OSINT Jet · Supplier claim checks

Verify an ISO certificate: does it cover this company, site and work?

A supplier sends a certificate with a current expiry date. Before you treat it as support for the order, check the named business, the locations and the activities it covers. A genuine certificate can still be irrelevant to the claim in front of you.

This guide concerns organizational management-system certification, such as ISO 9001. It is not a product approval check or a way to verify an individual’s professional licence. Start with a precise question: “Does the certification record support the supplier’s claim about the facility and activity involved in this order?”

Separate the standard from the organization issuing the certificate

ISO develops standards; it does not issue these certificates. An external certification body performs that role. Accreditation is a separate assessment of that body’s competence for a defined scope. ISO explains this distinction and how to investigate certification bodies.

On your copy, locate the issuer’s name, certificate number, standard and edition, certified entity, scope statement, dates and any referenced annex. Then find the issuer through an independent route. A QR code printed on a PDF is a convenient link, but its destination still needs checking. A convincing page reached only through that code is not independent confirmation.

Read the record across four boundaries

Do not silently extend a certificate from one business in a group to every related business. A shared brand may explain the relationship without establishing coverage. If the supplier says an annex includes the missing location, obtain the complete annex and verify that it belongs to the same certificate version.

A quality-management-system certificate also does not establish that every individual item is defect-free. Keep the certificate question separate from product testing, regulatory approval and the supplier’s ability to fulfil this particular order.

Use a verification source with the right coverage

IAF CertSearch’s stated scope is accredited management-system certifications. Its documentation distinguishes these from product and person certifications. It can expose the standard, scope, status, certification body and accreditation body. Check current access terms; do not assume that every detailed verification is unlimited or free.

The official verification guide describes certificate-number search and statuses including active, suspended, withdrawn and expired. It also lists reasons a record might not appear. A blank result is therefore an unresolved search, not a finding of forgery.

When a result is missing, recheck the identifier as printed, the legal name and the database’s coverage. Use the certification body’s independently located verification channel or the database’s inquiry route. Save the discrepancy and the response. If a decision depends on the answer, defer that part of the decision rather than converting “not found” into either “valid” or “fake.”

The certificate that fits the company but misses the factory

Fictional exercise: a business called Northbridge Components offers to manufacture a batch of housings at its East Works facility. A certificate names Northbridge Components and shows an active record. Its scope is “distribution of mechanical components”; the site annex lists Central Office and West Warehouse.

Three details agree: the company name, certificate number and current status. Two details remain unsupported: East Works and manufacturing. The useful finding is not “the supplier has no certificate.” It is: “The verified record covers distribution at the listed sites; the evidence reviewed does not establish certification coverage for manufacturing at East Works.”

Now change one detail. The order is for stocked components supplied from West Warehouse. The scope is more relevant, but the certificate still does not prove stock availability, payment-account ownership or product conformity. The next check should follow the remaining buying question, not repeat the certificate search.

Keep a short coverage note

Claim being checked:
Certificate number and standard:
Named legal entity:
Issuer and verification source:
Covered sites and annex version:
Scope wording relevant to the order:
Status observed, date and time:
Supported part of the claim:
Unresolved part and next confirmation:

Keep the exact scope wording in the evidence note; a paraphrase can erase an important restriction. The company research guide helps establish which entity you are dealing with. For a separate disagreement about the quote or payment recipient, use the vendor-quote checks.

If one certificate lookup resolves the question, that may be enough. When the certificate, website and supplier story disagree, an organized case becomes useful. OSINT Jet’s company research workflow is intended to bring public clues and relationships into a reviewable report. For a complex scope dispute, describe the precise unresolved claim for a manual investigation; agree the scope and quote before commissioning work. This guide does not imply that OSINT Jet issues certificates or provides an IAF database integration.