Quality Is Not a Certificate. It’s How We Work.

Anyone can put a badge on a website.

The question an evaluator should ask is not “do they have it?”

It is “do they live it?”

This is our answer.

We are a small team. That is exactly why we take this seriously. A small team cannot carry a quality system that lives in a folder. If it does not shape the work, nobody follows it. And a quality system nobody follows is a promise you are not keeping, with a logo on it.

So when we built ours, we set one rule:

Write down how we deliver well. Then make sure it happens every time.

The loop behind everything we do

ISO 9001 is built on one idea: Plan, Do, Check, Act.

• Plan. Know what we are delivering, and what could go wrong.
• Do. Work the way we said we would.
• Check. Prove that it worked.
• Act. When it did not, fix the cause, not just the symptom.

Here is what each part looks like at devroom.

Plan: our process is our own

We did not download a template. Forty pages of procedures written for a factory would describe someone else’s company.

Our quality system describes how we actually deliver: how a project starts, how a change is reviewed, how it is tested, how it goes live, and how we support it after.

That matters to you for one reason. When an auditor, or a client, asks how we work, the answer on paper and the answer in practice are the same.

Do: quality is built into the pipeline

We do not rely on people remembering to check.

Every change is reviewed by someone other than its author before it ships. Automated tests run on every change. Continuous integration means nothing goes live without passing them. Accessibility is checked before release, not after a complaint.

And every change leaves a record: what changed, who reviewed it, which tests passed. Nobody has to fill it in. The pipeline writes it.

Check: we audit ourselves, and so does someone independent

We run internal audits and regular management reviews. We take a real piece of work, follow it through the process, and ask: did we do what we said?

Then an independent certification body checks the whole system. It comes back every year to make sure it still works, and recertifies every three years.

We track our certificates and their renewal dates in our own systems, so nothing lapses quietly.

Act: every problem makes us better

Things go wrong in every software project. What matters is what happens next.

When something slips, we fix it. Then we find what let it through, and we change the process so it does not happen again. No blame. Just the cause, and the fix.

That is how a quality system improves year on year, instead of just surviving the next audit.

What this means for you

When you buy from a supplier, you are not buying their best week.

You are buying every week. Including the busy ones, the ones where someone is off sick, the ones with a deadline moving.

That is what ISO 9001 is really about: delivering the same way on a bad week as on a good one.

Our certificates are available on request, alongside ISO/IEC 27001:2022 for information security and Cyber Essentials Plus.

A certificate tells you we passed once.
A system tells you we will do it again.
We built the system.