The quality policy is the declaration in which top management commits to quality — the one-page document that steers the whole QMS. Clause 5.2 of ISO 9001 sets out four content requirements: the policy must be appropriate to the purpose and context of the organization and support its strategic direction (no generic text that would fit any company); it must provide a framework for the quality objectives; it must include a commitment to satisfying applicable requirements (customer, statutory, standard); and a commitment to continual improvement.
Beyond the content, the standard requires application: the policy has to be available as documented information, be communicated, understood and applied within the organization, and be available to relevant interested parties. The classic auditor test is to ask an operator "what does the quality policy mean for your job?" — the answer does not have to be word-perfect, it has to show practical understanding ("here we do not let a doubtful part through"). In ISO 9001:2026, leadership is also expected to promote a quality culture and ethical behavior: it is worth reflecting that in the policy.
Mistake number one is the cliche policy: "to pursue excellence by exceeding customer expectations through continual improvement". It says nothing about YOUR company and it fails the first requirement (appropriate to the context). The antidote is to anchor every commitment in something real about the business: if your market buys lead time, the policy talks about on-time delivery; if it buys technical precision, it talks about conformity to specification. And every commitment in the policy should pull at least one measurable objective — that is the framework for the objectives that the standard asks for.
The template below gives a complete policy for a metalworking company, with the traceability from policy to objective spelled out. Personalize the commitments and keep the structure.