For UKAS-accredited inspection bodies and laboratories · BSI-audited medical device manufacturers
Spreadsheet validation built for UKAS assessments, and BSI audits.
Evidence for your assessor in about three minutes, not three consultant days.
Whether it is the Clause 7.5 row of your ISO/IEC 17020:2026 gap analysis, a Clause 7.11 question at your laboratory's surveillance visit, or a BSI auditor tracing a lot to its Cpk, the question is the same: how do you know your spreadsheet calculates correctly, and that it is the version you validated? NormXL recalculates every formula with an independent engine, proves the locks, constants and rounding at each acceptance limit, and seals the file with SHA-256. It does all of this inside your browser, with 0 KB of your workbook uploaded. About three minutes. €149 + VAT.
Evidence you can reference in your UKAS gap-analysis proforma for the ISO/IEC 17020:2026 transition.
€149 + VAT per spreadsheet: less than a quarter of one consultant day, even at contractor rates.
Your standard, your UK body, and what they'll look at
UKAS— ISO/IEC 17020 · ISO/IEC 17025
BSI— ISO 13485 · UK MDR
HSE— LOLER · PSSR
MHRA— UKCA
Your standard
Your UK body
What they'll look at
ISO/IEC 17020:2026: inspection bodies
UKAS · HSE (statutory context)
Clause 7.5, control of data and information · your transition gap-analysis proforma · the calculations behind LOLER and PSSR reports
ISO/IEC 17025:2017: testing and calibration laboratories
UKAS
Clause 7.11 validation and systematic checking of calculations · decision rules · uncertainty budgets to UKAS M3003
ISO 13485:2016: medical devices
BSI (UK Approved Body 0086) · MHRA · UK Responsible Person
Clauses 4.1.6, 7.5.6 and 7.6 · lot-release and test-evaluation spreadsheets · UKCA and CE technical documentation
Engineered for UKAS assessments. UKAS is a signatory to the international mutual recognition arrangements for accreditation (the ILAC MRA and the IAF MLA, which have operated together under Global ACI since 2026). The accreditation your Dossiers help you evidence is therefore recognised as equivalent by counterpart bodies such as NATA (Australia), RvA (Netherlands) and DAkkS (Germany). That recognition attaches to your accreditation, not to NormXL or any other tool. For device manufacturers exporting further afield, the ISO 13485 profile is aligned with MDSAP and FDA QMSR expectations.
Names of accreditation bodies, Approved and Notified Bodies and regulators are used only to identify the frameworks NormXL Dossiers are structured for. NormXL is independent and is not affiliated with, endorsed by or approved by UKAS, BSI, HSE, the MHRA or any other body. Accreditation and certification decisions rest solely with them.
LOLER 1998 and PSSR 2000 apply in Great Britain, where HSE or the local authority enforces them depending on the premises. Northern Ireland has its own equivalents, enforced by HSENI. The UK MDR 2002 and UKCA marking apply in Great Britain; Northern Ireland follows the EU MDR and IVDR.
Your ISO/IEC 17020:2026 gap analysis has a Clause 7.5 row. Fill it with evidence.
UKAS has offered assessments against ISO/IEC 17020:2026 since 1 September 2026. From 1 January 2028, every assessment will be against the 2026 edition. Before your transition assessment, you submit UKAS's assessment-readiness gap-analysis proforma, with supporting evidence, at least one month ahead of the visit. Your lead assessor reviews it as a chargeable desk review: about half a day of lead-assessor and half a day of technical-assessor time for a small, simple body, rising to a day or more each for a large, complex one. Gaps generate further time. For many bodies the hardest row to evidence is Clause 7.5, the new standalone clause on the control of data and information.
The difficulty is not understanding the clause. It is the evidence. "Our spreadsheets are on a secure drive" describes access control. Clause 7.5 asks whether the tools that produce your inspection data are validated for their intended use, protected against alteration and identifiable by version. For a calculation template, that means a validation record. For a body with a dozen templates, that means weeks of work or a consultant's invoice. Or it means one Dossier per template, generated in about three minutes, each referenced by ID and SHA-256 in the Clause 7.5 row.
The UKAS timetable
27 March 2026: ISO/IEC 17020:2026 published.
1 September 2026: UKAS ready to assess against the 2026 edition; new applications only against 2026. Existing bodies may choose either edition until 31 December 2027.
