# Kimobox > Low-code platform to digitize processes, portals and quality management for SMEs. Built in Spain, hosted in the European Union. Kimobox is a Spanish low-code platform for digitising business processes, employee, customer and supplier portals, and certifiable quality management systems. This file indexes the site's public content so an automated agent can locate and cite the right page without crawling the HTML. - Site: https://www.kimobox.com - Owner: Gestión Externa de Sistemas, S.L. (NIF B62308697) - Language of this index: English - Full index, with the content of every page: https://www.kimobox.com/llms-full-en.txt - Sitemap: https://www.kimobox.com/sitemap.xml - Last editorial review: 2026-08-25 This same index in the other languages: - Español: https://www.kimobox.com/llms.txt - Català: https://www.kimobox.com/llms-ca.txt How this is organised: pages under 'Platform and tools' describe product functionality; those under 'Standards and protocols' explain how each standard is covered by the product and carry commercial intent; 'Academy' pages are open, vendor-neutral training on what each standard actually requires, and are the right ones for questions such as 'what does clause X demand'. Every page carries its review date and, where it cites regulation, a link to the official text. ## Home - [Your whole company in a single box](https://www.kimobox.com/en/): Digitize processes, employee, client and supplier portals, and quality and ISO standards management in a single low-code platform. Servers in Europe. ## Platform and tools - [Your processes, the way you actually run them](https://www.kimobox.com/en/business-process-management-software): The processes that today live in Excel, in email or in one person's head become defined, measured and auditable. And you change them, not your… - [Everything HR-related, without going through HR](https://www.kimobox.com/en/employee-portal): Clock-ins, time off, expenses, payslips and paperwork in a portal your employees use from their phone — and that saves HR half a working day every week. - [Training and performance evaluation, without spreadsheets](https://www.kimobox.com/en/training-and-performance-management): Courses and certifications with expiry tracking, and performance evaluation with objectives and follow-up, in the employee portal. - [Occupational safety: PPE, medical fitness and PRL, per employee](https://www.kimobox.com/en/occupational-health-and-safety-software): Risk assessment, PPE and medical fitness with monitored expiry, PRL training and accident investigation, aligned with ISO 45001 and the CAE module. - [From open position to onboarding, in a single flow](https://www.kimobox.com/en/recruitment-ats-software): Post the vacancy, screen candidates, coordinate interviews and prepare onboarding without leaving Kimobox, with traceability for every decision. - [Where your team is, in real time and with no phone calls](https://www.kimobox.com/en/real-time-geolocation): A live map of clock-ins and field staff movements, with geofences per site, alerts and route history. - [Leave and absences, with no spreadsheets or WhatsApp](https://www.kimobox.com/en/leave-and-absence-management): Requests, approvals and the team calendar from the employee portal, with leave balances calculated in real time per collective agreement. - [Payslips delivered on their own, with a read receipt](https://www.kimobox.com/en/digital-payslip-delivery): The payslip generated in A3 or Sage X3 reaches the employee portal on its own, with an automatic alert, read receipt and history lookup. - [Who gets in, where and when, with no guard at the door](https://www.kimobox.com/en/workplace-access-control): Access authorization to the plant or office per employee, with card, PIN or biometrics, automatically blocked if their documentation expires. - [News, notices and documents, in the portal they already use](https://www.kimobox.com/en/corporate-intranet): Company news, notices and documents in the same portal where the employee already clocks in, with segmentation and read receipts. - [Supplier paperwork always up to date, with no chasing](https://www.kimobox.com/en/supplier-portal): Approval, insurance, certificates and contractor-coordination documents with expiry dates watched by the platform. If a document is missing, the supplier… - [Your management system stops being a folder](https://www.kimobox.com/en/quality-software): Living documentation, planned audits, non-conformities with an owner, and indicators that calculate themselves. One platform for all your standards. - [The technology behind everything else](https://www.kimobox.com/en/low-code-platform-technology): Own infrastructure in Europe, ERP connectivity, electronic signature, AI automation and blockchain timestamping, on a single platform. - [Time tracking, AI expenses, signature and timestamping. All in.](https://www.kimobox.com/en/business-digitisation-tools): Time tracking, AI expense reports, eIDAS electronic signature, blockchain sealing and certified invoice digitisation, sharing users and traceability. - [Learn quality standards and BPM concepts without leaving the platform](https://www.kimobox.com/en/academy): Chapter-by-chapter guides on every ISO standard and sector protocol, plus the process management (BPM) concepts, with no sign-up, no cost and in three languages. - [We live alongside your ERP, we don't replace it](https://www.kimobox.com/en/erp-integration-sap-dynamics-sage): Kimobox brings what your ERP is missing — processes, portals, quality — and syncs with it the data that's already its own. - [Kimobox and A3, in sync for payroll with no double entry](https://www.kimobox.com/en/a3-hr-integration): Clock-ins, absences, hires and terminations are created in Kimobox and reach A3 Nom or A3 Innuva ready for payroll processing, with no double entry. - [Kimobox and Sage X3, one employee record across both systems](https://www.kimobox.com/en/sage-x3-hr-integration): Kimobox's employee portal syncs with Sage X3's HR module: clock-ins, absences, contracts and payslips with no manual exports. - [Your documents, in the cloud you already use](https://www.kimobox.com/en/onedrive-google-drive-sharepoint-connector): Kimobox publishes and versions the management system's documents directly in OneDrive, Google Drive or SharePoint, with no duplicate folders. - [We connect to any system, not just your ERP](https://www.kimobox.com/en/open-api-rest-connectivity): Beyond your ERP, Kimobox connects to any open or API-based system: CRM, e-commerce, banking or custom builds, with tailored data processing. - [Our own servers in Europe](https://www.kimobox.com/en/cloud-infrastructure-eu-servers): No clouds outside the European Union and no surprises in the data processing agreement. You know where your data is and who touches it. - [Working-time records, sorted, with no arguments](https://www.kimobox.com/en/time-and-attendance-tracking): Clock in from your phone, your browser or a shop-floor terminal. Tamper-proof daily records, balances calculated on their own, and the report ready if a… - [Take the photo. AI does the rest.](https://www.kimobox.com/en/ai-expense-report-management): The employee photographs the receipt and AI extracts the amount, tax, vendor and category, applies the expense policy, and leaves the claim ready for… - [AI process automation](https://www.kimobox.com/en/ai-process-automation): AI works inside your processes, not alongside them: it reads documents, extracts data, classifies issues and proposes the next action. You keep the… - [Legally valid signature, built into the process](https://www.kimobox.com/en/eidas-electronic-signature): Contracts, delivery notes, sign-offs and HR documentation signed remotely or on a tablet, with evidence and timestamping. Without leaving Kimobox or… - [A second factor through the channel each person already uses](https://www.kimobox.com/en/multi-factor-authentication-mfa): A second factor with Google Authenticator, Microsoft Authenticator, SMS, WhatsApp, Telegram, email or passkeys. Policy by role, recovery codes and a full sign-in log. - [The alert reaches the phone, not the bottom of an inbox](https://www.kimobox.com/en/push-notifications): Real-time alerts for payslips, approvals, non-conformities and expiry dates. Rules per event and role, digests, escalation to email and read receipts. - [Proof that a record hasn't been touched](https://www.kimobox.com/en/blockchain-document-traceability): Kimobox records the digital fingerprint of critical documents and records on a public blockchain. Anyone can verify the date and integrity without… - [Ditch the paper, legally](https://www.kimobox.com/en/certified-invoice-digitisation): Certified digitization of invoices and receipts compliant with Spanish Tax Agency (AEAT) rules: the electronic copy replaces the paper original, and AI… - [No paperwork in order, no access to the site](https://www.kimobox.com/en/contractor-management-cae-software): Contractor coordination with company, worker and equipment documentation validated before access, and expiry dates watched by the platform. - [Legal requirements, tracked one by one](https://www.kimobox.com/en/regulatory-compliance): Register the legal requirements that apply to you, get an alert when the regulation changes, and periodically evaluate compliance, with auditable evidence. - [Food quality without folders or audit surprises](https://www.kimobox.com/en/food-industry-quality-software): Living HACCP, prerequisites with daily records, allergen control and traceability in minutes. One system for IFS Food, BRCGS and FSSC 22000 audits. - [IATF without loose sheets all over the plant](https://www.kimobox.com/en/automotive-quality-software): APQP with milestones, FMEA linked to the control plan, PPAP file, SPC from machine data and 8D complaints with effectiveness verification, in one system. - [Accreditation stops depending on one person](https://www.kimobox.com/en/laboratory-quality-software): Equipment with calibration watched, staff authorised per technique, versioned methods and proficiency tests with follow-up. For ISO 17025 and ISO 15189. - [Full index: every page, in one place](https://www.kimobox.com/en/site-index): Every Kimobox page grouped by section: product and tools, standards and protocols, the Academy, comparisons, the glossary and the regulatory calendar. - [The terms, stated precisely](https://www.kimobox.com/en/glossary-quality-iso-standards): What nonconformity, documented information, geofence, MTBF, advanced signature or certified digitisation actually mean, each linked to the page where it is used. - [What changed, when, and who it affects](https://www.kimobox.com/en/regulatory-calendar-iso-and-legal): When each obligation came into force and when each transition closed: working-time records, ISO 27001:2022, IFS Food v8, FSSC 22000 v6, Verifactu, NIS2 and the AI Act. - [Maintenance stops being a notebook](https://www.kimobox.com/en/cmms-maintenance-software): Asset register, automatic preventive by calendar or running hours, work orders from the phone, and MTBF, MTTR and OEE indicators calculated from the real job sheets. - [The batch certificate, without having to look for it](https://www.kimobox.com/en/product-quality-certificates): Every shipment comes with its analysis certificates, data sheets and declarations, generated from the batch's actual data and available to the client on… - [What your IT lead is going to ask](https://www.kimobox.com/en/data-security-and-gdpr): Encryption, access control, an audit log, verified backups, and a data processing agreement that reads without any surprises. ## Academy (open training) - [ISO 9001 · Quality management](https://www.kimobox.com/en/academy/iso-9001): A free learning path on ISO 9001: the standard's seven clauses explained with examples and an audit checklist, in English. - [Context of the organization](https://www.kimobox.com/en/academy/iso-9001/organizational-context): Before defining a single procedure, the standard asks you to understand the ground the company operates on: what surrounds it, who expects something from… - [Leadership](https://www.kimobox.com/en/academy/iso-9001/leadership): The standard no longer accepts a lone "quality manager" carrying the system on their own: it requires top management to show visible commitment to it. - [Planning](https://www.kimobox.com/en/academy/iso-9001/planning): Planning in ISO 9001 means two things: anticipating what could go wrong —or better than expected— and setting concrete objectives to measure whether the… - [Support](https://www.kimobox.com/en/academy/iso-9001/support): The standard's longest clause gathers everything the system needs to work on the ground: people, infrastructure, information and document control. - [Operation](https://www.kimobox.com/en/academy/iso-9001/operation): This is the clause that carries the most weight in an audit: it covers the whole operational cycle, from an order coming in to the product or service going… - [Performance evaluation](https://www.kimobox.com/en/academy/iso-9001/performance-evaluation): A system that is not measured cannot be improved. This clause forces quality management into data: indicators, internal audits and a formal management review. - [Improvement](https://www.kimobox.com/en/academy/iso-9001/improvement): The final clause closes the PDCA circle: what happens when something fails, and how that experience turns into a better system, not just a signed piece of… - [ISO 14001:2015 · Environmental management](https://www.kimobox.com/en/academy/iso-14001-2015): A free learning path on ISO 14001:2015: the environmental standard's seven clauses explained with examples and an audit checklist. - [Context of the organization](https://www.kimobox.com/en/academy/iso-14001-2015/organizational-context): The environmental system starts by understanding which conditions of the surroundings affect the company, and which interested parties hold environmental… - [Leadership](https://www.kimobox.com/en/academy/iso-14001-2015/leadership): Management must take accountability for the environmental system and ensure the policy is built into business strategy, not left to live apart from it. - [Planning](https://www.kimobox.com/en/academy/iso-14001-2015/planning): Planning in ISO 14001 means identifying which environmental aspects the activity generates, which are significant, and which legal requirements apply to each. - [Support](https://www.kimobox.com/en/academy/iso-14001-2015/support): As in any management system, the support clause gathers the resources, staff competence and documentation that keep the environmental system running. - [Operation](https://www.kimobox.com/en/academy/iso-14001-2015/operation): The operation clause turns planning into daily control: procedures, supplier control and environmental emergency plans. - [Performance evaluation](https://www.kimobox.com/en/academy/iso-14001-2015/performance-evaluation): This clause forces environmental performance into real data: indicators, legal compliance evaluation, internal audits and management review. - [Improvement](https://www.kimobox.com/en/academy/iso-14001-2015/improvement): The final clause closes the loop: what happens when an environmental nonconformity occurs, and how that turns into a real improvement in performance. - [ISO 14001:2026 · Environmental management (new edition)](https://www.kimobox.com/en/academy/iso-14001-2026): Free learning path on the new edition of ISO 14001: expected changes versus the 2015 edition, climate change, biodiversity, and how to prepare the transition. - [What changes versus ISO 14001:2015](https://www.kimobox.com/en/academy/iso-14001-2026/what-changes-versus-iso-14001-2015): The ISO 14001 revision doesn't reinvent the standard: it keeps the high-level structure (Annex SL) but strengthens several points already signaled by the… - [Context and leadership with climate change integrated](https://www.kimobox.com/en/academy/iso-14001-2026/context-leadership-climate-change): The organization's context and leadership commitment more explicitly incorporate climate risk and opportunity. - [Planning: risks, opportunities, and biodiversity](https://www.kimobox.com/en/academy/iso-14001-2026/planning-risks-opportunities-biodiversity): Environmental planning expands its scope beyond emissions and waste to consider the impact on ecosystems. - [Operation: circular economy and life cycle approach](https://www.kimobox.com/en/academy/iso-14001-2026/operation-circular-economy-life-cycle): Operational control strengthens the life cycle approach already present in the 2015 edition, with more weight on circularity. - [Evaluation, improvement and transition from 2015](https://www.kimobox.com/en/academy/iso-14001-2026/evaluation-improvement-transition-from-2015): As with every ISO standard revision, a transition period is expected in which certified companies will need to update their system. - [ISO 45001 · Occupational health and safety](https://www.kimobox.com/en/academy/iso-45001): A free