ISO 9001

ISO 9001 does not describe how to build a good product. It describes how an organisation has to run itself so that quality is produced on purpose rather than by chance: defined processes, documented information, competent people, measured results, and a loop that acts on what the measurements show.

The 2015 edition organises those requirements into clauses 4 to 10, and two of its choices shape daily practice more than the rest. Risk-based thinking replaced the old separate requirement for preventive action, so risks and opportunities are now handled in clause 6.1. And the standard asks for evidence that the system runs, not for a binder: records of what was decided, by whom, on what basis.

Certification is issued by an independent body after an audit, and it covers the management system, not the products. That distinction matters in refurbishment, where a customer asking for ISO 9001 is asking whether your process is under control, and a customer asking for R2v3 or WEEELABEX is asking something narrower about how you handle equipment and data.

For a repair operation the practical test is simple: can you show, for a device or a batch picked at random, what was done, who was competent to do it, which procedure applied at the time, and what happened when it went wrong. Operations that hold that evidence in spreadsheets usually pass the first audit and struggle with the third.