At least one month before your transition assessment: your gap-analysis proforma, with evidence, is due.
1 January 2028: every UKAS surveillance and reassessment visit uses the 2026 edition.
27 March 2029: 2012-edition accreditations end. Bodies that have not transitioned face suspension, then withdrawal.
Dates as published by UKAS at the time of writing (November 2026). Always confirm your own schedule with your UKAS Assessment Manager.
For most UK inspection bodies, the evidence will be needed at a routine visit, not at the 2029 deadline.
What a convincing Clause 7.5 answer contains
When you prepare your gap analysis, many bodies find their honest answer for Clause 7.5 is "partially": the spreadsheets exist and they work, but nobody can prove it. This is what a convincing answer contains:
Gap-analysis line
What a convincing answer contains
NormXL evidence
Inventory of software affecting results
Every spreadsheet that influences inspection results, with version and owner
Annual Register: an audit-day integrity report listing every template with its name, version, SHA-256 and status on one page
Validation before use
Documented intended use, executed tests, approval
Dossier §1 URS · §4 OQ dual-engine test vectors · §7 approval block
Protection against unauthorised change
Locks and protection in place, plus a way to detect change
§6 lock and protection audit · SHA-256 fingerprint on every page
Integrity of inspection records
The printed value is the value the decision was based on
Defined triggers, with evidence of re-validation after change
§7 re-validation triggers · Register version diff and re-validation
Confidentiality during validation (Clause 4.2)
No client data passed to third parties to validate the tools
Local-processing statement: 0 KB of the workbook transmitted, no third-party processing
Example wording you can adapt:
"All calculation spreadsheets that influence inspection results are listed in our validated spreadsheet register. Each was validated against a documented intended use before use, or retrospectively on [date]. Validation evidence comprises independent recalculation of every formula, boundary and negative testing, a protection and rounding audit, and a SHA-256 fingerprint binding the evidence to the released file. Any change to formulas, constants, protection or layout triggers re-validation before release. No client data is transferred to third parties during validation."
An illustrative completed row:
Requirement
Status
Evidence
Controls
Clause 7.5: control of data and information. Calculation templates used to determine conformity
Met
Validation Dossiers ND-2026-0147 (B31.3 wall thickness, SHA-256 as recorded in the register) and ND-2026-0148 (UG-27 shell rating, SHA-256 as recorded in the register); register of validated templates
Formula cells locked; template versions identified by SHA-256 in the register; re-validation on change through the Annual Quality Register
Illustrative wording and values in a generic format. This is not a UKAS form: use the proforma and wording UKAS provides.
The gap analysis is your own self-assessment against the 2026 edition; NormXL does not write it for you. It gives you the evidence to point to.
What your assessor is likely to ask:
"Which version of this calculator produced the report of thorough examination you issued in March?"
"Where is the source for the 0.4 in this wall-thickness formula?"
"You're Type non-A. Why doesn't network security cover this?"
Type A or Type non-A, it is the same question. The 2026 edition reduces the A, B and C classification to Type A and Type non-A. Your type describes your independence. It does not reduce your data-control obligations: Clause 7.5 applies to every UKAS-accredited inspection body. Internal network security protects the file from outsiders. It does not prove that the formulas are right, that nobody overwrote them, or that the printed value matches the decision.
Your transition visit 1 Mar 2027 · Gap-analysis proforma due (≥ 1 month before) 1 Feb 2027
Your report goes to the duty holder. The calculation behind it may one day go to HSE.
Many UK engineering inspection bodies carry out thorough examinations of lifting equipment under LOLER 1998 (regulation 9) and examinations of pressure systems in accordance with written schemes under PSSR 2000 (regulations 8 and 9). Many demonstrate their competence as UKAS-accredited ISO/IEC 17020 inspection bodies. The report your engineer surveyor issues is what the duty holder relies on to keep a crane or a steam system in service. When a defect involves an existing or imminent risk of serious personal injury, a copy goes to the enforcing authority (LOLER regulation 10).
HSE does not accredit inspection bodies, and it does not validate your spreadsheets. Neither LOLER nor PSSR prescribes how you do your arithmetic: the law asks for a competent person. UKAS, however, assesses how you control that arithmetic under Clause 7.5. Accreditation is about competence. Statutory work is about accountability. If an incident leads to an investigation, the questions will be concrete:
Which calculation supported the safe working load or the next examination date?
