ISO Compliance: QMS, Audits, NCR/CAPA & Document Control
by Odoo DevHouse https://apps.odoo.com/apps/modules/browse?author=Odoo%20DevHouse$ 750.00
ISO Compliance| ISO 9001:2015| ISO 14001| ISO 45001| NCR/CAPA
A complete ISO 9001:2015 Quality Management System inside Odoo 19 - Audits, Non-Conformances & CAPA, Document Control, Risk Register, Supplier Quality, Customer Complaints, Management Review, Equipment Calibration, and a live Compliance Dashboard - all in one native app.
Manufacturers, contractors, and service companies pursuing (or maintaining) ISO 9001 certification face a painful gap: standard Odoo has no audit module, no non-conformance report, no CAPA workflow, and no version-controlled document control outside of Enterprise's separate Quality app - which itself stops at shop-floor quality checks and doesn't manage the certification lifecycle. Teams fall back on spreadsheets, shared folders, and email threads to run their QMS.
- No Audit record - checklists, findings, and compliance rates tracked in Excel
- No Non-Conformance Report with structured root-cause analysis - "why did this happen?" answered in email threads
- No CAPA workflow - corrective actions taken but never verified effective 30 days later
- No version-controlled Document Control - the "latest" SOP is whichever file someone last emailed
- No Risk Register, Quality Objectives, or Management Review - clauses 6.1/6.2/9.3 satisfied with a slide deck nobody re-opens
- No Customer Complaint SLA tracking or self-service portal - customers email asking for status updates
This module adds a full ISO 9001:2015 quality management lifecycle (plus ISO 14001 and ISO 45001 clause libraries) as its own top-level Odoo 19 app. Plan audits against reusable checklist templates and an annual Audit Programme; generate a Non-Conformance Report with one click from a failed checklist line, walk it through structured 5-Whys root cause analysis, and raise a CAPA with an automatic 30-day effectiveness-verification reminder; control documents through a real draft -> review -> approval -> obsolete workflow with a distinct Reviewer and Approver step and per-version training acknowledgment; maintain a Risk & Opportunity Register, Quality Objectives, Supplier Evaluations, an SLA-tracked Customer Complaint log with its own customer self-service portal, and Management Review meetings that pull a live KPI snapshot automatically. Every number lands on one OWL Dashboard with a Cost-of-Quality total and a period filter. And because it's built as a small CE-safe core plus optional auto-installing bridge modules, it drops cleanly into Community or Enterprise without forcing Sales, Purchase, Inventory, Manufacturing, or the Enterprise Quality app on anyone who doesn't already have them.
- ISO 9001 / 14001 / 45001 Clause Libraries: pre-loaded standard clauses, each traceable from an audit, an NCR, or a controlled document back to the exact requirement it supports
- Audit Management: reusable checklist templates, an annual Audit Programme with a completion-rate stat button, calendar/kanban/pivot/graph views, and a Draft -> Scheduled -> In Progress -> Done workflow that blocks closing until every line is scored
- One-Click NCR Generation: a checklist line marked Non-Conformity generates a linked Non-Conformance Report without re-typing the finding, plus a popup evidence uploader per line
- Structured 5 Whys Root Cause Analysis: five dedicated fields plus a root-cause conclusion, severity classification (Minor/Major/Critical), and a Reference field linking the NCR back to the Sales Order, Purchase Order, Transfer, or Manufacturing Order it came from
- CAPA with Effectiveness Verification: Corrective/Preventive Action tasks linked to real project tasks your team already uses, a configurable-days effectiveness-check reminder, and an NCR that refuses to close until every linked CAPA is verified effective
- Cost of Quality: prevention/appraisal/internal-failure/external-failure cost tracking on both NCRs and CAPAs, rolled into a live Cost-of-Quality total on the dashboard
- Multi-Level Document Control: Draft -> Review -> Pending Approval -> Approved -> Obsolete with a distinct Reviewer and Approver, full version/revision history, per-version training acknowledgment tracking, and automatic review-date reminders
