Is Clause Exclusion Allowed in ISO 9001:2015? (Clause 4.3 & 8.3)

In modern corporate governance, establishing a robust Quality Management System (QMS) under the ISO 9001:2015 framework is essential for maintaining product consistency, customer trust, and operational resilience. However, one of the most frequent points of confusion for quality managers and compliance officers during certification audits revolves around standard exclusions. Organizations frequently inquire whether every single requirement outlined within the standard must be implemented or if specific clauses can be formally declared as non-applicable to their operational model.

Under the current ISO 9001:2015 standard, the rigid concept of "exclusions" found in older revisions (such as ISO 9001:2008) was officially replaced. The standard now emphasizes Clause 4.3: Determining the Scope of the Quality Management System. Under Clause 4.3, an organization can justify that certain requirements do not apply to the scope of its QMS, provided this non-applicability do not affect the organization's ability or responsibility to ensure the conformity of its products and services and the enhancement of customer satisfaction.

ISO 9001:2015 Clause 4.3 evaluation scope

Question: Does the clause impact product/service conformity or customer satisfaction?

• Yes → Must implement requirement (e.g., Leadership, Internal Audit)
• No → non-applicability allowed (e.g., Clause 8.3 Design)

For instance, a pure service-based business or a distributor that sells pre-manufactured goods without altering their engineering specifications does not perform design activities. Forcing such an entity to maintain design controls would create unnecessary bureaucratic overhead without adding quality value. However, declaring a requirement non-applicable is not a simple exemption card; it requires rigorous justification, clear documentation in the QMS scope, and formal verification by external certification auditors. You can review our full guide on ISO Certification Services to see how various industries align their QMS boundaries effectively.

Determining Non-Applicability: Acceptable Clauses vs. Non-Negotiable Core Requirements

To successfully pass an ISO 9001:2015 surveillance or certification audit, quality teams must understand which clauses qualify for non-applicability and which mandatory requirements can never be excluded under any circumstances. The fundamental rule dictated by Clause 4.3 is that non-applicability is restricted primarily to requirements within Clause 8 (Operation), and in limited instances, specific monitoring resource requirements within Clause 7 (Support).

The most universally accepted non-applicable provision is Clause 8.3 (Design and Development of Products and Services). If your company operates strictly as a build-to-print contract manufacturer, a wholesale distributor, or a logistics provider, you handle products according to customer-supplied specifications or standard market configurations. In these setups, internal design activities do not take place. Another common candidate for partial non-applicability is Clause 7.1.5 (Monitoring and Measuring Resources). If an organization does not utilize physical measuring tools such as calipers, micrometers, or temperature sensors to verify product conformity (common in IT consulting or legal advisory), formal calibration procedures are not required.

Conversely, core governance elements such as Clause 5 (Leadership), Clause 6 (Planning), Clause 9.2 (Internal Audit), and Clause 10 (Improvement) form the structural foundation of the standard. An organization cannot claim that internal audits or management reviews are "non-applicable" simply because it is small or operates remotely. Attempting to exclude these core clauses will immediately result in a major non-conformity raised by the registrar auditor during your evaluation..

How to Document and Justify Scope Non-Applicability for Audit Readiness

When an external auditor evaluates your Quality Management System, they will not automatically accept a claim that a clause does not apply. The burden of proof rests entirely on the organization to demonstrate that excluding the clause does not negatively impact product quality, statutory compliance, or customer satisfaction. Implementing a formal 4-step scope justification process ensures that your QMS documentation stands up to rigorous third-party assessment.

1. Operational Mapping: Conduct an internal gap analysis to map your actual end-to-end workflows against the ISO 9001:2015 clauses. Identify functions that are completely absent from your organization's business model.
2. Risk and Customer Impact Assessment: Evaluate whether omitting the clause compromises your ability to fulfill customer agreements or statutory regulations. If omitting a control introduces unmanaged risks to product safety or quality, the clause cannot be declared non-applicable.
3. Formal Scope Statement Formulation: Draft a precise justification statement within your documented scope (often recorded in the Quality Manual or top-level QMS scope document).
4. Auditor Verification: Present your documented rationale to your accredited registrar auditor during Stage 1 and Stage 2 certification audits.

Standard Audit-Ready Justification Template:

"The organization declares Clause 8.3 (Design and Development of Products and Services) as non-applicable to its Quality Management System scope. The organization functions exclusively as a contract distributor of industrial fasteners manufactured strictly in accordance with customer-provided technical drawings and specifications. The organization performs no internal design, specification modifications, or engineering R&D. This non-applicability does not affect the organization's ability or responsibility to ensure product conformity and enhance customer satisfaction."

Non-Applicability Based on Product or Service Nature (Clauses 7.1.5 & 8.5)

In the ISO 9001:2015 framework, certain requirements are fundamentally designed for traditional physical manufacturing processes and may not apply to pure service providers or digital enterprises. Under Clause 4.3 (Determining the Scope of the Quality Management System), an organization can declare specific sub-clauses non-applicable if the associated physical activities or equipment do not exist within its operational lifecycle.

