hello@sterling-grc.com +1 201 263 4443 New York ISO & GRC consulting in 60+ countries
SterlingInternational Consulting Talk to a consultantTalk to us
← ISO/IEC 17025 hub

ISO/IEC 17025 guide

Effivity ISO 17025 guide: how the software runs an ISO/IEC 17025 laboratory management system

Clause by clause: ISO/IEC 17025:2017 requirements: every clause explained →

Effivity is Sterling's ISO and GRC platform, included with every engagement at no additional cost. This guide maps its modules to ISO/IEC 17025:2017, shows what is set up first and what assessors see, and explains where technical records stay.

  • Updated September 2026
  • 7-minute read
  • Part of the ISO/IEC 17025 hub

Key points

  • Effivity runs the management system side of an ISO/IEC 17025 laboratory: impartiality risks, personnel records, equipment and calibration status, providers, complaints, nonconforming work, internal audit and management review.
  • Measurement data stays where it is produced, in instruments, a laboratory information system or controlled worksheets; Effivity links to those technical records or holds them as attachments.
  • Sterling sets Effivity up in the first weeks of the engagement, where it is included at no additional cost, so the laboratory builds months of dated records before the accreditation body visits.
  • Software is not accreditation. The accreditation body's assessors judge competence by witnessing work and tracing results; Effivity makes the evidence quick to find, not automatically right.

What does Effivity hold in an ISO/IEC 17025 laboratory?

Effivity is Sterling's ISO and GRC platform, used in 50+ countries. In a testing or calibration laboratory it becomes the home of the management system: the controlled procedures, the registers, and every record that shows the system is operating, from an analyst's authorisation to the decision taken at the last management review.

It is not laboratory software in the narrow sense. Raw data, calculations, uncertainty budgets, control charts and validation workbooks belong to the tools that generate them. Effivity is not ISO 17025 software for validating methods or calculating uncertainty. It holds the surrounding records and points to the technical evidence, so an assessor can move from a report to the equipment, person and method behind it.

This split mirrors how ISO/IEC 17025:2017 is built. Clauses 4 to 7 set the technical and process requirements; clause 8 asks for a management system that supports them, under Option A or, for a laboratory already running ISO 9001, Option B. Effivity carries most of clause 8 and the administrative parts of clauses 4 to 7.

Which Effivity module supports each ISO/IEC 17025 requirement?

The table uses the standard's clause titles and the module names used across Sterling's other Effivity guides. Each row shows the record a module leaves behind once the laboratory works in it day to day.

ISO/IEC 17025:2017 requirementEffivity moduleRecord it leaves
4 General requirements: impartialityRisk & OpportunityImpartiality risks rated, with the action taken and a review date
6.2 PersonnelHRCompetence requirements per role, training, evaluations and authorisations
6.4 Equipment and 6.5 Metrological traceabilityOperationsCalibration and maintenance history, with certificates attached
6.6 Externally provided products and servicesPurchaseEvaluation and approval of calibration, reference material and proficiency testing providers
7.9 ComplaintsCustomer Life Cycle ManagementEach complaint, its investigation and the reply to the customer
7.10 Nonconforming work and 8.7 Corrective actionsNon-conformance/Deviation ManagementCorrection, root cause, corrective action, effectiveness check, closure
8.2 to 8.4 Documentation, document control and recordsDocumented InformationVersions, approvals, access and change requests
8.5 Actions to address risks and opportunitiesRisk & OpportunityLaboratory risks and opportunities with treatment and follow-up
8.8 Internal auditsInternal AuditProgramme, audit plans, reports and findings
8.9 Management reviewsManagement ReviewAgenda, minutes against each item and action plans

Policy & Objectives holds the laboratory's policy and objectives; contract review can run as a configured form where no other system covers it.

A worked trace: an instrument found out of tolerance

A returned calibration certificate shows a balance drifted outside its acceptance limit. The equipment record in Operations is updated and the instrument marked out of service. A nonconforming work record is raised, and the technical manager reviews results issued since the last good check and decides which customers to inform. The record captures the correction, the cause (an intermediate check interval that was too long for the workload), the corrective action and the later confirmation that the shortened interval works. When the assessor asks what happens when equipment fails calibration, the answer is one dated, owned chain. The calibration itself is covered in Equipment, calibration and metrological traceability under ISO/IEC 17025.

What is configured at the start of an engagement?

Configuration begins after the gap analysis, once scope, methods and gaps are known. Sterling's consultants and your technical and quality managers decide:

  • Option A or Option B. A laboratory already certified to ISO 9001 extends its existing structure; one that is not follows the Option A list from 8.2 to 8.9.
  • Users and roles. Management, technical manager, quality manager, analysts and internal auditors each get access matching what they record and approve.
  • Registers loaded once. Equipment with calibration due dates, approved providers, staff with their authorisations and the impartiality risk assessment go in from the laboratory's existing lists.
  • Documents sorted. Procedures that staff follow move into Documented Information with an owner; copies nobody uses are retired. See ISO/IEC 17025 documentation: what you need.
  • Links to technical records. The team agrees where each method's validation file, uncertainty budget and proficiency testing results live, and how Effivity refers to them.
  • The plan. Actions from the gap analysis are tracked with owners and dates, including the dependencies on proficiency testing rounds and external calibrations.

