Documentation
ISO-aligned documentation for ISO 9001, 14001 and 45001, held in one system rather than three sets of folders.
ISOcore: an integrated management system for ISO 9001, 14001 and 45001
ISOcore is an integrated management system platform built by the Arke Technologies team for compliance-driven organisations. It brings ISO 9001 quality, ISO 14001 environmental and ISO 45001 occupational health and safety documentation, non-conformance management, corrective actions and audit scheduling into one system, built on Next.js and Cloud SQL on Google Cloud.
What is an integrated management system?
An integrated management system (IMS) is one set of policies, processes, documents and records that meets the requirements of several management system standards at once. The usual combination is ISO 9001 for quality, ISO 14001 for environmental management and ISO 45001 for occupational health and safety, often called an ISO integrated management system or a QHSE system. Instead of three manuals, three audit programmes and three registers of findings, the organisation runs one.
Integration works because the ISO management system standards share a common high-level structure, set out in Annex SL and since 2021 called the harmonised structure: context of the organisation, leadership, planning, support, operation, performance evaluation and improvement. Document control, internal audit, management review and corrective action can be done once, with each standard's specific requirements added on top. Where quality is the anchor and the other standards build on it, the result is often called an integrated quality management system.
What ISOcore does
ISOcore puts the core records of an ISO integrated management system into one platform.
Non-conformance management
Non-conformances recorded and tracked in one place, whichever standard they fall under.
Corrective actions
Actions raised against findings and followed through to closure.
Audit scheduling
Audits planned and scheduled across the standards, so the audit programme sits in the same system as the findings.
How we built ISOcore
ISOcore is built on Next.js, with its data in Cloud SQL on Google Cloud. A relational database suits a management system because its records are linked: a non-conformance leads to a corrective action, and both feed the next audit and management review. A web application means auditors, process owners and managers work from the same records without installing anything.
The same team delivers our custom software development and SaaS product development work: requirements are taken from the standards and from the people who will use the system, and the documentation stays with the owner.
Choosing integrated management system software
Whether you buy a product or have one built, test integrated management system software against these points:
- The standards you hold now and next. ISO 9001, 14001 and 45001 today; ISO/IEC 27001 if information security joins, which our ISO 27001 readiness service prepares for.
- Document control. Versions, approvals and one clear current copy of every controlled document.
- Traceability. Each non-conformance linked to its cause, its corrective action and the evidence that closed it.
- Audit programme. Internal and certification audits scheduled, with findings recorded against the right standard.
- Audit trail. Who changed what, and when, for every record an auditor may ask about.
- Personal information. Health and safety incident records can hold employees' health information, which POPIA treats as special personal information, so access must be restricted and logged.
- Ownership and exit. Your data, credentials and documentation stay yours, with an export you can use without the vendor.
Governance, procurement and exit
If we build integrated management system software for you, this is how the engagement is governed.
- Scope and change control. The proposal fixes scope, the delivery plan and sign-off points; anything outside scope goes through change control, and you review working software at agreed points.
- Support and reporting. After launch, support runs under a service-level agreement: incidents are prioritised on a P1 to P4 scale against response and resolution targets agreed in your SLA, with a monthly service review and report.
- Procurement. Arke Technologies (Pty) Ltd is a Level 1 B-BBEE contributor, which gives buyers 135% procurement recognition (sworn affidavit available on request). Company documents, our CSD supplier number and SARS tax compliance status are available on request, and we complete SBD forms when a bid requires them. See company facts.
- Exit. At the end of a contract we hand over the credentials, documentation and runbooks another team needs to keep the system running.
Where ISOcore fits in our work
ISOcore sits beside ESGnet, the ESG reporting platform we built, and our IT governance, risk and compliance work for boards reporting under King IV Principle 12. Mining, manufacturing and industrial organisations commonly hold several of these standards at once; see IT for mining, manufacturing and industrial operations. For information security, our guide to ISO 27001 certification covers cost, time and steps.
Other work from our team includes AtlasOS at Evolv Accountants (visit the AtlasOS site (opens atlaspractice.app)) and the Server Hub commerce and quoting platform. See all of our work.
