How to Write an ISO 9001 Quality Policy: Template and Examples

Your ISO 9001 quality policy is one of the first things an auditor reads. It sets the tone for your entire quality management system. Get it wrong — too vague, too long, or disconnected from what your business actually does — and it creates problems throughout the audit. Get it right, and it becomes a genuine reference point for decisions.

This guide covers what Clause 5.2 requires, gives you a structure template, and includes 3 worked examples for UK sectors. If you haven't mapped your QMS yet, start with the gap analysis checklist — your quality policy should reflect the scope and context you identify there.

What Clause 5.2 Actually Requires

Clause 5.2.1 — Establishing the quality policy. Top management must establish a policy that is appropriate to the organisation's purpose and context, provides a framework for quality objectives, commits to satisfying applicable requirements, and commits to continual improvement.

Clause 5.2.2 — Communicating the quality policy. The policy must be available as documented information, communicated and understood within the organisation, and available to relevant interested parties.

The standard doesn't specify format, length, or style. It does require the policy to be real — not a generic statement copied from the internet.

The Structure Template

1. Opening statement (1–2 sentences). What your organisation does and for whom. Anchors the policy to your context.

2. Commitments (3–5 bullet points). Specific and measurable. Must include: meeting customer requirements, meeting statutory/regulatory requirements, and continual improvement. Add 1–2 commitments specific to your business.

3. Framework for objectives (1–2 sentences). How the policy connects to quality objectives.

4. Signature and date. Signed by the most senior person. Demonstrates top management commitment (Clause 5.1). The quality policy sits at the top of your documentation — it's the first section in your quality manual.

Total length: one page. Half a page is better.

Example 1: Manufacturing (Precision Engineering)

Quality Policy — Apex Precision Engineering Ltd

Apex Precision Engineering manufactures CNC-machined components for the UK aerospace and automotive sectors from our facility in Wolverhampton.

We are committed to:

• Meeting customer specifications and delivery schedules, targeting on-time delivery above 97%
• Complying with AS9100 flow-down requirements, UK REACH (retained from EU Regulation (EC) No 1907/2006), and the Supply of Machinery (Safety) Regulations 2008
• Maintaining measurement traceability to UKAS-calibrated standards for all critical dimensions
• Reducing internal scrap rates year on year, with a current target below 1.5%
• Continually improving through regular objective review, nonconformity analysis, and staff development

This policy provides the framework for our quality objectives, set annually and reviewed quarterly.

Why it works: Names the sector, references specific regulations, includes measurable targets (97% delivery, 1.5% scrap), and mentions UKAS calibration.

Example 2: IT Services (Managed Services Provider)

Quality Policy — Clearpath IT Solutions Ltd

Clearpath IT Solutions provides managed IT services, cloud infrastructure, and support to SMBs across the South East of England.

We are committed to:

• Resolving Priority 1 tickets within 4 hours and Priority 2 within 8 hours per our SLAs
• Meeting the Data Protection Act 2018 (UK GDPR), the Computer Misuse Act 1990, and contractual obligations
• Maintaining Microsoft Partner and AWS Partner certifications
• Targeting customer NPS above 50, measured quarterly
• Continually improving by analysing incident data and implementing permanent fixes through problem management

This policy forms the basis for objectives reviewed monthly and assessed at quarterly management reviews.

Why it works: References specific SLA targets, names legislation, includes a measurable metric (NPS above 50), and ties improvement to a concrete process.

Example 3: Construction (Fit-Out Contractor)

Quality Policy — Sterling Interiors Ltd

Sterling Interiors delivers commercial fit-out and refurbishment for office, retail, and hospitality clients across London and the Home Counties.

We are committed to:

• Completing projects to agreed specification, programme, and budget, targeting zero defects at handover
• Complying with Building Regulations 2010, CDM Regulations 2015, the Building Safety Act 2022, and BS 8000 workmanship standards
• Ensuring all operatives hold valid CSCS cards and subcontractors meet our approved supplier criteria
• Reducing defect rates by analysing post-completion data and feeding findings into pre-start planning
• Continually improving through project reviews, client feedback, and internal audit findings

This policy provides the framework for objectives set at the start of each financial year and tracked monthly.

Why it works: References construction legislation, industry standards (BS 8000, CSCS), and uses sector-specific language (snagging, handover, pre-start planning).

Common Quality Policy Mistakes

Copying someone else's. If your policy could belong to any company in any sector, it doesn't meet "appropriate to the purpose and context." Include at least one sector-specific regulation and one measurable target unique to your business.

Making it too long. Two pages means you're confusing the policy with a quality manual. Keep it to one page.

Commitments you can't evidence. If the policy says "zero defects" and your defect rate is 3%, you've created a nonconformity against your own system. Set targets that are ambitious but supported by data.

Forgetting communication. Writing it is half the job. Clause 5.2.2 requires communication and understanding. Display it, discuss at team meetings, reference at inductions. When the auditor asks a warehouse operative, you need a credible answer.

Not reviewing it. Review at least annually, ideally at management review (Clause 9.3). If your business changes direction, the policy should reflect it. A policy dated three years ago with no review record is a red flag.

ISO 9001 Quality Policy Checklist

• Appropriate to your organisation — names sector, products/services, and market
• Commits to satisfying applicable requirements (specific regulations listed)
• Commits to continual improvement
• Provides a framework for quality objectives
• Contains at least one measurable, business-specific commitment
• Signed and dated by top management
• Reviewed within the last 12 months
• Displayed or accessible where staff can see it
• Discussed at new starter inductions
• At least 3 employees can describe its content

If you're not sure where your QMS stands overall, the ISO 9001 readiness quiz covers Clause 5.2 alongside every other major requirement in under 5 minutes. For a broader look at what certification involves, see our small business guide to ISO 9001.

This article is for general informational purposes only and does not constitute legal, regulatory, or professional compliance advice. ISO certification requirements vary by scope, sector, and certification body. Always verify requirements with your UKAS-accredited certification body or a qualified consultant before making compliance decisions.