Skip to content
ISO Nexus

The whole audit, automated: it reads the document pack, finds the nonconformities, cites file and page, fills in the checklist.

From the document pack to a checklist filled in on your template. Every verdict goes through you.

Request access

Already adopted by five companies. Access on request.

Document pack · 11 documents

  1. REG03 Contesto e Parti Interessate.xlsx
  2. Politica integrata.docx
  3. Scheda obiettivi 2026.docx
  4. TAR-9001.pdf
  5. TAR-9003.pdf
  6. TAR-9004.pdf
  7. REG08 Registro Tarature.xlsx
  8. REG11 Matrice della Formazione.xlsx
  9. Presenze LOTO 03-09-2025.docx
  10. Presenze Primo soccorso.docx
  11. Verbale riesame di direzione 2026.docx
REG08 Registro Tarature.xlsxsheet «Tarature»
ID
TAR003
Strumento
Rilevatore gas
Esito
Superato (Cert: TAR-9003)
TAR-9003.pdfp. 1

CERTIFICATO DI TARATURA TAR-9003

Esito: NON SUPERATO. Deriva oltre i limiti: strumento da ritirare.

Registers against records: cross-check in progress

1 mismatch: the TAR-9003 outcome does not agree

Minor nonconformityISO 9001 · 7.1 RisorseIl registro «REG08 Registro Tarature.xlsx» riporta l'esito «Superato» per «Rilevatore gas», ma la registrazione «TAR-9003.pdf» contiene indicazioni di esito negativo. Da verificare quale delle due fonti riporti il fatto.

7.1 Risorse → ISO 9001 checklist filled in on your template

A real analysis of a made-up pack. Product in Italian. Built by Axialoop.

The whole audit, in one tool.

Not an assistant that summarises: ISO Nexus does the whole job and keeps it verifiable, from the first page of the pack to the last box of the checklist.

  1. Reads every document, scans included
  2. Checks every clause, requirement by requirement
  3. Cross-checks registers against records
  4. Cites file and page for every piece of evidence
  5. Hands every verdict to the auditor
  6. Fills in the checklist on your template

Tested on real document packs and already in use by auditors and certification bodies: five companies have adopted it.

A document pack goes in, a checklist comes out.

You upload the client's ZIP once. Each step finds ready what the previous one produced.

  1. Step 1

    The evidence report

    It reads every document, scans and spreadsheets included, and writes a paragraph for each. If a file is unreadable, it says so.

    Output report.docx

  2. Step 2

    The nonconformities

    It rereads the pack clause by clause and checks registers against records. It starts on its own while you read the report.

    Output findings with file and page

  3. Step 3

    Your review

    Every finding goes through you: confirm, delete with a reason, or edit. Until you decide, nothing moves on.

    Output decisions on record

  4. Step 4

    The completed checklist

    Filled in on your own template. Confirmed findings become gaps with a corrective action; the rest, conformity you decided.

    Output checklist.docx · .xlsx

Six minutes, from document pack to checklist.

A real pack of 62 documents, the full flow measured in production.

  1. 0:00You upload the ZIP
  2. 1:30Evidence report
  3. 5:11Nonconformities with file and page
  4. 5:48Checklist ready to fill in
342 documents in three and a half minutes
The report of a 342-document pack, one paragraph per document, none lost.
Findings while you read
Detection starts on its own: on 31 documents, findings were ready 68 seconds after the report.
Re-analysis in two minutes
Rereading the same pack reuses what was already read: 102 to 121 seconds.

Times measured in production on real client packs, September 2026. They vary with pack size and the number of scans.

The engine cites. You decide.

The review is where judgement goes back to the auditor. With every tool needed to exercise it.

Try it: this is a real finding, on a sample pack.

Minor nonconformityISO 9001 · 8.7 Controllo output non conformi

Requirements

  • not foundNon è presente una procedura documentata per l'identificazione e il controllo degli output non conformi.
  • partialL'output non conforme è identificato, ma manca evidenza di azioni intraprese o registrazioni di controllo.
  • not foundNon risultano registrazioni delle azioni correttive o delle decisioni relative agli output non conformi.
  • not foundNon vi è evidenza che la responsabilità per la gestione degli output non conformi sia assegnata o documentata.

tar-9003.pdf · p. 1

Esito: NON SUPERATO. Deriva oltre i limiti: strumento da ritirare.

What it has already found for auditors.

Real cases, on real client packs. No names, because the packs are not ours.

  • Found174 documents

    The needle in the haystack

    It found the only anti-bribery appointment in the pack, cited its pages, and closed the clause as conforming.

  • FoundCalibration register

    A code wrong by one digit

    The register cited PAM-7729, the pack contained PAM-7229. The client had not noticed.

