If you need to verify ISO certification of a company, start with the basics: check the company’s legal name, certificate number, ISO standard, certification body, scope, and validity dates. Then confirm the details through trusted sources such as IAF CertSearch, the issuing certification body, and the relevant accreditation body directory.
Many companies claim to be ISO certified, but not every certificate is valid, current, or properly accredited. In supplier approval, procurement, compliance, and tendering, knowing how to check an ISO certificate can help you avoid fake claims, expired certificates, and misleading accreditation marks.
This guide explains how to verify ISO certification online, what details to review, where to check certificate validity, and which warning signs should make you investigate further.
What Does ISO Certification Mean?
ISO certification means that an organization has been audited by an independent certification body and found to meet the requirements of a specific ISO management system standard, such as ISO 9001, ISO 14001, or ISO 27001.
It is important to understand that ISO itself does not issue certificates. ISO develops international standards, while certification bodies conduct audits and issue certificates. For that reason, when you verify a company’s ISO certificate, you are not checking with ISO directly. You are checking the certificate issued by the certification body and confirming whether that body is properly accredited.
This is why certificate verification matters. A certificate may look professional, but if the issuing body is not credible or the certificate details do not match public records, the claim should not be accepted at face value.
Why Verify a Company’s ISO Certificate?
Verifying an ISO certificate is not only a formality. In many cases, it is part of responsible due diligence.
A proper ISO certification check can help you reduce supplier risk, confirm compliance claims, avoid dealing with fake or expired certificates, and make better procurement decisions.
It also helps you confirm whether the certification actually applies to the activities, products, services, or locations being promoted. Some companies may hold a valid certificate, but only for a limited scope or a specific site, not for the entire business.
For smaller organizations, our guide to ISO certification for small businesses explains how certification works with limited teams and budgets.
ISO vs Certification Body vs Accreditation Body
Many people confuse these three terms, but understanding the difference makes certificate verification much easier.
ISO creates international standards such as ISO 9001 and ISO 27001.
A certification body audits organizations against those standards and issues certificates when requirements are met.
An accreditation body evaluates certification bodies and confirms whether they are competent to issue accredited certificates.
So, when you check an ISO certificate, you are usually verifying two things: whether the company holds a real certificate and whether the certification body behind it is properly accredited.
What Information Should Appear on a Valid ISO Certificate?
Before searching any registry, review the certificate itself carefully. A valid ISO certificate should normally include the following details:
-
Full legal name of the certified company
-
Certificate number
-
ISO standard and version, such as ISO 9001:2015
-
Scope of certification
-
Certified site or location, where applicable
-
Issue date and expiry date
-
Name of the certification body
-
Accreditation mark, if the certificate is accredited
If one or more of these details are missing, unclear, or inconsistent, the certificate should be reviewed more carefully before being accepted.
How to Check if a Company Is ISO Certified?
Knowing how to check ISO certification of a company can protect your organization from dealing with fake or expired certificates.
Below are the concrete steps to check ISO certification of a company, using certificate lookup, authentication checks, and red flags.
1. Ask for the Full Certificate Details
Start by requesting the certificate copy or the core details from the company. You should ask for:
-
Full legal company name
-
Certificate number
-
ISO standard
-
Scope of certification
-
Issue and expiry dates
-
Name of the certification body
-
Site or branch covered by the certificate
Without accurate details, verification can fail or produce misleading results.
Need accurate verification support for ISO certificates? Our team at ISO Cert International is ready to assist.
2. Check the Certificate Number
A certificate number is one of the most useful identifiers in an ISO certificate check. If the number is missing, unclear, or inconsistent with the issuing body’s format, that is an early warning sign.
When available, search using both the company name and the certificate number. This improves accuracy and reduces the risk of confusion caused by similar business names.
3. Search Public Verification Sources
The next step is to check whether the certificate appears in trusted directories or registries.
The most common places to verify an ISO certificate online include:
| Registry / Directory | What to Search | What You Can Confirm |
|---|---|---|
| IAF CertSearch | Company name or certificate number | Certification status, standard, certification body |
| National accreditation body directories | Company name or certification body | Accredited status and scheme coverage |
| Certification body client directory | Company name or certificate number | Certificate validity, scope, dates |
| Public certificate lookup portals | Company name, standard, or number | Additional confirmation where available |
Use more than one source whenever possible. A single result should not be your only basis for acceptance.
If you are comparing timelines before choosing a certification body, our article on how long ISO certification takes explains the main stages and typical duration.What Information Should Appear on a Valid ISO Certificate?
4. Verify the Certification Body
Once the certificate appears to exist, check the certification body that issued it.
Make sure the issuing body is real, active, and linked to the relevant ISO standard shown on the certificate. Review its website, directory, and accreditation details. If the certification body has no traceable presence, no verification portal, or no credible accreditation information, the certificate should be treated cautiously.
5. Confirm the Accreditation
A certificate can exist and still lack credibility if it was issued by a body that is not properly accredited.
Check whether the certification body is recognized by a legitimate accreditation body. Then confirm that the accreditation is current and relevant to the standard in question.
This step is especially important when high-trust decisions are involved, such as supplier onboarding, tendering, regulatory due diligence, or international partnerships.
6. Review the Scope, Site, and Validity Dates
Even if the certificate is real, the details may not support the claim being made.
Always review:
-
Whether the scope matches the service or product being offered
-
Whether the certificate applies to the correct site or legal entity
-
Whether the certificate is still within its validity period
-
Whether the certificate appears current and active
A company may say it is “ISO certified,” but the certificate may apply only to one branch, one department, or one limited operational area.
If you need help verifying a supplier’s ISO certificate, ISO Cert International can support your due diligence process.
EMAIL: INFO@ISO-CERT.UK
TEL: +44 7915 072747
to get reliable verification for your suppliers or partners and fortify your procurement process.
Where to Verify an ISO Certificate Online
The most reliable way to verify an ISO certificate online is to cross-check it through trusted sources.
Start with the certificate number and company name. Then review public tools such as IAF CertSearch, national accreditation body directories, and the issuing certification body’s own certificate lookup system when available.
This layered approach is far more reliable than relying only on a PDF certificate sent by email. If the certificate cannot be confirmed through one source, move to the next source and compare the details carefully.
If your business is still planning the certification journey, read our guide on how to get ISO certification for your company to understand the process from application to audit.
Quick Verification Checklist
Use this simple checklist when reviewing any company’s ISO certification claim:
-
Is the company name correct and complete?
-
Is the certificate number shown clearly?
-
Is the ISO standard specified correctly?
-
Does the scope match the service or activity being offered?
-
Are the issue and expiry dates clear?
-
Is the certification body named?
-
Is the certification body accredited?
-
Does the certificate appear in a trusted lookup source?
-
Does the site or location match the company claim?
-
Are there any red flags or inconsistencies?
This checklist is especially useful for procurement teams, compliance reviews, and supplier approval workflows.
How to Spot a Fake ISO Certificate
A fake or unreliable ISO certificate often shows one or more warning signs.
Common red flags include:
-
Missing certificate number
-
Unclear or inconsistent dates
-
Misspelled company name
-
Vague scope wording
-
Missing site details
-
Poor-quality logos or formatting
-
Unverifiable accreditation marks
-
No record in the certification body directory
-
No clear name of the issuing body
-
Claims of certification without a certificate copy
Another warning sign is when a company says it is certified but cannot explain which certification body issued the certificate or what scope is covered.
One red flag alone does not always prove fraud, but several inconsistencies together should trigger additional checks.
What to Do If the Certificate Is Not Found
If you cannot find the certificate online, do not immediately assume it is fake, but do not accept it as valid either.
- First, confirm that the company name, certificate number, and ISO standard were entered correctly. Then ask the company for a copy of the certificate and the full name of the issuing certification body.
- Next, contact the certification body directly and ask whether the certificate is valid, current, and issued for the stated company and scope. If accredited status is claimed, check the accreditation body directory as well.
- If the details still do not match, or if the certification body cannot confirm the certificate, the claim should be treated as high risk.
Example Walkthrough: Verifying a Sample Company
Suppose a supplier claims to hold ISO 9001:2015 certification and provides certificate number ABC-ISO-2023-001.
- You would begin by reviewing the certificate copy and confirming the legal company name, scope, dates, and issuing certification body.
- Next, search the company name or certificate number in available lookup tools. Then compare the returned details with the certificate copy.
- After that, review the certification body and confirm whether it is accredited by a recognized accreditation body.
- Finally, compare the scope and site details with the supplier’s claim. If all records match, the certificate is much more likely to be reliable. If the details conflict, further verification is needed before you rely on the claim.
Common Challenges When Verifying ISO Certificates
Certificate verification is not always straightforward.
You may face issues such as:
-
No public lookup available
-
Company name variations
-
Recently updated records not yet visible online
-
Expired certificates still being used in marketing
-
Site-specific certificates presented as company-wide certification
-
Accreditation claims that are difficult to confirm quickly
Because of these challenges, it is best to verify certificates using multiple sources rather than relying on a single search result.
Best Practices for Procurement and Compliance Teams
If your organization checks supplier certificates regularly, create a simple internal process for consistency.
Maintain a certificate verification checklist, request certificate copies as part of onboarding, record verification dates, save supporting screenshots or correspondence, and schedule re-verification before renewals or major contracts.
This creates an audit trail and reduces the risk of relying on outdated or misleading claims.
Conclusion
To verify ISO certification of a company properly, you need more than a certificate copy. You should review the certificate details, check the company name and certificate number, verify the issuing certification body, confirm accreditation, and make sure the scope and dates support the claim being made.
A careful ISO certificate verification process helps protect your business from fake certificates, expired claims, and weak supplier due diligence.
If you’re ready to move from uncertainty to certainty in your supplier or partner ISO validation, contact us now and let ISO Cert International’s experts assist you.
start your verification journey.
Frequently Asked Questions
How can I verify an ISO certificate online?
You can verify an ISO certificate online by checking the certificate number, company name, standard, certification body, and validity dates against trusted databases such as IAF CertSearch, the certification body directory, and the relevant accreditation body directory.
Does ISO provide certificate verification?
No. ISO develops standards, but it does not issue certificates or provide direct certification status for companies. Certification is carried out by independent certification bodies.
What is the difference between certification and accreditation?
Certification means a company has been audited against an ISO standard by a certification body. Accreditation means that the certification body itself has been formally recognized as competent by an accreditation body.
Can a valid ISO certificate still be misleading?
Yes. A certificate may be valid but limited to a specific site, department, or activity. Always check the scope, locations, and expiry details before relying on it.
What should I do if I suspect a fake ISO certificate?
Ask for the full certificate copy, check the issuing certification body, confirm accreditation, and request written confirmation if the certificate cannot be found through trusted lookup tools.