System, process and product audits, each audited against a named standard — ISO 9001, IATF 16949 or AS9100
The plan is a record: scope, criteria, lead auditor, the process owner being audited, the audit team, and “why this area, why now” as the risk basis
Findings carry a type, the clause, the objective evidence, an owner and a due date — owner and due date are required for a nonconformity
Each finding tracks its correction, root cause and corrective action, links to a CAPA, and closes only with a named verifier and a verification-of-effectiveness note
A follow-up audit can be opened straight from a CAPA and stays linked to it
Summary, strengths and next-audit-due on every completed audit — the programme rolls forward on its own