An auditor is sitting in the conference room, with a component on the table in front of him. He asks, “Show me that this screw connection was made correctly—using what torque, what tool, by which worker, and within what time frame.” The quality manager opens the system. The data is there—somehow. An order record here, an Excel export there, a stack of papers from the filing cabinet. The auditor shakes his head. Not because there is no data, but because none of these data records is clearly assigned to this component. This is not an isolated case. It is the norm in manufacturing companies that have selected QMS software based on the wrong criteria.
The problem isn’t a lack of commitment to digitalization. It lies in the fact that the market for quality management software is confusing, and product promises rarely reflect the complexity of the real production environment. A solution that works in a pilot plant fails during rollout due to the SAP interface. A system that correctly documents IATF 16949 Section 7.5 cannot establish component-level traceability in the assembly process. And a tool that looks impressive in the demo runs on databases that slow down operations after three years.
For over 30 years, we have been supporting manufacturing companies in the automotive, mechanical engineering, rail technology, and medical technology sectors with quality projects. BMW relies on our solutions, as do Mercedes-Benz and Knorr-Bremse. What we’ve learned in the process: Choosing quality management software is an architectural decision, not a feature decision. If you apply the wrong criteria, you’ll buy the wrong software.
This guide outlines the requirements that quality management software in manufacturing must actually meet by 2026—by use case, industry, and level of integration. It includes specific selection criteria, a vendor comparison of relevant categories, and a structured approach for the evaluation process.
THE MOST IMPORTANT POINTS AT A GLANCE
|
IN SHORT
|
What Quality Management Software in Manufacturing Really Needs to Be Able to Do
Many companies purchase QMS software and realize two years later that they have a document management system—but not a quality management system for production. The difference lies in whether the software operates on the production line or behind a desk.
Quality management in manufacturing means: Process parameters are recorded with component-level precision. Test results are generated at the workpiece, not in a downstream data entry form. Release decisions are based on data available in real time—not on reports compiled by a worker at the end of the shift.
|
Requirement |
Office QMS (typical) |
Manufacturing QMS (required) |
|
Inspection planning |
Form-based, manually maintained |
Linked to production order and bill of materials |
|
Data entry |
Manual entry by process |
Automatically from machine, sensor, tool |
|
Traceability |
Batch or order reference |
Component-specific, with timestamp for each process step |
|
Approval |
Manual visual inspection workflow |
Rule-based, with escalation in case of deviation |
|
Archiving |
File system, often without access logs |
Audit-proof, IATF-compliant, 15+ years |
|
Integration |
Data export via CSV/Excel |
Bidirectional real-time MES/ERP connection |
|
Notifications |
Email notifications |
Real-time alerts for process deviations |
Automotive suppliers certified to IATF 16949 Section 8.5.1 (Production Control) require full proof that process parameters were within defined tolerances—for every part manufactured. A system that manually records test results after the fact cannot structurally provide this proof.
In mechanical engineering and medical technology, additional requirements apply: test equipment calibration with traceability to national standards (ISO/IEC 17025), change management for test plans with an audit trail, and supplier qualification with automatic blocking in case of non-conformance results. Generic QMS software without manufacturing integration typically does not cover these requirements.
An overview of the five most important selection criteria for QMS software
In practice, the decision to purchase quality management software rarely fails due to missing features—it fails because the right questions weren’t asked before making the selection. Those who do not explicitly evaluate the five core criteria end up making a purchase based on demos built with optimized test data.
The first criterion is integration capability: Can the software receive production orders from the ERP system and report quality results back? Can it read machine data directly via OPC UA? Without bidirectional integration, a data disconnect is inevitable—and with that disconnect come data errors, delays, and manual work.
The second criterion is configurability without programming effort. In manufacturing environments, test plans, tolerance limits, and process parameters change regularly. QMS software that requires a ticket to be submitted to the software provider for every change is not practical in real-world use. Changes to the test plan must be implementable by the quality engineer themselves.
Third: Traceability at the component level. Batch traceability will no longer be a differentiating factor by 2026—it will be a minimum requirement. The key factor is whether the software can assign each process step to a specific component, complete with a timestamp, tool ID, and operator ID. In the event of a recall, this level of detail determines the scope of the affected parts.
