ISO certification that actually stands up
ISO certification is routinely demanded in tenders, by corporate buyers and by export customers. We take you through gap analysis, documentation and audit with an accredited certification body — not a printed certificate that fails the first time a client checks it.
What the engagement includes
- Standard selection for your business
- Gap analysis against the current standard
- Manual, policy and procedure drafting
- Records and formats your team can maintain
- Internal audit and management review
- Certification body coordination
- Stage 1 and Stage 2 audit support
- Surveillance audit reminders
Get a fixed quote
Government fees and our fee, itemised — before you commit.
Thank you — request received
One of our consultants will call you on the number you provided, usually within one working day.
What ISO certification means
ISO standards are internationally agreed frameworks for how an organisation manages a particular aspect of its work — quality, environmental impact, worker safety, food safety, information security. Certification is a third party auditing your business against the standard and confirming that what you say you do is what you actually do.
Certification is issued by a certification body, not by ISO itself. That is the point most buyers now check.
The standards we handle
| Standard | Covers | Typically needed by |
|---|---|---|
| ISO 9001:2015 | Quality management systems | Almost any business; the default tender requirement |
| ISO 14001:2015 | Environmental management | Manufacturing, construction, waste handling |
| ISO 45001:2018 | Occupational health and safety | Factories, sites, security and facility services |
| ISO 22000:2018 | Food safety management | Food processing, catering, packaging, storage |
| ISO 27001:2022 | Information security management | IT and ITES, BPO, fintech, data processors |
What certification gets you
Tender eligibility
A large share of government and corporate tenders list ISO 9001 as a qualifying condition. Without it you are filtered out before your price is read.
Export and buyer audits
Overseas buyers and large Indian corporates routinely require certification before they will place a first order or run a supplier audit.
Fewer defects and disputes
Done properly, the documentation forces you to define who does what. Most clients find the internal clarity worth more than the certificate.
Credibility
An accredited certificate is verifiable by any buyer who cares to check, which is precisely why it carries weight.
How certification works
- Standard selectionWe confirm which standard and which scope statement your buyer or tender actually requires — getting the scope wrong is a common and expensive mistake.
- Gap analysisWe assess your current practice against the clauses of the standard and identify what genuinely needs to change.
- DocumentationPolicy, manual, procedures, formats and records are drafted to fit how your business actually operates, not a generic template.
- ImplementationYour team runs the system for a period so there are real records for the auditor to sample. This is the step that cannot be shortcut.
- Internal audit and management reviewBoth are mandatory before certification. We conduct the internal audit and prepare the management review record.
- Stage 1 auditThe certification body reviews your documentation and readiness, and identifies anything outstanding.
- Stage 2 auditThe main on-site audit against the standard. Non-conformities, if any, are closed out with corrective action.
- Certificate issuedValid for three years, subject to annual surveillance audits.
A first certification typically takes two to six weeks for a small organisation with straightforward operations, and longer for multi-site manufacturers or for ISO 27001, which requires a functioning risk assessment and a set of controls to be genuinely operating.
Validity, surveillance and renewal
An accredited ISO certificate is valid for three years from issue. It is not a one-off transaction:
- Surveillance audit in year one and year two — a shorter audit confirming the system is still being operated
- Recertification audit in year three — a full audit before a new three-year cycle is issued
- Missing a surveillance audit can lead to the certificate being suspended or withdrawn
We track your surveillance dates and contact you ahead of each one, so a certificate you paid for does not lapse quietly and turn up as a problem in the middle of a tender.
Frequently asked questions
Short answers to what clients ask most often about ISO Certification.
It depends on the standard, the number of employees, the number of sites and the complexity of your processes — those are the factors the certification body uses to calculate audit days. We give you an itemised quote separating the certification body's audit fee from our consultancy fee, so you can see exactly what you are paying for.
It is a real document, but it is usually issued by a non-accredited body, and that is a different thing from an accredited certificate. Tender committees, export buyers and corporate procurement teams increasingly verify accreditation. If the certificate cannot be traced to a body accredited by NABCB or another IAF-recognised accreditation body, expect it to be rejected. We would rather tell you this before you buy one.
Start with what your client, buyer or tender document actually asks for — usually ISO 9001. Beyond that: 14001 if environmental impact matters to your buyers, 45001 if you have site or factory safety exposure, 22000 if you handle food, 27001 if you hold customer data. Several can be run as an integrated system, which is cheaper than certifying each separately.
Two to six weeks is realistic for a small organisation with simple operations. The variable is implementation: an auditor needs to see real records of the system operating, so a business that starts from nothing needs a few weeks of actually running it. ISO 27001 generally takes longer.
Some, but less than people fear. A good consultant documents your existing process and tightens it where the standard requires, rather than imposing an unrecognisable system your staff will abandon the week after the audit. The documentation should be something your team can actually maintain.
A shorter audit, usually annually, in which the certification body samples records to confirm you are still operating the system — internal audits done, management review held, corrective actions closed, complaints handled. It is straightforward if the system is genuinely in use, and difficult if it was only assembled for the original audit.
Get certified properly
Tell us which standard your client or tender is asking for and we will quote the full route to an accredited certificate.