Was it the right version?
Could anyone have changed it?
The statutory frame, briefly:
LOLER 1998. Lifting equipment is thoroughly examined before first use, after installation at a new site, and periodically: at least every six months for lifting accessories and equipment used to lift people, and every twelve months for other lifting equipment, unless an examination scheme sets the interval. Schedule 1 sets out what the report must contain, including the safe working load and the date of the next examination.
PSSR 2000. Pressure systems containing a relevant fluid above 0.5 bar need a written scheme of examination drawn up, or certified as suitable, by a competent person (regulation 8), and an examination in accordance with that scheme (regulation 9).
The examination report carries the competent person's judgement. The numbers behind it often come from a spreadsheet:
test-load factors;
girder deflection against the design value;
safe operating limits;
the pressure rating recalculated from measured thickness;
remaining life.
Clause 7.5 reaches those spreadsheets, and a report is only as defensible as the template that produced its numbers. Two classic failures:
The pressure-vessel override. In a UG-27 shell calculation, replacing a spot-radiography joint efficiency of 0.85 with 1.00 raises the calculated rating by 17.6 %. That is enough to turn "derate" into "fit for service". The same trap exists under PD 5500, where the construction category acts through the design stress f, and under BS EN 13445-3, where the weld joint coefficient z comes from the testing group: one overtyped factor and the verdict changes.
The crane template reused. A deflection template built for a 25 m span carries its limit as 25000/888 (28.15 mm). Reused for a 20 m crane, the limit should become 22.52 mm. With a measured deflection of 24.0 mm, the template says PASS. The design deflection value belongs to one crane and comes from that crane's documentation.
Lifting equipment: test loads (typically 125 % static and 110 % dynamic of rated capacity for overhead cranes; confirm against your design standard), deflection against the crane's design value, and the arithmetic behind the safe working load: every factor locked, every span and ratio an input, never a literal inside a formula.
Pressure systems: NormXL checks that joint efficiencies, design stresses and corrosion allowances are locked and sourced, that required thicknesses round up and ratings round down, and that a zero corrosion rate can never become a 999-year remaining life.
Report templates: if your report template calculates anything (the date of the next examination, percentage wall loss, PASS/FAIL against limits), it is a calculation tool, and NormXL validates it like one. If it is purely a form, NormXL will tell you so: zero formula cells.
Whether your reports follow SAFed guidelines, LEEA practice or your own procedures, NormXL validates the calculators behind them without second-guessing the engineering. The engineering judgement remains the competent person's. The arithmetic becomes evidence.
Provenance that survives an investigation. Record each validated template's Dossier ID and SHA-256 in your template register. Have each report state the template ID and version it was produced with. Years later, anyone can show which validated version produced a given report, and anyone can check a template copy against the register with Get-FileHash or certutil. A file cannot carry its own fingerprint, so the register holds it. On the Annual Register, a logic fingerprint also matches a completed report workbook back to its validated template.
UKAS laboratories: Clause 7.11 evidence without sending client data anywhere
ISO/IEC 17025:2017 is not in transition, so there is no transition gap analysis for laboratories. Clause 7.11 is simply sampled at routine surveillance and reassessment visits. The questions are familiar:
Has every user-configured workbook been validated before use (7.11.2)?
Are calculations checked "in an appropriate and systematic manner" (7.11.6)?
Is the workbook protected against tampering (7.11.3)?
How was all that done without breaching client confidentiality (4.2)?
Clause 7.11.2 accepts Excel the application as commercial software. It does not accept the LINEST curves, M3003 uncertainty budgets and conformity decisions your laboratory configured inside it. Those must be validated before use and after every change. From MCERTS soil chemistry and drinking-water testing to calibration laboratories working to UKAS M3003 and forensic providers bound by the Forensic Science Regulator's statutory Code of Practice, UK laboratories run on workbooks. Clause 7.11 makes every one of them a validation obligation.
NormXL recalculates every cell with an independent engine benchmarked against the NIST Statistical Reference Datasets. It traces conformity cells to your documented decision rule, including ILAC-G8 guard bands under Clause 7.8.6, tests them at their limits, and seals the workbook. Because NormXL never receives the workbook, no client results and no personal data ever reach us.
If your uncertainty budgets follow UKAS M3003, NormXL verifies the arithmetic behind them: every divisor, sensitivity coefficient, effective-degrees-of-freedom calculation and coverage factor. It does not assess the metrological content of the budget, which stays with your metrologist.
