Checkpoint QAProduct · how it works
A quality system where the evidence is built in.
CheckpointQA structures your whole management system around six business areas, and makes every record carry its own proof. Here's what that means in practice — and why it holds up when an external auditor starts asking.
The governance spine
One spine, six business areas
Structured around ISO 9001, not a pile of disconnected modules.
Leadership & Strategy
Context, policy, roles, management review, objectives.
Planning & Risk
Risk & opportunity register, FMEA, change control.
People & Resources
Training & competence, suppliers, assets & calibration.
Operations
Document control, forms, work instructions, projects.
Performance
Audits, findings, complaints, analytics, clause trace.
Improvement
Nonconformance, CAPA, continual improvement.
The audit-evidence architecture
Five things that turn a record into evidence
These aren't add-ons. They are how every record in the system behaves, by default.
-
Provenance
Who created or changed a record, when, and why — captured automatically at the moment it happens, not reconstructed later from memory or a mailbox.
-
Controlled record states
Draft, live, archived — governed transitions, so what's current is unambiguous and superseded versions can't quietly masquerade as live.
-
Version identity & e-signatures
Minor and major versions with a clear identity, read-and-understood acknowledgements, and countersignatures where the process demands them.
-
Traceability — the golden thread
A finding links to its corrective action links to its verification. Follow any thread end to end without a spreadsheet of cross-references.
-
A tamper-evident, hash-chained audit trail
Every entry is appended to a cryptographic chain and digested daily. If a record were altered after the fact, the chain would show it. This is what lets you say "here is the evidence" and mean it.
Every quality module, in every plan
No per-module upsells on the quality system; optional add-ons are priced separately. See pricing →
Document control Audits (ISO 19011) NCR & CAPA Risk & FMEA Training & competence Suppliers Assets & calibration Customer complaints Management review Objectives & KPIs Change control Forms & registers
Plus context, quality objectives, continual improvement, glossary, full-text search and an immutable audit trail across all of it.
For small teams
One place, days not months
No consultant-led implementation project. Locked, sensible document schemas mean you start with structure instead of a blank canvas — and the workspace runs in any modern browser, desktop or phone, with nothing to install.
For your auditor
Give your CB read-only access
A dedicated certification-body portal lets an external auditor review evidence directly, with scoped access — instead of you exporting and emailing bundles the night before. Few tools at any price make this standard.
Where it's heading
Next: the governed operating record.
In September 2026 we approved the design for the next stage of CheckpointQA: the governed operating record for regulated UK SMEs — one process engine running the work, from tender to traveller to management review, and producing the evidence auditors, customers and regulators ask for. It is a published design, not a shipped feature. Nothing in this section is available yet; the rest of this site describes what you can use today.
In design — not yet available
One process engine under every module
Every governed activity — a document change, an investigation, an onboarding — will run as an instance of a published process. People will make the decisions and sign; the engine will keep the record.
Built for groups, not just single companies
One workspace for a group: subsidiaries, sites and projects will share one certificate scope and one management review, with confidential areas kept sealed.
From tender to traveller
Winning work, quotes and orders, shop-floor travellers and projects on the same governed record as your quality system, as priced add-ons.
A shop-floor companion
You will capture readings and photos on the floor, even when the connection drops. Signatures and approvals will always happen online — never offline.
Connected, not replaced
Your accounting, payroll and CAD tools stay where they are. The platform will link to your accounts package, export timesheets to your payroll provider and keep the evidence, rather than trying to be all of them.
Sign-in moving to AWS London
Sign-in is planned to move to a self-hosted identity service in AWS London, with authenticator-app and passkey options. Once it moves, no US identity provider will handle platform data.
What does not change: the quality modules in today's plans stay in the base plan, and any AI assistance stays optional, off by default and never the one who decides. Pricing for new capabilities will be published before they ship, and we will not announce a date we cannot evidence.
The fastest way to judge it is to see it used
On a walkthrough we raise a nonconformance in the live product with you — and you watch the evidence assemble itself.