Whenever ISO 9001:2015 uses the term 'documented information' it implicitly expects you to control and maintain that information and its supporting medium. However, this isn't the whole story. Make sure your business meets all the requirements.

According to the new standard, “risk-based thinking has always been implicit in ISO 9001”, because Quality Management Systems have always been concerned with preventing problems. Now ISO 9001:2015 has made that explicit, so make sure your business it up to date.