What does the accreditation body's assessor see?

An ISO/IEC 17025 assessment works differently from a management system audit. The lead assessor examines the management system; technical assessors watch tests or calibrations being performed and reconstruct selected results from the technical record. Both routes eventually reach records Effivity holds.

What the assessor checksWhere the evidence sits
Was the analyst authorised for this method on that date?HR record in Effivity
Was the instrument within calibration when the result was produced?Operations record in Effivity, certificate attached
How was the uncertainty on this report evaluated?The laboratory's uncertainty budget, linked from the method record
What happened after the last unsatisfactory proficiency testing result?Results in the provider's report; the investigation in Non-conformance/Deviation Management
Did internal audits cover the technical clauses?Internal Audit programme and reports in Effivity
Did management act on complaints and findings?Management Review minutes and action plans in Effivity

Staff open and explain the records selected; for any remote part, record sharing is agreed with the body beforehand. The on-site sequence is set out in The ISO/IEC 17025 assessment: document review, on-site assessment and witnessing.

Surveillance, reassessment and scope extensions

Accreditation opens a cycle of surveillance visits, normally yearly, and full reassessment on the timetable the body sets. Each visit tests whether the laboratory kept doing what it showed at the first assessment: proficiency testing followed up, intermediate checks done, internal audits held, management reviews completed.

Reminders, escalation of overdue actions and dashboards keep the recurring work visible, so calibration due dates and audit schedules do not rely on one person's diary. A group with several laboratories can run them in a multi-site structure on the same forms, which helps when the body samples sites. When the laboratory adds methods or ranges, the new authorisations, equipment and providers join the same registers. The cycle itself is covered in ISO/IEC 17025 surveillance and reassessment: the accreditation cycle.

How Sterling uses Effivity

One laboratory management system, from gap analysis to surveillance.

Effivity is included with the engagement, at no additional cost, with users and the access period confirmed in the proposal. Our expert and experienced consultants configure it with your technical and quality managers, link it to your technical records, and complete the internal audit and management review in it with you before the application. Under Sustain™ we continue with internal audits, surveillance readiness and scope extensions in the same system. We ensure successful accreditation for our clients. Sterling does not accredit: the accreditation body assesses your laboratory and decides.

Book a free discovery call

Where Effivity stops, and the mistakes laboratories make

Effivity records decisions; it does not make them. Whether a method is fit for purpose, an uncertainty budget complete or a proficiency testing result acceptable is a technical judgement your staff must be able to defend in front of a technical assessor. Guidance on those subjects sits in Method verification and validation under ISO/IEC 17025, Measurement uncertainty under ISO/IEC 17025: a budget you can defend and Proficiency testing and interlaboratory comparison under ISO/IEC 17025.

  • Treating the platform as a LIMS. Retyping results into a management system tool creates a second copy of data that must then be controlled.
  • Authorisations recorded once and forgotten. Staff move between methods; an authorisation list that lags the bench is an easy finding.
  • Technical links left blank. An equipment record without its certificate, or a nonconforming work record without the affected results, breaks the trace.
  • Internal audits that skip the bench. An audit programme covering only clause 8 misses what assessors test hardest; see ISO/IEC 17025 internal audit: the technical clauses.

Effivity for ISO/IEC 17025: questions buyers ask

Does ISO/IEC 17025 require management system software?

No. The standard sets requirements for the laboratory, not for its tools, and accreditation bodies expect no particular product. Sterling includes Effivity because a system with owners, versions and reminders in one place is easier to operate and to evidence.

Is Effivity a LIMS, and does it replace ours?

No on both counts. Effivity holds management system records; sample tracking, raw data and results stay in your laboratory information system, instruments or controlled worksheets, and Effivity links to them where an assessor needs the trace.

How is Effivity covered by the data and information management requirements?

That depends on how your accreditation body reads clause 7.11, control of data and information management, for software that holds management system records rather than results. Ask the body early, and keep the configuration decisions and access controls on record.

We already run ISO 9001 in another tool. Can Effivity work under Option B?

Yes, where the laboratory chooses to move its system across; the Option B structure is kept and the laboratory's technical records are added to it. Whether to migrate or stay put is agreed during the gap analysis.

Will using Effivity shorten the on-site assessment?

Do not count on it. The accreditation body sets assessment days from the scope, the number of methods and the sites. What changes is how the time is spent: records surface quickly, so assessors spend more of it on the bench work.

ISO/IEC 17025 implementation

ISO/IEC 17025 requirements

Talk to a consultant

Run your laboratory's ISO/IEC 17025 management system in Effivity from the first weeks.

Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.

hello@sterling-grc.com

+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page

What would you like to achieve?

Choose a starting point. The enquiry form takes about a minute.

Your goal
Book my free discovery call

Continue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice