Check the organisation named on the certificate
Compare the legal entity, address, covered locations and certified activities with the supplier and production arrangement for the order. A certificate covering one company or site does not automatically cover a related company, another factory or every partner-sourced product.
Record the certification body, certificate reference and current status through the appropriate official verification route. Retain any schedule describing additional sites or limitations. Do not assume a brand name on a quotation is identical to the certificate holder.
Keep the edition and transition status current
Check ISO’s official catalogue for the applicable edition of ISO 9001 and ask the issuing certification body to confirm the certificate’s current status and any transition arrangements. Retain the edition, scope, issuer response and verification date with the supplier assessment. Do not infer certificate validity solely from the date printed on an old brochure. ISO’s current ISO 9001 catalogue entry.
A new standard edition does not justify declaring every earlier-edition certificate invalid immediately. Equally, an old PDF should not be accepted indefinitely without checking its current status. Record the edition and verification date rather than writing “latest ISO certificate” in the supplier file.
Separate management evidence from product evidence
| Procurement question | Relevant record |
|---|---|
| Is the named organisation’s management system certified within scope? | Current certificate and schedule |
| Does the supplied panel match the agreed dimensions? | Applicable inspection and identification records |
| Is a coating claim supported? | Relevant specification and test or inspection evidence |
| Does a required system performance apply? | Applicable product/configuration evidence |
| Can the delivery be traced to the accepted order? | Labels, batch records and approved documents |
ISO’s conformity assessment guidance explicitly distinguishes management-system certification from certification of products. Keep that distinction visible when reviewing a supplier presentation.
Apply the distinction to partner sourcing
For a mixed-source fence order, ask who controls the approved drawings, authorises substitutions and retains the component inspection records. Where the project requires manufacturer identification, connect each product to its responsible source and evidence. A company certificate can describe management arrangements, but it should not be presented as a transferable performance certificate for every bought-in component.
The buyer should understand who controls specifications, approves substitutions, inspects the supply and retains records. Those operational responsibilities remain important even when a management certificate is valid.
Use the certificate as one part of supplier assessment
Use certification as one part of the factory assessment alongside the proposed production route and order-specific inspection plan. Record which requirements the certificate answers and which still need product evidence. For a repeat order, check that the responsible entity, manufacturing scope and accepted specification remain consistent instead of relying indefinitely on a certificate collected during the first enquiry.
Review the organisation’s documented scope alongside its actual proposal and the order’s evidence requirements. Where a required document is absent, record the gap and seek the appropriate clarification instead of treating ISO 9001 as a universal substitute.
At delivery, retain the product-specific records agreed in the purchase specification. A certificate can support confidence in management arrangements, but it does not eliminate the need to check what was supplied.
Use the certificate scope method to record the issuer check, covered activities and remaining product-evidence requirements in one traceable review.