A cancellation example: a gravimetric result of exactly 35.0 mg/L is stored by Excel as 35.000000000025011 mg/L. It fails a ≤ 35 mg/L check while displaying "35.00".
A traceability example: calibration coefficients typed as literals into fifty result formulas, still using last quarter's curve.
An uncertainty example: k = 2 typed into a budget whose effective degrees of freedom need k = 2.28, which understates U by about 12 %.
"How did you verify this regression on your own data?"
"Which decision rule does this IF() statement implement, and is it the one agreed with the customer?"
"Did any customer data leave the laboratory while you validated this?"
Your BSI auditor will follow a released lot back to the spreadsheet that released it
BSI audits medical device quality management systems in two capacities:
As a UK Approved Body (BSI Assurance UK, 0086), it covers UKCA marking under the UK Medical Devices Regulations 2002, which the MHRA regulates.
Through BSI Group The Netherlands (2797), it acts as an EU Notified Body for CE marking under the EU MDR and IVDR.
On either route, ISO 13485 requires the spreadsheet that releases product to be validated before first use and, as appropriate, after changes, proportionate to risk (Clauses 4.1.6, 7.5.6 and 7.6). Software validation records are sampled at surveillance and recertification audits. An unvalidated release spreadsheet is an easy finding to write.
A NormXL Dossier with the ISO 13485 profile serves both routes. It also travels with you if you sell into Canada or Australia through MDSAP, or export to the US, where the FDA's QMSR has incorporated ISO 13485:2016 since 2 February 2026. Lot-release Cpk calculators, ISO 10555-1 tensile sheets, IVD calibration curves and ASTM F1980 ageing calculators are all in scope.
The UK picture in 2026:
CE-marked devices remain accepted on the Great Britain market until 30 June 2028 or 30 June 2030, depending on the device and the EU legislation it complies with.
The GB post-market surveillance requirements have applied since 16 June 2025.
Non-UK manufacturers place devices on the market through a UK Responsible Person, who must be able to make your technical documentation and declaration of conformity available when the MHRA asks. The Dossier is a self-contained, verifiable validation record that fits straight into that file.
The MHRA has announced its move to full MDSAP membership. Dates as published by each body at the time of writing.
What your auditor is likely to ask:
"Show me the validation record for the template that released this lot."
"Is the σ in this Cpk cell STDEV.S or STDEV.P, and who decided?"
"Who changed Q₁₀ in the ageing protocol after it was validated?"
100% in-browser · VAT invoice in your organisation’s name · For business customers
Five things your assessor or auditor can find in minutes
Display versus decision. A minimum wall stored as 4.5053571428571431 mm prints as 4.5 mm. Decide on rounded values and a 4.46 mm reading is accepted. And where subtraction cancels digits, Excel's hidden residue decides results that sit exactly on a limit: =IF((6.35-6.3101)/(3*0.01)>=1.33,"RELEASE","HOLD") returns HOLD for a Cpk that is exactly 1.33. Try =IF(10.2-10.1>=0.1,"ACTION","NO ACTION") in your own copy of Excel: it returns NO ACTION.
Unlocked cells. In Excel every cell is "locked" by default, but locking does nothing until sheet protection is switched on. One keystroke replaces a formula with a number, and nothing changes colour.
Buried constants. Joint efficiencies, coverage factors, Q₁₀ and conversion factors typed into formulas, so that a change of design basis, budget or protocol never reaches them.
Untested inputs. Type N/A into a UT reading and =IF(B22>=H22,"ACCEPT","REJECT") returns ACCEPT. Leave a result blank and =IF(B5<=10,"PASS","FAIL") returns PASS. AVERAGE() skips text silently, and IFERROR() turns errors into plausible numbers.
No provable version. "Last modified: Thursday 16:14" is not evidence. A SHA-256 fingerprint recorded in the Dossier and in your register is.
UK validation consultants charge £600 to £1,500 a day. Before travel.
Validating one calculation template properly takes an experienced consultant two to three days: briefing, access, protocol, hand-calculated expected results, boundary testing and the report. That is from about £600 a day for an independent contractor to £1,000–£1,500 a day for a validation or accreditation consultancy. Procurement, the NDA and diary pressure then put four to eight weeks between the decision and the first page of evidence. Multiply by the templates in your scope and the transition becomes a five-figure documentation project. NormXL costs €149 + VAT per spreadsheet, and the evidence exists before the consultant's purchase order would have been approved.
