When a company claims to be ISO certified, it’s reasonable to ask: Is the certificate genuine? Not all certificates are equal, and unfortunately, some are issued by bodies with no proper accreditation. Whether you’re a potential client, partner, or auditor, verifying the validity of an ISO certificate helps ensure that the company meets recognised standards.
Here’s how to check if an ISO certificate is valid:
Ask for a Copy of the Certificate
Start by requesting a digital or physical copy of the company’s ISO certificate. This will contain essential information such as:
- The name of the certified company
- The scope of certification (e.g. “Provision of IT services”)
- The standard (e.g. ISO 9001:2015)
- Certificate number
- Issue and expiry dates
- Name of the certification body
Check the Certification Body
Ensure that the certificate was issued by a UKAS-accredited (or internationally recognised) certification body. In the UK, look for the UKAS crown and tick mark. For other countries, check if the body is accredited by a member of the International Accreditation Forum (IAF).
To verify:
- Visit the certification body’s website
- Look for a “certificate checker” or “verify certificate” tool
- Enter the certificate number or company name
If you can’t find a tool, contact the certification body directly to confirm.
Confirm Accreditation
Even if a certificate looks official, the certifying body must be accredited. To check:
- Visit www.ukas.com (for UK certificates)
- Use the IAF database at www.iaf.nu to verify accreditation for global certificates
- Search the certification body to see if they’re officially recognised
If the certification body is not listed or has no recognised accreditation, the certificate may not be valid.
Check the Certificate Scope and Dates
Make sure the certificate:
- Covers the specific services or products the company is offering
- Is still valid (check the expiry date)
- Has a clear issue and surveillance audit history
Certificates are usually valid for three years, with annual surveillance audits. If a certificate is outdated, it may no longer be valid.
Be Wary of Self-Declarations
A company claiming to be “ISO compliant” without showing a certificate, or providing one from an unaccredited body, may not have gone through a formal, independent audit. Only accredited certification can confirm full ISO compliance.
Final Thoughts
Verifying an ISO certificate is a straightforward but essential process. Don’t assume a certificate is valid just because it looks professional. Taking a few minutes to confirm the details can help you avoid risks, ensure credibility, and make informed decisions when working with other businesses.
Need Help?
Request a Call Back Today