Get ready for ISO certification: a working system, a verifiable certificate
We build your quality, environmental and safety management system and put it into practice with your team, so you can pass the audit of an accredited certification body. That body issues the certificate in your company's name, and it can be verified on its register.
- Assessment before we start
- Independent audit by an accredited body
- Updated for the 2026 editions
We are preparing a short video that walks through the service and its stages. Until it is published, request an assessment of your company file and an advisor will take you through the steps directly.
- 1Choose your certificate
- 2Send your documents
- 3We prepare everything
- 4Audit visit and certificate
Companies that trust Edaaat
The management systems we prepare companies to be audited against
- ISO 9001:2026Quality
- ISO 14001:2026Environment
- ISO 45001Occupational health and safety
- 9001 + 14001 + 45001Integrated system
- Quality assurance manual and quality plan
The logos belong to Edaaat clients across our different services; showing them does not mean that each of these companies achieved ISO certification with our support. The standard numbers describe the management systems we prepare for, and do not imply a partnership with ISO or with any certification or accreditation body.
Consultants build the system; accredited bodies audit and certify
ISO, the organisation, writes the standards; it does not issue certificates. They are issued by independent certification bodies, and a certificate is only worth something if its body is accredited by a national accreditation body that is a member of the international mutual recognition arrangement; in Saudi Arabia, that is the Saudi Accreditation Center (SAAC).
International impartiality rules (ISO/IEC 17021-1) separate whoever builds the system from whoever audits it. That is why a consultant does not promise a certificate, and why no certificate should be marketed as “easier” through a particular consultant.
Building the system and preparing the company
We analyse the gaps, document the system from how your company actually works, put it into practice with your team, then run the internal audit before the visit.
Edaaat's roleAudit and certification
An accredited certification body audits the system at your premises in two stages, then decides whether to grant the certificate in your company's name and records it on its register.
An independent decision
Why do ISO certificates stall, or get rejected in a qualification file?
The problem is rarely getting the paper. It is usually the system behind it, and the body that issued it.
A system on paper only
Written procedures that the team does not follow are exposed in the certification body's audit, or during a visit from the target buyer.
A non-accredited certification body
A certificate from a non-accredited certification body can be rejected in a tender or a qualification file.
A scope that does not match your activity
A certificate that does not cover the activity or branches the tender documents require is treated as if it did not exist.
A missed surveillance audit or an old edition
A certificate needs a surveillance audit every year, and 2015-edition certificates must move to 2026 before the transition deadline.
Management systems we get your company audit-ready for
We start from what the target buyer or the tender documents require, then choose the right standard, or combine several in one system.
Quality management system
The foundation of most qualification and tender files, for any company that a buyer or tender documents ask for a quality system.
Environmental management system
For contractors, factories and anyone whose work leaves an environmental footprint on site.
Occupational health and safety management system
For contractors, site teams and workshops.
Integrated management system
One system for quality, environment and safety, with one integrated audit visit instead of three.
Quality assurance manual and quality plan
Not a certificate, but an alternative the government model tender documents accept when a quality assurance programme is required within 14 days of award.
Four steps from choosing your certificate to the audit visit
We keep the technical details on our side and ask you only for what each step needs.
-
01
Choose your certificate
Tell us which buyer or tender is asking for it, and we choose the right standard with you on a free call.
-
02
Send your core documents
Commercial registration, VAT number, national address, logo, and the number of employees and branches.
-
03
We prepare everything
We draft the system documents and forms, put the system into practice with your team, and run the internal audit and management review.
-
04
Audit visit and receiving the certificate
An auditor from an accredited certification body visits you; we attend with you and close any findings, then the body issues the certificate in your company's name.
The certificate is valid for 3 years, with a surveillance audit every year, and we remind you when it is due.
We build the system from how your company works, not from ready-made templates
We start with a gap analysis and define the scope of the system, then document the policies, procedures and records based on how you actually work, put them into practice with your team and train them. We then run the internal audit and management review, help you choose an accredited certification body, and attend the audit visit with you until the findings are closed.
- Gap analysis
- System documentation
- Implementation and training
- Internal audit
- Choosing an accredited body
- Support at the audit visit
Any company a buyer or tender documents ask for a quality system
A contractor preparing a qualification or tender file, or awarded a government contract that needs a quality assurance programme; a manufacturer qualifying with Saudi Energy (formerly Saudi Electricity) or Aramco; or a company whose certificate is on the 2015 edition or comes from a body that does not appear in verification registers. Because we also handle supplier registration and qualification, we link the system to what your buyer asks for. The service does not suit anyone who wants a certificate without implementation or within days, and it does not cover individual certificates or training courses.
Buyers and tenders that ask for a quality system in your file
We read the requirement in the tender documents or on the buyer's own portal, because every buyer asks for something different.