  • FoundTraining matrix

    Trained on paper, absent in the room

    A person marked as trained on a date, and missing from the attendance sheet of that session.

  • Found«Due diligence» folder

    The content, not the label

    It held safety checklists, not due diligence: judged insufficient for what it really was.

Improved, and measured

  • Identical verdicts between two analyses of the same pack

    76%90%
  • Detection on a pack with a 1.2-million-character risk assessment

    296 s168 s
  • Risks read from that same assessment

    0492
  • Genuine citations rejected over a formatting difference

    21.4%7.6%

Measurements recorded between September and October 2026 on real packs under ISO 9001, 14001, 27001, 37001, 45001, 50001.

The AI proposes, the auditor decides. And the data stays protected.

Designed on the principles of the EU AI Act and the rules of the GDPR. What holds today, checked against the product and the production configuration.

AI Act principles

  1. Human oversight

    No verdict reaches the checklist without the auditor's decision.

  2. Transparency

    Every finding shows its evidence: file, page, and a citation checked against the document.

  3. Traceability

    Decisions, reasons and documents shown on site stay on record with author and date.

  4. Stated limits

    The system flags what it could not read and what needs checking, instead of hiding it.

One model provider
Reading, OCR and analysis run on Microsoft Azure: Azure OpenAI and Azure Document Intelligence.
No training
Under Azure OpenAI's terms, the documents sent are not used to train the models.
Separate cases
Each auditor has their own account and sees only their own cases and analyses.
Deletion on request
To delete a case and its documents, write to info@axialoop.com.

The controller of the clients' documents remains the auditor or the body: Axialoop processes them on its behalf.

What it does not do, on purpose.

A wrong finding costs more than a missed one. These limits are written into the code.

  • It does not declare conforming what it cannot cite.

    Conformity without proof is yours alone to decide, by deleting the finding.

    not foundno citation: no conformity
  • It does not trust its own citations.

    Each one is looked up in the document. If it is not there, the requirement goes back to not demonstrated.

    verbatimEsito: NON SUPERATO.

    approximatel'RSPP designato…

    absentprocedura approvata dalla direzione

  • It does not mistake a missed file for an absence.

    A major nonconformity with no document examined is marked «to be verified».

    Major nonconformityto be verified0 documents examined
  • It does not hide what it could not read.

    If part of the pack is unreadable, the warning follows it to the review.

    Part of the pack cannot be read: verdicts that depend on it need checking.

  • It does not promise the same verdict twice.

    Two analyses may differ on a few clauses. That is why the review is mandatory.

    analysis 1Minor nonconformity

    analysis 2Major nonconformity

    review required

Ten standards today. More on the way.

Each standard has its own register of clauses and requirements, aligned with the checklist. We update them when they change and keep adding new ones: ask us for the one you need.

  • ISO 9001Quality
  • ISO 14001Environment
  • ISO 45001Health and safety
  • ISO/IEC 27001Information security
  • ISO 37001Anti-bribery
  • ISO 50001Energy
  • ISO 14064-1Greenhouse gases
  • ISO 39001Road traffic safety
  • PAS 24000Organisational wellbeing
  • EASISocial responsibility and ESG

Questions.

Does it replace the auditor?

No. It reads, compares and cites; the judgement on every finding stays yours, and without your review no finding reaches the checklist.

Which documents can it read?

PDF including scans (with OCR), Word, Excel, PowerPoint, OpenDocument, RTF, .eml and .msg emails, signed .p7m files, images and text. The pack is uploaded as a ZIP archive.

Is the checklist mine?

Yes: it is filled in on your template, .docx or .xlsx. If you correct it by hand and upload it again it becomes the next version, without deleting the previous one.

What is the difference between deleting a finding and judging it conforming?

«Conforming» is not a severity you can assign: a clause comes out conforming only where you deleted the finding and gave the reason. Every presumption of conformity is backed by a human decision you can trace later.

The client shows me a document during the audit: can I use it?

Yes. You attach it to the analysis: the engine reads it and can cite it. It stays tied to that analysis only, with your name and the date, and does not enter the client's pack.

Do two analyses of the same pack give the same result?

Not always: evidence retrieval has a measured variability. That is why the review is mandatory and comparing the scores of two analyses is meaningless.

Which language does it work in?

Italian: reports, findings and checklists are written in Italian.

How do I get access?

With the form below. A person replies, from Axialoop's mailbox.

Open your next document pack here.

Already adopted by five companies, auditors and certification bodies among them. Access is on request.

Standards you audit against

By sending you agree that Axialoop uses this data to reply to you, as described in the privacy notice.