Start a free trial
Menu

Insights

Guides, analysis and news

In-depth guides to the standards and the compliance work behind them - how certification, audits and day-to-day compliance actually work - plus the latest from ComplyTrain.

From the blog

  • Compliance for two-person defence suppliers: where to start

    A 90-day plan for the smallest defence suppliers: let the tender set your scope, document what you already do, fix the security basics primes check, and keep the system small enough for two people to maintain.

    4 min read

  • Supplier qualification: managing your own supply chain

    Learn how to qualify, approve and monitor sub-suppliers, flow down requirements through purchase orders, and keep the records an auditor will ask to see under ISO 9001 clause 8.4 and AQAP.

    4 min read

  • ISO 9001 audit: what happens, stage by stage

    The types of ISO 9001 audit, what Stage 1 and Stage 2 each check, how nonconformities are graded and closed, and how to prepare for your first certification.

    6 min read

  • Three partners, three Member States, one evidence base

    The EDF consortium rule is usually quoted as three entities from three Member States. It has a second limb about control that the word independent quietly hides, and two exceptions that disapply it entirely.

    5 min read

  • EDIP: what changed on 30 December 2025

    The European Defence Industry Programme has been in force since December 2025, with its own money, its own rules and its own deadlines. A good deal of published material still writes as though the European Defence Fund were the only instrument.

    5 min read

View all →

Latest news

See ComplyTrain on your own processes

Start a trial and run it on the processes these articles describe. Prefer a walkthrough first? Book a 30-minute demo.