The fourth criterion is archiving security: Does the archiving architecture meet the legal retention periods (IATF 16949: at least 15 years after the last delivery; EU Product Liability Directive 2024: up to 25 years for latent defects)? And is the archive designed so that data remains readable without system licenses—even if the software provider no longer exists in 10 years?
The fifth criterion is the future-proofing of the database for AI-supported analyses. AI models for anomaly detection and predictive quality require structured, component-specific time-series data—with consistent metadata and sufficient historical depth. A QMS that stores data only in aggregated form is not usable for AI analytics.
|
Criterion |
Minimum Requirement |
Best Practice |
Warning signal |
|
MES/ERP Integration |
Bidirectional interface |
OPC-UA + REST API, native ERP integration |
Only CSV export available |
|
Configurability |
Inspection plans can be modified independently |
No-code configuration, versioning |
Every change = IT ticket |
|
Traceability |
Batch reference per order |
Component-specific with timestamp + operator ID |
Manual logs only |
|
Archiving |
10 years, readable without a license |
15–25 years, IATF-compliant, audit-proof |
Proprietary format, cannot be exported |
|
AI readiness |
Structured raw data available |
Time series by component, API access |
Aggregated metrics only |
|
MASTER DATA CHECKLIST – Check before selection
|
QMS Software and Integration: Where Systems Must Converge
The biggest implementation risk with QMS software does not lie in the software itself—it lies in the assumption that integration will be resolved “somehow.” In practice, a lack of integration planning means manual data transfer, delays, and the loss of quality data context at system boundaries.
Manufacturing companies typically operate three system environments that must work together for quality management to function effectively: the ERP system with production orders, inspection specifications, and business metrics; the MES or production data acquisition system with process parameters, machine feedback, and component-specific measurement values; and the QMS or quality data management system with inspection results, CAPA actions, and audit reports.
|
Data Flow |
From → To |
Action in case of missing data |
|
Production order with inspection specifications |
ERP → MES/QMS |
QMS has no tolerance limits – no automatic target/actual comparison possible |
|
Inspection results per component |
MES/QMS → ERP |
ERP posts approved parts without quality documentation – inventory and quality are decoupled |
|
Calibration status of test equipment |
QMS → MES |
MES does not lock out uncalibrated tools – measurement results are invalid |
|
Scrap and NIO notifications |
MES → ERP |
ERP calculates incorrect material costs and delivery dates |
|
CAPA status |
QMS → MES |
Actions from deviation reports do not reach production |
|
Inspection plan changes |
ERP/QMS → MES |
Production is working with outdated inspection specifications |
The technical standard for machine connectivity in manufacturing is OPC-UA—the international industrial communication standard that enables bidirectional communication with a built-in semantic model and TLS encryption. For ERP-side integration, REST API has established itself as the standard: flexible, supported by all modern ERP systems (SAP, Microsoft Dynamics, proALPHA, Oracle), and operable without proprietary middleware.
QMS software that does not natively support either OPC-UA or REST-API and instead relies on CSV exports or proprietary connectors generates operating costs that are not reflected in the purchase price: integration costs, maintenance costs associated with system updates, and an inherent susceptibility to data quality issues at every system boundary.
"It’s not the machine, not the worker—but the moment when a system change is bridged by an Excel file. That’s where quality data loses its context. And without context, data cannot serve as a basis for decision-making."
— Korbinian Hermann, CEO, CSP Intelligence GmbH
|
PRACTICAL TIP – Native MES/ERP/QMS Integration Architecture IPM is designed from the ground up for cross-system integration: OPC UA interface to the machine level, REST API for ERP connectivity (SAP, Microsoft Dynamics, proALPHA), direct QMS linkage for inspection results. Every data point includes the production order ID as a required field. Master data changes in the ERP control plan are automatically propagated to the MES. MAN Truck & Bus has connected 80 bolting stations using this system and records over 30,000 bolted joints daily. |
Standard compliance in practice: IATF 16949, ISO 9001, and industry-specific requirements
"IATF-compliant" appears on nearly every QMS software product page. What this actually means varies considerably. IATF 16949 is not a software certification—it is a standard for quality management systems that defines processes, evidence, and documentation structures. The software must provide the necessary data foundation; whether the quality management system is then certifiable is determined by the auditor.
