Service · Web development

Custom quality management system development.

A digital QMS that fits your sector, your standards and your way of working. Document control, audits, supplier assessment, complaints and CAPA in one environment, with integrations to your ERP, MES and LMS that off-the-shelf packages rarely handle well.

ISO 9001ISO 13485FDA 21 CFR Part 11Document flowAudit trail

A QMS is not a document library.

A good quality management system brings procedures, audits, non-conformities, training and suppliers together in one workflow. Not as loose SharePoint folders or a collection of Excel files, but as one coherent system in which a change to a procedure automatically triggers a training action, a complaint opens a CAPA, an audit finding reaches the right process owner, and a supplier NCR feeds into the next supplier assessment.

In practice we see four types of organisation. The first still works with network drives, Excel trackers and email; the QMS exists physically but lives outside any single system. The second has a light package, often Q-Pulse, Intelex or a local module, but lacks the depth for audits, CAPA or supplier assessment. The third has an enterprise package such as MasterControl, AssurX, ETQ Reliance, Sparta Systems TrackWise, Pilgrim Quality, Greenlight Guru or Veeva QualityOne, and pays for functionality it doesn't use while missing the sector-specific flows it needs. The fourth runs a different system at each site and wants to consolidate.

We build custom quality management systems for organisations in any of these situations where a new off-the-shelf package clearly won't fit. We work in Dutch, with your quality manager, against your standards, whether that is ISO 9001, ISO 13485, ISO 27001, ISO 20000, IATF 16949, AS9100, NEN-EN 9100, NEN-EN 1090, NEN 7510, BRC, IFS, HACCP, GMP or FSSC 22000.

If you work under a certification scheme, it comes with its own file. For food products that is the audit file for IFS and BRCGS; for medical devices, the MDR technical file.

Two schemes that often run alongside a quality system: KOMO with an assessment guideline for construction products, and the RI&E with action plan for the occupational health and safety side.

Three types of QMS project.

Depending on where you are now: replacing loose Excel workflows, extending an existing package, or a fully integrated platform for multiple sites.

Compact project · fixed sprint budget

Digital document management system for quality management

Procedures, work instructions, forms and training materials managed centrally, with version history, an approval workflow and an integration with your training administration. Suitable as a starting point for organisations still working with network drives or a shared Excel index.

Version controlApproval workflowTraining integrationAudit log
Mid-sized project · fixed sprint budget

Quality management software with audit and CAPA workflow

Document control plus internal and external audits, non-conformities (NCRs), CAPA, complaints logging, supplier assessment and calibration management. One dashboard with KPIs by process, site and standard. For organisations maintaining ISO 9001, ISO 13485 or a sector standard such as AS9100 or IATF 16949.

Audit managementNCR & CAPASupplier KPIsCalibration
Larger project · fixed sprint budget

Enterprise QMS with MES/ERP integration and multi-site support

Mission-critical quality platform for multi-site groups, integrated with MES for real-time QC data, with ERP for purchasing and suppliers, and with an LMS for training. Includes an FDA 21 CFR Part 11 audit trail, electronic signatures, and role-based access for regulated businesses.

If you fall under the Dutch Cybersecurity Act (Cbw), it requires something a quality system does not provide by default: the link between identified risks and the measures you chose. See Cbw software.

If you issue an assurance report to your clients, a Type II report requires evidence across the entire period rather than a snapshot. See ISAE software.

Two registers sit close together here and are deliberately kept separate. The evidence for each implemented control is in the ISAE app; the reporting channel under the Whistleblower Act is in the whistleblower reporting app.

MES integrationERP integration21 CFR Part 11Multi-site

The sectors for which we build QMS software.

Every sector has its own standards, its own regulators and its own risks. Our quality management software is built around the standard you maintain, not the other way round.

Manufacturing

Production and assembly

ISO 9001, IATF 16949 for automotive, AS9100 and NEN-EN 9100 for aerospace, NEN-EN 1090 for steel construction. With direct MES integration for real-time QC data, statistical process control and first-pass yield monitoring. See our page on software for manufacturing.

Food & pharma

BRC, IFS, HACCP, GMP, FSSC 22000

Document control and audit trail in line with FDA 21 CFR Part 11, electronic signatures, validated change control, allergen management and batch traceability. For producers who face regular audits and have no room for manual workarounds.

Healthcare and medical devices

NEN 7510, ISO 9001, ISO 13485

For healthcare providers, clinical laboratories and manufacturers of medical devices. If you work under an HKZ scheme rather than ISO 9001, see HKZ quality manual and audit file. Includes integration with ICT incident management, training tracking for protocols, and validation documentation (IQ/OQ/PQ) for regulated processes.

Engineering, construction, installation

ISO 9001, ISO 14001, ISO 45001

Project-oriented QMS for engineering and installation companies. Work package-based inspections, supplier qualification, and integration with project management systems for scope and risk changes.

IT and software

ISO 27001, ISO 20000

Information security management and service management in one environment. Asset register, control mapping to Annex A, evidence collection and automated reporting for the auditor, which suits organisations certified every year.

Multi-sector groups

Groups with diverse standards

For holding companies where one operating company maintains ISO 9001 and another IATF 16949 or ISO 13485. One platform, site-specific configuration and consolidated group-level reporting.

What you get at the end.

A working QMS your quality team can manage itself, plus the documentation and training to pass audits with it. No vendor lock-in on a proprietary platform, and no annual licence escalation that your purchasing department has been complaining about for years.

We don't replace enterprise packages such as MasterControl or Veeva QualityOne where they already work well. We do build custom solutions when a standard package demonstrably doesn't fit your sector, your standards or your scale, for example because a specific audit flow or supplier assessment mechanism can't be configured, or because the package lacks a suitable API surface for deeper integration with your production or purchasing systems.

  • The QMS platform itselfProduction and acceptance environment, running in your cloud (Azure/AWS/GCP) or with us, with encryption in transit and at rest.
  • Complete module setDocument management with version history, internal and external audits, non-conformities and CAPA, complaints flow from customer to root cause analysis, supplier evaluation with KPIs, calibration management for measuring instruments, training tracking linked to procedures, change control with approval, FMEA risk register and KPI dashboards with FPY, cost of poor quality and defect rates per line or site.
  • Compliance reportingAudit trail in line with FDA 21 CFR Part 11 where relevant, and standard reporting for ISO 9001, ISO 13485 or ISO 27001 audits.
  • Codebase and architectureFull source code, build instructions and an architecture overview for your IT team. No vendor lock-in to a proprietary platform.
  • Validation documentationFor regulated sectors: IQ/OQ/PQ protocols, risk analysis (FMEA) and a traceability matrix mapping standard requirements to functionality.
  • Maintenance contract (optional)Monitoring, backups, security patches and ongoing development. Fixed monthly fee, four response-time levels, and a dedicated point of contact.

When custom is the right choice.

Four situations in which we help organisations build a custom QMS. If you recognise one, we'd be happy to talk further.

Industry standard

Sector requirements don't fit a standard package

Your industry standard, such as AS9100 for aerospace, IATF 16949 for automotive, NEN-EN 1090 for steel construction or BRC/IFS for food, has requirements that a standard QMS package can only cover through workarounds.

Integration

Deep integration with MES or ERP needed

You want QC measurements from the MES flowing straight into the QMS, supplier data from the ERP automatically linked to qualification status, or order information linked to complaints. A standard package rarely delivers that out of the box.

Multi-site

Concern over a fragmented quality landscape

Your group uses a different QMS at each site, sometimes paper, sometimes Excel, sometimes a lightweight package. You want to consolidate into one environment without the most sophisticated site falling back to the lowest common level.

Suppliers

No structured supplier assessment workflow

You want a structured supplier assessment in line with ISO 9001, with KPIs, performance tracking and qualification status, for hundreds of suppliers rather than a spreadsheet updated once a year.

Not yet sure about a large project?

Test your idea first: a working prototype in 1 day

With OneDayBuild, we turn your idea into something tangible in one day for €1,150, so you can see whether further development is worth the investment. Decide to go ahead with the full build? Then we credit the full cost.

Explore OneDayBuild →

How a QMS project works.

1

Introduction and scoping

A conversation in which we establish which standards you maintain, which modules are a priority, which integrations are involved and which packages you currently use. We're honest when a standard package is a better fit than custom development.

2

Workshops with QA and operations

Sessions with your quality manager, process owners and a representative from the shop floor. Existing workflows are mapped, pain points identified and the first screen flows sketched. At the end, a concrete scope per module and a sprint plan.

3

Building in sprints

A working version every two weeks that you and your QA team can test. We usually start with document control and audit management, as these deliver value fastest, and expand modularly from there. A project spanning several sprints, not a big bang.

4

Validation and rollout

For regulated sectors: running IQ/OQ/PQ protocols, delivering validation documentation and setting up the transition to production together with your QA team. For non-regulated sectors: a phased rollout per site or per module.

5

Operations and ongoing development

After go-live we monitor the platform, deliver updates and build out the modules that fell outside phase 1. Changes to standards, such as a new revision of ISO 9001, are handled within ongoing maintenance.

The modules in our quality management software.

A digital quality management system rarely consists of a single module. We build them modularly so you can start with whatever is causing the most pain and expand once the foundation is in place.

Module 01

Document control

Procedures, work instructions, forms, standards documents and training materials managed centrally. Version history, an approval workflow, links to standard clauses, and automatic training actions on change. The core of any QMS, and the first module we almost always deliver.

Module 02

Audit management

Internal audits, external audits, supplier audits and self-assessments in one schedule. Annual audit programme, checklist templates per standard, findings with owner and deadline, and automatic links to the NCR and CAPA flow.

Module 03

NCR & CAPA

Register non-conformances from any source (audit, complaint, production, supplier), record root-cause analysis, and track corrective and preventive actions through to effectiveness review. Built for regulated sectors with an audit trail under 21 CFR Part 11.

