# ISO 9001 and ISO 27001 Audit Readiness Software Source: https://nerix.ai/product/audits Product, Checks, Early access # Audit readiness from the files you already have. Pick the standards and laws you need to show from a library of about 90, and nerix looks through your documents and records for the evidence. Checks, what quality standards call internal audits, run on a plan, and every issue becomes a task with an owner and a date. Early access. Start free Pricing The free plan is one seat and 3,000 credits a month, never charged. **Fig. 1** A readiness check in the example workspace: three frameworks picked from the library and the laws added with them, five in all, with the count of each result. The company and its results are invented. 01 Get ready ## Pick a framework. The laws it needs come with it. Get ready for a check starts from a library of about 90 frameworks: certifications, laws, sector frameworks and standards such as ISO 9001, ISO 27001, ISO 14001, ISO 45001, GDPR, NIS2 and the EU AI Act, plus packs for sectors. They are grouped by family and sector, with search. Picking one adds the laws it requires, locked while they apply, each saying what requires it. A law that does not apply to you says why, and a fact nerix does not have yet becomes a short question. A locked law can be set Not applicable only with a reason, which is kept with your name. The price is open and shown before you start: 1,200 credits (about €0.12) per requirement checked, plus 1,534 credits (about €0.15) the first time each document is read. **Fig. 2** The library in the example workspace, grouped by family, with ISO 9001 ticked and the number of requirements beside each framework. 02 Results ## Evidence found, or a plain answer that it is not there. nerix reads your documents and records against each requirement and labels it Evidence found, Partly found, Not found or Can't tell. A requirement counts as found only with evidence, and a document that only mentions it counts as partly found. A person confirms or changes every result, and Make a plan of actions turns the gaps into tasks due before the date of the check. For paid standards such as ISO you see the clause number and our own guidance on what to look for; the full text comes from your own copy. The page says what it is: readiness information, not an audit or legal advice. What nerix does here - Read your documents and records against each requirement, and link the evidence it found. - Turn the gaps into a plan of tasks, due before the check. - Evidence found A document or record shows the requirement is met, and the result opens it. - Partly found Some of what the requirement asks for is shown, not all of it. - Not found Nothing in the workspace shows it yet. This is a gap to close. - Can't tell There is not enough to judge either way yet. 03 Plan ## One calendar for what is due, and who owns it. The plan says what is checked, how often and by whom: yearly, every quarter, every month or every week. A few days before a date the check or review opens on its own, with its questions filled in from a starting template. Eight templates are ready: a yearly internal check for ISO 9001 or ISO 27001, a supplier check, a process check, a workplace safety walk, a weekly housekeeping (5S) check, a GDPR records review and the yearly business review. **Fig. 4** The plan: what is due next, what is ready to hold, and the supplier check with its owner. 04 Check ## Go through the questions, say what you saw. Each question has the evidence asked for. Choose Conforms, Minor issue, Major issue, Observation or Not applicable, and write what you saw. An issue needs a note, and a Not applicable needs a reason. Add a link to the evidence that shows it. When every point has a result the check is reported, with a summary line you can read at a glance. After that only an owner or an admin can change a result. **Fig. 5** The check with its questions, each with a result and a note. 05 Issues ## Every issue becomes a task with an owner. A minor or major issue, or an observation, opens an issue with a number. Its corrective action is a task in Work, with an owner and a due date that follow how serious it is. An owner or the person who ran the check closes the issue after checking that the fix worked. If a result is changed later, the issue follows it, so the list never keeps an issue that was withdrawn. **Fig. 6** The issues list, each with its severity, its status and its linked task. 06 Business review ## The business review prepares itself from your own records. The agenda follows the standard order. Press Gather and nerix collects the inputs for the period from the workspace: actions, issues, checks, work finished and late, customer requests, survey results, risks and documents. Nothing is guessed: a part nobody can fill says so. Record each decision, improvement or resource need as you meet. An action with an owner or a date becomes a task. Ask the assistant to read the figures when you want a short reading. What nerix does here - Read the gathered figures and write a short reading, when you ask for it. **Fig. 7** A business review with its attendees, its agenda and the figures gathered from the workspace. Other standards ## Readiness by standard