learning path on ISO 45001: the occupational health and safety standard's seven clauses explained with examples and a checklist. - [Context of the organization](https://www.kimobox.com/en/academy/iso-45001/organizational-context): The OH&S system starts by understanding which working conditions and surroundings affect safety, and which interested parties —workers, labour authorities… - [Leadership](https://www.kimobox.com/en/academy/iso-45001/leadership): The standard requires management to actively lead on safety, and workers to genuinely participate, not just sign off on a poster. - [Planning](https://www.kimobox.com/en/academy/iso-45001/planning): Planning in ISO 45001 means identifying the hazards of each job, assessing the risk and deciding what to do before the accident happens. - [Support](https://www.kimobox.com/en/academy/iso-45001/support): Support in OH&S comes down to something very concrete: every worker having the training and protective equipment their job requires, with expiry dates under… - [Operation](https://www.kimobox.com/en/academy/iso-45001/operation): Operation covers day-to-day risk control and, for most SMEs, contractor coordination with contracted and subcontracted companies. - [Performance evaluation](https://www.kimobox.com/en/academy/iso-45001/performance-evaluation): This clause forces safety into real data: accident-rate indicators, incident investigation, internal audits and management review. - [Improvement](https://www.kimobox.com/en/academy/iso-45001/improvement): The final clause closes the loop: what happens after an accident or an OH&S nonconformity, and how that turns into genuinely lower risk. - [ISO 27001 · Information security](https://www.kimobox.com/en/academy/iso-27001): A free learning path on ISO 27001: the information security standard's seven clauses explained with examples and a checklist. - [Context of the organization](https://www.kimobox.com/en/academy/iso-27001/organizational-context): The information security system starts by knowing which assets need protecting and who holds expectations about how they are protected. - [Leadership](https://www.kimobox.com/en/academy/iso-27001/leadership): Management must build information security into business strategy and assign clear responsibilities, not delegate it entirely to IT. - [Planning](https://www.kimobox.com/en/academy/iso-27001/planning): Planning in ISO 27001 means analyzing the risk of each asset and deciding, with judgment, which Annex A controls apply and which do not. - [Support](https://www.kimobox.com/en/academy/iso-27001/support): Support in information security comes down to staff who are aware of the risks and documentation that is controlled, not a manual nobody reads. - [Operation](https://www.kimobox.com/en/academy/iso-27001/operation): Operation turns risk analysis into real controls: access, encryption, backups and a clear procedure for when something fails. - [Performance evaluation](https://www.kimobox.com/en/academy/iso-27001/performance-evaluation): This clause forces you to check the controls actually work: indicators, internal audits and management review. - [Improvement](https://www.kimobox.com/en/academy/iso-27001/improvement): The final clause closes the loop: what happens after a security nonconformity, and how that turns into a more robust system. - [ISO 13485 · Medical devices](https://www.kimobox.com/en/academy/iso-13485): A free learning path on ISO 13485: the medical device standard's five clauses explained with examples and an audit checklist. - [Quality management system](https://www.kimobox.com/en/academy/iso-13485/quality-management-system): Clause 4 lays the groundwork: what processes the system has, how they are documented, and how software involved in product quality gets validated. - [Management responsibility](https://www.kimobox.com/en/academy/iso-13485/management-responsibility): Management must show commitment to the system and to meeting the legal and regulatory requirements of the medical device. - [Resource management](https://www.kimobox.com/en/academy/iso-13485/resource-management): The resources clause covers staff competence and the infrastructure and environment conditions needed to avoid contaminating the product. - [Product realization](https://www.kimobox.com/en/academy/iso-13485/product-realization): The longest clause: from planning to delivery, with the design file and traceability as central pieces. - [Measurement, analysis and improvement](https://www.kimobox.com/en/academy/iso-13485/measurement-analysis-improvement): The final clause closes the loop with something specific to healthcare: post-market surveillance and reporting to authorities when required. - [IATF 16949 · Automotive](https://www.kimobox.com/en/academy/iatf-16949): A free learning path on IATF 16949: the automotive standard's seven clauses explained with examples and an audit checklist. - [Context of the organization](https://www.kimobox.com/en/academy/iatf-16949/organizational-context): IATF 16949 adds to ISO 9001 the customer-specific requirements (CSRs) of each automotive OEM, which need identifying from the first clause on. - [Leadership](https://www.kimobox.com/en/academy/iatf-16949/leadership): Management must show accountability for the efficiency of the production process and for product safety, an emphasis specific to automotive. - [Planning](https://www.kimobox.com/en/academy/iatf-16949/planning): Automotive planning relies on FMEA (failure mode and effects analysis) as the central risk-management tool. - [Support](https://www.kimobox.com/en/academy/iatf-16949/support): Support in automotive demands certified competence for shop-floor staff and rigorous metrological control of measuring equipment. - [Operation](https://www.kimobox.com/en/academy/iatf-16949/operation): Operation is the core of IATF 16949: advanced product quality planning, parts approval and statistical control. - [Performance evaluation](https://www.kimobox.com/en/academy/iatf-16949/performance-evaluation): Automotive performance is measured in customer complaints resolved through 8D methodology and dedicated process and product audits. - [Improvement](https://www.kimobox.com/en/academy/iatf-16949/improvement): The final clause requires continual improvement to be proven with data: falling PPM, falling complaints, falling cost of poor quality. - [HACCP · Hazard analysis (HACCP)](https://www.kimobox.com/en/academy/haccp): A free learning path on HACCP: the seven Codex Alimentarius principles explained with examples and an audit checklist. - [Hazard analysis](https://www.kimobox.com/en/academy/haccp/hazard-analysis): The first HACCP principle requires identifying every reasonably foreseeable hazard at each process step, before deciding how to control it. - [Critical control points](https://www.kimobox.com/en/academy/haccp/critical-control-points): A CCP is a step where an essential control can be applied to prevent or eliminate a hazard, or reduce it to an acceptable level. - [Critical limits](https://www.kimobox.com/en/academy/haccp/critical-limits): A critical limit is the maximum or minimum value that must be controlled at a CCP to prevent, eliminate or reduce a hazard to an acceptable level. - [Monitoring system](https://www.kimobox.com/en/academy/haccp/monitoring-system): Monitoring is the planned sequence of observations or measurements that checks a CCP is under control, and it must allow you to act in time when there's a… - [Corrective actions](https://www.kimobox.com/en/academy/haccp/corrective-actions): When monitoring detects that a critical limit has been exceeded, you need to act immediately: on the process and on the affected product. - [Verification](https://www.kimobox.com/en/academy/haccp/verification): Verification covers the activities, distinct from monitoring, that confirm the HACCP plan is being followed and remains effective. - [Documentation and record-keeping](https://www.kimobox.com/en/academy/haccp/documentation-record-keeping): The final principle requires a documentation and record-keeping system proportional to the nature and size of the business, one that serves as real… - [FSSC 22000 · Food safety (FSSC 22000)](https://www.kimobox.com/en/academy/fssc-22000): A free learning path on FSSC 22000: ISO 22000's clauses and the scheme's additional requirements explained with examples and a checklist. - [Context of the organization](https://www.kimobox.com/en/academy/fssc-22000/organizational-context): FSSC 22000 builds on ISO 22000, which follows the same