- Risk & Opportunity Register: likelihood x impact scoring with an automatic Low/Medium/High/Critical classification and treatment tasks
- Quality Objectives: target/actual/progress tracking against ISO 9001 clause 6.2, with a Draft -> In Progress -> Achieved/Missed workflow
- Supplier Quality: weighted quality/delivery/responsiveness evaluations with a rolling average score and NCR count shown as smart buttons right on the vendor's contact form
- Customer Complaints with SLA Tracking: a configurable response-time SLA, one-click escalation to a formal NCR, an automatic breach reminder, and a self-service portal page where customers can submit and track their own complaints
- Management Review: meetings that pull a live KPI snapshot straight from the dashboard aggregation with one click, plus attendee tracking and follow-up action tasks
- Equipment & Calibration Register: calibration history log, automatic next-due-date computation, and a daily overdue-calibration reminder
- Live OWL Dashboard: click-through KPI cards, an NCR trend chart, a severity breakdown, and a 1-month/3-month/6-month/12-month/all-time period filter, built with the same Chart.js pattern as Odoo's own dashboards
- 4 PDF Reports: Non-Conformance Report, Audit Report, CAPA Report, and Document Change History - all one-click printable
- 5 Automated Reminders: CAPA effectiveness reminder, document review reminder, complaint SLA-breach check, equipment calibration reminder, and a weekly KPI digest emailed straight to Quality Managers
- Community & Enterprise Safe: a lean CE-only core plus three optional auto-installing bridge modules for Sales/Purchase, Inventory/Manufacturing, and the Enterprise Quality app - see the dedicated section below
- Well Tested: 54 automated tests covering every workflow, every automated reminder, and every security boundary across all four modules
Plan & Run an Audit
Go to ISO Compliance -> Audits -> Audit Programmes to plan the year, then create an Audit against a reusable checklist template (ISO 9001, 14001, or 45001 templates ship pre-loaded). Score each line Compliant / Non-Conformity / Observation / N/A - the audit won't close until every line is scored.
Generate an NCR & Find the Root Cause
Click Generate NCR on any line marked Non-Conformity - the finding, the clause, and the audit are pre-filled. Work through the 5 Whys tab to land on a documented root-cause conclusion, and attach evidence directly to the NCR.
Raise a CAPA & Verify Effectiveness
Click Create CAPA, describe the corrective/preventive action, and mark it implemented. A reminder is automatically scheduled 30 days later (configurable) to verify the action actually worked - the NCR can't be closed until every CAPA is verified effective.
Control Documents Through Real Approval
SOPs, work instructions, forms, and policies move Draft -> Review -> Pending Approval -> Approved, with a separate Reviewer and Approver step. Employees acknowledge each version they've read; approving a new revision automatically schedules the next periodic review.
Track Risk, Objectives, Suppliers & Complaints
Log risks and opportunities with an automatic likelihood x impact score, set measurable Quality Objectives, score supplier evaluations, and log customer complaints against a configurable response SLA - escalate any complaint straight into a formal NCR with one click.
Review It All on the Dashboard & in Management Review
The OWL Dashboard rolls every KPI - open NCRs, overdue CAPAs, audits due, documents due for review, off-track objectives, overdue complaints, equipment overdue for calibration, and total Cost of Quality - into one live view. Click Refresh KPI Snapshot on a Management Review meeting to pull the exact same numbers straight into the minutes.
28 real screen captures from a running instance, following one non-conformance (a hold-tag gap caught during an audit) all the way from finding to closed CAPA to an updated, re-approved Quality Manual.
Compliance Dashboard
Click-through KPI cards, an NCR trend chart, a severity breakdown, a live Cost of Quality total, and a 1/3/6/12-month/all-time period selector - all on one screen.
Audit Lifecycle
Audit Programme
The 2026 Internal Audit Programme with three planned audits rolled up into a Completion Rate stat button - plan the year once, not one audit at a time.
