Compliance and audit
Walk into the audit already assembled.
MaintenanceIQ compliance turns the maintenance work your plant already records into evidence packs mapped to VDA 6.3, IATF 16949, FSSC 22000 and ISO 55001. It helps your quality head see the gaps before the auditor does and hand over a frozen, signed record instead of a week of digging.
Audit day · Quality head · Illustrative
The evidence was collected while the work was done.
An illustrative audit day. The auditor asks how your plant knows its critical pumps are maintained. Your quality head opens MaintenanceIQ and filters to A-criticality assets. Pump P-07 is in the asset register. Its PMs are in PM compliance. The bearing change your technician closed at 11:00 one morning last spring is in the work order history, and its checklist run, with the photo and the before and after readings, is in the checklist records. The certificate for gauge CAL-04, used to take those readings, was uploaded to its calibration record and sits in the calibration log.
Nobody spent the week before pulling binders, chasing inboxes or retyping records. The work was recorded once, when it was done, and the evidence pack simply gathers it.
P-07 and CAL-04 are illustrative. The pack, its sections and its controls are the real product.
- Every row carries who, when and status
- Filtered by date, factory, department, criticality and section
- Generated in one step by an admin or manager
What is in the pack
Six sections that answer the auditor's first questions.
Every evidence pack starts from the same six sections, whatever standard you are audited against.
- 01
Asset register
The machines in scope, with their location, criticality and status.
- 02
PM compliance
Which planned maintenance was due, and when it was done.
- 03
Calibration log
Instrument schedules, results and uploaded certificates.
- 04
Work order history
The jobs done, by whom and when.
- 05
Breakdowns to closure
Each breakdown traced through its corrective action to closure.
- 06
Checklist records
The frozen checklist runs, with readings, photos and files.
Standard packs
Mapped to the standard you are audited against.
Standard packs label the sections by the clauses of the standard you choose, so your auditor reads the evidence in the order they think. Packs are available for VDA 6.3 and IATF 16949, for FSSC 22000, and for ISO 55001 asset management. Each standard pack is licensed separately, and a new one is added as configuration on the same engine.
On the Food package, the FSSC 22000 pack adds food safety sections and a lot traceability and recall section fed by food lot traceability.
- VDA 6.3 and IATF 16949
- FSSC 22000, with food safety and traceability sections on the Food package
- ISO 55001 asset management
- Clause-labeled sections
Before the auditor
Find the gaps while there is still time to close them.
The worst time to discover a missing calibration certificate is in front of the auditor. Before you generate a pack, a live scorecard shows how ready each section is. Each standard pack then carries a compliance gaps summary and a readiness score, so your quality head can see what is missing, assign the work and close it before audit day.
This is evidence, not a verdict. MaintenanceIQ gives your auditor the records they ask for. It does not certify your site. Certification comes from your certification body.
- A live scorecard before generation
- A compliance gaps summary in each standard pack
- A readiness score
Trust in the record
A record that cannot be changed after the fact.
An auditor needs to trust that the evidence was not tidied up the night before. When a pack is generated it is frozen as an immutable record, kept in private storage and downloaded through a short-lived signed URL. Every write in MaintenanceIQ goes into an audit log, and a work order removed from the working views, which always needs a reason, still appears in the evidence pack and the audit log.
If your process needs it, a pack can be signed electronically when it is generated. The signature records the named signer, bound to their account, the timestamp and the meaning of the signature, and it is printed as a signature block on the PDF. These are the signer, timestamp and meaning elements that 21 CFR Part 11 describes. Signing is optional.
- Immutable packs in private storage
- Download through short-lived signed URLs
- Audit log on every write
- Optional e-signature with signer, timestamp and meaning
Guides for audit preparation
- VDA 6.3 process audit checklistWhat a maintenance team is typically asked to show.
- IATF 16949 maintenance evidenceThe maintenance records a quality auditor typically asks to see.
- Traceability by standardOne map of what ISO 55001, VDA 6.3, IATF and FSSC ask of equipment evidence.
- ISO 55001 asset management evidenceThe records that support an asset management system.
- 21 CFR Part 11 electronic signaturesSigner, timestamp, meaning and the audit trail.
- Calibration management softwareUploaded certificates and schedules that feed the calibration log.
Frequently asked questions
Which standards are evidence packs available for?
VDA 6.3, IATF 16949, FSSC 22000 and ISO 55001. Each pack is licensed separately and uses clause-labeled sections, a compliance gaps summary and a readiness score.
Does MaintenanceIQ certify our site?
No. It keeps the records and builds the evidence your auditor asks for. Certification comes from your certification body.
Can an evidence pack be edited after it is generated?
No. Each pack is frozen as an immutable record in private storage and downloaded through a short-lived signed URL. To show newer work, you generate a new pack.
Is the electronic signature required?
No, it is optional. When used, it records the named signer, the timestamp and the meaning of the signature, and prints a signature block on the PDF.