Somewhere in your inbox there is probably an offer: ISO 9001 certification in ten days, a few thousand rand, no audit visit. The certificate will be real in the sense that it exists — a PDF with your company name and a logo. Whether it survives contact with a tender committee is another matter. Here is how the system actually works, and how to make sure whatever certificate you hold — or accept from a supplier — holds up.
The chain that makes a certificate mean something
ISO itself certifies nobody. The credibility of a certificate comes from a chain: a certification body (CB) audits you and issues the certificate; an accreditation body checks that the CB is competent and impartial — in South Africa that is SANAS, the state's single national accreditation body, and internationally bodies like UKAS in the UK; and the accreditation bodies recognise each other through the IAF multilateral arrangement, which is what makes a properly accredited certificate issued in one country count in another.
Break any link and the paper stops meaning anything. An unaccredited CB answers to no one: no oversight of its auditors, no witnessed audits, no complaints mechanism. Some certification mills go a step further and are "accredited" only by an accreditation body they themselves invented. The PDF looks identical. The chain behind it is missing.
Why this bites in South Africa specifically
Tenders. State-owned entities, municipalities and most large corporate procurement departments ask for ISO 9001 — and increasingly they do not just ask for the certificate, they check it. A certificate from an unaccredited or unrecognised body is routinely scored as non-compliant, exactly as if you had submitted nothing. The same applies in reverse when you are the buyer: a supplier's certificate is only as good as its chain.
The cruel economics: a mill certificate costs a few thousand rand and is worth nothing at evaluation. A legitimate certificate costs more — we published the honest numbers — and is worth every tender it stops disqualifying you from.
How to verify any ISO certificate in five minutes
- Read the certificate itself. It should name the certification body, the accreditation body whose mark it carries, the scope of certification and the validity dates. No accreditation mark at all is your first red flag.
- Check the CB's accreditation. SANAS publishes its directory of accredited certification bodies; UKAS and other national bodies do the same. Confirm the CB appears there for management-system certification — not just for, say, testing.
- Check the certificate on IAF CertSearch. The IAF's global database lets you confirm an accredited certificate directly. A certificate that cannot be found anywhere except the issuer's own website deserves hard questions.
- Sanity-check the story. Certification with no stage 1 and stage 2 audit, no auditor on site (or on a call, for genuinely remote audits), and no surveillance visits afterwards is not certification as the IAF rules define it — whatever the PDF says.
"But it is accredited — just not by SANAS"
Sometimes fine, sometimes the trick. A certificate from a CB accredited by any IAF-member accreditation body (UKAS is common in South Africa) is internationally legitimate — many multinationals' certificates work exactly this way. The trick version is accreditation by a body that is not an IAF member, with a name chosen to sound official. The test is never "does the accreditation body sound impressive"; it is "is it an IAF MLA signatory". If you cannot find it on the IAF's member list, treat the certificate as unaccredited.
What this means for you
Getting certified: choose a CB you can find in the SANAS directory (or another IAF member's directory), ask which accreditation its certificate will carry, and confirm the process includes stage 1, stage 2 and surveillance audits. Wildly cheap and fast means the chain is missing.
Buying from suppliers: put certificate verification into your supplier evaluation — a five-minute check that belongs in your approved-supplier process (clause 8.4), and that protects you from inheriting someone else's paper QMS.
Building toward certification the legitimate way? The ISO 9001 Documentation Toolkit gives you the complete documentation system, and our gap assessments tell you exactly how far you are from a real audit. No shortcuts — just less wasted money.