Skip to Content
ISO 9001ISO certificate and checking a certificate

ISO quality mark for ISO 9001: what it is and how to check it

An ISO quality mark does not exist as a legal mark. What companies call an “ISO quality mark” is, in practice, an ISO 9001 certificate issued by a certification body. That certificate is only reliable if the body itself is accredited by the Raad voor Accreditatie (RvA, Dutch Accreditation Council) . So check two things: who issued the certificate, and whether that body is accredited in the Netherlands for management systems. See also the obligation around ISO 9001 and the frequently asked questions.

What exactly is an ISO quality mark?

“ISO quality mark” is a collective term that is often used for different things. It usually refers to one of these three:

What is meantWhat it actually isWhat it proves
ISO 9001 certificateCertificate from an independent auditorYour quality management system meets the standard
ISO logo on letterhead or websiteA reference to a certificateThat the company says it has a certificate, not which certificate or from whom
Sector quality mark (for example HKZ, the certification scheme for healthcare, or an industry quality mark)Its own scheme, sometimes based on ISO 9001The scheme of that particular sector

An ISO 9001 certificate says something about the management system, not about the quality of a product or service itself. You can read whether ISO 9001 is needed for you on the page is ISO 9001 mandatory.

Why accreditation makes the difference

Anyone can put up a sign that says “certified”. What matters is the body that issues the certificate. The RvA checks whether certification bodies work competently, independently and impartially, based on European and international standards. A body that meets these requirements receives accreditation. The RvA itself calls this a check on the checker. Accreditation therefore shows that the body meets those requirements.

The government overview of accreditation  describes the same principle: accreditation is proof that an organisation works competently, impartially and independently. The RvA grants that accreditation in the Netherlands.

An accredited body is not the same as an accredited company. The RvA accredits the certification body. The company you are checking is the certified company. So you look for the certification body.

Step by step: how to check an ISO 9001 certificate

Read the name of the certification body

The certificate shows the name of the body that issued it. Sometimes it also shows an accreditation number or a reference to the RvA. Note that a logo or the word “accredited” on a website is not proof. You need to check the body itself.

Look up the body in the RvA overview

Open the list of all organisations accredited by the RvA  and search for the name of the body. Choose the discipline ‘Management system certification bodies’ in the filter. If the body is not listed, it has not been accredited by the RvA. A foreign body may have been accredited by another accreditation body. In that case, ask which body that is.

Check the certificate itself

Compare the details on the certificate with the organisation in front of you: the correct company name, the correct sites and the scope you want to see. A certificate always applies to a defined scope. If it says “design and installation” and you want “all services”, the certificate is not sufficient.

Ask about validity

An ISO 9001 certificate is usually valid for three years, with annual checks (see maintenance). If the validity has expired, or if you cannot show the annual check, the certificate is no longer current. When a company has moved to the new version of the standard, the text may also refer to the version of the standard, for example 2015. For that, read the revision of ISO 9001.

What to do if the check fails

A certificate that was not issued by an accredited body is not automatically fake. The company may be acting in good faith, but a certificate from an unaccredited party does not carry the same value. In that case, ask the company for an explanation and for the certificate from the body itself. If the company cannot explain, it is sensible to include this in your supplier check. See supplier assessment.

Common mistakes when checking

  • Only looking at the logo. The logo says there is a certificate. It does not say which certificate, or whether it is valid.
  • Using the company’s website as the source. That is the company’s own statement. Always check the certification body.
  • Looking for the company’s accreditation. Companies are not accredited. The body is accredited.
  • Skipping the scope. A certificate for one site or one service does not apply to the whole company.
  • Thinking “ISO 9001 mandatory” means the same as “quality mark”. Many clients require ISO 9001, but that does not make the certificate legally mandatory. See ISO 9001 mandatory?.

What should you ask for as a client?

If you request ISO 9001 from a supplier, ask for three things: the certificate, the name of the certification body and the scope. With those three you can check for yourself. A supplier who has difficulty providing them is a sign to take a closer look.

If you want to obtain a certificate yourself, start with the step-by-step plan. It also explains when to choose a certification body and how the audit works. Companies that are already certified will find out what happens next under maintenance and the annual check.

What does a good ISO 9001 certificate look like?

A certificate you can trust contains a fixed set of details. Pay attention to these elements:

ElementWhat to look forWhy it matters
Name of the organisationExactly the same as the company name you are checkingPrevents confusion with a sister company or another site
ScopeThe services or products and the sitesDetermines what is and is not certified
Standard and versionISO 9001 with the year of the versionShows which requirements were assessed
Certificate numberA unique numberMakes it possible to ask the body for the details
ValidityA start and end dateAn expired certificate is no longer proof
Name of certification bodyThe body that carried out the auditYou check this name with the RvA

If one of these elements is missing, ask specifically for it. A serious company can supply it without difficulty.

What if a company says “we are ISO certified” but has no documents?

Then it is a self-declaration. That does not necessarily mean the company is lying. It does mean you cannot verify it. In that case, ask when the last external audit was, which body carried it out and for which scope. If the answer stays vague, it is sensible to make the certificate a condition in your contract or purchasing terms. For what genuine certification involves, read what ISO 9001 costs and how long it takes.

Next step

Check the certificate of your supplier or client using the three steps above. After that, it is useful to know what ISO 9001 actually requires. Read the requirements of the standard or the frequently asked questions about the difference between the system and the product.

Sources