Des Moines, Iowa
ISO 9001 consulting for Des Moines manufacturers.
A 300,000 square foot equipment plant is being built in Bondurant, and Iowa is one of the few states in this region that runs its own workplace safety plan. Both change what a supplier here has to be ready for.
We are based in the Kansas City metro, and this market is a drive rather than a flight. That makes on-site work here a normal working assumption rather than a budget line. We do not maintain an office in this market and would rather say so than imply otherwise.
Why the supply chain question is live right now
In February 2026, Vermeer announced a new facility in Bondurant, in the Des Moines metro: 300,000 square feet on 186 acres, with more than 300 initial positions, expanding manufacturing for industrial parts, aftermarket components and its utility, tree care and landscape product lines.
New capacity of that size does not arrive alone. It arrives with a purchasing organisation that has to qualify local suppliers, and qualification is where quality management stops being abstract.
One thing worth getting right, because a local reader will notice immediately: Vermeer is headquartered in Pella, around forty miles away and outside the metro. The new plant is in Bondurant, which is inside it. Consultants who blur that are telling you how closely they read.
The wider metro has 458 manufacturing establishments, 411 of them with fewer than 100 employees (US Census County Business Patterns, 2023), weighted toward equipment, metal fabrication and food processing.
Industry in Des Moines
- Vermeer, Bondurant 300,000 sq ft on 186 acres announced February 2026, 300+ initial positions — in the metro; Vermeer's headquarters is in Pella, outside it
- Iowa OSHA Iowa runs an OSHA-approved State Plan covering most private-sector workers — unlike Missouri, Kansas, Nebraska and Wisconsin, which have none, and unlike Illinois, whose plan covers public employees only
- Metro equipment and fabrication base 411 manufacturing establishments under 100 employees, weighted toward equipment, metal fabrication and food processing
- Iowa's OSHA state plan Iowa runs its own plan covering most private-sector workers, unlike Nebraska, Missouri and Kansas next door — a register built for the wrong assumption will be wrong throughout
Iowa runs its own OSHA plan — and most pages about this state get it wrong
Iowa operates an OSHA-approved State Plan covering most private-sector workers. That puts it in a minority among its neighbours: Missouri, Nebraska, Kansas and Wisconsin have no State Plan at all, and Illinois has one that covers public employees only — so every one of them leaves private-sector enforcement to federal OSHA.
We are being emphatic about this because we got it wrong ourselves before checking, and because a compliance obligations register assembled from federal OSHA alone will be incomplete for an Iowa employer.
It matters practically for anyone building an integrated system. If you are running ISO 9001 alongside ISO 45001, your legal and other requirements register has to reflect Iowa's plan rather than a federal template. That is a small piece of work that is easy to get right and expensive to get wrong at audit.
One boundary, before anything else
Equipment supply chains run on customer artefacts as much as on standards — production part approval evidence, documented process capability, controlled change, corrective action that produces records rather than reassurance. Those requirements arrive from the automotive world and travel into off-highway through purchase orders.
We do not offer IATF 16949 consulting. If a customer is flowing down IATF itself, you need a different firm and we would rather say so here than after a proposal. If they are flowing down PPAP submissions against a general quality management system — which is the far more common case for an Iowa equipment supplier — that is squarely what we build.
Everything below assumes you have read that.
What a State Plan actually changes for a manufacturer
An OSHA-approved State Plan is not a rebadged federal programme. A State Plan must be at least as effective as federal OSHA, and it may go further — adopting standards the federal programme has not adopted, setting requirements the federal programme does not set, and running its own consultation, enforcement and reporting arrangements.
That has a direct and specific consequence for anyone building an ISO 45001 system here, because clause 6.1.3 requires you to determine and have access to your legal requirements and other requirements, and clause 9.1.2 requires you to evaluate compliance against them. Both of those start with correctly identifying which regulator you answer to.
A compliance obligations register assembled from federal OSHA sources will be structurally wrong for an Iowa site — not incomplete in an obvious way that an auditor spots as a gap, but confidently wrong in a way that looks finished. That is a harder defect to find and a more embarrassing one to explain.
It also affects the ISO 9001 side more than people expect. Clause 4.2 asks you to determine the relevant requirements of interested parties, and your regulator is an interested party. If your context analysis names the wrong one, everything downstream of it inherits the error.
New capacity is a hiring event before it is a purchasing event
A 300,000 square foot plant with more than 300 initial positions does two things to a regional supply chain, and the second one gets less attention than it deserves.
The obvious one is purchasing: a new site has to qualify suppliers, and qualification questionnaires arrive.
