Documents, brand and office
ISO certification support for companies in the UAE
ISO certification is written confirmation from an independent certification body that your management system meets a standard such as ISO 9001. ISO writes the standards but does not issue certificates, and certification is not a government registration. Companies seek it to qualify for tenders and reassure customers. Caliph helps you prepare and arranges the certification audit.
At a glance Fact sheet
- Who writes the standards
- The International Organization for Standardization (ISO)
- Who issues the certificate
- An independent certification body, after an audit. Not ISO and not the government
- Is it mandatory
- No. It is voluntary, although a tender or a customer may require it
- Common standards
- ISO 9001 quality, 14001 environment, 45001 health and safety, 22000 food safety, 27001 information security
- Accreditation
- Certification bodies can be accredited, for example by Dubai's EIAC
- Caliph's role
- Preparing your system and arranging the audit. We do not issue certificates
Overview
People often speak of "ISO registration", but there is no ISO register to join and no government office that grants it. ISO, the International Organization for Standardization, publishes standards. It does not audit companies or issue certificates. Certification is done by separate certification bodies, which audit your organisation against a standard and issue a certificate if you meet it.
The standards most companies ask about are management system standards. ISO 9001 covers quality management, ISO 14001 environmental management, ISO 45001 occupational health and safety, ISO 22000 food safety and ISO/IEC 27001 information security. Each sets out how an organisation should plan, run, check and improve one part of its operations. None of them is a product approval, and individuals are not certified to ISO 9001.
Getting certified is mostly preparation. You define your processes, document what the standard requires, run the system for a period and audit it yourself. Then the certification body audits you. Caliph helps with the preparation and arranges the certification with a suitable body, which stays independent of the preparation work.
How Caliph helps you get certified
The right standard for your goal
A contractor bidding for projects, a food business and a software company need different standards. We start from the tender or customer requirement you are trying to meet.
A system that fits how you work
We document your real processes instead of handing you a generic manual, so your staff can keep following the system after the auditor leaves.
A certificate your buyers will accept
ISO advises checking whether a certification body is accredited. We help you choose a body whose certificate meets the wording of your tender or customer contract.
Gaps closed before audit day
An internal audit and a management review are completed before the certification audit, and what they find is corrected first.
Honest wording about what you hold
You will be able to say which standard you are certified to and by which body. Nobody will tell you that ISO or a ministry has approved your company.
Support after the certificate
Certification bodies return for surveillance audits. We help you keep records current so those visits are routine.
What to gather before we start
- Your trade licence, showing the activities the certificate should cover
- An organisation chart with a short description of each role
- A description of your main processes, from enquiry to delivery
- Existing policies, procedures and forms, even informal ones
- Records that show the processes in use, such as orders, inspections, training and complaints
- The sites, branches and number of staff to be included in the scope
- The tender or customer requirement that names the standard you need
Each standard asks for different records. Your Caliph consultant gives you the list for the standard and scope you choose.
How ISO certification works
Choose the standard and scope
We agree which standard you need and which activities and sites the certificate should cover.
Gap review
Your consultant compares how you work today with what the standard requires and lists what is missing.
Build and document the system
Policies, procedures and records are prepared with your team and put into daily use.
Internal audit and management review
The system is checked from the inside and management reviews the results, as the standards require.
Certification audit
The certification body audits you, usually in two stages: first your documented system, then how it works in practice.
Close findings and receive the certificate
Any nonconformities are corrected, and the certification body takes its decision and issues the certificate.
Surveillance and recertification
The body returns for periodic audits to confirm that the system is still working.
Good to know
- The ISO logo is a registered trademark and cannot be used on your website or stationery. Use the mark of your certification body, according to its rules.
- According to ISO, accreditation is not compulsory, but many buyers ask for a certificate from an accredited body. Read the tender wording before you choose.
- Standards are revised from time to time. Ask which edition your certificate will refer to and how a new edition affects you.
- A buyer can verify a certificate with the certification body, and accredited certificates can be checked in the IAF CertSearch database.
Questions people ask
Is ISO certification issued by the UAE government?
No. ISO certificates are issued by certification bodies after an audit. ISO itself does not certify anyone, and certification is not a government registration. Government bodies are involved one level up: accreditation bodies, such as the Emirates International Accreditation Centre in Dubai, assess whether certification bodies are competent.
Is ISO certification mandatory for companies in the UAE?
Under the standards themselves it is voluntary. In practice it can be required by a tender, a main contractor, a customer or a regulator for certain activities. Bring the document that asks for it, and your Caliph consultant confirms which standard and what kind of certificate will satisfy it.
Which ISO standard does my company need?
Start from who is asking. ISO 9001 is the general quality standard and the most widely used. Construction and industrial clients often add ISO 14001 and ISO 45001. Food businesses look at ISO 22000, and companies that handle client data at ISO/IEC 27001. Several standards can be combined in one integrated system.
Can Caliph issue my ISO certificate?
No, and no consultancy legitimately can. Certification has to come from a certification body that audits you independently. Caliph's part is to help you prepare your management system, arrange the audit with the certification body and help you close any findings.
What is the difference between certification and accreditation?
Certification is a certification body confirming that your company meets a standard. Accreditation is an accreditation body confirming that the certification body itself works to international standards. A certificate issued under accreditation is the kind many buyers and tender committees look for.
Does an ISO certificate stay valid indefinitely?
No. The certification body carries out surveillance audits after the certificate is issued, and the certificate has to be renewed through recertification at the end of its cycle. If the system is not maintained, the certificate can be suspended or withdrawn. Your certification body sets the schedule.
- International Organization for Standardization (ISO), certification
- ISO, management system standards
- Emirates International Accreditation Centre (EIAC)
Reviewed by Caliph Business Solutions on . Rules differ by activity and by authority. Your Caliph consultant confirms what applies to you.
Ready to establish your company in the UAE?
Book a free consultation. Tell us what you want to open and we come back with the route, the documents and the cost.
- VisitHapag-Lloyd Building, Port Saeed, Deira, Dubai. P.O. Box 8070
Open in Google Maps