Integrin compliance platform
Integrin ISO
ISO 9001, ISO 14001 and ISO 45001 run as one management system
Integrin runs ISO 9001, 14001 and 45001 as one management system, with one set of documents, audits, corrective actions and reviews.
ISO 9001, ISO 14001 and ISO 45001 share the same high-level structure: context, leadership, planning, support, operation, performance evaluation and improvement. So a business certified to two or three of them can run them as one system, and keep what each standard adds beside it. Every review and expiry date raises a task to its owner.
Download the information sheet →
The management system in Integrin
- Obligations
- Planning
- Support
- Operation
- Checking
- Improvement
Common capabilities
Controlled documents
Each revision is approved before it goes into force, and staff see only the version in force.
Compliance obligations
Each requirement is held with an owner and a review frequency, and every evaluation of compliance is kept with its evidence.
Internal audits
Findings are recorded against the audit, and the audit can be closed only when every finding's CAPA is closed.
Nonconformity and corrective action
A CAPA moves from root cause to corrective action and verification, and a second person approves the close.
Management review
A review starts with the inputs and outputs of all three standards, and approving the minutes puts it in force.
Certification audits
One audit can cover up to three standards, with the certificate, its expiry and the auditor's nonconformities.
Controlled documents
All three standards require documented information to be approved before issue, reviewed, kept current and available where it is used.
Each revision is its own record under one document number. Approving a revision puts it in force and supersedes the one before, and the library shows staff only the version in force.
- One document number, with every revision kept as its own record
- A revision goes into force only when it is approved
- The revision before it is superseded automatically
- Staff see only the version in force
- Each document's review date raises a task to its owner
Compliance obligations
Each standard requires the legal and other requirements that apply to be identified, and ISO 14001 and ISO 45001 require compliance with them to be evaluated.
The obligations register holds each requirement with why it applies, an owner and a review frequency. Every evaluation of compliance is kept with the evidence behind it.
- Each requirement with its sources, such as the legislation or a permit or licence, with a copy attached
- Why it applies or why it does not, its owner and its review frequency
- Review dates, licence and permit expiry, and returns due each raise a task to the owner
- Every evaluation of compliance kept with its result and evidence, approved by a second person
- A CAPA can be raised where an obligation is not met
Internal audits
Internal audits are held at planned intervals against the standard and the business's own requirements, and the results are reported and acted on.
An audit records its scope, its auditors and its findings. A CAPA can be raised on any finding, and the audit can be closed only when every finding's CAPA is closed.
- Scope and auditors recorded for each audit
- Findings recorded against the audit
- A CAPA raised on any finding
- The audit can be closed only when every finding's CAPA is closed
Nonconformity and corrective action
A nonconformity is corrected, its cause found, action taken so it does not happen again, and the action checked for effectiveness.
A CAPA can be raised from an audit finding, an incident, or a failed drill or check. It moves from root cause to corrective action and verification, and a second person approves the close.
- Raised from an audit finding, an incident, a failed drill, or a failed PPWR or EUDR check
- Five stages: raised, root cause, corrective action, verification of effectiveness, closed
- Evidence and requests held on the CAPA
- A second person approves the close
Management review
Top management reviews the system at planned intervals, against inputs and outputs each standard sets.
A new review starts with the inputs and outputs of all three standards as topics to fill in. Approving the minutes puts the review in force, and the next review date raises a task.
- A new review starts with the inputs and outputs each standard sets, as topics to fill in
- One review can cover all three standards
- Approving the minutes puts the review in force
- The next review date raises a task
Certification audits
The certification body audits at stage 1 and stage 2, then for surveillance each year and recertification every three years.
One audit can cover up to three standards. It records the result, the certificate number and expiry, and the auditor's nonconformities go into the same CAPA process.
- Stage 1, stage 2, surveillance and recertification audits
- One audit can cover up to three standards
- The result, the certificate number and its expiry recorded
- The auditor's nonconformities go into the same CAPA process
ISO 9001: quality
Includes supplier evaluation and the approved supplier list, staff competence and qualifications, and the calibration of measuring equipment.
ISO 14001: environment
Covers environmental aspects and their significance, objectives measured against their targets, and emergency plans with the drills held on them.
ISO 45001: health and safety
Brings in hazards and risk assessments, incidents and whether they are reportable, contractor approval, and worker consultation.
ISO 9001: quality
ISO 9001 sets the requirements for a quality management system: control of documents, competence, control of external providers, monitoring and measuring resources, internal audit, corrective action and management review.
A business certified to ISO 9001 runs its quality management system in Integrin, on the same documents, audits, corrective actions and management reviews as the other two standards, with the ISO 9001 records beside them.
- Supplier evaluation against set criteria, and the approved supplier list built from it
- Staff competence and qualifications, with their expiry dates
- Calibration and verification of measuring equipment, with the next date due
- Controlled documents, compliance obligations and internal audits
- Nonconformities and corrective action through the CAPA process
- Management review and certification audits
ISO 14001: environment
ISO 14001 sets the requirements for an environmental management system: environmental aspects and their significance, compliance obligations and their evaluation, objectives, operational control, and emergency preparedness and response.
The environmental management system uses the same documents, audits, CAPAs and management reviews as ISO 9001 and ISO 45001, with its own environmental records added.
- Environmental aspects under normal, abnormal and emergency conditions, with significance calculated from the score
- Operational controls and a review date on each aspect
- Environmental objectives measured against their targets
- Emergency plans with their drills, and a failed drill can raise a CAPA
- Compliance obligations, with every evaluation of compliance kept with its evidence
- Controlled documents, internal audits, CAPAs, management review and certification audits
ISO 45001: health and safety
ISO 45001 sets the requirements for an occupational health and safety management system: hazard identification and risk assessment, legal requirements, incident investigation, control of contractors, and consultation and participation of workers.
Health and safety runs on the same core as the other two standards, with its own records for risks, incidents, contractors and worker consultation.
- Risk assessments by task or area, rated before and after further controls
- Incidents recorded with the people involved and whether they are reportable
- Contractors approved through their pre-qualifications
- Worker consultations recorded with their outcome
- Legal and other requirements in the obligations register, with each evaluation of compliance
- Controlled documents, internal audits, CAPAs, management review and certification audits
ISO 9001, 14001 and 45001 are part of the Integrin platform
Integrin also covers CBAM in the EU and the UK, Irish customs, PPWR, EUDR, and cases and obligations. It's built for companies running their own compliance, and for brokers and consultancies managing it for their clients. How the platform works →