The relevant sections for QMS software in manufacturing are Section 7.5 (Documentation and Records), 8.5.1 (Production Control and Delivery Processes), 8.5.2 (Traceability), 8.6 and 8.6.2 (Release of products and services), and 9.1 (Monitoring, measurement, analysis, and evaluation). Together, these sections define the minimum requirements that QMS software in automotive production must meet.
|
Standard / Section |
Requirement |
What the software must provide |
Typical Gap |
|
IATF 16949, 7.5 |
Documentation, Records |
Audit-proof logs with timestamps and author attribution |
File system without access log |
|
IATF 16949, 8.5.2 |
Traceability |
Component-specific assignment of all process steps |
Batch-based only, not component-based |
|
IATF 16949, 8.6.2 |
Approval of safety-related products |
Documented approval workflow with assigned responsibility |
Approval outside the system (email, paper) |
|
ISO 9001:2015, 6.1 |
Risk-based thinking |
Risk analysis with measures and effectiveness verification |
No link to process data |
|
ISO 9001:2015, 9.1 |
Data-driven decisions |
Quality metrics automatically derived from process data |
Manual KPI creation without process integration |
|
MDR (Medical Devices) |
Design and production documentation |
Complete Device History Record |
Lack of integration between design and manufacturing |
|
VDI/VDE 2862 (Automotive) |
Screw connection classes A and B |
Complete documentation of safety-critical connections |
No archiving of tightening curves |
For medical technology (MDR, ISO 13485), additional requirements apply that go beyond IATF 16949: Device History Records for every manufactured product, full traceability from raw material batches to the delivered device, and change management with validation evidence for every modification to the test plan. Generic QMS software from the ISO 9001 environment is not structurally designed to meet these requirements.
A frequently underestimated issue is the retention period following product discontinuation. In the automotive sector, IATF 16949 mandates a retention period of at least 15 years after the last delivery—many OEM-specific quality requirements (QMH BMW, Mercedes-Benz supplier standards) go even further. The EU Product Liability Directive 2024 extends liability periods to up to 25 years for latent defects. QMS software that does not provide secure long-term archiving or delegates this to external systems has merely postponed the problem.
|
WHEN QMS SOFTWARE FUNCTIONS IN ACCORDANCE WITH IATF STANDARDS
|
|
PRACTICAL TIP – Audit-proof long-term archiving for IATF environments CHRONOS archives production data in an audit-proof and standards-compliant manner for up to 30 years—regardless of database versions and software licenses. The BMW Group uses it to archive an average of more than 130 million data records per plant and month from various Oracle databases. Data remains directly accessible via search queries without the need for re-import into production systems. → Learn more about CSP CHRONOS and the archiving architecture |
AI in Quality Assurance: Benefits, Limitations, and Regulatory Requirements
No topic is mentioned more frequently in discussions about QMS software in 2026—and hardly any topic is more frequently misunderstood. AI in quality assurance works where it can access structured, component-specific time-series data, and where the goal is to support decision-making—not to replace it.
The concrete added value lies in three application areas: anomaly detection in process curves (screwing curves, welding curves, test signals), where AI models identify patterns that standard statistical methods miss; trend analysis for process drift before a process goes out of tolerance; and correlation analysis between process parameters and quality results, which accelerates manual root-cause analyses.
|
AI in QA: Where It Delivers Value |
AI in QA: Where it falls short |
|
Anomaly detection in screwdriving curves and welding curves |
Approval of safety-critical parts without human inspection |
|
Trend analysis for process drift (Predictive Quality) |
Quality assessments without explainable decision logic (EU AI Act) |
|
Correlation between process parameters and NIO rate |
Evaluation without a sufficient data set (< 10,000 data points per class) |
|
Automatic classification of signal trends (OK/NOK/borderline case) |
Fully autonomous CAPA generation without technical validation |
|
Prioritization of test samples by risk class |
Replacement for standard-compliant test planning and approval processes |
The regulatory framework is clear: The EU AI Act classifies AI systems that make decisions regarding the quality and safety of products as high-risk AI systems (Annex III, Category 8 for safety-critical products). The requirements include transparency of decision-making logic, human oversight and the ability to intervene, data governance and documentation of training data, as well as risk management throughout the model’s entire lifecycle. AI is decision support—never a substitute for human decision-making.