For instance, consider an IT consulting agency or a software development firm. These businesses operate entirely in a digital environment and do not utilize physical measuring devices such as calipers, torque wrenches, or calibrated temperature gauges to verify product conformity. In this scenario, Clause 7.1.5 (Monitoring and Measuring Resources) is partially non-applicable. The organization only needs to address data accuracy or software monitoring tools, completely exempting itself from physical equipment calibration and trackabilities.

Similarly, financial services institutions, legal consultancies, and digital agencies do not engage in heavy manufacturing operations. They do not maintain heavy machinery, perform physical product verification, or execute special process validations like heat-treating or welding. Consequently, specific sub-clauses under Clause 8.5 (Production and Service Provision)—specifically Clause 8.5.1(f) regarding process validation and Clause 8.5.1(b) regarding equipment maintenance—can be legitimately justified as non-applicable.

Special Operating Scenarios: Virtual Workspaces, Regulatory Mandates & Outsourcing

In the evolving business landscape, organizations operate under diverse delivery models ranging from fully remote agencies to strictly regulated entities. ISO 9001:2015 accommodates these operational realities under Clause 4.3, provided the justification is factually sound.

Operational scenario decision tree

Virtual / remote agency
Non-applicable: Clause 7.1.3 (Physical infrastructure)

Statutory / legal mandate
Non-applicable: Clause-specific (e.g., Govt testing)

Fully outsourced function
Cannot be excluded: Must apply Clause 8.4 (Vendor control)

1.Virtual & Remote Infrastructure: Companies operating entirely in a digital or cloud-based environment (e.g., digital marketing agencies, remote software teams) do not maintain physical manufacturing facilities or heavy equipment. For these businesses, physical workspace requirements under Clause 7.1.3 (Infrastructure) and Clause 7.1.4 (Environment for the Operation of Processes) can be declared non-applicable. However, the organization must still demonstrate controls over digital security, data infrastructure, and remote working guidelines.

2.Regulatory and Statutory Mandates: In certain highly regulated sectors, government policies or statutory laws delegate specific testing or inspection activities to third-party government bodies. For example, if a medical device developer is legally prohibited from conducting on-site laboratory testing due to local bio-hazard regulations, those specific testing process execution requirements can be formally stated as non-applicable within the QMS scope, referencing the legal mandate.

3.The Outsourcing Misconception: A critical compliance trap is assuming that completely outsourcing a core business process allows an organization to declare that requirement non-applicable. Under ISO 9001:2015, if a process impacts product or service conformity, subcontracting it does not exempt you from accountability. Instead of excluding the process, you must strictly implement Clause 8.4 (Control of Externally Provided Processes, Products, and Services) to monitor and audit external vendors.

Non-Negotiable Core Clauses: What Can Never Be Excluded?

While ISO 9001:2015 offers flexibility through Clause 4.3, it is not a free-pass to skip standard quality governance. The International Organization for Standardization has established clear boundaries: non-applicability is strictly restricted to requirements that do not impair the organization's ability to deliver conforming products or enhance customer satisfaction.

Attempting to exclude core management, evaluation, or governance clauses will result in immediate audit failure and non-conformity issuance. The table below highlights the mandatory clauses that must remain active in every QMS regardless of industry type or company size:

If an organization attempts to justify the exclusion of internal audits (Clause 9.2) or risk management (Clause 6) by claiming to be a "small business with simplified workflows," external registrar auditors will reject the application. These core elements form the backbone of quality management; omitting them renders the QMS invalid.

Strategic Business Benefits & The Certification Body Approval Process

Accurately defining your Quality Management System boundary isn't just a regulatory formality it directly impacts your operational efficiency and audit costs. When applied correctly, identifying non-applicable clauses delivers measurable strategic advantages:

• Elimination of Bureaucratic Overhead: Organizations avoid creating unnecessary documentation, forms, and procedures for non-existent activities (e.g., maintaining calibration logs when no physical instruments exist).
• Cost and Resource Optimization: Internal quality auditors can focus 100% of their energy on core revenue-generating operations rather than auditing non-relevant clauses.
• Streamlined Audit Timeframes: Accredited registrars calculate audit duration based on scope complexity. A concise, well-defined scope statement prevents inflated auditor day-rates.

During certification audits, accredited certification bodies follow strict assessment guidelines before approving any claimed non-applicability:

1. Scope and Context Review: Auditors examine your organization's contextual documents, organizational charts, and process flowcharts to confirm the activity truly does not exist.
2. Impact Assessment: The registrar verifies whether omitting the clause compromises customer contractual agreements, product safety, or regulatory compliance.
3. Verification of Documentation: The certification body ensures that the exact rationale for non-applicability is clearly stated in the official QMS Scope Statement.

