Skip to main content
GullySystem
Business Services · ISO Consultant Management Software

One record for each ISO engagement, from gap assessment to surveillance audit.

Manage proposals, client sites, clause-by-clause gap assessments, controlled documents, internal audits, nonconformities and certification dates for every standard you consult on. Consultants log days against each engagement, clients see their own actions, and the office knows which surveillance audit is due next. Fees are raised from the same record that holds the work done.

  • Your clause checklists, manual templates and form layouts entered as you use them
  • Client list, open engagements and certificate dates migrated
  • Changes to checklists and document templates made by GullySystem staff when asked

Consultancies that guide clients to ISO certification keep proposals, gap assessments, document sets, audits and certification calendars in ISO Consultant Management Software, a GullySystem build. Each client engagement carries its standard, sites, clause checklist, controlled documents, nonconformities and corrective actions. Consultants log days against it. Expiry and surveillance dates raise reminders, and milestone invoices draw on the engagement record.

Where it breaks today

What goes wrong before the software.

Every consultant scores clauses differently

A gap assessment for ISO 9001 clause 7 or 8 is kept in a personal spreadsheet. Two consultants record the same finding in different words, so the consultancy cannot see which clauses clients fail most.

Nobody is sure which revision is current

Manuals, procedures and forms pass between consultant, client quality manager and top management by email. Revision numbers drift, and an auditor is shown a superseded copy.

Nonconformities have no single list

Findings from an internal audit, a customer complaint and a certification visit end in different documents. Corrective actions, root causes and closure evidence are chased by message.

Certification dates are held by memory

Stage 1, stage 2, surveillance and recertification dates differ by client and by certification body. A lapsed certificate puts the client’s contracts at risk and the consultancy’s name beside it.

Consulting days are not tied to fees

A fixed fee buys a stated number of days of consulting, but the hours worked go into timesheets kept apart from the engagement record. Overruns on a standard are noticed after the final invoice is paid.

Training records sit outside the file

Awareness sessions and internal auditor courses are delivered to client staff. Attendance sheets and competence notes stay in folders, so the auditor’s request for them starts a search.

How it runs

How the work flows through it, step by step.

  1. 1

    Proposal

    An enquiry names the standard, the sites, the headcount and the target certification date. A proposal is priced in consulting, audit and training days, and the client’s acceptance opens an engagement.

  2. 2

    Gap assessment

    The consultant visits and scores each clause as complete, partial or missing, with evidence notes. The gap report is saved with the visit and becomes the action plan.

  3. 3

    Documentation

    Manual, procedures, work instructions, forms and registers are drafted, reviewed by the client and issued with revision numbers. Training sessions for the client’s staff are scheduled alongside.

  4. 4

    Internal audit and management review

    The audit programme is run against the clauses. Findings become nonconformities with owners. The management review is minuted, and its inputs and outputs are filed.

  5. 5

    Certification audits

    Stage 1 and stage 2 audit dates are entered with the certification body’s name. Findings from the body are logged, closed and sent back with evidence.

  6. 6

    Surveillance and renewal

    The certificate number, scope and expiry are recorded. A reminder reaches the consultant and the client contact before every surveillance visit and again as the recertification cycle opens, so no lapse goes unnoticed.

Modules

What is inside.

Every module can be switched on, left out or changed to match how your team already works.

Client and site register

Hold each client with its legal entity, sites, headcount, scope statement and the standards it wants. Multi-site clients keep one record per location, linked to one engagement.

Proposals and engagement terms

Build a proposal from the standard, the site count and the days of consulting, audit and training. Revisions are kept, and an accepted proposal opens the engagement.

Gap assessment checklist

Score each clause of ISO 9001, 14001, 45001, 27001 or another standard as complete, partial or missing. Evidence notes and photographs are attached, and every gap becomes a dated action.

Document control pack

Keep the manual, procedures, work instructions, forms and external-document register for each client. Revision numbers, reviewers and issue dates are recorded, and superseded copies are marked.

Implementation plan

Lay the engagement out on a timeline from gap assessment through documentation, training, internal audit and certification audit, so a slipping stage shows before the audit date.

Internal audit programme

Plan which processes and clauses are audited and when. Record auditor, scope, evidence and findings, and file the audit report with the engagement.

Nonconformities and corrective actions

Each finding carries a clause, a root cause, an owner, a due date and closure evidence. Open items by client are sorted by how overdue they are.

Training and competence records

Record awareness sessions and internal auditor courses with attendees, trainer and date. Attendance sheets stay on the client file for the auditor.

Certification calendar

Track certification body, certificate number, scope, issue date, expiry, surveillance and recertification dates for each client, with a reminder ahead of every visit.

Consulting days and time

Consultants log days by engagement and activity. Days sold, days used and days left are visible beside the fee, so overruns are noticed during the work.

Milestone invoices and receipts

Raise invoices at agreed milestones or monthly on retainer, record receipts, and see which client owes what, oldest first.

Solutions inside

The business modules it is built from.

Each one is also available on its own, or inside a system built for you.

  • Contact & Account Management

    Each client is held with its entity, sites, scope statement and chosen standards, and every contact who reviews documents is linked to that record.