The EU Product Liability Directive 2024 expands the definition of “manufacturer” to include companies that integrate AI systems into safety-related decisions. This means: If an AI issues a recommendation for approval and a defective product is released, the company that deployed the AI is liable—regardless of whether a human formally confirmed the recommendation. Documenting the human decision-making process thus becomes mandatory.
Step-by-Step: How a Structured QMS Software Selection Process Works
Anyone who starts the selection of QMS software with a demo session has the process backward. The order determines whether you end up purchasing software that meets your specific requirements—or one that looks good in the demo.
Phase 1: Requirements Gathering (4–6 weeks)
Quality managers, production management, IT, and—if applicable—compliance are all involved. Result: a written requirements document with must-have criteria, nice-to-have criteria, and exclusion criteria. Key questions: Which standards apply? Which systems must be integrated? What data must be archived and for how long?
Phase 2: Longlist and market research (2–3 weeks)
Based on the requirements, vendors are qualified by category: manufacturing focus yes/no, native integration interfaces yes/no, references in the company’s own industry yes/no. Typically: 8–15 vendors on the longlist, of which 3–5 make the shortlist.
Phase 3: Structured Demo Process (3–4 weeks)
No open demo slot—instead, a defined demo script that is identical for all vendors. Scenarios: Retrieve a traceable component from production, generate an NIO notification and track escalation, modify a test plan and document the change history, retrieve archived data from the previous year. Anyone who cannot demonstrate this live will not be able to demonstrate it on the production line.
Phase 4: Technical Evaluation and Pilot Project (6–12 weeks)
At least one vendor should be evaluated in a limited pilot environment before the purchase decision is made—using real data, real system integration, and real-world operations. Pilot scope: one line, one plant, one defined data stream. Costs for a pilot project typically range from 8,000 to 20,000 euros and should be weighed against the implementation risks of a failed rollout.
Phase 5: Contract Negotiation and Go-Live Planning
Critical contract points: data export rights (can the database be exported to a standardized format?), SLA for interface availability, maintenance and update costs over 10 years, training concept, and key user training. The go-live plan defines rollout phases, acceptance criteria, and fallback scenarios.
|
Phase |
Duration |
Result |
|
1. Requirements Gathering |
4–6 weeks |
Written requirements document with Must/Can/Exclusion |
|
2. Longlist and market research |
2–3 weeks |
3–5 qualified vendors on the shortlist |
|
3. Structured demo process |
3–4 weeks |
Evaluation matrix with vendor comparison by criterion |
|
4. Pilot and Technical Evaluation |
6–12 weeks |
Robust feasibility assessment using real data |
|
5. Contract and Go-Live Plan |
4–8 weeks |
Signed contract, rollout plan, acceptance criteria |
The entire selection process typically takes 6–9 months. Those who want to make a decision faster risk not sufficiently evaluating the depth of integration. Those who take longer often have not finalized the requirements document or encounter procurement processes that are not designed for software evaluations.
Vendor Comparison: Categories and Positioning in the DACH Manufacturing Market
The market for quality management software is heterogeneous: there are generic QMS platforms from the office environment that are expanding into the manufacturing industry; specialized manufacturing QMS solutions with production integration; and integrated platforms that combine QMS, process data, and archiving in a single system. These categories are crucial because they determine the fundamental suitability for manufacturing environments.
Another dimension is the deployment architecture: Cloud-based systems offer rapid implementation and regular updates, but raise questions regarding data sovereignty and network availability on the shop floor. On-premise systems offer data control and offline capability, but require internal IT resources for operation and updates. Hybrid architectures are becoming increasingly relevant, especially for companies with international locations.
|
Category |
Typical Strengths |
Typical weaknesses |
Suitable for |
|
Generic QMS platform (office-focused) |
Compliance workflows, document management, broad standards coverage |
No native production integration, no OPC UA, no machine data handling |
Quality departments without direct line management |
|
Manufacturing specialist (production focus) |
MES integration, machine data, traceability, industry expertise |
Often limited ERP integration, weaker document management |
Automotive, mechanical engineering, production lines with high data volumes |
|
MES platform with QMS module |
High integration with production data, unified database |
QMS functionality often not fully developed, weak archiving concept |
Companies with an MES-first strategy |
|
Integrated quality data platform |
Consistent data foundation, native integration, specialized modules |
Deeper implementation, industry-specific focus |
IATF-certified automotive suppliers, medical technology, railway technology |
For manufacturing companies with IATF 16949 certification or comparable industry requirements, an integrated quality data platform is the structurally superior choice—not because generic QMS platforms are inferior, but because they are optimized for a different use case. The challenge in evaluating providers is that many vendors from the office QMS segment have expanded their product descriptions to include manufacturing topics without having kept pace with the technical depth of integration.
