The data conversation after a quality management upgrade: a quality-history discovery brief, filled in from what the CEO and the quality lead say once the new system is live, that turns the old archive's fate into one fair question

Short answer

A quality management upgrade, whether the move to a new quality system or the transition to the 2026 edition of ISO 9001, makes a company's leaders decide what happens to years of nonconformance, corrective-action and audit history. Once the new system is live and that decision is on the table, a partner who knows the CEO can fairly ask one question: would the company like to hear whether records it wrote itself could be licensed for AI training and evaluation? Build the brief from what people tell you, never from the records.

Visual briefFull-size diagram
An iceberg headed the upgrade shows the tip, the history sits below: above the waterline a small tip labeled new quality system, with the note the partner asks from here; below it a large mass labeled years in the old system lists nonconformances, corrective actions, internal audits and complaints, which carry customer details, beside the note the CEO decides whether anyone looks.
What a quality upgrade puts in view, and where the partner stays: on the surface, with the question for the CEO.

This is for the partner network strategist at a consultancy, accounting firm, implementation partner or fund platform whose people hear about quality projects from the inside. If your firm's role in the upgrade comes with its own rules on outside interests, those rules come first.

What a quality upgrade puts in front of the CEO

Two kinds of upgrade arrive under the same name, and they are not equally useful triggers.

The first is a system change: paper binders, spreadsheets or an aging quality database replaced by a new quality management system. Someone has to decide which records migrate, which stay read-only in the old system and for how long, and when the old system is switched off. Those decisions carry dates, and they reach the CEO because they cost money and touch every audit the company will face.

The second is a standard change. ISO published ISO 9001:2026 on 16 September 2026 as the successor to the 2015 edition, describing targeted updates rather than a rewrite, with more emphasis on leadership and quality culture and a clearer split between risks and opportunities (our paraphrase of ISO's announcements as excerpted in search). Every certified company now has a transition to plan. A standard transition changes how the system is run; it rarely changes what the old archive holds.

UpgradeDecision it forces about past recordsStrength as a trigger
New system replacing an older quality databaseWhat migrates, whether closed records stay readable in the old system, and until whenStrong: a dated decision about years of records
New system replacing paper and spreadsheetsWhat is scanned or entered, and what stays in bindersMedium: the history may be scattered and partly undated
Transition to ISO 9001:2026 aloneUsually none; procedures and management review are revisedWeak on its own; useful mainly when a system change rides along

The question this page prepares is about history, so the strong trigger is the one to watch. Revision trails for individual procedures are a different subject, covered by the SOP revision discovery interview.

Why go-live, not kickoff, is the moment to ask

At kickoff nobody knows what will migrate. During cutover the quality team is at its busiest, and a licensing question is a distraction. After go-live, usually around the first post-implementation review, the migration decision has been made, the old archive's fate is known and leadership is looking back over the project. That is when the CEO can hear the question as relevant rather than opportunistic.

Run a timing check before anyone writes. Wait if any of these is true:

  • An audit is close. A certification, customer or regulatory audit within the next few weeks owns the quality team's attention.
  • Something is open. A recall, a major nonconformance or a serious customer complaint is still being handled.
  • People are leaving. Quality or operations roles are being cut as part of the project.
  • Ownership is moving. A sale is pending, or the CEO is about to change.
  • You heard it in confidence. If the upgrade reached you through paid work, check what your engagement allows before using it.

The quality-history discovery brief

Eight lines, filled in from conversation in roughly this order. Every answer comes from a person or a public announcement; none comes from opening a system. Stop at the first answer that shows the company is not a fit.