Saudi Energy (formerly Saudi Electricity)
Its published qualification requirements for distribution-material manufacturers included ISO 9001 and a quality manual, plus ISO 14001 where available.
Saudi Aramco
Reviews manufacturers' quality systems and may visit the factory to check conformity with ISO 9001, so the system in practice matters more than the paper.
SABIC
Its due diligence includes quality-management questions for medium- and high-risk suppliers, without naming a specific standard.
Other projects and buyers
Many tender documents add quality, environmental and safety certificates to their specifications; we confirm what your tender requires before we start.
Naming these buyers does not imply a partnership with them or official approval from them. It summarises requirements published in their official sources, which may change; the target buyer and its tender documents are the final reference. An ISO certificate alone is not enough for Aramco, which also requires the CCC cybersecurity certificate for registration; CCC is not an ISO certificate.
Check for yourself before you rely on any certificate
These references explain who issues certificates, who accredits certification bodies, and where to look up your company's certificate.
International Organization for Standardization (ISO)
Writes the standards but does not issue certificates, and explains how to choose a certification body.
iso.org (opens in a new tab)Saudi Accreditation Center (SAAC)
The directory of accredited certification bodies in Saudi Arabia; look a body up before you sign with it.
saac.gov.sa (opens in a new tab)IAF CertSearch
An international database of accredited management-system certificates; a certificate missing from it is not, on its own, proof that it is fake.
iafcertsearch.org (opens in a new tab)Official links checked in October 2026. For the transition requirements for ISO 9001:2026, see Global ACI.
Clear answers before you start
What clients ask most about ISO certification: who issues it, how long it takes, and how to verify it.
Do you issue the ISO certificate?
No. The certificate is issued by an accredited certification body after an independent audit of your company. Our role is to build the management system with you, put it into practice, prepare your team for the audit, and help you choose an accredited certification body from the Saudi Accreditation Center's directory. International impartiality rules (ISO/IEC 17021-1) separate those who consult from those who certify.
Does an ISO certificate guarantee winning a tender or passing qualification?
No. An ISO certificate does not guarantee an award or acceptance in qualification; it is one requirement of the file, and the decision rests with the target buyer. The decision to grant the certificate itself rests with the certification body after its audit, so we do not promise that you will pass it. What we commit to: a system that is in use, an internal audit before the external one, and support until the findings are closed.
How long does ISO certification take?
It depends on the size of the company, the number of standards and how ready its current system is; implementation is the longest part. We give you a timeline after assessing your file. Offers of a “certificate within days” leave no room to implement the system, or for a genuine audit by an accredited body.
Which ISO certificate does my company need?
Start from what the target buyer or the tender documents require. ISO 9001 for quality is the foundation of most files, and contractors often add ISO 14001 for the environment and ISO 45001 for occupational health and safety, in one integrated system with a single audit. If you are not sure, we choose the right standard with you during the file assessment.
Is there an audit visit before the certificate is issued?
Yes. An accredited certification body does not issue a certificate without a two-stage audit by its own auditors, which includes a visit to your company. We prepare your team before the visit and attend with you. Once granted, the certificate stays valid for three years provided you pass a surveillance audit every year, followed by a recertification audit before it expires.
How do I check that an ISO certificate is accredited?
Ask for the name of the certification body and look it up in the Saudi Accreditation Center's directory of accredited bodies, then look up the certificate in the body's own register and in IAF CertSearch. A certificate missing from CertSearch is not, on its own, proof that it is fake, because the database does not cover every certificate.
Is ISO a requirement for contractor classification?
No. The contractor classification criteria are financial statements, staffing and completed projects. But many tender documents and qualification files do ask for ISO. For classification, see our contractor classification service.
Our certificate is on the 2015 edition. What should we do?
ISO 9001:2026 was published on 16 September 2026, and ISO 14001:2026 on 15 April 2026. Certificates to the previous editions remain valid until 30 September 2029 for ISO 9001, and until 30 April 2029 for ISO 14001. The transition usually happens during a surveillance or recertification audit, once the system has been updated. If you start now, you build your system on the 2026 edition directly.
How much does it cost?
Two parts: our fees, and the audit fees paid to the certification body, which rise with the number of employees and branches. We set them out separately before we start.
Is ISO mandatory?
It is not a general requirement for every company, but some buyers and tenders ask for it at qualification or after award, and government tenders accept a valid ISO certificate or a quality assurance programme within 14 days of award. We review the target buyer's requirements with you.
Is your company ready for an ISO audit?
Start with an assessment of your company file: we identify the certificate your buyer requires, the gaps in your current system, and the next step.
- The right certificate for your buyer or tender
- An initial analysis of gaps and shortfalls
- A clear plan for the next step