One page for each standard people ask about, with what nerix checks for it and what it does not. - [ISO 9001 quality management](https://nerix.ai/product/audits/iso-9001) - [ISO 27001 information security](https://nerix.ai/product/audits/iso-27001) - [ISO 14001 environmental management](https://nerix.ai/product/audits/iso-14001) - [ISO 45001 health and safety](https://nerix.ai/product/audits/iso-45001) - [GDPR data protection](https://nerix.ai/product/audits/gdpr) - [NIS2 cyber security](https://nerix.ai/product/audits/nis2) - [EU AI Act](https://nerix.ai/product/audits/eu-ai-act) - [HKZ care certification](https://nerix.ai/product/audits/hkz) 07 Questions ## Questions Is this finished? + It is early access. The plan, checks, issues, business reviews and getting ready for a check work in the app today. It is new, so some things are still missing. Tell us what you need. Does nerix replace our auditor? + No. It keeps the work organised: the plan, the evidence, the issues and the actions. The judgement on what you saw is yours, and for a certificate an accredited body still audits you. Can nerix say a requirement is met? + Only with evidence. If nothing in your workspace shows a requirement, it is marked Not found or Can't tell, and a person confirms or changes every result. It is readiness information, not an audit or legal advice. Which standards and laws are included? + A library of about 90 frameworks: certifications, laws, sector frameworks and standards, including ISO 9001, ISO 14001, ISO 27001, ISO 45001, GDPR, NIS2 and the EU AI Act, plus packs for sectors. You can also write a list of your own. Do you include the text of ISO standards? + No. For paid standards such as ISO, nerix shows the clause number and its own guidance on what to look for, and the full text comes from your own copy. Laws come in full, with a link to the official text. What does a readiness check cost? + 1,200 credits per requirement checked, plus 1,534 credits the first time each document is read. The total is shown before you start, and both rates are on the pricing page. What happens to an issue? + It gets a number and a task in Work with an owner and a due date. When the fix is done, an owner or the person who ran the check looks at it and closes the issue. Can you add a kind of check we need? + Yes. We build custom features and connectors for businesses. Tell us on the Built for you page. Need something this does not do? We build it into your workspace. [Built for you](https://nerix.ai/product/custom) Keep reading ## The rest of nerix, and the plans. Start free Talk to us - [01 Chat Ask across everything you own, with every sentence sourced.](https://nerix.ai/product/chat) - [02 Team chat Team chat in spaces and topics, where a message can become a task.](https://nerix.ai/product/spaces) - [03 Tasks and projects Tasks, cases and projects as a list, a board, a table or a calendar.](https://nerix.ai/product/work) - [04 Help desk A help desk with queues, macros, a portal and response targets.](https://nerix.ai/product/desk) - [05 Meetings Agenda, live notes, minutes and action items, filed as tasks.](https://nerix.ai/product/meetings) - [06 Built for you Features, connectors and workflows we build into your workspace.](https://nerix.ai/product/custom) - [07 Feedback Feedback: reviews, 360 feedback and surveys, sent by link, with anonymity that holds.](https://nerix.ai/product/evaluations) - [08 Demos Everything you can try or watch: the example workspace, samples, templates and a free chat.](https://nerix.ai/demos) - [09 Pricing Plans and credits, in euros, monthly or yearly.](https://nerix.ai/pricing) ## Learn more ### Learn more - [How to Run a Check in nerix](https://nerix.ai/help/run-a-check) ### Templates for this - [Near miss report](https://nerix.ai/templates/near-miss-report) - [Equipment inspection checklist](https://nerix.ai/templates/equipment-inspection-checklist) - [Fire drill record](https://nerix.ai/templates/fire-drill-record) - [Operations and quality](https://nerix.ai/templates/operations-quality) ## Keep reading - Quality and audits GDPR [Quality and audits](https://nerix.ai/blog/category/quality-and-audits) November 1, 2026 7 min read ### [GDPR checklist for small businesses](https://nerix.ai/blog/gdpr-checklist-for-small-businesses) A GDPR checklist for small businesses, article by article. Lawful basis, privacy notice, processors, security, 72 hour breach reports and data subject requests. Read the guide - Quality and audits hkz [Quality and audits](https://nerix.ai/blog/category/quality-and-audits) November 1, 2026 7 min read ### [HKZ certification guide for care organisations](https://nerix.ai/blog/hkz-certification-guide) HKZ certification for Dutch care and welfare providers. What the HKZ norms are, how they relate to ISO 9001, the audit cycle and a readiness checklist. Read the guide - Quality and audits iso [Quality and audits](https://nerix.ai/blog/category/quality-and-audits) November 1, 2026 7 min read ### [ISO 27001 for small teams, a 90 day plan](https://nerix.ai/blog/iso-27001-for-small-teams) ISO 27001 for small teams in plain steps. Who does what, how to scope it, a 90 day plan to audit readiness, what to skip and how certification works. Read the guide