Every QCC commercial cleaning contract runs under a documented audit cycle. The rhythm is monthly for tier-1 supervisor audits, quarterly for tier-2 area manager audits, monthly for tier-3 HSQE compliance reviews, and annually for the external Certifi International audit that maintains our triple-ISO certifications.
This article walks through what each tier audits, when, and what evidence gets exported to the client portal. If you're a facility manager who's tired of asking "how do I know the cleaning is happening to standard?" — this is the operational answer.
Why three tiers, not one
Single-tier audit programmes have a structural problem: the person inspecting the work has the same boss as the person doing the work. Issues get under-reported, scope drift goes unflagged, and quality slowly degrades until a major incident forces a reset.
Three-tier programmes separate the audit relationships. Tier-1 audits the work (site supervisor watching their crew). Tier-2 audits the supervisor (area manager watching the supervisor's audits). Tier-3 audits the audit programme itself (HSQE compliance manager watching the area managers). Each tier has different incentives, different boss relationships, and different blind spots — and the audit findings get tighter as you move up.
Tier 1 · site supervisor · weekly
Every QCC site has an assigned supervisor who inspects their own crew's work at least weekly. The supervisor uses the same Field Operations Manual (FOM) that defines the cleaning regime — they're checking that the work matches the FOM, not against a generic standard.
Findings get logged in Boomerang as inspection records visible to the area manager (tier-2) and to the facility manager (client portal). Corrective actions are tracked through to closure — not just flagged.
- ·Visual inspection of all high-visibility zones against the FOM
- ·Spot-check of cleaner photo evidence in Boomerang for the past week
- ·Equipment Test and Tag currency (AS/NZS 3760)
- ·Chemical SDS verification on the supervisor's site rounds
- ·Workforce photo-ID badge currency
- ·Working at Heights certification currency where applicable
Tier 2 · area manager · monthly
Each QCC area manager covers 30–60 sites depending on geography and complexity. The area manager runs a monthly audit on a rotating sample of sites — every site is audited at least every 90 days, with critical sites (healthcare, government, finance) audited monthly.
Tier-2 audits aren't just bigger versions of tier-1 — they audit the supervisor as well as the work. The area manager checks whether the supervisor's tier-1 audits are catching issues that an independent eye would catch. If the supervisor is over-reporting or under-reporting, that's a tier-2 finding.
"Tier-2 audits the work and the audit. If a supervisor is missing issues, the area manager catches it — and the corrective action goes to the supervisor's development plan, not just the site."
Tier 3 · HSQE compliance manager · monthly
QCC's HSQE Statutory Training & Compliance Manager (currently Sam Quixaba) runs a monthly review of the audit programme itself. This is the audit-of-the-audit-of-the-audit. The HSQE compliance manager checks: are the tier-1 and tier-2 audits happening on schedule? Are findings being closed inside agreed timeframes? Are corrective actions documented to the standard ISO 9001 requires?
Tier-3 also handles the quarterly management review with the executive team — CEO Eduardo Abreu, COO Lee Hardy, CFO Alcyr Tabarini, National Operations Coordinator Rodrigo Campos. This is where systemic issues (chronic underperformance at a site, recurring issues across an area manager's portfolio, supplier-side problems) get escalated and resourced.
External audit · Certifi International · annually
Once a year, Certifi International runs a multi-day external audit of QCC's management system across all three ISO certifications: ISO 9001:2015 (Quality), AS/NZS ISO 45001:2018 (H&S), AS/NZS ISO 14001:2015 (Environmental).
The external audit examines: the management system documents themselves, the audit-of-audit evidence (tier-1 → tier-2 → tier-3), corrective action closure records, training currency for the workforce, incident reporting and investigation records, supplier management evidence, and continuous improvement cycles. The auditor selects sample sites for direct verification — they visit and check that what's claimed at HQ matches what's happening on the floor.
If the external audit passes, our triple-ISO certification continues for another year and certificates are reissued. If it doesn't, we get corrective action requirements (CARs) with specific closure deadlines. Failure to close CARs results in certification suspension — which is a contract-breaking event for any client whose contract requires ISO certification.
What clients see · the audit evidence layer
Boomerang exports the audit evidence layer to every client portal. Facility managers see: their site's tier-1 inspection records (with photos), tier-2 area manager findings, training currency for cleaners assigned to their site, and incident reports relevant to their site. The HSQE-level audits and external Certifi International findings aren't site-specific — those are exported on request as part of the compliance pack.
For clients in regulated sectors (healthcare, aged care, education, finance, government), Boomerang exports tender-grade audit packs same business day. This includes the NSQHS Standard 3 evidence trail, NQF Quality Area 3 records, Aged Care Quality Standard 5 compliance evidence, and internal corporate procurement audit records.
The audit cycle isn't marketing — it's the operational discipline that keeps QCC's triple-ISO certification current year after year, that produces evidence facility managers can defend at their own audits, and that catches issues at the supervisor tier before they become incidents.
If your current cleaning provider can't walk you through their audit cycle this clearly, that's an audit-cycle problem. Request a free QCC compliance pack and we'll show you the audit-evidence layer that runs under every QCC contract.