In-house
External consultant
NormXL
Typical cost per spreadsheet
£1,500–£2,000 of engineering time (30–40 h at £50/h loaded)
£1,200–£4,500 (2–3 days at £600–£1,500)
€149 + VAT
Time to evidence
1–3 weeks of interrupted work
4–8 weeks, including procurement and NDA
About 3 minutes, plus your review
Client data leaves your premises
No
Yes, under NDA
No: 0 KB of your workbook uploaded
Negative and boundary tests
Usually missing
Depends on the consultant
Generated at every acceptance limit
Re-validation after a change
Repeat the work
A new quote
Included on the Annual Register
UK consultant · 12 templates × 2–3 days = £14,400–£54,000
In-house · 12 × 30–40 hours = 360–480 hours ≈ £18,000–£24,000 of engineering time
NormXL Annual Quality Register · up to 20 templates = €490 + VAT a year (12 Single Dossiers would be €1,788 + VAT)
Illustrative. Consultant day rates range from independent contractors to consultancies; internal cost uses an illustrative loaded rate of £50 per engineering hour. Prices exclude VAT.
NormXL proves the workbook computes correctly and robustly and is the version you validated. Whether you chose the right code equation stays with your engineer, as it would with a consultant's report.
NormXL never runs Excel. That is the point.
NormXL reads your workbook's Office Open XML package directly and computes the SHA-256 fingerprint of the exact bytes before anything else. It then recalculates every formula in its own engine, written in Rust and compiled to WebAssembly, and compares each result with the value Excel cached in the file. It generates boundary and negative vectors at every acceptance limit, audits locks, protection, constants and display precision, and asks you a few questions about intended use. About three minutes later you download the Dossier: PDF for the record, DOCX for your document control.
The Quick-Verify card lets a UKAS assessor or BSI auditor do three checks in under five minutes:
re-hash the workbook with Windows' own Get-FileHash or certutil;
recompute three test vectors by hand;
confirm protection in Excel.
What's inside (24-page sample; Dossiers for your own workbooks run to 20 pages or more, depending on the workbook):
Cover & seal summary · Executive summary & document control
§1 User requirements & scope
§2 Risk assessment & traceability matrix
§3 Installation qualification & formula inventory (with the Constant Ledger)
§4 Operational qualification: dual-engine test matrix
The sample is produced in the ISO/IEC 17020:2026 profile; the ISO/IEC 17025 and ISO 13485 profiles share its structure.
NormXL produces evidence; your organisation approves it. The decision on any finding is always the assessor's or auditor's. The Dossier is built to make that decision quick.
100% in-browser · VAT invoice in your organisation’s name · For business customers
Your workbook never leaves your browser, so there is no processor to assess for its contents
NormXL runs as WebAssembly inside the browser your IT team already manages (Edge, Chrome, Firefox or Safari), with no installer, no add-in and no administrator rights.Once the page has loaded you can disconnect entirely and complete the qualification offline: on a site laptop, in a plant room or on an offshore installation.
That matters most where your clients' information is not yours to share: utilities, nuclear, defence, rail and critical infrastructure. Because the file contents never reach us, there is no data processing agreement to negotiate for them. A short security note sets out the architecture for your supplier file.
No upload endpoint, no cloud storage, no AI model, no sub-processor for your workbook
No executable for IT to allow-list
Verify it yourself: open the browser's developer tools, watch the Network tab, drop a file, and nothing leaves
Four Single Dossiers cost €596 + VAT. The Register covers up to 20 for €490 + VAT (€24.50 per spreadsheet at full use, + VAT).
The Quality Manager who owns every calculation tool in the UKAS or BSI scope, and the gap analysis.
Up to 20 spreadsheets in one version-controlled register, with mixed profiles (17020, 17025 and 13485)
A full Validation Dossier for every spreadsheet
Re-validation after every change, with no per-change fee
Version change-log diffing: formula, constant and protection differences between revisions
Audit-day integrity check: one page listing every registered spreadsheet with its SHA-256, version and status, ready for your gap-analysis inventory line
NormXL 7.0 is in final pre-release qualification. Orders placed now are reserved at the standard price; no card details are requested until release.
For business customers. All prices exclude VAT, GST and other local taxes, where applicable; they are added to your invoice.