Audits by Status
Every audit across Draft, Scheduled, In Progress and Done, grouped by stage - a red "Non-Conformities" flag on any card that raised one.
Completed Checklist & Compliance Rate
A finished internal audit against the ISO 9001:2015 checklist template - each line scored Compliant/Observation/Non-Conformity with a per-line Evidence uploader and an automatically computed Compliance Rate.
Non-Conformance & CAPA
Open Non-Conformances
Severity-coded NCRs from every source - audit findings, internal detection, and escalated customer complaints - at a glance.
5 Whys Root Cause Analysis
The NCR generated straight from the failed checklist line - severity, containment action, Cost of Quality, and a fully worked 5-Whys chain right on the form.
NCR Evidence
Photos and inspection reports attached directly to the non-conformance record, not buried in an email thread.
Open CAPA
Corrective/Preventive Actions with their linked NCR, responsible owner, and effectiveness-check due date.
CAPA Pending Effectiveness Verification
Marked Implemented - the 30-day (configurable) effectiveness-check date was computed automatically and the record sits here until someone confirms the fix actually worked.
CAPA Verified Effective & Closed
The full lifecycle end state - effectiveness verified, verifier and date stamped, statusbar at Closed.
Document Control
Controlled Documents
Every document category in every state at once - Draft, In Review, Pending Approval, Approved, and Obsolete - color-coded for an instant status read.
Approved Document, Version 2.0
A Quality Manual that has been through a full Draft -> Review -> Pending Approval -> Approved cycle twice - the Versions tab shows complete revision history with author and change notes.
Training Acknowledgments
Exactly who has confirmed they've read and understood the current version - and when - for a real training record, not a guess.
Risk, Objectives & Supplier Quality
Risk & Opportunity Register
Risks and opportunities sorted by computed Risk Score, with an automatic Low/Medium/High/Critical classification badge.
Risk Scoring Detail
Likelihood x Impact computed live into a Risk Score and classification the moment either input changes.
Quality Objectives
Target vs. actual progress per objective, grouped by Draft/In Progress/Achieved/Missed - clause 6.2 made concrete.
Supplier Quality Evaluation
Weighted quality/delivery/responsiveness scoring rolling up into a single Overall Score per supplier.
Vendor Scorecard on the Contact Form
Quality Evaluations and Non-Conformances surfaced as smart buttons directly on the supplier's own contact record - no separate lookup needed.
Customer Complaints, Reviews & Equipment
Customer Complaints (Backend)
Every complaint with its response-SLA due date and severity, ready to escalate to a formal NCR in one click.
Management Review with Live KPI Snapshot
Click "Refresh KPI Snapshot" and the exact same numbers from the dashboard land straight in the meeting record - clause 9.3 with zero manual copy-pasting.
Equipment & Calibration Register
OK vs. Overdue calibration status computed automatically from the last calibration date and each item's frequency.
Calibration History
A full certificate log per instrument - date, performed by, result, and certificate number.
Reports & Configuration
NCR PDF Report
The printable Non-Conformance Report - finding, 5 Whys, root cause, and linked CAPA - generated on demand from live data.
ISO Compliance Settings
CAPA effectiveness window, document review cycle, review reminder lead time, and customer complaint SLA - all configurable in one place.
Customer Self-Service Portal
My Complaints
A customer's own submitted complaints - automatically scoped so they never see anyone else's.
Submit a New Complaint
A simple subject/description form - submitting creates a real, trackable complaint record instantly.
Complaint Status & Resolution
Live status - here shown as Investigating after the complaint was escalated into NCR/2026/0003 behind the scenes.
Every one of these checks is built into the app itself - not just hidden buttons in the interface - so the same rule holds no matter how the record gets edited.
NCR Can't Close With Open CAPA
Closing a Non-Conformance Report is blocked with a clear warning unless every linked CAPA is already closed with effectiveness verified.
Audit Can't Close With Unscored Lines
An audit blocks the transition to Done while any checklist line is still "Not Scored" - no silent skipping.