#LineWho answersA useful answer sounds like (Illustrative)Never ask for
1The upgrade in one sentence, with its go-live dateThe CEO, the quality lead or a public announcement"Moved from a 2011 quality database to a cloud system; live since June"The project plan or the vendor contract
2Record families left in the old system, by nameQuality lead"Closed nonconformances, corrective actions, internal and supplier audits, complaint files"A report, export or screenshot
3How far back each family goesQuality lead"Corrective actions from 2012, audits from 2009"Copies of old audits
4Where the old system ends up, and until whenQuality lead or IT owner"Read-only until its contract ends in 2028"Logins to either system
5Who wrote the records, and whose details they containQuality lead"Our engineers wrote the investigations; complaint files quote customers; supplier audits name suppliers"Example records
6Any earlier AI-training license or promiseCEO"None"Copies of contracts
7Who decides, and whether they have heard the ideaSponsor"The CEO; not yet"An introduction the CEO has not agreed to
8The CEO's answerCEO"Send me a short note first"A deadline you invent

Lines 5 and 6 carry the most weight. SourceX's screening page lists QA records among the original documentation it looks for, and treats material that belongs to the company's clients as usually not a fit; complaint files and supplier audits mix the company's own work with other parties' details, and only SourceX's review decides what of that, if anything, the company may license. Line 6 is a gate: SourceX's company process page lists, among what a supplier confirms, that the data has not been licensed for AI training before, so an earlier license ends the conversation.

Method note. The brief applies SourceX's who-qualifies screening profile, its company process page and the program terms (Version 2026-10-22.2, since replaced by version 2026-11-04), all read on 2026-10-27, plus ISO's announcement of the 2026 edition paraphrased above. The order of lines follows a typical system upgrade, not measured outcomes. SourceX has published no response or conversion figures for introductions raised after quality upgrades, and this page estimates none.

Quality lead, sponsor and CEO: who does what

RoleUsuallyCanCannot
Quality leadHead of quality or QA managerAnswer lines 2 to 5 from what they knowAgree to a licensing discussion
SponsorThe COO, an operations director or the quality leadCarry the question to the CEO in the company's own termsSpeak for the CEO
CEOThe chief executive, often the owner in an owner-run firmDecide whether the company talks to SourceX, and sign for itHand that decision to a partner

Ownership changes the third row: after a sale has closed, the buyer's CEO decides for the acquired company, and until it closes the company's own CEO does. Every company in a group sits under one reward cap. The brief also sits on top of the published fit facts, which still apply: a peak of at least 50 full-time employees with contractors left out, several years of records the company produced, clear rights to them and a chief executive who is interested, with location rules on who qualifies.

One question, then a dated line in your log

The question (Illustrative wording). "Now that the new quality system is live and the old one is going read-only, a question unrelated to the project: SourceX licenses records companies wrote themselves, such as corrective-action investigations and audit findings, for AI training and evaluation. Would you like a short note on how it screens companies, so you can decide whether to talk? I should say I'm a referral partner, so SourceX could pay me a reward if anything came of it. It pays that separately, and the company's payout would not change. A no is a fine answer."

The record. The trigger and where you heard it, which lines were answered and by whom, the CEO's words, the next step with its owner, and a revisit date if the answer was not now. Nothing about the records themselves belongs in it, and nobody gathers quality records for SourceX; whatever the company shares later passes between the company and SourceX.

A written yes from the CEO comes first; then whoever will submit registers and signs the SourceX Channel Partner Agreement. Credit follows section 2 of the terms: one partner per company, awarded to the first valid introduction inside the 90-day attribution window, and only when the company has filed a verified application. Under section 3, any earlier contact the company had with SourceX, from an application or lead to an account or a single email exchange, makes it a duplicate. Where colleagues or other firms know the same company, agree who asks first; SourceX settles any overlap in its duplicate review.

A 180-person contract manufacturer after go-live (Illustrative)

Illustrative. The company, its numbers and its people are invented, and nothing here predicts a review outcome.

  • Month 0. A contract manufacturer with 180 full-time staff goes live on a new quality system that replaces a 2010 database. Its operations director mentions it to the company's outside accountant at a planning meeting.
  • Month 1. The accountant runs the timing check: no audit for two months, nothing open, no cuts, and the CEO knows the project well. All clear.
  • Month 2. In a twenty-minute call the quality manager answers lines 1 to 5: closed nonconformances and corrective actions from 2011, internal audits from 2010, the old database read-only until 2027, investigations written by the company's engineers, complaint files that quote customers.
  • Month 2, later. The CEO confirms nothing has been licensed for AI training, reads the short note and agrees to a call.
  • Month 3. The accountant, registered and signed since the spring, submits the introduction with the CEO's written agreement. The company applies itself, and SourceX checks fit and rights. The accountant's note says only that complaint files quote customers and leaves the rest to SourceX's review.