Invoiced in euro, with a VAT invoice in your organisation's name.
Up to three spreadsheets, Single Dossiers cost less; from four, the Annual Quality Register does.
FAQ
No, and nothing in this category could be. UKAS accredits conformity assessment bodies: inspection bodies, laboratories and certification bodies. It does not accredit or approve software. NormXL is an independent tool that produces evidence you present during your assessment, and your accreditation remains a judgement UKAS makes about your organisation. Be wary of any software vendor that claims otherwise.
UKAS doesn't pre-approve validation tools or documents; no accreditation body does. What UKAS assesses is whether your organisation has validated the software it relies on, adequately for its intended use, and can demonstrate it. The Dossier is built around exactly that demonstration, with every claim checkable during the visit:
intended use and risk;
configuration;
executed tests with results;
boundary behaviour;
protection and version control.
Once your Technical Manager or Quality Manager reviews and signs it, it is your record. The decision is always your assessor's.
No. The gap analysis is your own self-assessment, and it should stay that way. NormXL provides the evidence you reference in it: one Dossier per calculation tool, each identified by its ID and SHA-256. The Annual Register adds a one-page integrity report covering every tool in scope.
Yes. Your type describes your independence. It does not reduce your data-control obligations, and Clause 7.5 applies to every UKAS-accredited inspection body. Internal network security protects the file from outsiders. It does not prove that the formulas are right, that nobody overwrote them, or that the printed value matches the decision.
HSE sets and enforces the statutory duties; it does not accredit anyone or validate software. LOLER requires a thorough examination by a competent person, and PSSR requires an examination in accordance with a written scheme. Neither prescribes how you calculate. The examination, and the judgement in the report, remain the competent person's. NormXL proves the arithmetic behind them and seals the template that produced it.
BSI, like every certification body, audits whether your software validation follows your documented procedure and is proportionate to risk. It doesn't approve particular tools. A Dossier with the ISO 13485 profile serves the UK Approved Body route (UKCA) and the EU Notified Body route (CE) alike, and your UK Responsible Person can make it available to the MHRA on request.
No, one is enough. An Annual Quality Register holds up to 20 spreadsheets, and each one takes the profile of the standard under which it influences results.
The Annual Quality Register. Twelve Single Dossiers would cost €1,788 + VAT; the Register covers all twelve, and eight more, for €490 + VAT a year, and re-validation after changes is included. Up to three spreadsheets, Single Dossiers cost less.
Yes. It is issued in your organisation's name, so you can reconcile a company card.
Payment is by company credit or debit card, with no quotation cycle and no sales call. Whether your own purchasing rules require a purchase order is for your organisation to decide.
Your workbook is processed in your browser and never transmitted, so its contents, including any personal data inside it, never reach us. Apart from standard website analytics, which run only if you accept them in the cookie banner, the only personal data we receive is what you type into the order form: name, organisation and business email.
That is the case NormXL was built for. The client's information never leaves your workstation, so there is nothing to disclose to a third party and no supplier security assessment for the file contents. You can validate on a disconnected site laptop.
The clauses travel. ISO/IEC 17020 and ISO/IEC 17025 are the same standards wherever they are assessed, and UKAS's place in the international mutual recognition arrangements is what makes UK accreditation recognised abroad. A Dossier evidencing Clause 7.5 or Clause 7.11 is evidence against the same requirement for NATA, RvA or DAkkS. The recognition belongs to your accreditation, not to the tool.
About three minutes to generate the Dossier for a typical calculation template, including your answers to the intended-use questions. Then allow 30 to 60 minutes of your own review: reading the findings, entering sources for any constants the Dossier lists, and signing the release block.
Then you've found the problem before your assessor did. Every Dossier carries an overall status of Released, Released with observations, or Not released, so it can never be mistaken for a clean bill of health when it isn't one. Fix the template, run it again, and file the Dossier for the corrected version.
Start with the calculator your assessor will open first.
The wall-thickness sheet on every engineer surveyor's laptop. The calibration workbook behind your certificates. The Cpk calculator that releases product. About three minutes, inside your browser, 0 KB of your workbook uploaded, and the evidence on file before UKAS or BSI asks for it.
Clause-referenced, independently recalculated, proven at the acceptance limit and sealed to the version in use: for UKAS, for BSI, and for every report of thorough examination you sign.