EHSync ISO
The management system for the standards you hold.
One organisation. Activate the standards you hold, or are working towards. The clause register, the documents, and the improvement record stay together.
Launching March 2027
EHSync ISO goes live in March 2027, with the other EHSync apps.
Who it is for
The person who has to show the record.
The management-system lead
Quality, environment, health and safety, or information security. The person who has to show the record.
An integrated system
Several standards on one organisation. Turn on the ones you hold. The rest stay off.
A laboratory or inspection body
The UKAS standards are on the same register. The app does not award accreditation.
Working towards certification
Turn on the standard you are working towards. The register shows what is still a gap. EHSync ISO goes live in March 2027.
The benefit
You can see the gaps before the auditor does.
Activate only what you hold
Twenty-one standards sit in the catalogue. You turn on the ones you hold, or are working towards.
Each clause has a state
A clause is not started, a gap, in progress, or evidenced. Readiness is the share that is evidenced. ISO 31000 stays as guidance beside that score.
The improvement record stays
An audit finding is written down. It becomes a numbered nonconformity only when you raise one. Closing it does not delete it.
Ready when someone asks
Home shows readiness, open nonconformities, documents, and the next surveillance date. The register is what the auditor reads.
What it is
The record for the standards you hold.
EHSync ISO is the management system for one organisation. You turn on the standards you hold, or are working towards. The same register covers the clauses, the documents, the training, the audits, the nonconformities, the objectives, and the management review.
The home page shows how much of the clause register is evidenced, how many nonconformities are still open, and what is due. A reminder does not change the record.
The register holds the clauses, the documents, the audits, and the nonconformities the auditor reads. Certification and UKAS accreditation stay with those bodies.
How it works
From a new organisation to the visit.
01
Open the organisation
Your organisation is opened on the shared EHSync account. EHSync ISO goes live in March 2027.
02
Activate the standards
Turn on the ones you hold. A standard that is off has no clauses on the register.
03
Evidence the clauses
Each one is not started, a gap, in progress, or evidenced. Readiness is that share. ISO 31000 stays out of the score.
04
Keep the other records
Documents, training, audits, numbered nonconformities, objectives, and the management review.
05
Read it before the visit
Home shows readiness, open nonconformities, documents, the next surveillance date, and what needs attention.
Features
What is on the organisation.
The signed-in workspace. Each part stays on the organisation.
Home
Clause readiness, open nonconformities, the document count, and the next surveillance date. It also lists what needs attention.
Standards
Twenty-one live standards. Activate only the ones this organisation holds. A standard that is off has no clauses on the register.
Documents
Policies, procedures, and records. A draft stays a draft until it is approved. The review date is on the register.
Training
Who was told, who trained them, and when they acknowledged it. It is not a certificate, and it does not mark a clause evidenced.
Audits
Planned against a standard you have switched on. A finding is recorded on the audit. It is not itself a nonconformity.
Nonconformities
Each NCR keeps its number, the source, and the corrective action. Closing it does not delete the record.
Risks
A risk register for the organisation, by site. Each risk has an owner, its controls, and a review date. The score is likelihood times impact, before and after the controls.
Management review
Leadership records what they considered and what they decided. Writing the review does not close a gap or an NCR.
Objectives
A measurable target, a date, and the result you measured.
The register
Open a part of the record.
- Document controlPolicies, procedures, and records on the register. A draft stays a draft until it is approved. The review date is on the record.
- Clause complianceEvery clause for the standards you have switched on. Status is not started, a gap, in progress, or evidenced.
- Training and acknowledgementWho was told, who trained them, and the date they acknowledged it. This is not a certificate, and it does not mark a clause as evidenced.
- Internal audits and nonconformitiesPlan the audits against a standard you have switched on. A finding is recorded on the audit. It becomes an NCR only when you raise one.
- Management review and objectivesLeadership records what they considered and what they decided. Writing the review does not close a gap or a nonconformity.
The standards
Twenty-one standards. Activate the ones you hold.
- ISO 9001:2026ISO 9001Quality management for how the organisation delivers its work. The published standard is ISO 9001:2026, issued on 16 September 2026. Organisations certified to ISO 9001:2015 can continue to use that edition until the transition end date of 30 September 2029.
- ISO 14001:2026ISO 14001Environmental management for aspects, obligations, and planned change. The published standard is ISO 14001:2026, issued on 15 April 2026. Certificates to ISO 14001:2015 remain valid until 30 April 2029.
- 2018 edition plus Amendment 1:2024ISO 45001Occupational health and safety for workers and other interested parties. The current standard is still ISO 45001:2018, including Amendment 1:2024 (climate action changes). A revised edition is under development (ISO/DIS 45001; vote closed 9 September 2026) and is expected in 2027. It has not been published and does not yet start a certification transition.
- 2022 editionISO/IEC 27001Information security, including the 93 Annex A controls and the 2024 climate amendment. A statement of applicability is part of the register.
- 2019 editionISO 22301Business continuity for the 2019 edition, including the 2024 climate amendment. The impact analysis, plans, and exercises are on the register.
- 2023 editionISO/IEC 42001AI management for the 2023 edition. The 38 Annex A controls and the impact assessment are on the register.
- 2018 editionISO 50001Energy management for the 2018 edition, including the 2024 climate amendment. The energy review, indicators, and baseline are on the register.
- 2012 editionISO 39001Road traffic safety for the 2012 edition, including the 2024 climate amendment. Clause numbers follow ISO 39001, including the clause on crash investigation.
- 2018 editionISO 31000Risk management guidance from the 2018 edition. This is a maturity record. It is not part of the certification readiness score.
- 2024 editionISO 55001Asset management on the 2024 edition, which replaces 2014. ISO 55000 and ISO 55002 are guidance and are not assessed.
- 2025 editionISO 37001Anti-bribery management on the 2025 edition. Certificates to the 2016 edition stop being valid after 28 February 2027.
- 2016 editionISO 13485Medical devices quality management for regulatory purposes. The published edition is still 2016. This register is not an FDA or MDR submission.
- 2018 editionISO 22000Food safety management. The 2024 climate amendment is in the checks. A draft revision is not assessed.
Conformity assessment
Laboratories and inspection bodies.
UKAS assesses these bodies. EHSync does not award accreditation.
- 2017 editionISO/IEC 17025Testing and calibration laboratories. UKAS assesses laboratories against the 2017 edition. EHSync does not award accreditation.
- 2022 editionISO 15189Medical laboratories, including duties to the patient. UKAS assesses laboratories against the 2022 edition. EHSync does not award accreditation.
- ISO/IEC 17020:2026ISO/IEC 17020Inspection bodies on the published ISO/IEC 17020:2026. UKAS accreditations to the 2012 edition stop being valid on 27 March 2029.
- 2015 editionISO/IEC 17021-1Bodies that audit and certify management systems. This register is the certification body's own system, not its client's.
- ISO/IEC 17024:2026ISO/IEC 17024Bodies that certify people. The published standard is ISO/IEC 17024:2026 (31 March 2026). UKAS accreditations to the 2012 edition remain valid until 31 March 2029. EHSync does not award accreditation.
- 2012 editionISO/IEC 17065Bodies that certify products, processes, and services. EHSync does not award accreditation.
- 2023 editionISO/IEC 17043Proficiency testing providers. UKAS assesses providers against the 2023 edition. EHSync does not award accreditation.
- 2016 editionISO 17034Reference material producers. UKAS assesses producers against the 2016 edition. EHSync does not award accreditation.
Related
Launching March 2027
All EHSync apps go live in March 2027. Register your interest and we will email you about the March 2027 launch.