If an auditor finds an unjustified exclusion during an assessment, they will issue a formal Non-Conformity Report (NCR). The organization must then either provide additional technical evidence or fully build and implement the required controls before the ISO 9001 certificate can be granted.

Actionable Steps to Justify Non-Applicability & Debunking Common Myths

To ensure your QMS scope withstands external audit scrutiny, quality teams should follow a structured 5-step justification methodology while avoiding common industry misconceptions.

The 5-Step Scope Justification Process

1. Clause-by-Clause Gap Assessment: Systematic review of Clause 7 and Clause 8 requirements against real-world operations to flag non-existent activities.
2. Drafting Cogent Rationales: Formulating clear, objective-based justification statements detailing why a specific requirement does not apply to the business model.
3. Evaluating Stakeholder & Customer Impact: Cross-checking that non-applicability does not violate client contracts, SLAs, or statutory laws.
4. Publishing in Official Scope Statement: Embedding the final non-applicability statement transparently inside top-level QMS documentation (such as the Quality Manual or compliance portal).
5. Auditing & Record Maintenance: Keeping justification records up to date for review during annual surveillance audits.

Common Misconceptions vs. Audit Realities:

• Misconception 1: "non-applicability is a convenient loophole to skip difficult clauses."

Reality: Auditors require documented proof and operational evidence. Non-applicability is only granted when a process genuinely does not exist.

• Misconception 2: "Small businesses can exclude management reviews or internal audits."

Reality: Core governance clauses (Clauses 4, 5, 6, 9, and 10) apply universally regardless of employee headcount.

• Misconception 3: "If we outsource an activity, we can exclude it."

Reality: Outsourced activities remain under the organization’s scope responsibility and must be controlled via Clause 8.4.

By maintaining complete transparency in scope management, companies establish high credibility with external partners, customers, and registrar bodies.

Conclusion: Achieving Compliance Through Accurate Scope Definition

Managing non-applicability under ISO 9001:2015 Clause 4.3 is a practical, value-adding process when executed correctly. Rather than forcing your business into a rigid template, the standard allows you to tailor your Quality Management System scope precisely around your active operational processes.

By distinguishing between truly non-applicable activities (like Clause 8.3 Design for build-to-print suppliers) and mandatory governance controls (like Clause 8.4 Vendor Management for outsourced processes), organizations can eliminate administrative waste while maintaining full audit readiness. Transparently documenting your QMS boundaries ensures seamless third-party audits, strengthens customer confidence, and drives long-term operational excellence.

Frequently Asked Questions: ISO 9001:2015 Clause Exclusions & Non-Applicability

1.Is the term "Exclusion" officially used in ISO 9001:2015?

No. ISO 9001:2015 replaced the term "exclusion" with "non-applicability" under Clause 4.3 (Determining the scope of the quality management system).

2.Can a software company declare Clause 8.3 (Design and Development) non-applicable?

Only if the software company exclusively distributes or deploys off-the-shelf third-party software without doing any custom coding, architecture design, or feature modification.

3.Where must non-applicable ISO 9001 clauses be documented?

They must be formally documented and justified within the organization's QMS Scope Statement, which is typically maintained in the Quality Manual or posted on the company compliance portal.

4.Can Clause 8.4 (Control of Externally Provided Processes) be excluded if we outsource everything?

No. Outsourcing an activity requires you to control the external provider under Clause 8.4. Outsourced activities cannot be declared non-applicable.

5.What happens if an auditor disagrees with our non-applicability justification?

The auditor will issue a Non-Conformity Report (NCR). You will be required to either update your justification with valid evidence or fully implement the clause controls before certification is granted.

6.Is it possible to declare Clause 9.2 (Internal Audit) non-applicable for small teams?

No. Internal audits are a mandatory core requirement of ISO 9001:2015 regardless of organization size or headcount.

7.Will non-applicable clauses be printed on our final ISO 9001 certificate?

Yes. Accredited certification bodies explicitly state the scope boundaries and any justified non-applicable clauses on the official certificate issued to your business.

8.Can Clause 7.1.5 (Monitoring and Measuring Resources) be partially applied?

Yes. If an organization uses software tools for data validation but no physical calibration instruments, it can declare the physical calibration requirements non-applicable.

9.How often should our organization review QMS scope justifications?

Scope justifications should be reviewed at least annually during Management Review Meetings (Clause 9.3) or whenever significant changes occur in business operations.

10.Does non-applicability affect ISO 9001 recertification cycles?

If your business model changes (e.g., adding an in-house design team), your non-applicability status must be updated, which may adjust audit duration during recertification.

About the Author

Sibbu Singh

Digital Marketing Executive at LegalDev

Sibbu Singh is a Digital Marketing Executive at LegalDev, creating informative content on CA and CS services, taxation, business compliance, and corporate requirements.

View Sibbu Singh’s LinkedIn Profile: https://www.linkedin.com/in/sibbu-singh-79275b147