An ISO certificate is a starting point, not a finish line
I have lost count of how many times a purchasing manager has forwarded an ISO 9001 certificate from a Chinese supplier and asked whether it means the shop is OK. The honest answer is: maybe. A valid ISO 9001 certificate tells you an accredited auditor visited the facility and found a functioning quality management system. It does not guarantee that the system is followed on every shift, that the certificate covers the scope of your parts, or that the certificate itself is genuine. Certificate verification is a basic due diligence step that many buyers skip.
What a valid ISO 9001:2015 certificate looks like
A legitimate certificate has specific elements. If any are missing, investigate further:
- Certificate number (unique, traceable to the certification body)
- Name and address of the certified organization, matching the factory you are dealing with
- Scope of certification: must explicitly cover CNC machining or precision parts manufacturing - not just trading or assembly
- Certification body name and accreditation logo (e.g., CNAS, UKAS, ANAB)
- Issue date and expiration date (ISO 9001 certificates are valid for 3 years with annual surveillance audits)
- IAF member logo and accreditation mark (e.g., CNAS for China, DAkkS for Germany, ANAB for the US)
How to verify a certificate online
Most major certification bodies maintain public databases where you can look up a certificate by number or company name. The process is straightforward:
- Identify the certification body (CB) named on the certificate
- Visit the CB official website and find their certificate verification page
- Enter the certificate number or organization name
- Check that the status shows valid or certified and the scope matches machining
- Verify the accreditation of the CB itself through the national accreditation body
For Chinese suppliers, the CNCA public database allows searches by company name. If a certificate cannot be found in any public database, treat it as suspect. Some trading companies present certificates from their subcontractors without disclosing the relationship; in that case, verify whether the actual machining factory is covered or whether production will go elsewhere.
Scope matters as much as validity
A company can hold a valid ISO 9001 certificate for sales of mechanical components while their actual machining is done in a non-certified workshop. Check the scope field carefully. It should state something like manufacturing of CNC machined precision parts or precision machining of metal components. Vague scopes like metal products or machinery parts without mention of machining should prompt questions about whether the certificate covers the actual production process.
What certification does not guarantee
ISO 9001 is a management system standard, not a product quality guarantee. It means documented procedures exist for non-conformance handling, corrective action, calibration, training, and management review. It does not mean:
- Every part will be in tolerance - that depends on process control and inspection, not certification
- The company will not subcontract your work to a non-certified shop
- The certificate will remain valid for your entire production run (surveillance audits can fail)
- The quality manager has authority to stop production when issues arise
Beyond the certificate: assessing real quality culture
Online verification takes ten minutes. Assessing whether a shop actually follows its quality system takes more effort. Ask for a copy of their quality manual, a sample non-conformance report from recent months, and calibration records for their inspection equipment. A shop that genuinely runs ISO 9001 will produce these without hesitation. A shop that has a certificate on the wall but no internal quality records is performing compliance theater.
A genuine ISO 9001 certificate names the site it covers, not just the company. Check that the address on the certificate matches the factory you are dealing with, and that the scope line describes machining or manufacturing rather than trading. The certificate number can be looked up at the certification body, and the body itself should be accredited by IAF members. None of this guarantees perfect parts, but it filters out the cheapest fakes.
- Site address matches the factory
- Scope line mentions machining or manufacturing
- Certificate number verifiable at the issuing body
- Body is IAF-accredited
Frequently Asked Questions
How common are fake ISO certificates from Chinese suppliers?
The problem is real enough that every major certification body maintains a fraud reporting channel. Always verify through the certification body database rather than trusting a PDF sent by the supplier.
Is ISO 9001 enough for medical or aerospace parts?
No. Medical devices typically require ISO 13485; aerospace requires AS9100; automotive requires IATF 16949. ISO 9001 is the baseline, not a sufficient qualification for regulated industries.
What if the supplier is a trading company, not the factory?
Ask which factory will actually machine your parts and verify that factory certificate directly. A trading company ISO 9001 certificate covers their internal sales processes, not machining done by subcontractors.
How long does online certificate verification take?
Usually under five minutes per certificate if you have the certificate number. For Chinese certificates, the CNCA public database allows searches by company name.