Skip to content
Simple graphic of a certificate with a checklist beside it, showing a self-assessment path to ISO 9001

ISO 90017 min read

ISO 9001 Certificate Without an Audit: What You Get

An ISO 9001 certificate without an on-site audit is possible via self-assessment. What it proves, where it falls short and when you need an auditor.

By Zertify Redaktion

Yes. A self-assessment certificate shows that you have reviewed your own quality management against ISO 9001:2015. It does not show that an independent auditor has verified it.

Whether that is enough depends on who asks for the certificate. For some businesses it is a fast, affordable step. For others the document will not be accepted at all.

What "without an audit" actually means

A classic certification starts with building a quality management system. You then bring in a certification body, whose auditors visit, read your documents, interview your staff and check records. Any gaps have to be closed before you receive the certificate.

The self-assessment route drops the external visit. You answer a structured set of questions about how your business works, and if the answers show that you meet the requirements, a certificate is issued. It rests on your own statements, and it says so openly.

Two kinds of ISO 9001 certificate

Both refer to the same standard. They differ in how much independent proof stands behind them.

Classic route with an on-site audit by a certification body

  • An external auditor assesses your system on site or remotely.
  • Tenders, regulated sectors and many large customer contracts recognise it.
  • Preparation usually takes months, and surveillance audits recur.
  • It costs more, in money and in staff time.

Self-assessment certificate

  • You assess your own business against the standard.
  • G6 Agency AG issues the certificate under licence from SICE, and SICE reviews every assessment before it is issued.
  • It is quick to obtain and needs little administration.
  • You get a structured review and a document you can show.

Our guide on certification without an audit describes the mechanics of the second route in more detail.

When a self-assessment certificate is enough

The certificate fits in these situations:

  • You want to show that you take quality seriously. A small agency or start-up can signal this without running a full audit programme.
  • A customer asks for "ISO 9001" in general terms. Some customers only want evidence that you work to a recognised framework. Ask what they accept before you assume.
  • You are building your system step by step. The self-assessment shows where you stand today and can be the starting point for a later on-site audit by a certification body.
  • Your market is private and informal. Where nobody asks for an on-site audit, the document can still support your credibility, provided you describe it accurately.
  • You have a deadline. A customer conversation, a pitch or a website relaunch may leave no time for anything longer.

In every one of these cases, call the certificate what it is: a certificate based on a self-assessment against ISO 9001:2015.

When you need the classic route with an on-site audit

In the following situations you need an on-site audit by a certification body. A certificate that the buyer rejects is worse than none.

  • A tender explicitly requires an on-site audit by a certification body. Public procurement often does. Read the wording of the tender documents carefully.
  • A customer contract requires an audit by a certification body. Large buyers frequently demand it from suppliers.
  • A regulator demands it. Some regulated sectors expect independent verification.
  • You need to prove conformity to third parties. If your customers rely on your quality claims for their own compliance, they need independent evidence.
  • You want an external view. Auditors often find blind spots that you cannot see yourself.

If you are unsure, our page on the two routes compared explains the difference and how to check what a buyer will accept. The simplest test: ask your customer, or read the tender text, before you decide.

What the self-assessment covers

A serious self-assessment follows the structure of ISO 9001:2015 Quality Management, which uses the high level structure shared by other management system standards. The requirements sit in clauses 4 to 10:

  • 4 Context of the organization. What your business does, who your interested parties are, what the scope of your system is.
  • 5 Leadership. Management commitment, a quality policy, clear roles and responsibilities.
  • 6 Planning. Risks and opportunities, quality objectives and how you plan to reach them.
  • 7 Support. Resources, competence, awareness, communication and documented information.
  • 8 Operation. How you plan and deliver products or services, control suppliers and handle changes and nonconforming output.
  • 9 Performance evaluation. Monitoring, customer satisfaction, internal audit and management review.
  • 10 Improvement. Handling nonconformities, corrective action and continual improvement.

Answering the questions for each area shows you what you already do and what is missing. That has value on its own, since many small businesses work well but have never written down how.

What the certificate does and does not prove

It shows that:

  • you have reviewed your business against the requirements of ISO 9001:2015;
  • your answers met the threshold needed to pass;
  • you have a documented starting point for your quality management.

It does not show that:

  • an auditor has checked your records or processes on site;
  • your system has been tested in practice by an auditor.

If you mention the certificate in marketing, say what it is. A line such as "Certificate issued by G6 Agency AG under licence from SICE, based on self-assessment against ISO 9001:2015" is accurate. Anything that implies an independent audit is not.

How Zertify fits in

Zertify is an online platform that issues ISO certificates based on a self-assessment. SICE, the Swiss Institute of Certification and Education, licenses them to G6 Agency AG, which issues them.

The process has three steps:

  1. Read the requirements on the ISO 9001 page.
  2. Start the assessment and answer the questions about your business.
  3. Once you have passed and paid, the certificate is issued within 4 hours.

The fees are on the pricing page, so you see them before you begin. Because nobody visits your premises, the result depends on your honest answers. Work through the questions as a real review, not a form to tick off.

The route suits owners of small and medium businesses, agencies and start-ups who want a structured review and a clear document. If you are torn between both routes, start with the self-assessment and move to an on-site audit by a certification body once a customer demands it.

Checklist before you decide

Go through these points before you start.

If most of these are ticked, you can start. If the first three are still open, settle them first, because they decide whether the self-assessment route is right at all.

Common mistakes to avoid

Answering the questions optimistically. The review only helps if it is honest. Inflated answers leave you with a document that your daily practice cannot support.

Ignoring the buyer's requirements. A certificate your customer does not accept is of no use to you. Check first.

Treating the certificate as the end of the work. ISO 9001 is about running your business well, and the certificate is a snapshot. Keep reviewing your processes, listening to customers and fixing what goes wrong.

A practical way forward

Start by asking who needs to see the certificate and what that person accepts. If the answer is "a recognised ISO 9001 certificate", the self-assessment route is quick and proportionate. If the answer is "an on-site audit only", go straight to a certification body.

In between, the self-assessment gives you a clear picture of your current system. You can fix the weak points and then decide whether a full audit is worth the investment. That decision then rests on facts about your own business, not on guesses.

Frequently asked questions

Can I really get an ISO 9001 certificate without an audit?

Yes, through a self-assessment. You answer a structured set of questions based on ISO 9001:2015, and if you pass, a certificate is issued. Describe it as based on self-assessment.

Is a self-assessment ISO 9001 certificate accepted in tenders?

Often not. Many tenders and customer contracts explicitly require an on-site audit by a certification body. Read the requirements or ask the buyer before you rely on a self-assessment certificate.

How long does it take to receive the certificate from Zertify?

Zertify issues the certificate within 4 hours once you have passed the assessment and completed payment. How long the assessment itself takes depends on how well you know your own processes.

Can I move from a self-assessment to the classic route with an on-site audit later?

Yes. The self-assessment reviews your business against ISO 9001:2015 and can serve as a starting point. A certification body will still carry out its own audit.

What does ISO 9001:2015 require of my business?

The standard sets requirements in clauses 4 to 10: context of the organization, leadership, planning, support, operation, performance evaluation and improvement. The self-assessment asks about each of these areas.

Keep reading

More articles

An ISO certificate for your business

Complete the self-assessment online and see your result straight away. You pay only after you pass.

Certificate usually within 4 hours of payment. Issued under licence from SICE, verifiable by QR code.