ISO-COMPLIANCE ANALYSIS
How Business Online meets the requirements of ISO 9001, 14001 and 45001
We've gone through all three standards, clause by clause, and mapped out what the platform solves directly, what is covered by documents, and where the gaps are.
What are ISO 9001, 14001 and 45001?
ISO 9001 is the standard for quality management. It sets requirements for processes, document management, deviation management and continuous improvement. It is the most widespread ISO standard in Norway, and often the first standard that companies certify to.
ISO 14001 is about environmental management. It requires the company to map environmental aspects, monitor environmental impact and work systematically to prevent pollution and improve environmental performance. ISO 45001 relates to the working environment and HSE, with requirements for hazard identification, risk assessment and employee participation.
All three are based on the PDCA cycle (plan, do, check, improve) and follow the same basic structure (clauses 4 to 10). This means that they can be operated in one common management system. This is where Business Online comes in.
Why map ISO compliance in a quality system?
Many growing companies approach ISO certification with a mixture of ambition and uncertainty. They know that customers demand it, that tenders require it, and that auditors will come anyway. But they don't always know what they already have in place and what's missing.
Many of our customers are ISO certified to 9001, 14001 or 45001. We wanted to understand exactly what the platform actually covers. Not what we think, but what is in the standard and what is solved in the product.
The result is this analysis: a review of all the requirements in three ISO standards, assessed against the functionality of Business Online. No vague claims that «we support ISO». Concrete answers, clause by clause.
How much of the ISO requirements does Business Online cover?
| Standard | Directly in BO | Via documents | Not covered |
|---|---|---|---|
| ISO 9001:2015 (Quality) | ~50 % | ~40 % | ~10 % |
| ISO 14001:2015 (Environment) | ~30 % | ~55 % | ~15 % |
| ISO 45001:2018 (Working environment) | ~35 % | ~50 % | ~15 % |
Directly in BO means that the functionality is built into the platform. Via documents means that the requirement can be solved by storing documents in QDMS, such as policies, context analyses and objectives. Not covered are requirements that fall outside a digital management system, such as the calibration of physical measuring equipment.
The figures are based on a review of all «shall» requirements (normative requirements) in each standard, assessed against functions in the platform. A requirement is counted as «directly in BO» when the platform has built-in functionality that covers the requirement, and «via documents» when the requirement can be fulfilled by storing governing documents in QDMS. The full clause-by-clause review is available upon request.
ISO 9001 has the highest direct coverage because the standard deals with processes, document management and deviation management. These are the areas where Business Online is strongest. ISO 14001 and 45001 have lower direct coverage because they contain environmental and working environment-specific requirements that require separate registers.
Requirements related to management buy-in (clause 5.1), policy (5.2) and roles and responsibilities (5.3) fall into the «via documents» category. These are requirements that all three standards set, and which are solved with governing documents in QDMS, not with built-in functionality.
Which ISO requirements does Business Online cover directly?
Six features in Business Online directly support ISO compliance. These form the foundation of the platform.
Clause 7.5
QDMS (document management)
Version control, approval flow, distribution and access management. When the auditor asks who approved a document, you have the answer. With date, name and version number. Read more about the KHMS module
Clause 10.2
Deviation management
The entire process from registration to closure: investigation, action, approval. With root cause analysis and deadlines. The auditor sees not only that deviations are registered, but that the organisation learns from them.
Clause 6.1
Risk management (Bow-Tie)
Bow-Tie diagrams and risk matrix with action tracking. Threats, barriers and consequences visualised in one image, linked to projects, processes and deviations.
Clause 4.4
BPM (process map)
Visual process designer with document linking. Procedures that employees actually see and use, instead of documents buried in folders no one opens.
Clause 8.1
QCP (quality control plan)
Checklists and workflows that describe what needs to be done, when and how. The procedures are laid out as concrete steps in the project, so that the quality system is used in practice. Read more about the project module
Clause 8.4 (ISO 9001)
Supplier management (CRM)
Evaluation, approval and deviation linking for suppliers. Traceable follow-up of external deliveries. Clause 8.4 on the management of externally manufactured products and services is an ISO 9001 requirement, but also relevant for supplier follow-up in 14001 and 45001. Read more about the CRM module
Want to see what this looks like in practice?
Lie Blikk received three ISO certifications at the same time as they introduced Business Online. The quality control plans were what tied the system together.
What is not directly covered in the platform?
Not everything is solved directly in the platform. Some ISO requirements are currently covered by documents in QDMS, typically Excel sheets, Word templates or PDFs. It works, but it's not as traceable or efficient as inbuilt functionality.
