Quality system certification: what the certificate on the wall actually attests

Three levels of claim that get confused with each other

An organisation can declare its own conformity, which costs nothing and carries the weight of any self-assessment. A customer can assess a supplier themselves, which is targeted at what the customer buys but is not independent. Or an independent certification body can assess and issue a certificate. These are genuinely different claims and they are often quoted interchangeably in sales material. Language such as working to, aligned with, or built around a standard almost always signals the first category. The document to ask for is the certificate itself, not a statement about it.

Accreditation is what stands behind the certifier

Certification bodies are themselves assessed by national accreditation bodies, which operate under international arrangements so that a certificate issued in one country is recognisable in another. An accredited certificate carries the accreditation body's mark and a reference that can be verified in a public register. A certificate from an unaccredited issuer may still reflect real work, but nobody has checked the issuer's competence, impartiality or consistency, and the market contains bodies whose commercial model depends on issuing certificates rather than on withholding them. Verifying the certificate in the registry takes minutes and is regularly skipped.

Read the scope statement before anything else

The scope names the activities and the sites covered, and it is written by the organisation being certified. A group certificate may cover a head office and one plant while the factory making your parts is not listed. The scope may describe assembly and distribution while excluding the manufacturing process you care about. Exclusions can be legitimate and should be visible. Check the site address against the address on your purchase orders and delivery notes, check the described activities against what you actually buy, and check the expiry date, which is a surprisingly common oversight.

What holding certification demands of the organisation

Certification is a cycle rather than an event. After the initial assessment, the body returns periodically for surveillance while the certificate is live, and conducts a fuller reassessment before renewing it. Between visits the organisation has to maintain its internal audit programme, its management review, and evidence that findings were addressed, since the auditor will look for continuity rather than a burst of activity. Sites that treat it as an annual examination generate a recognisable pattern of dormancy and panic, which experienced auditors notice and which erodes the value of the exercise internally.

The gap between certification and product conformity

A certificate says that arrangements were assessed and found acceptable, sampled at a point in time by an auditor with limited days on site. It does not verify that a specific shipment conforms, that a process is capable of your tolerances, that the plant can meet your delivery requirements, or that the site making your part is competent at your particular process. Certified suppliers ship defects, and uncertified ones can be excellent. Treat it as evidence about the management layer and pair it with your own assessment of the process that makes what you buy.

Frequently asked questions

How do we check whether a certificate is genuine?

Start with the accreditation mark and the certification body named on it, then look up the certificate in the register that the accreditation body or the certifier publishes. Confirm the legal entity name, the site address, the scope wording and the validity dates all match what you were told. If the issuing body cannot be found under any recognised accreditation arrangement, treat the document as a self-declaration however official it looks.

Is certification worth pursuing if no customer has asked for it?

Sometimes. The honest reasons are that it opens tenders where it is a pre-qualification condition, and that the external audit cycle imposes a discipline some organisations cannot sustain alone. The poor reason is expecting the certificate itself to improve the product. Costs include the assessment fees, the internal effort of preparing and maintaining evidence, and the standing time of the people who host each visit, so the decision belongs with commercial leadership rather than with the quality department.

Our certificate covers head office. Does it cover our subcontracted production?

Not unless the scope says so, and outsourced activity generally sits outside a certificate while remaining entirely your responsibility to control. Customers increasingly ask specifically where the physical manufacturing happens and what oversight exists over it. If your production is subcontracted, expect to evidence how you approve and monitor that party directly, since pointing at your own certificate answers a question nobody asked.