Certification, explained
How ISO 9001 certification actually works.
Who issues it, what the audit is, what accreditation does and does not mean — and the four things we will never do for you. No part of this requires buying anything from us.
What a certificate actually is
In ISO's own words, certification is written assurance from an independent body that your system meets specific requirements. Two things follow from that and both matter. It comes from a body that is independent of you — which is exactly what makes it worth anything to your customer. And it does not come from ISO: ISO writes the standard, and separate organisations audit against it.
Who issues it
A certification body — often called a registrar. You choose and pay them, they audit you against the standard, and they issue the certificate. ISO does not do this, and neither do we. If anyone tells you they can hand you an ISO certificate directly, that is the moment to ask who accredits them.
What accreditation means — and one thing nobody mentions
An accreditation body formally recognises that a certification body works to international standards. Global Accreditation Cooperation Incorporated is the international authority for that, since the IAF and ILAC merged into it on 1 January 2026. Certificates from accredited bodies can be looked up in the IAF CertSearch database. But ISO says plainly that accreditation is not compulsory, and that a body without it is not necessarily disreputable — so “accredited” is a useful signal, not a verdict.
What the audit is like
Normally two visits. The first looks at whether your system is documented and ready to be assessed; the second looks at whether you actually run it. After that, shorter surveillance visits keep the certificate current, and a fuller reassessment comes round on a cycle your registrar sets. The dates and the cycle are theirs, not ours to promise.
Four things we will never do
Issue your certificate.
We are not a certification body and will not become one. The certificate comes from your registrar.
Be your auditor of record.
The person who signs off your certification audit has to be independent of the people who built your system. We built your system.
Be your registrar.
You choose them, you pay them, and the relationship is yours. We do not sit between you.
Put boots on the ground.
Someone has to physically look at the work. That stays human and it stays with you.
What we do instead
Everything up to the audit and everything after it. We teach you what each requirement means for your business, build your quality system as you go, keep the schedules and the records, and hold the evidence in one place so you can produce it when someone asks. Then your registrar does their job, honestly, and the result means something.
FAQ
- I don't know anything about ISO — is that a problem?
- No. That's exactly who this is for. Most quality managers started right where you are.
- Do you certify us?
- No, and we never will. You choose your own certification body. We get you ready for them.
- Which standard?
- We start with ISO 9001. (Tell us if you need another — we're expanding.)
- How long will it take?
- It depends on your business and how much you already have. We won't sell you a fake deadline; we'll show you the path and move at your pace.
- Does the 2026 edition change any of this?
- The mechanism is the same — a registrar still audits and still issues. What changes is which edition they audit against, and nobody has yet published the rule for moving from one to the other. We track that on a page of its own.
See your quality system come together.
Book a walkthrough and we'll show you what a living QMS looks like for your business.