it, and paste that in. Below is a prompt I would use.
You are helping a small manufacturer write a controlled procedure.
Use ONLY the notes below. If a step, form, role or record is not in the
notes, do not invent it; list it under "Questions for the process owner".
Format: Purpose, Scope, Responsibilities (by job title), Steps (numbered,
each with who and what record is made), Records kept (name, where, how long),
Related documents. Plain language, one idea per sentence, no more than two pages.
Notes from the buyer:
[paste transcript]The line about questions is the important one. In a typical run, the output will give you a clean two-page procedure and then a list such as: "Who approves a new supplier above a spend limit? Where is the approved supplier list kept? Is there a re-evaluation date?" Those questions are the useful part. Each one is a gap an auditor would also have found, and you have found it before they arrive.
Illustrative output, trimmed:
Step 4. The buyer checks the supplier against the approved supplier list. If the supplier is not listed, the buyer asks the quality manager for approval before ordering. Record: approved supplier list, updated by the quality manager.
Questions for the process owner: What counts as approval for a new supplier (sample, audit, certificate)? How often is the list reviewed?
Here the writer must answer both questions truthfully. If the honest answer is "we have never reviewed the list", then you either start reviewing it or you write that you do not. Do not let the draft claim an annual review you do not perform.
Work instructions from photos and operator notes
Work instructions are where AI saves the most time, because operators know the job and dislike writing. Photograph each step on the line, add a few spoken notes, and let AI turn them into numbered steps with checks. The separate tutorial on AI work instructions from photos and short videos of the line walks through that method; here I only want to show what the audit expects.
A before and after for a deburring step, illustrative. Before, an operator's note: "deburr edges till smooth, check with thumb, don't take off too much."
After, as drafted and then edited by the quality manager: "1. Deburr all four edges of the bracket with the 120-grit wheel. 2. Run a gloved thumb along each edge; no catch should be felt. 3. Measure the hole spacing with the go/no-go gauge; if the gauge does not pass, stop and call the supervisor. 4. Place passed parts in the green tray; place failed parts in the red tray and tag them."
The edit that mattered was step 3. The AI first wrote "visually inspect", because nothing in the notes mentioned a gauge. The operator looked at the draft and said the gauge was the whole point of the step. That is the checking loop: an operator reads the draft aloud while doing the job, and every mismatch gets fixed.
Building the internal audit checklist
An internal audit checklist is a good fit for AI because it is structured and repetitive. Audit by process rather than by clause, which is how auditors tend to work and how people on the floor think. Give the AI your process list and ask for questions that need evidence, not yes or no answers.
Write an internal audit checklist for the process "Goods-in and incoming
inspection" at a 30-person manufacturer. For each question give:
(1) the question, phrased so the answer is evidence, not yes/no,
(2) the ISO 9001:2026 clause it relates to, using only the
clause titles pasted below,
(3) what record or observation the auditor should ask to see.
Maximum 12 questions. Include at least two questions that need the auditor
to watch the work, not read a document.
Clause titles from our copy of the standard:
[paste the table of contents]A filled-in sample of what comes back, with the quality manager's edits:
| Question | Clause | Evidence to ask for |
|---|---|---|
| Show me the last delivery of steel bar. How did you check it against the order? | 8.4.2 | Goods-in log, delivery note, certificate if required |
| What happens when a delivery fails inspection? Show me a recent example. | 8.7 | Nonconformance tag, supplier notification, corrective action |
| Watch the receiver inspect a delivery. Which gauges do they use, and are they in calibration? | 7.1.5 | Gauge ID, calibration sticker and register |
| How would a new starter know what to inspect? | 7.2, 7.3 | Work instruction, training record |
The AI will happily write twelve questions in a minute. Your auditor still has to spend an hour on the floor with a clipboard. A checklist is a prompt for conversation, and the best findings come from the follow-up question the checklist did not list.
Where a consultant still pays for themselves
Three situations justify the fee, in my view.
You have never been through an audit and have nobody who has. The gap review is a two-day job: a person reads your documents, walks the shop and tells you what is missing and what is excess. AI cannot walk the shop. It can only read what you give it, so it cannot spot the things you do not know to mention.
A customer or industry has added requirements. Some sectors layer extra clauses on top of ISO 9001, and customer quality manuals can add more. AI can summarise a document you paste in, but interpreting how a requirement applies to your products is a judgement with consequences. Use a specialist who works in that sector.