If the company later licensed data and SourceX paid it $400,000, the default reward would be $70,000 (Illustrative). The company's payout would be the same either way, because section 4 of the terms says the reward "is never deducted from the supplier's agreed compensation".

Where the upgrade trigger misleads

  • A certificate is not fit. ISO certification says nothing about headcount, rights or whether SourceX has a current program for the records.
  • Quality history names other people. Customers, suppliers and sometimes employees appear throughout it, and much of what looks like the company's own history may not be its to license.
  • Migration is the company's call. Never advise on what to keep or delete; a retirement date is only a reason to ask sooner.
  • A standard transition rarely touches the archive. Treat ISO 9001:2026 work alone as a weak trigger.
  • Nothing is measured. Log each upgrade you hear about, the line where it stopped and the CEO's answer, for two quarters; no benchmark exists.

Related reading: what the records can look like, at the level of types, in quality assurance workflows and nonconformance disposition; other moments when a company maps its own records are covered in a new records manager can clarify the introduction path and when a business standardizes processes across branches. More trigger guides are in the guides library.

Next step

Refer a company. No cap on rewards. Default reward on a company's first qualifying transaction: the greater of $50,000 plus 5% and 15% of Actual Supplier Payout, with no cap; further qualifying transactions first agreed within 12 months of the first Closing pay 15%. Eligibility and payment conditions apply, including the USD 100,000 Minimum Transaction, and a signed Schedule A or addendum can differ. A lead, meeting or signature alone does not trigger payment.

Once the brief's first seven lines are answered and the CEO has asked to talk, register as a partner before you submit, compare the company with who qualifies and read the program terms on how a single introduction is credited.

  1. Step 1Share your linkSend your personal link to a company you know.
  2. Step 2Company appliesThe company applies itself at /apply.
  3. Step 3Company signs and is paidThe company signs, delivers its data and is paid by SourceX under its agreement.
  4. Step 4You get your rewardthe greater of $50,000 plus 5% and 15% of the actual supplier payout, with no cap. A reward becomes payable after SourceX has paid the referred company under its signed agreement and the payout conditions in the program terms are met, including finance approval and your tax and payment details.

Common questions

Does an ISO 9001 certificate make a company a good candidate?

No. A certificate shows the company runs a quality system; it says nothing about full-time headcount at peak, the company's rights to its records or whether those records fit a current SourceX program. Treat it as context for the conversation, never as a fit signal.

Should a partner suggest keeping the old quality database instead of retiring it?

No. What to migrate, keep or retire is the company's own decision, made with its own advisers. A partner may note that a retirement date is a reason to ask the licensing question sooner, and stop there.

What if the quality lead offers to send a few closed corrective actions as examples?

Decline politely. The partner never reviews, exports or summarizes company records, and SourceX's own process asks for no records at the first step. Ask the quality lead whether the CEO would like to hear about the program instead.

Sources

  1. iso.org/news/2026/09/ISO9001-2026
  2. iso.org/quality-management/iso-9001-2026
  3. refer.sourcex.si/who-qualifies
  4. refer.sourcex.si/terms
  5. sourcex.si/how-it-works

Free resources

Know a company with valuable proprietary data?

Become a referral partner, get your link and introduce the company’s CEO (in an owner-run company, usually the owner). Referral partners can join from most countries. We can't work with partners in countries or regions under U.S. sanctions or on U.S. restricted-party lists. The companies you introduce should be based in the U.S., Canada and the EU, or in the UK, Australia, New Zealand, India, Singapore, South Africa, Latin America, the UAE and Saudi Arabia with at least 70% of their data in English.

Refer a company →

I own a business

Explore licensing your company's data directly to SourceX for AI training and evaluation. Start a short assessment; no uploads needed.

Start an assessment