We identify which laws, regulations, NOM standards and permits apply to each workplace in Mexico, evaluate your compliance with evidence and keep the register up to date. It is the requirement ISO 14001 and ISO 45001 share, and the one that generates the most audit findings.

It is the record that links each applicable legal obligation —law, regulation, NOM standard, permit, license or permit condition— with the activity that triggers it, the owner, the evidence of compliance and its status. ISO 14001 (clauses 6.1.3 and 9.1.2) and ISO 45001 (6.1.3 and 9.1.2) ask for two different things: identifying the requirements and periodically evaluating whether they are met. Almost every company has the list; few have the evaluation.
By workplace, because state and municipal regulation changes from one city to another.
The STPS NOM standards that apply to your process: buildings, fire, machinery, chemicals, work at height, pressure vessels, psychosocial risk, telework and more.
The general environmental law (LGEEPA), waste (LGPGIR), national waters, emissions, annual operating report and the applicable SEMARNAT NOM standards.
Operating licenses, state environmental impact, special-handling waste, discharges and civil protection.
Customer and corporate requirements, contracts, voluntary codes and permit conditions.
Verification with evidence, status per requirement and action plan for what is not met.
Monitoring changes in the federal and state official gazettes, with notice of what affects you.
The typical audit finding is not a missing list of laws, but that nobody verified whether they are met. We deliver the evaluation requirement by requirement, with the evidence located and the owner assigned.

Three to six weeks per workplace, depending on process complexity.
Activities, substances, equipment, current permits and location of each workplace.
Deliverable: site legal profileApplicable federal, state and municipal requirements, with their legal basis.
Deliverable: requirements registerOn-site verification with evidence and interviews.
Deliverable: compliance status and gapsActions with owner and date, and an update calendar.
Deliverable: action plan and update serviceA quick reference; the full register depends on your processes. Always check the current version of each standard.
| NOM | Topic | Where it fits in ISO 45001 |
|---|---|---|
| NOM-030-STPS | Preventive OH&S services | Planning and OH&S program (6.1, 6.2) |
| NOM-019-STPS | Safety and hygiene commissions | Consultation and participation (5.4) |
| NOM-035-STPS | Psychosocial risk factors | Hazard identification (6.1.2) |
| NOM-017-STPS | Personal protective equipment | Hierarchy of controls (8.1.2) |
| NOM-002-STPS | Fire prevention and protection | Emergency preparedness (8.2) |
Book the assessment: we review one workplace and give you a first reading of your legal compliance.
The register feeds ISO 45001 consulting, ISO 14001 consulting and the integrated management system, and is checked in every ISO 45001 internal audit and ISO 14001 one.
Several NOM standards require training: we cover it with NOM-035 training, the NOM-035 survey software and DC-3 certificates. Read how ISO 45001 relates to the Mexican STPS standards.
Start with one workplace and decide later whether to extend it to the rest.