high-level structure as ISO 9001: the system starts by understanding the company's food safety context. - [Leadership](https://www.kimobox.com/en/academy/fssc-22000/leadership): FSSC 22000 requires management to actively drive a food safety culture, not just sign off on one in a document. - [Planning](https://www.kimobox.com/en/academy/fssc-22000/planning): Planning combines ISO 22000's risk-based approach with the prerequisites and hazard analysis that hold up the whole system. - [Support](https://www.kimobox.com/en/academy/fssc-22000/support): Support in FSSC 22000 rests on the prerequisite programmes (PRPs) from the applicable ISO/TS 22002, plus the usual training and documentation. - [Operation](https://www.kimobox.com/en/academy/fssc-22000/operation): Operation brings together the HACCP plan, operational control of PRPs and traceability, with emergency management as FSSC's added piece. - [Performance evaluation](https://www.kimobox.com/en/academy/fssc-22000/performance-evaluation): Evaluation combines HACCP-specific verification with internal audits and management review of the whole system. - [Improvement and additional requirements](https://www.kimobox.com/en/academy/fssc-22000/improvement): The final module closes the improvement loop and adds what sets FSSC 22000 apart from ISO 22000: the food fraud vulnerability assessment and food defense. - [IFS Food · Food safety (IFS)](https://www.kimobox.com/en/academy/ifs-food): A free learning path on IFS Food: the protocol's five chapters explained with examples and an audit checklist. - [Senior management commitment](https://www.kimobox.com/en/academy/ifs-food/senior-management-commitment): IFS Food starts by requiring senior management to define the company's strategy and show visible commitment to quality and food safety. - [Food safety and quality management system](https://www.kimobox.com/en/academy/ifs-food/management-system): IFS's second chapter requires a HACCP system based on Codex Alimentarius, plus a documented quality management system built around it. - [Resource management](https://www.kimobox.com/en/academy/ifs-food/resource-management): IFS puts the focus on people: hygiene, job-specific training and health status control for anyone handling food. - [Planning and production process](https://www.kimobox.com/en/academy/ifs-food/planning-and-production): The most operational chapter: from supplier selection to production, with product and packaging design as IFS's own distinguishing pieces. - [Measurements, analysis and improvements](https://www.kimobox.com/en/academy/ifs-food/measurements-analysis-improvements): The final chapter measures whether the system actually works: internal audits, product testing, complaints and nonconformities. - [BRCGS · Food safety (BRC)](https://www.kimobox.com/en/academy/brcgs): A free learning path on BRCGS Food Safety: the standard's sections explained with examples and an audit checklist. - [Senior management commitment and continual improvement](https://www.kimobox.com/en/academy/brcgs/commitment-continual-improvement): BRCGS requires senior management to take accountability for food safety and demonstrate continual improvement with data, not just intentions. - [Food safety plan (HACCP)](https://www.kimobox.com/en/academy/brcgs/haccp-plan): BRCGS requires a Codex-based HACCP plan, with a stricter review of the team, scope and validation of every CCP. - [Food safety and quality management system](https://www.kimobox.com/en/academy/brcgs/management-system): BRCGS's documentation system holds up the HACCP plan: procedures, specifications and traceability that gets tested, not assumed. - [Site standards](https://www.kimobox.com/en/academy/brcgs/site-standards): BRCGS dedicates a whole section to facilities: site location, layout, maintenance and pest control for the production site. - [Product and process control](https://www.kimobox.com/en/academy/brcgs/product-process-control): BRCGS requires controlling the product from its design and the process from daily execution, with allergens as its own critical point. - [Personnel](https://www.kimobox.com/en/academy/brcgs/personnel): BRCGS's final section puts the focus on people: training, personal hygiene, health status and suitable workwear. - [GMP+ · Animal feed safety](https://www.kimobox.com/en/academy/gmp-plus): A free learning path on GMP+ FSA: the feed safety scheme's modules explained with examples and a checklist. - [Food safety management system](https://www.kimobox.com/en/academy/gmp-plus/management-system): GMP+ FSA requires a HACCP-based food safety management system, adapted to the specific risks of feed manufacturing. - [Purchasing and supplier approval](https://www.kimobox.com/en/academy/gmp-plus/purchasing-supplier-approval): GMP+ requires approving raw material suppliers based on their risk, prioritizing those certified under GMP+ itself. - [Production and storage](https://www.kimobox.com/en/academy/gmp-plus/production-storage): Operational control covers the whole chain: from raw material receipt to transporting the finished feed. - [Traceability and recall](https://www.kimobox.com/en/academy/gmp-plus/traceability-recall): GMP+ requires being able to trace any feed batch across the whole chain, and being ready to recall it if a problem shows up. - [Testing and monitoring](https://www.kimobox.com/en/academy/gmp-plus/testing-monitoring): The final module closes the system with analytical monitoring: what gets tested, how often, and what happens with an out-of-limit result. - [ISO 17025 · Testing and calibration labs](https://www.kimobox.com/en/academy/iso-17025): A free learning path on ISO 17025: the testing and calibration laboratory requirements explained with examples and a checklist. - [Impartiality and confidentiality](https://www.kimobox.com/en/academy/iso-17025/impartiality-confidentiality): ISO 17025 requires the laboratory to identify risks to its impartiality and protect the confidentiality of every client's information. - [Resource requirements](https://www.kimobox.com/en/academy/iso-17025/resource-requirements): The lab needs competent staff, suitable facilities and calibrated, traceable equipment to guarantee reliable results. - [Process requirements](https://www.kimobox.com/en/academy/iso-17025/process-requirements): The standard's technical core: selecting and validating methods, representative sampling and correctly handling items from receipt onward. - [Ensuring the validity of results](https://www.kimobox.com/en/academy/iso-17025/ensuring-validity-of-results): Producing a result isn't enough: the lab must continually demonstrate it is capable of producing valid results. - [Management system requirements](https://www.kimobox.com/en/academy/iso-17025/management-system): The final module holds up everything else: system documentation, nonconformity control, internal audits and management review. - [ISO 15189 · Clinical laboratories](https://www.kimobox.com/en/academy/iso-15189): A free learning path on ISO 15189: the clinical laboratory requirements explained with examples and an audit checklist. - [General requirements](https://www.kimobox.com/en/academy/iso-15189/general-requirements): ISO 15189 puts the patient front and center from the first requirement: confidentiality of their clinical data and impartiality in every result. - [Resource requirements](https://www.kimobox.com/en/academy/iso-15189/resource-requirements): The clinical lab needs qualified staff, facilities suited to biological samples, and calibrated, traceable equipment. - [Process requirements](https://www.kimobox.com/en/academy/iso-15189/process-requirements): The clinical process splits into three critical phases: before, during and after the test, each with its own risks. - [Ensuring the validity of results](https://www.kimobox.com/en/academy/iso-15189/ensuring-validity-of-results): The clinical lab must continually demonstrate the reliability of its results, with internal controls and external comparisons. - [Management system requirements](https://www.kimobox.com/en/academy/iso-15189/management-system): The final module holds up the whole system: documentation, nonconformities, internal audits and periodic review. - [ISO 37301 · Compliance management systems](https://www.kimobox.com/en/academy/iso-37301): A free learning path on ISO 37301: the compliance management system's seven clauses explained with examples and a checklist. - [Context of the organization](https://www.kimobox.com/en/academy/iso-37301/organizational-context): The compliance