Module 04

Complaints workflow

Customer complaints from report through to resolution, with automatic escalation, root cause linkage and, where relevant, an MDR/vigilance reporting route for medical devices or a recall flow for food and pharma.

Module 05

Supplier evaluation

Approved supplier list, certificate management with expiry dates, periodic KPI-based assessment, and automatic alerts on performance deviations. The process that rarely stays accurate in a spreadsheet for long, and that ISO 9001 explicitly requires.

Module 06

Calibration management

Measuring instrument register, calibration schedule, certificates, drift tracking and automatic blocks when calibration lapses. Can be linked to a CMMS maintenance management system so instruments without valid calibration are not used for inspections.

Module 07

Training tracking

Which employee has completed which procedure training, which is due for refresher training, and who has read the latest document version. Can be linked to your LMS or used standalone.

Module 08

Risk management

FMEA at process and product level, a risk register, ICH Q9 for pharma, and integration with the change control module so that changes are assessed for risk. Read more on our page about custom risk management software.

Module 09

Change control

Process, document and product changes with impact analysis, approval workflows and linked validation activities. For regulated industries, with electronic signatures and a full audit trail.

Module 10

KPI dashboards

First-pass yield, cost of poor quality, defect rates per line, NCR trends, complaint throughput, audit finding status and supplier scorecards. Standard reports for ISO 9001, ISO 13485 or ISO 27001 audits.

Module 11

AI-augmented quality

Anomaly detection on QC measurements, automatic classification of incoming complaints, and pattern recognition across NCRs. Optional, and only where data volumes and quality justify it: no AI for the sake of AI.

Module 12

Audit trail & compliance reporting

Data immutability, electronic signatures, FDA 21 CFR Part 11 for regulated sectors, and standard export in the format your auditor or regulator expects.

Frequently asked questions.

What quality managers and QA directors usually want to know before we start.

Do you replace packages such as MasterControl, AssurX or ETQ Reliance?
For organisations that already have an enterprise package in good shape and use it fully: no. Those packages are deep in what they do, and our advice in that case is to stay. We build custom software when a standard package demonstrably does not fit, for example because a sector-specific standard is not covered, because integration with MES or ERP has to go deeper, or because licence costs no longer match the level of use.
How does a digital document management system for quality management work?
All controlled documents, including procedures, work instructions, forms and training materials, sit in one environment with version history, an approval workflow and links to the standard clause they cover. A change automatically triggers a training task for the staff who work with that document, and the system records who has read and approved which version. No more loose PDFs on network drives, and no confusion about which version is valid. See also our document control system service.
How do you handle supplier evaluation under ISO 9001?
In the supplier module you register your approved suppliers, their qualification status, certificates with expiry dates, and the KPIs you want to monitor for each supplier, such as delivery reliability, quality of incoming goods, or number of NCRs. The system generates periodic evaluations and flags when certificates expire or KPIs drop below a threshold. Complaint and NCR data from the quality process feed the scores automatically.
Do you work with ISO 13485 or FDA 21 CFR Part 11?
Yes. For medical devices and pharma, we build the system with an audit trail under 21 CFR Part 11, electronic signatures, validated change control and the IQ/OQ/PQ documentation you need for an audit. ISO 13485 aligns closely with this. For ICH Q9 risk management, we link it to a risk management module with FMEA and a risk register.
Can multiple sites run different QMSs within one environment?
Yes, this is one of the most common reasons to choose a custom build. We build one platform with site-specific procedures, roles and KPIs, while group-wide requirements are managed centrally. A site that was used to a light package won't get the same screens as a site that worked with an enterprise package, but the underlying data and reporting are consolidated.
How do you integrate the QMS with our ERP and MES?
Through APIs, message queues or database views, depending on what your systems support. From the MES, we retrieve QC measurements in real time to detect defect trends. From the ERP, we synchronise suppliers, orders, batches and customers so that complaints and NCRs are automatically linked to the right records. For training, we integrate with your LMS. Read more about our approach to smart API integrations between quality and production systems, and about software for the manufacturing industry.
What determines the cost of a custom QMS?
The main factors are the number of modules in scope (document control alone is far more limited than a full platform), the number of sites and users, the depth of integrations with the MES and ERP, and whether you need validation documentation for a regulated industry. After the scoping phase we give a fixed price per sprint and a total indicative price for the project, with no open-ended commitment.
Do you also build maintenance or CMMS software that connects to this?
Yes. Quality and maintenance share a lot of data: calibrations, preventive maintenance and fault reports. We build QMS platforms that integrate seamlessly with a CMMS maintenance management system, so that a fault report from the CMMS can automatically open a quality NCR if its impact warrants it.

Talk to us about your quality management system.

A no-obligation half-hour introductory call. We listen to your standards, your current systems landscape and your bottlenecks, and give direction you can use, whether that means a custom build or a standard package that fits better.

Edit content