Meaningful references are the most reliable indicator of quality: Which companies in your own industry and of similar size are actually using the software in production? How long have they been using it? And is the provider willing to facilitate direct communication with a reference customer?
Frequently Asked Questions
What is the difference between QMS software and a Manufacturing Execution System (MES)?
A Manufacturing Execution System controls and documents ongoing production in real time: process parameters, machine feedback, order progress, and material flow. QMS software manages the quality management system: inspection plans, inspection results, CAPA actions, audit reports, and proof of compliance with standards. In practice, the boundaries between the systems overlap significantly—component-specific quality data is generated in the MES but is required in the QMS for quality evaluations and compliance documentation. A functional quality data architecture integrates both systems bidirectionally, rather than transferring the data manually.
What certifications should a provider of quality management software demonstrate?
The provider itself should be certified to ISO 9001:2015—this is a basic indicator of the quality of its own development process. For providers in the medical technology sector, ISO 13485 certification is relevant. More important than manufacturer certifications, however, are references: Which companies in your own industry are using the software in production, for how many years, and with what results in IATF audits? The software itself is not the subject of certification—it is the user company’s quality management system that is certified.
How long does it take to implement QMS software in manufacturing?
The implementation time depends heavily on the scope of integration and the quality of the master data. For a limited pilot implementation on a single line, 6–12 weeks is realistic. A full rollout across multiple plants or production areas typically takes 6–18 months, spread over several phases. The most common cause of delays is master data harmonization: part numbers, inspection characteristics, and tolerance limits must be available in a consistent format before automated data flows can be established.
How much does quality management software cost in manufacturing?
The cost range is considerable and depends on the licensing model, system complexity, and scope of implementation. As a rough guide: entry-level solutions for small manufacturing companies start at 500–2,000 euros per month (SaaS license). Specialized manufacturing QMS systems for medium-sized and larger companies typically involve implementation costs of 50,000–500,000 euros plus ongoing license and maintenance costs. The payback period in pilot projects is 12–36 months, calculated based on reduced scrap, lower rework costs, and shorter response times to quality issues. The costs of non-implementation—recall costs, audit failures, manual documentation—are often not fully factored into the pricing.
Can quality management software make AI-driven decisions?
AI-supported QMS functions can detect anomalies in process flows, identify trends in process drift, and suggest inspection priorities based on risk classes. What AI is not allowed to do: make fully autonomous approval decisions for safety-critical components without human oversight. This is not a matter of corporate ethics, but a regulatory requirement: The EU AI Act classifies such systems as high-risk (with corresponding requirements for transparency, human oversight, and documentation). The EU Product Liability Directive 2024 holds companies liable for damages resulting from AI-supported decisions. AI is a decision-making aid, not a substitute for human decision-making.
How do I ensure that quality data is still readable 15 years after the software has been shut down?
Audit-proof long-term archiving is an architectural decision that must be made independently of the QMS delivery system. Quality data must be archived in a format that remains readable without software licenses—typically by extracting it into an open database format or a documented archive format. Critical requirements: database version independence, access logging for audit trail purposes, search functionality without system access to the production system, and physical data backup that ensures protection against ransomware. IATF 16949 mandates a minimum of 15 years; the EU Product Liability Directive 2024 extends liability periods to up to 25 years.
Which industries have the strictest requirements for QMS software?
The highest requirements for documentation, traceability, and verifiability are found in medical technology (MDR, ISO 13485: Device History Record for every manufactured product), aerospace (AS9100: full process traceability, first article inspection), and automotive (IATF 16949: component-specific process parameters, VDA guidelines, OEM-specific quality requirements). In mechanical engineering, requirements vary greatly depending on the application: Safety-critical components (brakes, steering, pressure vessels) have significantly stricter traceability requirements than standard components.
Korbinian Hermann founded CSP with the aim of providing manufacturing companies with the database they need in an emergency. He has 20 years of experience in industrial quality data infrastructure—from data collection to audit-proof long-term archiving.