system starts by mapping which legal, regulatory and voluntary obligations apply to the organization, and who has a stake in meeting them. - [Leadership](https://www.kimobox.com/en/academy/iso-37301/leadership): ISO 37301 requires management to lead on compliance and the compliance function to have real independence and authority. - [Planning](https://www.kimobox.com/en/academy/iso-37301/planning): Planning in compliance means identifying where compliance could fail and setting concrete objectives to reduce that risk. - [Support](https://www.kimobox.com/en/academy/iso-37301/support): Support in compliance rests on two pillars: staff knowing their obligations, and a whistleblowing channel that actually works. - [Operation](https://www.kimobox.com/en/academy/iso-37301/operation): Operation turns policy into real controls: due diligence on partners and suppliers, and procedures that prevent noncompliance before it happens. - [Performance evaluation](https://www.kimobox.com/en/academy/iso-37301/performance-evaluation): This clause forces a check that the compliance system actually works: internal audits and a periodic review with real data. - [Improvement](https://www.kimobox.com/en/academy/iso-37301/improvement): The final clause closes the loop: how a report gets investigated, and how that investigation improves the system, not just closes a case. - [ISO 19600 · Compliance management systems](https://www.kimobox.com/en/academy/iso-19600): A free learning path on ISO 19600: the compliance management systems guidance explained with examples and a checklist. - [Context and management commitment](https://www.kimobox.com/en/academy/iso-19600/context-and-commitment): ISO 19600 is guidance, not a certifiable standard: it starts by establishing the organization's context and a management commitment that shows up day to day. - [Identifying noncompliance risks](https://www.kimobox.com/en/academy/iso-19600/identifying-risks): ISO 19600 recommends a noncompliance risk map as the central tool for prioritizing where to put controls. - [Implementation: controls, training and whistleblowing channel](https://www.kimobox.com/en/academy/iso-19600/implementation): The guidance recommends three implementation pieces: controls proportionate to risk, tailored training and an accessible whistleblowing channel. - [Monitoring and measurement](https://www.kimobox.com/en/academy/iso-19600/monitoring-measurement): ISO 19600 recommends measuring the system with indicators and reviewing it periodically, not just trusting the controls are there. - [Continual improvement](https://www.kimobox.com/en/academy/iso-19600/continual-improvement): The final section closes the loop: what happens after noncompliance, and how that experience improves the system going forward. - [UNE 19602 · Tax compliance](https://www.kimobox.com/en/academy/une-19602): A free learning path on UNE 19602: the tax compliance management system explained with examples and a checklist. - [Context and the tax compliance officer](https://www.kimobox.com/en/academy/une-19602/context-and-compliance-officer): UNE 19602 starts by understanding the company's tax context and appointing a tax compliance officer with real authority. - [Tax risk map](https://www.kimobox.com/en/academy/une-19602/tax-risk-map): The heart of UNE 19602 is the tax risk map: where tax compliance could fail, and with what consequence. - [Tax controls and whistleblowing channel](https://www.kimobox.com/en/academy/une-19602/controls-whistleblowing-channel): UNE 19602 requires controls proportionate to each tax risk and an accessible channel for reporting tax irregularities. - [System oversight and audit](https://www.kimobox.com/en/academy/une-19602/oversight-and-audit): The system must be overseen with real data: tax indicators, internal audits and periodic management review. - [Improvement and responding to a tax audit](https://www.kimobox.com/en/academy/une-19602/improvement-and-tax-audit-response): The final section closes the system: what happens after a tax incident, and how to arrive prepared for a tax audit. - [ISO 14064 · Greenhouse gases (GHG)](https://www.kimobox.com/en/academy/iso-14064): Free learning path on ISO 14064: greenhouse gas quantification and verification explained with examples and a checklist. - [Emissions inventory](https://www.kimobox.com/en/academy/iso-14064/emissions-inventory): The first step is building a complete inventory of the greenhouse gas emissions generated by the company's activity. - [Organizational and operational boundaries](https://www.kimobox.com/en/academy/iso-14064/organizational-boundaries): Before calculating anything, you need to decide which part of the organization sits inside the inventory and under which consolidation approach. - [Quantification and emission factors](https://www.kimobox.com/en/academy/iso-14064/quantification-emission-factors): Quantification translates activity data — liters of fuel, kWh consumed — into tonnes of CO2 equivalent using emission factors. - [External verification](https://www.kimobox.com/en/academy/iso-14064/external-verification): A GHG inventory gains real value once an independent verifier confirms the data and the calculation are correct. - [Reduction and improvement plan](https://www.kimobox.com/en/academy/iso-14064/reduction-improvement-plan): The inventory only matters if it translates into a reduction plan with concrete targets and real tracking. - [ISO 26000:2010 · Social responsibility](https://www.kimobox.com/en/academy/iso-26000): Free learning path on ISO 26000: the seven core subjects of social responsibility explained with examples and a checklist. - [Organizational governance](https://www.kimobox.com/en/academy/iso-26000/organizational-governance): Governance is the subject that runs through all the others: it's the system by which the organization makes and implements decisions to pursue its objectives. - [Human rights](https://www.kimobox.com/en/academy/iso-26000/human-rights): Human rights due diligence means identifying the real or potential impacts of the company's activity on people. - [Labour practices](https://www.kimobox.com/en/academy/iso-26000/labour-practices): Labour practices cover all the policies related to work within and on behalf of the organization. - [The environment](https://www.kimobox.com/en/academy/iso-26000/environment): ISO 26000's environmental subject asks organizations to identify the impacts of their activity on the environment and act with a preventive approach. - [Fair operating practices](https://www.kimobox.com/en/academy/iso-26000/fair-operating-practices): Fair operating practices concern the organization's ethical conduct in its relationships with other entities. - [Consumer issues](https://www.kimobox.com/en/academy/iso-26000/consumer-issues): This subject covers fair marketing practices, data protection, and truthful information to customers. - [Community involvement and development](https://www.kimobox.com/en/academy/iso-26000/community-involvement-development): The final core subject values the organization's contribution to the development of the community it operates in. - [SGE 21 · Ethical and responsible management](https://www.kimobox.com/en/academy/sge-21): Free learning path on SGE 21: Forética's ethical and responsible management system explained with examples and a checklist. - [Organizational governance and ethics](https://www.kimobox.com/en/academy/sge-21/organizational-governance-ethics): The first block of SGE 21 requires a governing body responsible for ethical policy and a code of conduct known throughout the organization. - [People within the organization](https://www.kimobox.com/en/academy/sge-21/people-within-the-organization): This block assesses people management policies: equality, work-life balance, training, and internal communication. - [Customers](https://www.kimobox.com/en/academy/sge-21/customers): The customer block requires truthful information, responsible advertising, and agile complaint handling. - [Suppliers and the value chain](https://www.kimobox.com/en/academy/sge-21/suppliers-value-chain): SGE 21 asks organizations to evaluate suppliers on ethical and social criteria too, not just quality or price. - [Community and environment](https://www.kimobox.com/en/academy/sge-21/community-environment): This block assesses the organization's relationship with the local community and its environmental performance. - [Investors, competitors, and public administrations](https://www.kimobox.com/en/academy/sge-21/investors-competitors-administrations): The