Document Review Needs a Named Reviewer
Submitting a document for review is rejected unless a Reviewer is assigned first - no anonymous approvals.
New Document Version Needs Prior Approval
A revision can only be opened from an Approved document - you can't fork a draft or an obsolete copy.
Duplicate NCR Blocked on Failed Quality Checks
The Quality-app bridge won't let a failed check spawn a second NCR - one check, one traceable non-conformance.
Portal Users Only See Their Own Complaints
Complaints are automatically restricted to the logged-in customer (and their child contacts) - not just hidden in the menu, genuinely inaccessible.
Four dedicated PDF reports ship with the module - printable, shareable, and automatically pre-filled from your Odoo data.
NCR Report
Finding, 5 Whys, root cause, and every linked CAPA on one page.
Audit Report
Full checklist results, compliance rate, and NCRs raised.
CAPA Report
Action description, effectiveness verification, and action tasks.
Document History
Full version log and every training acknowledgment on record.
The My Complaints portal page gives customers a self-service page to submit and track their own complaints - no backend access needed and no more "any update on my complaint?" emails to the quality team.
Sortable list of every complaint the logged-in contact has submitted, with status and date.
Detail page showing subject, description, status badge, and the resolution once it's available.
Simple subject/description form - submitting creates a real, trackable complaint instantly.
Three backend groups plus a partner-scoped portal rule keep configuration, day-to-day quality work, and customer visibility cleanly separated.
The core app only needs standard Odoo Community features - nothing Enterprise-only. Deeper integration with other apps ships as three small, separate bridge add-ons that only activate when their target app is already present - so nothing is ever silently forced on you.
Adds a Non-Conformances smart button to Sales Orders and Purchase Orders.
Activates when the Sales and Purchase apps are installed (available in Community)
Adds the same smart button to Transfers and Manufacturing Orders.
Activates when the Inventory and Manufacturing apps are installed (available in Community)
Adds a "Create NCR" button directly on failed Quality checks.
Activates when the Enterprise Quality app is installed - never appears on Community
Verified by actually testing it, not just by inspection: installing the core module alone into a fresh database leaves Sales, Purchase, Inventory, Manufacturing, and the Quality app entirely uninstalled.
Manufacturers Pursuing ISO 9001
Run internal audits, NCR/CAPA, and document control from day one, with clause libraries ready for the certification audit.
Companies Already Using the Quality App
Turn a shop-floor quality check failure into a fully tracked, root-caused, CAPA-verified ISO non-conformance with one click.
Multi-Site & Multi-Company Groups
Automatic company-level separation and a shared clause library keep every site's QMS separate but consistent.
Procurement-Heavy Businesses
Score suppliers on quality/delivery/responsiveness and see NCR history right on the vendor's contact form.
Customer-Facing Support Teams
Track every complaint against a response SLA and let customers submit and follow their own tickets through the portal.
Quality Consultants & Auditors
Stand up a working QMS for a client in minutes with pre-loaded ISO 9001/14001/45001 clause libraries and checklist templates.
| Metric | How It's Worked Out |
|---|---|
| Risk Score & Level | The Likelihood (1-5) you enter times the Impact (1-5) you enter, automatically classified into a Low/Medium/High/Critical risk band |
| Compliance Rate | The share of an audit's checklist lines scored Compliant, calculated automatically as the audit is scored |
| Effectiveness Check Date | When a CAPA becomes due for effectiveness verification, set automatically a configurable number of days after it's marked implemented |
| Objective Progress | How close a Quality Objective is to its target, calculated automatically from the actual value against the target value |
| Cost of Quality | Every cost logged against non-conformances and corrective actions, added up automatically for the selected dashboard period |
The dashboard's snapshot KPIs (open NCRs, overdue CAPAs, audits/documents due) are always as-of-today, while the trend chart and Cost of Quality total respect the selected period.
