What Is a Controlled Document? A Plain-English Guide for Australian Businesses
The Short Answer
A controlled document is a document whose creation, approval, distribution, change and retirement are managed, so everyone uses the current, approved version and can prove it. Procedures, work instructions, policies, drawings, specifications and forms are typical examples.
If a document can affect product quality, safety, compliance or a customer outcome, it is usually a controlled document.
What Makes a Document “Controlled”?
A controlled document has:
- A unique identifier and title, so it can be found and referenced.
- A version or revision number, so you know which copy you are reading.
- An owner who is accountable for keeping it correct.
- An approval record showing who reviewed and authorised it, and when.
- A status, such as draft, in review, approved or obsolete.
- A review date, so it does not quietly go out of date.
- Controlled distribution, so people see the current version rather than an old copy saved on a desktop.
An uncontrolled document is the opposite: a copy printed last year, a file emailed to a supplier, or a spreadsheet duplicated “just for now”.
What Does ISO 9001 Require?
Clause 7.5 of ISO 9001 covers documented information. In practice, auditors look for evidence that you can:
- Create and update documents with consistent identification, format and approval.
- Control access and distribution so the right people can use the document where and when they need it.
- Prevent unintended use of obsolete documents, and retain them with a clear marking if you keep them.
- Protect documents from loss, unauthorised changes or misuse.
- Control changes through version control and retention rules.
Nothing in the standard says you need particular software. It says you need to demonstrate control. That is difficult to do with shared folders, because folders cannot enforce an approval step or retire an old version.
Controlled vs Uncontrolled Copies
| Controlled | Uncontrolled | |
|---|---|---|
| Version | Current approved version only | Unknown or out of date |
| Changes | Reviewed and approved | Edited by anyone |
| Distribution | Tracked | Emailed, printed, copied |
| Audit trail | Complete | None |
Printed copies are the common trap. Either mark them “uncontrolled when printed” or avoid them by serving the live document on screen or by QR code.
Why Spreadsheet and Folder Registers Fail
Most small businesses start with a document register in a spreadsheet. It works until the first audit finds a procedure that was updated but not logged, or two people editing different copies of the register. If you are weighing up SharePoint for this job, see Can You Use SharePoint for ISO 9001 Document Control?.
How to Get Document Control Working
- List your controlled documents by type, such as procedures, work instructions, forms and drawings.
- Assign an owner and review cycle to each one.
- Define the lifecycle: draft, review, approved, obsolete.
- Automate the workflow so approval and retirement of old versions happen by rule, not by memory.
- Make the current version the easy one to find at the point of use.
An M-Files quality management system does steps 3 to 5 automatically. A document’s status drives who can see it, and publishing a new revision supersedes the old one while keeping the history. For a worked example, read our document control playbook for Australian manufacturers, or see how M-Files for Manufacturing applies it to engineering drawings and change control.
Next Step
If you are not sure which of your documents are controlled, or whether your current process would hold up in an audit, we can review it with you. Talk to Range about a document control review.