The quality manager is also the production manager. If one person is stretched across both roles, an outside consultant can carry the project's momentum and take the first draft of the system off their desk. It is a capacity purchase, not a knowledge purchase, and it is fair to price it that way.
When a consultant is a poor buy: if they offer to sell you a pack of finished documents and "just fill in the blanks". Those documents describe an average company. You then have to bend your shop to match them, or edit every page until the pack is no cheaper than drafting from your own notes. Ask any consultant to show you a sample of a procedure they wrote for a client in your size range, with details removed, and how the client's own people took part in writing it.
A costed example: a 28-person machining shop
Take a 28-person shop that makes brackets and housings for two customers who now require certification. The figures below are illustrative, to show how to compare, so replace them with real quotes.
| Route | Outside spend | Quality manager time | Main risk |
|---|---|---|---|
| Full-service consultant writes the system | Say $9,000 to $15,000 for the project | About 6 to 8 days (reviewing, answering) | Documents that the shop does not follow |
| AI drafts, one gap review day, one mock audit day | Say 2 consultant days at $900 to $1,500 a day, plus about $20 a month for a chat plan | About 15 to 20 days across the project | Slower; records take months regardless |
| AI drafts only, no outside help | Chat plan cost | About 15 to 20 days plus time re-doing findings | Unknown gaps found at the certification audit |
The middle row is where I would point most small firms. It spends outside money on the two activities that need an outsider, and spends the owner's time on the thing only the owner can do: making the documents true. The first row is not wrong, but you pay for writing that AI does for almost nothing and then you may still need to rewrite it so people follow it.
Notice that the certification body's own fees sit outside all three rows. They are quoted separately, often as an audit-day count, and they recur: certification bodies typically run a surveillance audit in each of the first two years and a recertification audit at the end of a three-year cycle. Ask for the quote in writing before you decide anything else, because the number of audit days depends on headcount and complexity, and your cost comparison should include it.
A mistake that shows up in audits
Take a small plant that used AI to write all its procedures in a weekend. The pack looked excellent. At the stage one audit, the auditor asked the goods-in clerk to show the "supplier performance review" recorded in the purchasing procedure. There was none. The procedure said the buyer rated suppliers quarterly on delivery and quality, which the AI added because most purchasing procedures say so. The finding was a nonconformity against the plant's own document, not against the standard.
The fix is a rule: every sentence that says someone records, reviews, approves or checks something must be backed by a record you can show, or must change. Before approving a document, the quality manager circles each such sentence and writes next to it where the record lives. Where it does not exist, the sentence goes, or the plant starts the activity, whichever is genuinely proportionate.
Keeping the quality manager in charge
Put ownership in writing. Each document gets an owner by job title, a version, a date and a reviewer. Use a short approval step: the owner reads the draft aloud against the real process, signs it off, and the quality manager records the date. That is also your document control evidence.
A simple checking routine for every AI-drafted document, which takes about 20 minutes each:
- Read it against the transcript or notes. Delete anything not in them unless you can confirm it.
- List every record it mentions. Confirm each exists, or decide to create it.
- Have the person who does the job read it. Note every correction.
- Check roles are job titles that exist in your organisation chart.
- Run a spot check: ask AI to find sentences that promise a frequency (monthly, annually) and check you meet each.
That final step makes a good use of the tool. Paste the finished procedure and ask: "List every commitment in this document about who does what and how often." You get a list you can compare with reality in ten minutes.
The management review pack in an afternoon
Management review is the audit item small firms leave until last. ISO 9001 expects top management to review the system at planned intervals, with inputs such as customer feedback, process performance, nonconformities, audit results and supplier performance, and outputs such as decisions and actions. AI is good at assembling the inputs into one page if you give it the numbers.
Paste your last quarter's figures: on-time delivery 91%, customer returns 14 lines out of 2,300 shipped, scrap 2.8%, two customer complaints, six internal audit findings of which five are closed. Ask AI to produce a one-page review pack with a trend sentence per measure and a proposed agenda. Then you and the owner argue about the decisions, which is the whole point of the meeting. The pack's tone should be dull and factual. If the draft says "excellent performance" about a 91% on-time rate, delete the adjective.