final block covers the organization's relationship with investors, fair competition, and public administrations. - [ENS · National Security Framework](https://www.kimobox.com/en/academy/ens): Free learning path on the National Security Framework (ENS): categorization, organizational and operational frameworks, and certification explained with examples. - [System categorization](https://www.kimobox.com/en/academy/ens/system-categorization): The first step of the ENS is categorizing the information system based on the impact a security incident would have on the services provided. - [Organizational framework](https://www.kimobox.com/en/academy/ens/organizational-framework): The organizational framework is the set of documents that govern the organization's security, from policy down to operational procedures. - [Operational framework](https://www.kimobox.com/en/academy/ens/operational-framework): The operational framework covers how the system is planned, run, and controlled day to day to maintain security. - [Protective measures](https://www.kimobox.com/en/academy/ens/protective-measures): Protective measures cover the system's concrete assets: facilities, equipment, communications, media, and applications. - [Audit and conformity certification](https://www.kimobox.com/en/academy/ens/audit-conformity-certification): Medium- and high-category systems require a periodic audit that verifies compliance with the ENS. - [ISO 20000-1 · IT service management](https://www.kimobox.com/en/academy/iso-20000): Free learning path on ISO 20000-1: IT service management explained with examples and a checklist. - [Service catalog and interested parties](https://www.kimobox.com/en/academy/iso-20000/service-catalog-interested-parties): The starting point is having a clear catalog of the IT services provided and understanding what interested parties expect from them. - [Service level agreements (SLAs)](https://www.kimobox.com/en/academy/iso-20000/service-level-agreements): SLAs translate customer expectations into measurable commitments: response times, availability, and capacity. - [Service design and transition](https://www.kimobox.com/en/academy/iso-20000/service-design-transition): Every change to an IT service must be planned and tested before going into production to minimize risk. - [Service delivery and support](https://www.kimobox.com/en/academy/iso-20000/service-delivery-support): This block covers daily operations: incident resolution, problem management, and handling service requests. - [Performance evaluation and continual improvement](https://www.kimobox.com/en/academy/iso-20000/performance-evaluation-continual-improvement): The service management system is reviewed periodically to make sure it stays effective and to spot improvement opportunities. - [ISO 22716 · Cosmetics (good practice)](https://www.kimobox.com/en/academy/iso-22716): Free learning path on ISO 22716: cosmetics good manufacturing practice explained with examples and a checklist. - [Personnel and hygiene](https://www.kimobox.com/en/academy/iso-22716/personnel-hygiene): Good manufacturing practice starts with people: their training, their hygiene, and their clearly defined responsibilities. - [Facilities, equipment, and raw materials](https://www.kimobox.com/en/academy/iso-22716/facilities-equipment-raw-materials): This block covers the physical conditions for production and the incoming control of raw materials and packaging materials. - [Production and quality control](https://www.kimobox.com/en/academy/iso-22716/production-quality-control): Production must follow documented procedures, and the finished product must pass controls before release. - [Nonconformities, complaints, and recalls](https://www.kimobox.com/en/academy/iso-22716/nonconformities-complaints-recalls): When something goes wrong, ISO 22716 requires a clear process for handling nonconforming product and, if needed, recalling it from the market. - [Documentation and traceability](https://www.kimobox.com/en/academy/iso-22716/documentation-traceability): ISO 22716 requires solid documentation that can reconstruct the complete history of every batch manufactured. - [SQAS2022 · SQAS assessment](https://www.kimobox.com/en/academy/sqas2022): Free learning path on SQAS2022: Cefic's safety and quality assessment for logistics providers explained with examples and a checklist. - [Management system and safety policy](https://www.kimobox.com/en/academy/sqas2022/management-system-safety-policy): The SQAS questionnaire starts by assessing whether a formal management system exists, with a clear safety policy and defined responsibilities. - [Safety, health, and environment](https://www.kimobox.com/en/academy/sqas2022/safety-health-environment): SQAS assesses the management of driver and staff safety and health, along with the operation's environmental performance. - [Quality and subcontractor management](https://www.kimobox.com/en/academy/sqas2022/quality-subcontractor-management): Many logistics providers subcontract part of the transport, and SQAS requires that control to extend to subcontractors too. - [Physical security and incident management](https://www.kimobox.com/en/academy/sqas2022/physical-security-incident-management): The final block covers the physical protection of goods and facilities, and the response to theft or security incidents. - [UNE 73401 · Nuclear facilities](https://www.kimobox.com/en/academy/une-73401): Free learning path on UNE 73401: the quality assurance program for nuclear facilities explained with examples and a checklist. - [Organization and quality assurance program](https://www.kimobox.com/en/academy/une-73401/organization-quality-assurance-program): The first block requires a formal quality assurance program, with clear responsibilities and sufficient independence for the quality function. - [Design and document control](https://www.kimobox.com/en/academy/une-73401/design-document-control): This block requires the design of safety-related systems and components to be controlled, verified, and documented. - [Procurement and process control](https://www.kimobox.com/en/academy/une-73401/procurement-process-control): Quality assurance extends to suppliers and to the processes that affect safety-related systems. - [Inspection, testing, and measuring equipment](https://www.kimobox.com/en/academy/une-73401/inspection-testing-measuring-equipment): This block ensures activities are verified before acceptance, and that measuring equipment is reliable. - [Nonconformities, corrective actions, and audits](https://www.kimobox.com/en/academy/une-73401/nonconformities-corrective-actions-audits): The final block closes the loop: what happens when something fails to meet requirements, and how ongoing compliance with the program is verified. - [GDPR · Data protection](https://www.kimobox.com/en/academy/gdpr): Free learning path on the GDPR: principles, data subject rights, security measures, and breaches explained with examples and a checklist. - [Principles and lawful bases](https://www.kimobox.com/en/academy/gdpr/principles-lawful-bases): Every processing of personal data needs a valid lawful basis and must respect the GDPR's general principles. - [Record of processing activities](https://www.kimobox.com/en/academy/gdpr/record-of-processing-activities): The record of processing activities (RoPA) is the mandatory inventory of all data processing carried out by the organization. - [Data subject rights](https://www.kimobox.com/en/academy/gdpr/data-subject-rights): The GDPR grants data subjects the right to access, rectify, erase, object to, and restrict the processing of their data. - [Security measures](https://www.kimobox.com/en/academy/gdpr/security-measures): The GDPR requires security measures appropriate to the risk, without imposing a closed list like the previous regulation did. - [Data protection impact assessment (DPIA)](https://www.kimobox.com/en/academy/gdpr/data-protection-impact-assessment): When a processing activity poses a high risk to people's rights, the GDPR requires a data protection impact assessment (DPIA). - [Security breaches and data processors](https://www.kimobox.com/en/academy/gdpr/security-breaches-data-processors): The final block covers two critical obligations: notifying security breaches on time and controlling those who process data on the company's behalf. - [Sustainability · Sustainability](https://www.kimobox.com/en/academy/sustainability): Free learning path on ESG sustainability: