What an ongoing ISO certification actually requires of a manufacturer
ISO certifications aren't a one-time award. See what ongoing audits and reviews typically involve and why this matters for supplier reliability.
Key takeaways
- ISO 9001 and ISO 14001 certify an ongoing management system, not a single point-in-time test
- Periodic external audits check that documented processes are actually still being followed
- An ISO certification differs from a product-specific certification such as a device listing
- A certification maintained across several audit cycles is a stronger reliability signal than a new one
- Ask a manufacturer to share the actual certificate and issuing body, not just cite the standard by name
Why ISO certifications aren't a one-time award
It is easy to read an ISO 9001 or ISO 14001 certificate as a fixed achievement, something earned once and displayed indefinitely afterward. In practice, these certifications describe a management system, quality management for ISO 9001, environmental management for ISO 14001, that a manufacturer commits to operating continuously, not a single test passed at one point in time.
A certification body issues the certificate after an initial assessment, but the relationship does not end there. Ongoing surveillance and periodic reassessment are built into how these standards work, precisely because a management system can drift over time if nobody is checking it.
This distinction matters for anyone evaluating a supplier's certifications, since a certificate on a wall or a website says the system was in place at some point, not necessarily that it still is today.
What ongoing audits and reviews typically involve for a manufacturer
Maintaining an ISO certification typically involves periodic audits by an accredited certification body, checking that the manufacturer's documented processes are still being followed in practice, not just described on paper. These audits look at records, procedures and, for ISO 14001, how environmental impacts are actually being managed day to day.
A manufacturer that lets its processes slip risks findings during these audits that can lead to corrective action requirements, or in a serious case, suspension of the certification until issues are addressed. This creates an ongoing incentive to keep the underlying system genuinely operating, not just documented.
Exact audit timing and scope vary by certification body and scheme, so a buyer who wants specifics should ask the manufacturer directly, or the certification body named on the certificate, rather than assuming a fixed interval applies universally.
How this differs from a product-specific certification
ISO 9001 and ISO 14001 certify the manufacturer's management system, covering how the organisation operates generally, rather than certifying a specific product's performance. A device listing such as FDA Class 2, by contrast, relates to a specific product meeting defined requirements for that category of device.
Both matter, but they answer different questions. An ISO certification speaks to whether the organisation behind a product runs a disciplined, consistent process. A device listing speaks to whether a particular product met the requirements for its device class. Neither substitutes for the other, and a buyer evaluating a supplier benefits from checking both rather than assuming one implies the other.
Confusing the two in marketing material, treating an ISO certification as if it validates a specific product's performance claims, is a common source of overstatement worth watching for.
Why this matters when evaluating a supplier's long-term reliability
A manufacturer that maintains its ISO certifications over multiple audit cycles has demonstrated a sustained commitment to its documented processes, which is a reasonable, if indirect, signal about long-term reliability. A buyer evaluating vendors for a multi-year contract or a large rollout has good reason to weigh this alongside product specifications.
It is also worth checking how long a manufacturer has held a given certification, not just that the certificate exists today, since a recently obtained certification has a shorter track record than one maintained across several audit cycles.
This kind of due diligence takes a little more effort than reading a certificate number off a product page, but it gives a more grounded picture of who you are actually dealing with, particularly for a contract you expect to run for several years.
What to ask a manufacturer about their certification maintenance
Ask directly how long the manufacturer has held each ISO certification, and whether it is willing to share the certificate itself rather than just stating the standard by name. A manufacturer confident in its certifications should have no difficulty providing this.
It is also reasonable to ask which certification body issued the certificate, since this can be checked independently rather than taken on the manufacturer's word alone. Our own approach to these questions is set out on our claims verification page, which explains what we will state about our certifications and how to check them.
A supplier that answers these questions readily, with documents rather than just assurances, is generally easier to trust on the rest of its claims too.
Next step
Certifications are strongest when they can be checked, not just cited. See our claims verification page for how AIRE presents its own certifications, and use the same standard when evaluating any manufacturer's claims.
Frequently asked
Are ISO certifications a one-time award or an ongoing requirement?
They are an ongoing requirement, not a one-time award. A manufacturer must maintain the certified management system continuously, with periodic external audits confirming it remains in place rather than a certificate issued once and never revisited.
What do ongoing audits typically involve for a certified manufacturer?
Audits by an accredited certification body check that documented processes are actually being followed in practice, looking at records and procedures rather than just paperwork. Findings can lead to corrective action requirements or, in a serious case, suspension of the certification.
How does this differ from a product-specific certification?
ISO certifications cover the manufacturer's management system generally, while a product-specific certification such as a device listing relates to a particular product meeting defined requirements. Both are worth checking, since neither substitutes for the other.
Related reading
Not sure which model fits?
Send us your room dimensions and we'll send back a free room-by-room Air Report — the air changes each space needs, and the unit that meets them.