  • Quote & Proposal Management

    A proposal is priced in consulting, audit and training days for the standard and site count, and an accepted version opens the engagement.

  • Document Management

    Manuals, procedures and forms are stored with codes, revision numbers and reviewers, so an auditor is always shown the issued revision.

  • Project Timelines with Gantt Charts

    Gap assessment, documentation, training, internal audit and certification audit sit on one timeline, and a stage that slips shows against the audit date.

  • Task Management

    Every finding becomes an action with an owner, a due date and closure evidence, and overdue items are listed by client.

  • Service Reminders

    Surveillance, recertification and expiry dates drive reminders to the consultant and the client contact ahead of each visit.

  • Project Time Tracking

    Consultants log days by engagement and activity, and the days used are set beside the days sold in the proposal.

  • Invoice Management

    Invoices are raised at agreed milestones or monthly on retainer, with receipts posted and each client’s balance shown oldest first.

Services

How we would put it in.

Setup, data migration, integrations and anything built on top.

Who uses it

One system, each person sees their part.

For the principal consultant

See engagements by stage, certificates expiring, days used against days sold and the clients whose nonconformities are overdue.

For consultants and lead auditors

Open the clause checklist and the document set for each client, log findings on site from a phone, and record the days worked.

For client quality managers

Review drafts, accept issued documents, update the corrective actions assigned to their own staff and see the next audit date.

For the office and accounts

Raise proposals and milestone invoices, book audit dates with the certification body and post receipts against each engagement.

Reports

The numbers the owner asks for.

  • Engagements by standard, stage and consultant
  • Gap assessment results by clause across clients
  • Nonconformities open, overdue and closed by client and clause
  • Certificates by expiry date, with surveillance visits due
  • Days sold, days used and days remaining by engagement
  • Training sessions delivered and attendees by client
  • Milestone invoices raised and amounts received
Good fit

Who this is built for.

  • Consultancies that prepare manufacturers, laboratories and service firms for ISO 9001 and ISO 14001
  • Information security consultants who take clients through ISO 27001 and its statement of applicability
  • Occupational health and safety consultants working on ISO 45001
  • Independent consultants and small firms that also deliver internal auditor training
  • Multi-standard consultancies that manage integrated management systems for one client
Honest answer

When it is not the right choice.

  • Certification bodies that employ accredited auditors and issue certificates need a scheme-specific system with auditor approval and certificate issue.
  • A consultant with two clients a year can keep a checklist and a folder.
Made to fit

Adapted to your business before it goes live.

You are not handed a login and left to it. The product is set up around your records, your people and the tools you already use.

Your clause checklists

The clause lists for each standard you consult on, with your scoring words and evidence fields, are entered as your consultants use them.

Document templates and numbering

Manual, procedure and form templates, document codes and revision rules follow the scheme you already issue to clients.

Engagement stages

Each stage between proposal and recertification is named as your method names it, with the number of consulting days you normally plan for it.

Existing clients migrated

Client lists, open engagements, certificate numbers and expiry dates come across from your spreadsheets.

Reminders and client access

Audit reminders go by email or messaging. Client contacts are given logins, and the pages they open are agreed during implementation.

Works alongside

  • Email
  • WhatsApp
  • SMS
  • Calendar
  • Accounting export
Common questions

Questions owners ask before a demo.

Which standards can it hold?

Any standard whose clauses you enter. Consultancies usually start with ISO 9001, 14001, 45001 and 27001. You enter the clause list once per standard. One client can hold several.

Does it replace the certification body’s records?

No. The certification body keeps its own file. This system holds your side: the gap assessment, documents, audits, corrective actions and the dates the body gives you.

How are controlled documents handled?

Each document has a code, a revision number, an author, a reviewer and an issue date. When a new revision is issued, the older one is marked superseded and stays on file.

Can a client see only its own engagement?

Yes. A client contact sees the documents, actions and audit dates for that company and nothing about other clients. Before any client contact logs in, you and our team agree which pages that login opens and which entries it may edit or only read.

Can consultants log findings on site?

Yes, from a phone browser. A finding is saved against a clause with a photograph and a short note. Signal has to be available when it is saved.

Can we run internal auditor training here?

Yes. Sessions are scheduled with trainer and attendees, and attendance is marked. The sheet and any competence notes are stored on each client file for audit.

Does it track consultant utilisation?

It shows days logged by consultant against days sold per engagement. Whether that measures a consultant fairly depends on how your firm counts preparation and travel, which is set with you.

Can existing certificate dates be loaded?

Yes. Certificate number, scope, certification body and expiry are loaded from your sheet. The office checks the dates before reminders are switched on.

What does the system cost?

The quoted figure reflects how many consultants use it, how many client contacts need a login and how many standards you want loaded. We demonstrate a sample engagement first. A quotation then follows.

Wondering what it would cost? Share your requirements and an engineer will come back with a scope.

Book a demo

See ISO Consultant Management Software with your own data.

Tell us how you run things today. We’ll show you the parts that matter to you and say plainly what would need changing.

  • No obligation
  • A reply within one business day
  • Your details stay private

Start with your requirements

Seven short steps that tell us what you need. An engineer reads them before getting in touch.

Share your requirements