Add-on module

The part of the quality system auditors actually write up.

Internal audits, one register for every finding and corrective action, nonconformance reports with their dispositions, the management review log, and the approved supplier list — the records an ISO 9001, AS9100, or Nadcap auditor asks to see, in the order they ask for them.

Sold on its own — $49.99/mo or $499/yr, including 400 extra AI credits a month, no other TRACE subscription needed. Also available as an add-on to any plan. Create your account or see pricing.

What it does

QMS, in detail.

Internal audits you can actually run

Pick a checklist, work down it item by item recording conform, nonconformance or not-applicable with a note against each, and the audit becomes a record instead of a memory. Customer audits and your registrar's own visit go in the same place, so every finding lands in one register.

One corrective-action register

Findings from an internal audit, an escalated NCR, or a customer complaint all live in the same list, each with root cause, the immediate correction, the systemic corrective action, a due date, and a verified-effective sign-off. The distinction between correction and corrective action is the one every registrar asks about, so the form asks for both.

Nonconformance reports with dispositions

What was found, how much of it, who caught it, and what happened to it — use as is, rework, repair, scrap, return to supplier. When the fix needs to be systemic rather than just this part, one click escalates the NCR into a corrective action that stays linked to it.

The management review log

Date, attendees, decisions and follow-ups, with the next review's due date on the record. The cadence only counts if you can show it was kept, and this is what shows it.

An approved supplier list that says why

Who is approved, for what scope, and on what basis — in your own words: Nadcap accredited, certificate on file, on-site survey — with a re-evaluation date that comes due on its own. Recording why the approval stands is the answer to the purchasing question on every audit.

Due dates that come and find you

An overdue corrective action, an internal audit past its cadence, a supplier due for re-evaluation, a management review that slipped — each surfaces in your digest email and notification bell before it becomes a finding, not after.

Set up for Nadcap — your checklists drop in

Nadcap accreditation tracking is built in: accreditation status and PRI details, audits with their findings worked to closure, and an exportable completed checklist. The one thing TRACE doesn't ship is the AC7114 checklist text itself — that's PRI's, licensed through your own eAuditNet access — so the checklist library starts empty on purpose. Drag your checklists in as a Word or Excel file, or paste them straight from your copy, and the item-by-item audit runner, the PDF export, and the AI gap analysis all run against them.

How it works

Day to day.

  1. 1

    Pick a checklist and run the audit

    Start from a TRACE-written self-assessment set, or your own, and record a response and note against each item as you work down it.

  2. 2

    Raise findings where they fall

    Anything nonconforming becomes a finding on the register, linked to the audit and the checklist item it came from.

  3. 3

    Work the corrective action

    Root cause, the immediate correction, the systemic fix, a due date — then the effectiveness check that closes it out with your name on it.

  4. 4

    Keep the standing records current

    Log each management review as it happens and keep the supplier list evaluated; both carry their own next-due dates so the cadence looks after itself.

Records, not certification — and not the standards themselves

TRACE holds the records an auditor asks to see. It does not certify or accredit anyone, and no software can: certification to ISO 9001 and AS9100 comes from an accredited registrar, and accreditation to ISO/IEC 17025 or Nadcap comes from a body like A2LA, ANAB, or PRI, after they audit you. Nothing here changes what they will find. Just as important, the checklists in this module are original questions written by TRACE to walk the same ground an audit walks — they are not the text of ISO 9001, AS9100, ISO/IEC 17025, or any PRI checklist, which are copyrighted documents you need your own licensed copies of. Anyone selling you "the standard, built in" is either reselling something they had no right to or describing something else. Bring your own copy of the standard; we will keep the evidence organized against it.

Want to see it on your own program?

Tell us how your NDT program runs today and we'll show you how this fits it.