materiality, environmental, social, and governance indicators, and reporting explained with examples and a checklist. - [Materiality assessment and ESG strategy](https://www.kimobox.com/en/academy/sustainability/materiality-assessment-esg-strategy): The starting point of any ESG strategy is the materiality assessment: which matters are relevant to the business and to its stakeholders. - [Environmental indicators (E)](https://www.kimobox.com/en/academy/sustainability/environmental-indicators): The environmental dimension covers resource consumption, emissions, and waste management from the activity. - [Social indicators (S)](https://www.kimobox.com/en/academy/sustainability/social-indicators): The social dimension assesses how the organization treats its workforce, its supply chain, and the community. - [Governance and ethics (G)](https://www.kimobox.com/en/academy/sustainability/governance-ethics): The governance dimension assesses how decisions are made in the organization and what ethical guarantees exist. - [Reporting and sustainability statement](https://www.kimobox.com/en/academy/sustainability/reporting-sustainability-statement): The final block turns every ESG indicator into a coherent, verifiable report aligned with current standards. - [Working time records · Mandatory time recording](https://www.kimobox.com/en/academy/working-time-records): Free path on mandatory time recording in Spain: the art. 34.9 obligation, what to log, how long to keep it and what the Labour Inspectorate looks at. - [Where the obligation comes from](https://www.kimobox.com/en/academy/working-time-records/the-legal-obligation): The obligation was not born of a fashion for surveillance: it came from a concrete problem of unpaid overtime and the difficulty of proving it… - [What exactly must be logged](https://www.kimobox.com/en/academy/working-time-records/what-must-be-recorded): The rule says little, which is why it gets misread in both directions: some record too little, and some build a surveillance system nobody asked them for. - [Retention, access and data protection](https://www.kimobox.com/en/academy/working-time-records/retention-and-access): The record is personal data about the worker and at the same time evidence the employer may need. Both at once shape how it is stored and who gets to see it. - [Working time, rest and overtime](https://www.kimobox.com/en/academy/working-time-records/working-time-rest-and-overtime): The record is not an end in itself: it exists to check that working-time limits are respected and to pay what is owed. That is where you find out whether… - [Inspection and penalties](https://www.kimobox.com/en/academy/working-time-records/inspection-and-penalties): A visit from the Labour Inspectorate is rarely a complete surprise: it almost always follows a complaint or a sector campaign. What does surprise people is… - [Electronic invoicing · E-invoicing and Verifactu](https://www.kimobox.com/en/academy/electronic-invoicing): Free path on electronic invoicing in Spain: valid formats, the RD 1007/2023 and Verifactu requirements, certified digitisation, retention periods and phased rollout. - [What an electronic invoice is and is not](https://www.kimobox.com/en/academy/electronic-invoicing/what-it-is-and-is-not): Almost everyone believes they already issue electronic invoices because they email a PDF. The rule means something else, and the difference is not a… - [Verifactu and invoicing records](https://www.kimobox.com/en/academy/electronic-invoicing/verifactu-and-invoicing-records): The regulation does not govern the invoice, it governs the program that issues it. That is a meaningful shift: the Tax Agency stops looking only at the… - [Certified digitisation of paper](https://www.kimobox.com/en/academy/electronic-invoicing/certified-digitisation): Paper invoices will keep arriving for as long as the transition lasts. The rule allows keeping only the image, but not in any way you like: it demands a… - [Retention and deadlines](https://www.kimobox.com/en/academy/electronic-invoicing/retention-and-deadlines): Two different periods live side by side here and almost nobody separates them: the tax one and the commercial one. Keeping to the shorter is the most common… - [Phased rollout](https://www.kimobox.com/en/academy/electronic-invoicing/phased-rollout): E-invoicing projects that fail rarely fail on technology. They fail on master data: mistyped tax numbers, outdated registered addresses and invoice series… - [Electronic signature · Electronic signature and eIDAS](https://www.kimobox.com/en/academy/electronic-signature): Free path on electronic signatures: the three eIDAS levels, evidence of the signing act, timestamps, signing employment paperwork and the European digital identity wallet. - [The three signature levels](https://www.kimobox.com/en/academy/electronic-signature/the-three-signature-levels): Almost every argument about electronic signatures is settled by clarifying which level is being discussed. All three are valid signatures; what changes is… - [Evidence of the signing act](https://www.kimobox.com/en/academy/electronic-signature/evidence-of-the-signing-act): An electronic signature is defended by what surrounds it. The signed document is only one part; the rest is the story of how it was signed, and that story… - [Timestamps and integrity](https://www.kimobox.com/en/academy/electronic-signature/timestamps-and-integrity): Signing says who. A timestamp says when. They are two different questions answered by different mechanisms, even though they almost always travel together. - [Signing employment paperwork](https://www.kimobox.com/en/academy/electronic-signature/signing-employment-paperwork): This is the most frequent use and also where most doubts appear, because two rules meet: employment law, which says what must be delivered, and data… - [eIDAS 2 and the European wallet](https://www.kimobox.com/en/academy/electronic-signature/eidas-2-and-the-eu-wallet): The second version of eIDAS does not touch the signature levels: it changes who holds the identity. It moves from the provider to the person, and that… - [CMMS · Maintenance management (CMMS)](https://www.kimobox.com/en/academy/cmms): Free learning path on CMMS: asset inventory, preventive maintenance, work orders, and indicators explained with examples and a checklist. - [Asset inventory and equipment hierarchy](https://www.kimobox.com/en/academy/cmms/asset-inventory-equipment-hierarchy): Every CMMS starts with a complete inventory of the assets to maintain, organized in a clear hierarchy of plant, line, and equipment. - [Preventive and planned maintenance](https://www.kimobox.com/en/academy/cmms/preventive-planned-maintenance): Preventive maintenance gets ahead of failure through planned periodic checks, instead of waiting for the equipment to break down. - [Work orders and corrective maintenance](https://www.kimobox.com/en/academy/cmms/work-orders-corrective-maintenance): The work order is the CMMS's central document: it logs what was done, when, by whom, and with what outcome. - [Maintenance indicators (MTBF, MTTR, OEE)](https://www.kimobox.com/en/academy/cmms/maintenance-indicators-mtbf-mttr-oee): A mature CMMS doesn't just log work orders: it turns that data into indicators that guide improvement. - [Predictive maintenance and continual improvement](https://www.kimobox.com/en/academy/cmms/predictive-maintenance-continual-improvement): The final maturity step is anticipating the failure before it happens, using equipment condition data instead of fixed calendars. - [CAE · Contractor Coordination](https://www.kimobox.com/en/academy/cae): Free learning path on contractor coordination (CAE): what Article 24 of Spain's Occupational Risk Prevention Act requires, with examples and a checklist. - [Risk information exchange](https://www.kimobox.com/en/academy/cae/risk-information-exchange): Before an outside worker sets foot on site, the site owner and the contractor must exchange the risk information each activity generates. - [Mandatory company and worker documentation](https://www.kimobox.com/en/academy/cae/mandatory-documentation): Coordination requires documented proof that the company and its workers meet their preventive obligations before work begins. - [Access authorization and on-site control](https://www.kimobox.com/en/academy/cae/access-authorization): With documentation in order, access authorization is issued; without it, neither the worker nor the machine should enter the site. - [Ongoing evaluation of