Installation & First Setup
- Install: copy the module to your addons path -> Apps -> Update App List -> search "ISO Compliance" -> Install
- Assign users: Settings -> Users -> assign the User, Auditor, or Quality Manager group
- Review clause libraries: ISO Compliance -> Configuration -> Standard Clauses - ISO 9001/14001/45001 clauses ship pre-loaded
- Load a checklist template: ISO Compliance -> Audits -> Audit Templates - three general templates ship pre-loaded, one per standard
- Optional bridges: install Sales/Purchase, Inventory/Manufacturing, or the Quality app first if you want their respective bridge modules to auto-activate
- Run your first audit: Audits -> New -> Load Template Checklist -> score the lines -> Close the audit
Requires: Odoo 19 Community or Enterprise. No Enterprise-only apps required for the core app - the optional Sales/Purchase, Inventory/Manufacturing, and Quality-app bridges install themselves automatically only when their target apps are present.
Does this require Odoo Enterprise?
No. The core app only needs standard Odoo Community features. The three bridge add-ons that touch Sales/Purchase, Inventory/Manufacturing, or the Enterprise Quality app are entirely optional and install themselves automatically only when their target app is present.
Does it replace or duplicate the Odoo Quality app?
Neither - it complements it. If you have the Enterprise Quality app installed, the Quality Bridge module adds a "Create NCR" button directly on failed quality checks, so a shop-floor failure becomes a fully tracked ISO non-conformance with root-cause analysis and CAPA, instead of two disconnected systems.
Which ISO standards are covered?
ISO 9001:2015 (Quality) ships with the deepest checklist template and clause library; ISO 14001:2015 (Environmental) and ISO 45001:2018 (Occupational Health & Safety) each ship with their own clause library and a starter checklist template, since all three standards share the same Annex SL high-level structure.
How does the 30-day effectiveness verification work?
Marking a CAPA "Implemented" automatically computes an effectiveness-check date (30 days by default, configurable in Settings). A daily automated check schedules a reminder for the responsible user once that date passes, and the parent NCR can't be closed until every CAPA is verified effective.
Can customers submit complaints without a backend login?
Yes. Any portal user can submit and track their own complaints from the My Complaints page - what they see is automatically scoped to their own company contact, not just hidden in the interface.
Is the module tested?
Yes - 54 automated tests across the core module and all three bridge add-ons, covering every workflow, every automated reminder, and every access boundary (not just that things work when logged in as admin).
Audit-Ready at All Times
Every audit, NCR, CAPA, and document revision lives in one traceable system instead of scattered spreadsheets a certification auditor has to piece together.
Faster Corrective Action Cycles
Automatic effectiveness-verification reminders mean corrective actions get checked in 30 days, not "whenever someone remembers".
Full Traceability to the Clause
Every audit finding, non-conformance, and controlled document links back to the exact ISO clause it supports - no guessing during a surveillance audit.
Real Cost of Quality Visibility
Prevention, appraisal, and failure costs are visible per NCR and rolled into a live dashboard total - no more waiting for a quarterly cost review to find out quality is expensive.
Need Help or Have a Feature Request?
| Availability |
Odoo Online
Odoo.sh
On Premise
|
| Odoo Apps Dependencies |
•
Discuss (mail)
• Project (project) |
| Lines of code | 4320 |
| Technical Name |
iso_compliance |
| License | OPL-1 |
| Website | https://apps.odoo.com/apps/modules/browse?author=Odoo%20DevHouse |
Odoo Proprietary License v1.0 This software and associated files (the "Software") may only be used (executed, modified, executed after modifications) if you have purchased a valid license from the authors, typically via Odoo Apps, or if you have received a written agreement from the authors of the Software (see the COPYRIGHT file). You may develop Odoo modules that use the Software as a library (typically by depending on it, importing it and using its resources), but without copying any source code or material from the Software. You may distribute those modules under the license of your choice, provided that this license is compatible with the terms of the Odoo Proprietary License (For example: LGPL, MIT, or proprietary licenses similar to this one). It is forbidden to publish, distribute, sublicense, or sell copies of the Software or modified copies of the Software. The above copyright notice and this permission notice must be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Please log in to comment on this module