Record the meeting as minutes with decisions and owners, for example "Reduce scrap on housing line below 2.0% by end of next quarter; owner: production manager". That one line meets the outputs requirement and gives the next audit something real to follow up.
Choosing the certification body, and checking it worked
The certification body decides, not you, not your consultant and not AI. Get at least two quotes, ask whether they are accredited for your product sector, and ask how many audit days they estimate for your headcount. Ask whether they are already accredited to certify against ISO 9001:2026, and if they still offer a first certificate to the 2015 edition, ask how soon you would then need a transition audit. Write your documents against the edition you will actually be audited on.
To check that your system is working before the stage one audit, run these tests:
- The stranger test. Give a new starter a work instruction and watch them do the job without help.
- The record trail. Pick one customer order and follow it from quote to delivery using only your records. Gaps in the trail are your findings.
- The calibration walk. Take every gauge you can find and check it is on the register with a valid date.
- The complaint trace. Pick a complaint and show the corrective action. The 8D report tutorial gives a structure for that.
For where the documents will live afterwards, a searchable store matters. The AI knowledge management tutorial covers building one, and the MRP add-on or chatbot comparison helps you decide whether a chatbot on your own procedures is worth running. If you do load your procedures into a question-and-answer tool, load only approved, current versions so staff never see a draft.
A sensible order of work
If I were advising a plant starting from scratch, this is the order. Week one: define scope and list processes with the owner of each. Weeks two to six: record each process owner talking through their steps, draft with AI, and edit with the owner. In the same period buy one consultant gap-review day once the first documents exist, not before, because a gap review on an empty system teaches you little. Then run records for at least a few weeks so that there is evidence of the system operating, run the internal audit and a management review, close the findings, and book the mock audit. Only after that book the stage one audit.
A realistic expectation: the writing is the quick part. The months you cannot compress are the ones in which records accumulate, because an auditor wants to see the system operating, not merely written. AI shortens the drafting. It does not shorten the time it takes for a record to exist.
Questions small manufacturers ask before starting ISO 9001
Does ISO 9001 still require a quality manual?
Not as a named document. Certification-body summaries of the 2026 edition say it keeps documentation requirements minimal and mandates no procedures. It asks for documented information your organisation decides it needs, plus items it names, such as the scope, quality policy and objectives. Many small firms keep a short manual anyway because auditors and customers like one place to start.
Can a certification body reject documents written by AI?
A certification body does not judge who typed the words. It judges whether the documents describe what you really do and whether records prove you do it. AI text that describes an imagined process fails that test the same way a copied template does.
Is a template pack better than AI drafting?
A template pack gives you a fixed structure and usually needs heavy editing to match your shop. AI drafting starts from your own notes, so it fits better, but it needs more checking. Some firms buy a pack for structure and use AI to fill it from their real steps.
Should a new system be written to the 2015 or the 2026 edition?
Write to ISO 9001:2026. ISO published it on 16 September 2026 and withdrew the 2015 edition the same day. Certified firms have a transition period, which LRQA and NQA give as ending 30 September 2029, but a firm starting from nothing gains little by building to a withdrawn text. Ask your certification body which edition it will audit a new client against.
Who should do the internal audit?
Someone who does not audit their own work. In a small firm that may be a colleague from another department or an outside auditor hired for a day. AI can build the checklist and tidy the findings, but a person must watch the work and talk to operators.
How long does preparation take for a small plant?
It depends on how much you already document. A shop with working routines but little paper can often write core documents in a few weeks of part-time effort, then needs months of records before an audit; some certification bodies say they normally expect around three months of operation before the stage two visit. Treat any single timeline as a guess until your body quotes.
Further reads
- AI in Employee Training: Turn Your SOPs Into Short Modules and Quizzes — Competence evidence from short modules and quizzes.
- What Does AI Quoting Software Cost a Machine Shop? — Pricing models, set-up time and a break-even sum on quote volume and win rate, plus how to test any quoting tool on your own past jobs first.
- AI Tools and AI Development: The Complete 2026 Guide — the AI hub, including every tutorial in the AI-for-business series.
Sources: ISO's ISO 9001:2026 and ISO 9001:2015 catalogue pages (publication and withdrawal dates), LRQA's and NQA's ISO 9001:2026 transition pages, PJR's and Advisera's summaries of the changes from 2015, and certification-body descriptions of the three-year audit cycle (checked 5 November 2026).