The less obvious one is labour. Large new capacity in a metro of 458 manufacturing establishments does not hire into a vacuum — it hires experienced people out of the shops already here, and it hires them at the wage a new plant can pay. For a 40-person fabricator, that is a competence problem before it is anything else.
ISO 9001 clause 7.2 and ISO 45001 clause 7.2 both require you to determine the competence necessary, ensure people are competent, and retain documented evidence of it. Most small manufacturers satisfy that on paper and fail it in practice, because the actual competence lives in three long-serving people and nothing about how they do the work is written down. When one of them leaves for the new plant, the system does not degrade gradually — it discovers a hole.
The useful version of a management system here is the one that makes that transferable: work instructions written by the person who does the job, qualification records that mean something, and a training matrix that reflects reality rather than an audit. That is worth doing before the hiring cycle rather than after it.
The size of business this metro actually contains
Des Moines has real manufacturing depth but it is not a metro of large plants. The bulk of it is establishments under a hundred people — the size where the quality manager also handles safety, or purchasing, or both.
That shapes what a workable system looks like. A 45-person fabricator does not need the documentation set a 450-person plant needs, and building one that large is the most reliable way to end up with a system nobody follows. Which is worse than not certifying at all, because now you have documented commitments you are not meeting.
The requirement that causes most difficulty at that size is internal audit independence — auditors must not audit their own work. Using an external auditor for internal audits solves it and is entirely permitted. It is certification that must be independent, not internal audit.
How we work with companies here
We are based in the Kansas City metro and serve Des Moines with on-site visits for the gap analysis walkthrough, the first internal audit and the certification audits. It is a straightforward trip and we schedule around your audit calendar rather than ours.
The rest runs remotely, which usually suits clients better anyway — procedure drafting, process mapping and audit-finding response are easier to review on your own schedule than across a conference table.
The consultant who scopes the engagement does the work. No handoff to a junior implementer after the sale.
What an engagement covers
- Scope definition Which sites, processes and people fall inside the certificate. It drives your audit days, your surveillance cost and how much system you have to build.
- Gap analysis and roadmap Two to four weeks with the 2026 revision factored into the roadmap, so nothing you build now needs rebuilding later. Fixed scope, fixed price.
- Supplier-qualification readiness The evidence equipment OEMs actually ask for — process capability, controlled change, traceability and a corrective action loop that produces records.
- Integrated ISO 9001 and ISO 45001 Where it makes sense, with a compliance obligations register built on Iowa's State Plan rather than a federal template.
- Internal audits by an external auditor The practical answer to independence in a small plant, conducted to auditor-grade standards.
- Certification body selection and liaison We help you choose an accredited body and check the quote against the published audit-day table. We hold no commercial relationship with any of them.
- Right-sized documentation Enough to satisfy the standard and be genuinely usable by a small team.
Questions we get from companies in this market
Does Iowa have its own OSHA plan?
Yes, and this is the detail most pages about Iowa manufacturing get wrong. Iowa operates an OSHA-approved State Plan covering most private-sector workers, unlike Missouri, Nebraska, Kansas and Wisconsin, and unlike Illinois, whose plan covers public employees only. If you are building a compliance obligations register or an integrated quality and safety system, it needs to reflect Iowa's plan rather than a federal template.
A large OEM has asked us to become a qualified supplier. What do we actually need?
Get the requirement in writing first, because it varies more than people expect. Sometimes it is ISO 9001 certification. Often it is specific evidence — production part approval, process capability data, controlled change and documented corrective action — which an existing system can produce without a new certificate. We will read the requirement with you before quoting, and if certification is not what they are asking for we will say so.
We're a 40-person shop. Is ISO 9001 realistic?
Yes, provided the system is sized for you. The genuine difficulty at that size is internal audit independence rather than documentation — auditors cannot audit their own work, and in a small plant the person who understands the process usually runs it. An external auditor for internal audits solves it and is entirely permitted; only certification has to be independent.
How long does certification take?
For a company of 25 to 100 people with reasonable process discipline, six to nine months from kickoff to certificate is realistic: two to four weeks for gap analysis, three to five months to build and implement, one to two months across Stage 1 and Stage 2. If your deadline comes from a customer contract, start counting backwards from that date now — certification body audit calendars are not always accommodating.
Should we wait for ISO 9001:2026?
No. It is scheduled for 16 September 2026, and certification bodies then need their own accreditation extended before they can audit to it, so anyone starting now certifies to the 2015 edition and transitions during the window. We build the known changes in as we go so the transition is an update rather than a rebuild. Our ISO 9001:2026 transition tracker covers what is confirmed and what is not.
What does it cost?
Audit days come from a published table set against the number of people within your certification scope, then adjusted for factors like design responsibility and site count. We show the arithmetic in the certification cost breakdown rather than quoting a number before scope exists.