suppliers and subcontractors](https://www.kimobox.com/en/academy/cae/ongoing-evaluation): Coordination doesn't end at access: each contractor's performance on site becomes an evaluation that informs who you keep working with. - [Regulatory compliance · Legal requirements management](https://www.kimobox.com/en/academy/regulatory-compliance): Free learning path on regulatory compliance: how to register legal requirements, track regulatory changes and evaluate compliance, with a checklist. - [Identifying applicable legal requirements](https://www.kimobox.com/en/academy/regulatory-compliance/identifying-requirements): The first step isn't compliance, it's knowing what to comply with: identifying the legal, regulatory and other requirements that apply to each activity and… - [Register with validity and an owner](https://www.kimobox.com/en/academy/regulatory-compliance/register-and-validity): A legal requirement with no owner and no review date is dead weight: it needs to be assigned to someone, with a date to check it again. - [Tracking regulatory changes](https://www.kimobox.com/en/academy/regulatory-compliance/tracking-changes): Regulation changes constantly: tracking the official gazette at national, EU and regional level is the only way not to get caught off guard. - [Periodic compliance evaluation](https://www.kimobox.com/en/academy/regulatory-compliance/periodic-evaluation): A register that's never reviewed isn't worth much: periodic evaluation confirms, requirement by requirement, whether the organization genuinely complies. ## Standards and protocols - [ISO 37301 or ISO 19600: which applies today](https://www.kimobox.com/en/comparison/iso-37301-vs-iso-19600): ISO 19600 was withdrawn in 2021 and replaced by ISO 37301, which is certifiable. What changed, what carries over, and what to do if your system still cites it. - [IFS Food or BRCGS: whichever your customer asks for](https://www.kimobox.com/en/comparison/ifs-food-vs-brcgs): Both are GFSI-recognised and cover the same ground. What really separates them: scoring system, KO and fundamental requirements, and which market asks for each. - [ISO 17025 or ISO 15189: it depends on the sample](https://www.kimobox.com/en/comparison/iso-17025-vs-iso-15189): Which accredits a testing laboratory and which a medical one, what they share since the 2022 edition, and why the deciding criterion is how the result is used. - [HACCP or FSSC 22000: obligation versus certification](https://www.kimobox.com/en/comparison/haccp-vs-fssc-22000): HACCP is mandatory under Regulation (EC) 852/2004; FSSC 22000 is a voluntary certification built on ISO 22000 that includes it. What each one contributes. - [ISO 9001, without folders or surprises](https://www.kimobox.com/en/iso-9001-software): A full quality management system: processes, documentation, audits, non-conformities and KPIs in one place. - [ISO 14001, without folders or surprises](https://www.kimobox.com/en/iso-14001-software): Environmental aspects, consumption, waste and legal requirements, controlled with evidence for every record. - [ISO 27001, without folders or surprises](https://www.kimobox.com/en/iso-27001-software): Asset inventory, risk analysis and Annex A controls, each with its status and owner. - [ISO 45001, without folders or surprises](https://www.kimobox.com/en/iso-45001-software): Risk assessment, training, PPE, accidents and investigations, with traceability by employee. - [ISO 13485, without folders or surprises](https://www.kimobox.com/en/iso-13485-software): Design control, validations, batch traceability and post-market surveillance, with the evidence your notified body asks for. - [IATF 16949, without folders or surprises](https://www.kimobox.com/en/iatf-16949-software): Core automotive tools built in: PPAP, APQP, FMEA, control plan and SPC on real shop-floor data. - [IFS Food, without folders or surprises](https://www.kimobox.com/en/ifs-food-software): A live HACCP plan, prerequisites, food defense and internal audits ready for the current version of the standard. - [BRCGS, without folders or surprises](https://www.kimobox.com/en/brcgs-software): Food safety culture, supplier control and site verifications, all documented without paper. - [FSSC 22000, without folders or surprises](https://www.kimobox.com/en/fssc-22000-software): ISO 22000 plus sector prerequisites and additional scheme requirements, in a single structure. - [HACCP, without folders or surprises](https://www.kimobox.com/en/haccp-food-safety-software): A living HACCP plan: identified hazards, critical control points with limits, and monitoring logged for every batch. - [ISO 17025, without folders or surprises](https://www.kimobox.com/en/iso-17025-software): Validated methods, traceable equipment and results with controlled uncertainty, with the evidence an accreditation body asks for. - [ISO 15189, without folders or surprises](https://www.kimobox.com/en/iso-15189-software): Quality and competence of the clinical laboratory, from the pre-analytical phase to the result delivered to the patient. - [ISO 22716, without folders or surprises](https://www.kimobox.com/en/iso-22716-cosmetics-gmp-software): Good manufacturing practice for cosmetics: staff, premises, raw materials and finished product, all under control. - [UNE 73401, without folders or surprises](https://www.kimobox.com/en/une-73401-software): Quality assurance for safety-related activities at nuclear facilities, with exhaustive traceability. - [SQAS2022, without folders or surprises](https://www.kimobox.com/en/sqas-2022-software): Documentary evidence ready for the SQAS questionnaire: fleet, training, incidents and emergency plans in one place. - [GMP+, without folders or surprises](https://www.kimobox.com/en/gmp-plus-software): Safety across the entire feed chain: raw materials, manufacturing, storage and transport, all under documented control. - [ISO 20000, without folders or surprises](https://www.kimobox.com/en/iso-20000-software): A service catalogue, service levels and incidents under control, with continual improvement of the IT service. - [ISO 14064, without folders or surprises](https://www.kimobox.com/en/iso-14064-carbon-footprint-software): Quantification, monitoring and verification of greenhouse gas emissions, with the inventory and evidence a verifier asks for. - [SGE 21, without folders or surprises](https://www.kimobox.com/en/sge-21-software): Forética's ethical and socially responsible management system, with its nine management areas under document control and traceable evidence. - [ISO 26000:2010, without folders or surprises](https://www.kimobox.com/en/iso-26000-software): Social responsibility guidance covering the seven core subjects, to integrate into the management system even though it is not certifiable. - [ISO 19600, without folders or surprises](https://www.kimobox.com/en/iso-19600-software): Guidance for a compliance management system, the predecessor of ISO 37301, with a documented risk map and controls. - [ISO 37301, without folders or surprises](https://www.kimobox.com/en/iso-37301-software): A certifiable compliance management system, the successor to ISO 19600, with risks, controls and a whistleblowing channel in one system. - [UNE 19602, without folders or surprises](https://www.kimobox.com/en/une-19602-software): A tax risk management system: identified tax risks, associated controls and evidence ready for an inspection. - [ENS, without folders or surprises](https://www.kimobox.com/en/ens-spanish-security-framework-software): Security measures under Spain's National Security Framework for public-sector services and systems, with evidence ready for the two-yearly audit. - [Sustainability, without folders or surprises](https://www.kimobox.com/en/esg-sustainability-software): Environmental, social and governance (ESG) criteria built into the management system, with indicators ready for the sustainability report. ## Legal - [Contact](https://www.kimobox.com/en/contact) - [Aviso legal](https://www.kimobox.com/en/aviso-legal) - [Politica privacidad](https://www.kimobox.com/en/politica-privacidad) - [Cookies](https://www.kimobox.com/en/cookies) ## Use of this content The content may be quoted and summarised provided the source is stated and the original URL linked. Regulatory figures always refer back to the official text published by the relevant body (BOE, EUR-Lex, ISO or the protocol owner); in case of discrepancy, the official text prevails. Kimobox and its logo are registered trademarks of Gestión Externa de Sistemas, S.L.