ISO 9001:2026 for Companies Under 20 People

By Ishan Maharaj, Founder and Principal Consultant. Last reviewed 26 October 2026.

Short answer: a company with fewer than 20 people can meet ISO 9001:2026 with a short, proportionate system run by one named person. The standard is the same for every size, but audit time scales with headcount: the IAF table gives 1.5 to 3 days for the initial certification audit between 1 and 25 people. If you already hold an ISO 9001:2015 certificate, the transition must be completed by 30 September 2029. Start with a gap assessment, delete what you do not do, and book expert time only where you are stuck.

Does ISO 9001:2026 apply to a small company?

Yes. ISO 9001 applies to any size of organisation, and ISO published the 2026 edition on 16 September 2026. According to ISO, the edition emphasises quality culture and leadership, and separates risks from opportunities. SGS adds that planned changes get more attention and that awareness now covers quality culture and ethical conduct. Climate change considerations carry over from earlier amendments. None of this needs a large team; it needs evidence that the owner has thought about it.

How much audit time will a small company be charged for?

Starting values from IAF MD 5, Table QMS 1 (2013 edition, as published by a national accreditation body), for the initial audit, Stage 1 plus Stage 2:

Effective number of personnel	Initial audit (days)
1 to 5	1.5
6 to 10	2
11 to 15	2.5
16 to 25	3

MD 5 treats these as starting points. A very small site, a mature management system or client preparedness can reduce the time, but any reduction may not exceed 30%. Surveillance audits total about a third of the initial time each year and are unlikely to be shorter than one day. Cost details are on ISO 9001 consultant cost.

What should a small company write down?

Write down only what helps your people do the work and what you must be able to show an auditor. A workable minimum for a company under 20:

A one-page process map: how an order becomes delivered work, with an owner for each step.
A quality policy and a few measurable objectives that the owner reviews monthly.
A short list of procedures for the things that go wrong: nonconformities and corrective action, supplier approval, calibration if you measure, and internal audit.
A risk and opportunity register with separate columns for each, as the 2026 edition separates them.
A simple change log for planned changes such as a new system, supplier or site.
A management review at planned intervals, with minutes.

The Complete QMS Documentation Kit ($349) provides editable versions; delete what does not apply to you. The Risk & Opportunity Register and Change Management Procedure are available separately.

Which route fits a team of 5 to 20?

Your situation	Start with
First certification, one person can lead	Gap Analysis Workbook ($49), then the Complete QMS Documentation Kit ($349).
Certified to ISO 9001:2015	Transition Starter Bundle ($99) or Transition Toolkit ($199).
Nobody has time, audit within months	Remote gap assessment from $1,250, or advisory hours at $125 (two-hour minimum). See ISO 9001 consultant.
Templates done, want a second pair of eyes	Fixed-scope document review.

Worked example: a 12-person company, one part-time quality owner

Weeks 1 to 2: complete the gap analysis workbook and list what exists (policies, supplier list, complaint log).
Weeks 3 to 8: adapt the templates to the real process. Remove sections for activities you do not perform and record the reason.
Weeks 9 to 12: run a first internal audit, hold a management review and close the findings.
Then: ask the certification body for its audit days in writing. At 12 people, the starting value is 2.5 days.

The timing is illustrative; yours depends on the owner's availability. Two documented systems show the approach: a logistics QMS built on SharePoint and an ISO 13485 system. Small teams can run the system in tools they already pay for; see the SharePoint QMS guides.

Frequently asked questions

Do I need a full-time quality manager?

No. Someone must own the system and have time to run audits and reviews, but this can be part of another role.

When must I move from ISO 9001:2015?

Under Global ACI TECH-3-TR, no new 2015 certifications are issued after 31 March 2028, and 2015 certificates are invalid from 30 September 2029. Ask your certification body for your own date.

Will the transition add audit days?

Possibly. The certification body decides and must justify extra time; Global ACI sets no fixed number.

Can a consultant guarantee certification?

No. The decision belongs to the certification body. See templates versus a consultant.

Next step

Book a free 30-minute scoping call or start with the transition guide.

Sources

This page describes requirements in our own words and does not reproduce ISO 9001. Check requirements against your own licensed copy of the standard.

Online course

ISO 9001:2026 Foundations Course (Online, Self-Paced, Certificate of Completion)

Learn this topic properly: short lessons, worksheets with model answers, a 100% pass mark on every lesson quiz and a certificate of completion. Unlimited access for $79.

See the course All courses