Document control is the unglamorous category — no torque wrenches, no brake testers, just forms, files, and versions. It's also the category that quietly underwrites every other one: your checksheets, recheck records, training logs, and registers are only worth what your document control says they're worth. A record that might have been tidied up after the fact is, for evidential purposes, not a record. (This rounds out miss #6 in Common audit misses and how to avoid them.)
What the rules require
The obligations sit mostly in the conditions of appointment (VIRM In-service certification, section 3-1):
- Keep everything for at least 12 months. All records and associated documents relating to vehicle inspections and certifications — including failed inspections — for a minimum of 12 months. LT400s and other heavy vehicle specialist or engineer certificates: indefinitely.
- Electronic storage is fine — with conditions. The electronic copy must not be changed and must be stored in a way that protects it from being changed (a read-only file is the manual's own example), and it must be readily searchable and accessible if you or NZTA need it.
- Use current, approved documents. Checksheets must be NZTA-approved — which means the current approved version, not the stack of the old ones left by the printer.
- Report losses. Loss or theft of controlled documents goes to the NZ Police and NZTA as soon as possible.
The slips reviewers keep finding
The superseded form. A checksheet revision lands; the laminated masters get updated; the photocopied stack in the second drawer doesn't. Six weeks later half the site's records are on a version that no longer accurately records the applicable requirements. Version control on paper means hunting down every copy, every time — and one missed drawer undoes it.
The unproducible record. The inspection happened; the sheet exists — somewhere. Reviewers ask for specific records, and "give us a day to dig" is itself the finding: the condition is that records are readily accessible, and a filing system that can't produce a named record on request fails that condition regardless of whether the paper technically exists.
The editable archive. Records scanned to a shared folder as ordinary documents anyone can open and overwrite — or worse, kept in a spreadsheet where last month's determinations are a click away from edited. Storage that allows silent alteration fails the integrity test even if nobody ever altered anything, because the record can no longer prove it wasn't.
The eleven-month purge. Failed-inspection records treated as scrap paper because "the vehicle never passed here". The 12-month minimum covers failed inspections explicitly — they're often exactly what a review or investigation needs to see.
The unaccounted-for controlled document. Labels and forms that exist in official counts but not in the drawer. The reporting obligation is immediate, and discovering the gap at review time means explaining both the loss and the silence.
What good looks like
The pattern across all five slips: paper and loose files make document control a chore performed by everyone, which means by no one. The compliant shape is structural —
- one current version of every document, distributed from one place, so superseding a form retires it everywhere at once;
- records that file themselves at completion, named and indexed so any inspection can be produced in seconds, not days;
- write-once storage that preserves the record as it was determined, protected from later change;
- retention by policy, so nothing eligible for disposal goes early and nothing required is missing.
That's the design of WoFMate's digital checksheets and the QMS Compliance Centre: every completed record stored unalterable, searchable, and retained on policy — with auditor access that lets you hand a reviewer exactly what they ask for, the moment they ask for it.
A site that can produce any record on request, prove it hasn't changed, and show every form in use is current has taken the most miscellaneous finding category off the table entirely.