The most important gaps affect all three standards:
| Area of interest | ISO clause | Affects | Today's solution |
|---|---|---|---|
| Internal audit | 9.2 | All 3 standards | Excel and paper checklists |
| Target overview | 6.2 | All 3 standards | Word or Excel in QDMS |
| Competence matrix | 7.2 | All 3 standards | Certificate tracking exists, but lacks link between role and requirements |
| Contingency plan | 8.2 | 14001 + 45001 | PDF in QDMS |
| Environmental aspect register | 6.1.2 | 14001 | Excel outside BO |
| Legal requirements register | 6.1.3 | 14001 + 45001 | Document list in QDMS |
| Management review | 9.3 | All 3 standards | Manual collation |
No single platform covers all ISO requirements. What is not covered is either subject-specific (environmental aspect register, contingency plan) or something the organisation must do itself (management support, internal audit). Internal auditing (9.2) is worth noting because it is an absolute requirement for certification, and something the auditor always checks early on. These areas are solved today with documents in QDMS, and it gives the auditor what is needed.
Three areas where Business Online AI is already helping
Business Online is connected to Claude and Microsoft Copilot. In practice, this means that you can ask questions about your quality data and get answers from what is actually in the system. You can also request actions, such as creating a deviation or adding a task.
For three of the areas in the table above, this is already making a difference:
Management review (9.3): ISO requires management to regularly review the management system with fixed input data. Instead of putting it together manually, you can ask Claude: «Give me an overview of open nonconformities, actions approaching deadline and changes in the risk picture last quarter.» The basis that usually takes hours to put together is ready in minutes. It's still up to management to assess and decide.
Internal audit (9.2): Claude does not do the actual audit, but prepares the foundation. «Which documents in QDMS have not been reviewed last year?» «Are there deviations that have been closed without root cause analysis?» Such questions take seconds instead of hours.
Target overview (6.2): Quality goals should be followed up with numbers. Ask Copilot: «How long is the average processing time for deviations in the first quarter?» or «How many deviations are closed within the deadline?» The figures come straight from Business Online.
How Lie Blikk and Soiltech use the quality system
Lie Blikk took ISO 9001, 14001 and 45001 at the same time as they introduced Business Online. They used the quality control plans to tie the procedures directly into the projects, so that the quality system became part of everyday work. Not a parallel document system that lives its own life. Read the full story about Lie Blikk
Soiltech had the structure in place before its growth took off. When they went public in 2024, the management system was put to the test with high demands on documentation tracking and internal control. It held up. Read the full story about Soiltech
Both had the same starting point: they needed one place for quality, projects and documentation. Not three systems that don't talk to each other.
Do I need a quality system for ISO certification?
You don't need a digital quality system to be certified. But you do need document management, deviation management, risk management and traceability. The question is whether you want to build it in folders and spreadsheets, or in a system that already covers the heaviest requirements.
Frequently asked questions about ISO and quality systems
What is the difference between ISO 9001, 14001 and 45001?
ISO 9001 is about quality management: processes, document management and continuous improvement. ISO 14001 is about environmental management: environmental aspects, impact and prevention of pollution. ISO 45001 is about the working environment: hazard identification, risk assessment and HSE. All three follow the same basic structure (clauses 4 to 10) and can be operated in one common management system.
Do I need a consultant to become ISO certified?
It depends on internal expertise. A quality system that covers document management, deviation management and risk management makes a lot of the groundwork easier, but you still need to understand the requirements of the standard and adapt them to your organisation. This involves context analysis, risk assessment, policies and management buy-in. Some manage this with in-house expertise, others benefit from counselling. The platform does not replace the understanding of the standard, but provides a structure so that the work does not have to be done again.
Can Business Online replace our entire quality system?
Business Online covers around half of the ISO 9001 requirements directly in the platform, including document management, deviation management, risk management and process maps. The rest, such as policies, context analyses and objectives, are stored as documents in QDMS. Some requirements, such as the calibration of physical equipment, fall outside the scope of a digital system.
What is QDMS?
QDMS stands for Quality Document Management System. It is the document management module in Business Online. It provides version control, approval flow with full history, distribution and access management. QDMS replaces ordinary file-shared folders with controlled document management where you always know which version applies and who approved it.
Can we take all three certifications at the same time?
Yes, they do. ISO 9001, 14001 and 45001 share the same basic structure, so much of the work is reused across them. Lie Blikk did all three at the same time as they introduced Business Online. "The advantage of doing everything at once is that you get one coherent system instead of building on it afterwards.
What sets Business Online apart from other quality systems?
Business Online combines quality management with CRM, project management and HR in one platform built on Microsoft 365. Pure quality systems such as EQS or Landax cover KHMS well, but require separate solutions for the rest. With Business Online, non-conformances, projects and customers have one common data source.
See how the quality system works
We'll show you how Business Online meets ISO requirements, with your processes and documents. 30 minutes, no obligation.