General7 min read
ISO Certification Cost Overview: What You Actually Pay For
Audit fees, consultants, your own team's time and yearly upkeep: where ISO certification costs come from, and how a self-assessment route changes them.
By Zertify Redaktion
ISO certification cost has four parts: the fee for the certificate or audit, outside help, your own team's time, and upkeep in the following years. The route you choose sets the size of each part. You either take the classic route with an on-site audit by a certification body, or a certificate based on a self-assessment.
There is no price list here, because real figures depend on your size, your scope and the provider. The breakdown below lets you compare offers and find the items that quotes tend to leave out.
The short answer
The useful question is what the whole path costs, not what the certificate costs. The certificate fee is often the smaller part. In the classic route with an on-site audit by a certification body, preparation, internal hours and follow-up audits add up.
The guide to ISO certification cost itemises each position in more detail.
The main cost components
1. Fees of the certification body
In the classic route an independent certification body audits your company on site. It usually bills auditor time, which depends on headcount, number of sites and how complex your processes are. Travel and report preparation may come as separate items.
Quotes vary widely between providers. Ask for a written offer that states audit days, scope and what is included. A low first-year price can hide higher fees later.
2. Consultants and templates
Many small companies hire a consultant to build the management system. Others buy templates or use software. If you do the work yourself, this item is zero; if you outsource everything, it can exceed the audit fee.
A consultant makes sense when nobody on your team has the time or the experience. Be wary of packages that promise a certificate and hand you a pile of documents you will never use. The standard asks you to document what you actually do, not what looks impressive.
3. Your own time
Owners underestimate this one most often. Someone has to read the standard, describe the processes, assign responsibilities, collect evidence and answer the auditor's questions. In a small business that person is usually the owner or the office manager.
Count the hours and multiply them by what that time is worth. Every hour spent on the management system is an hour not spent with customers, and it is a real cost even though no invoice arrives.
4. Training and tools
Some standards expect people to be competent for their role. In management system standards that follow the high level structure, this sits under clause 7 Support. Training can be a short internal briefing or an external course, depending on the topic. Information security or environmental topics may also call for tools such as access management, monitoring or measurement equipment. These costs belong to running the business properly, but they still show up in the budget.
5. Upkeep over the years
A certificate does not end with the audit day. In the classic route it is typically valid for a cycle of several years, with surveillance audits in between and a recertification audit at the end. Each of them brings fees and preparation time.
Inside the company the standard expects a running system: internal audits and management reviews under clause 9 Performance evaluation, and corrective actions under clause 10 Improvement. Plan a few hours a year for these, not only for the certification day.
What pushes the cost up or down
You can influence most of what moves the total.
- Company size. More people and more processes mean more audit time and more documentation.
- Number of sites. Each location may have to be covered by the audit.
- Scope. A narrow, honest scope costs less than a vague, broad one. Do not shrink the scope just to look cheaper if customers will assume it covers everything.
- Choice of standard. Quality, environment, information security and occupational health differ in complexity. The standards overview lists the options.
- Existing maturity. If your processes are already documented, you start much closer to the finish line.
- Number of standards. One system for several standards can save effort, because many share the same structure for context, leadership, planning, support, operation, evaluation and improvement.
Two routes, two cost profiles
An ISO certificate can be obtained in two ways, and they differ in cost, effort and how others read the result.
Classic route. An independent certification body audits you on site. Fees and preparation usually cost more. Take this route when a tender, a customer contract or a regulator explicitly demands an on-site audit by a certification body.
Self-assessment certificate. You answer a structured assessment about your organisation, and a certificate is issued once you pass. This route is faster and cheaper. It shows that you have reviewed your practices against the standard.
Hidden costs to watch for
These items rarely appear in the first quote. Ask about them early.
- Fees for surveillance and recertification audits in later years.
- Extra charges for travel, report writing or changes to the scope.
- Costs of closing nonconformities that the audit finds, including follow-up visits.
- Renewal or licence fees for software that you were told was included.
- The cost of a failed first attempt, if you are not ready on audit day.
- Internal time taken from daily business during the busiest weeks.
Checklist: estimate your own cost before you ask for quotes
How Zertify fits in
Zertify is an online platform that issues ISO certificates based on a self-assessment. G6 Agency AG issues the certificates under licence from SICE, the Swiss Institute of Certification and Education, and SICE reviews every assessment before a certificate goes out. No on-site audit takes place. Anyone can check a certificate publicly on zertify.ch.
You pick a standard from the standards overview, answer the assessment on how your organisation works, and pay. Once you have passed and the payment is complete, the certificate is issued within 4 hours. Current fees are on the pricing page, so you can put them next to other offers without waiting for a quote.
The certificate is valid for three years and is confirmed each year with a short online re-audit. It runs as a yearly subscription: the first year costs the full price, each following year a lower yearly fee. You can cancel at any time for the end of the year.
The route suits small and medium businesses, agencies and start-ups that want a structured review of their practices and a certificate to show customers, partners or website visitors. It also works as a first step before a later on-site audit by a certification body, since the assessment shows where your documentation and processes have gaps.
You can start the assessment without preparing a large set of documents first.
When the classic route is the better choice
Choose the classic route with an on-site audit by a certification body when:
- A tender explicitly requires an on-site audit by a certification body.
- A customer contract names an on-site audit by a certification body as a condition.
- A regulator or an insurer asks for it.
- Your sector expects independent verification, for example for safety-critical work.
In these cases a self-assessment certificate will not be accepted, and the cheaper route would cost you the deal. Read the requirement closely, and ask the requesting party if the wording is unclear.
Judge value, not price
The cheapest certificate is not automatically the best value, and the most expensive one is not automatically the safest. Compare what you receive, what others will accept and what you have to keep doing once the certificate has arrived.
Ask who will read the certificate and what they will do with it. A customer who wants to see that you work in an orderly way may be satisfied with a self-assessment. A procurement office with a fixed rule will not be, so pay for the audit. Either way, the lasting value comes from running processes that you can explain and repeat.
Frequently asked questions
How much does ISO certification cost for a small business?
No single figure applies. The total depends on the standard, the size of your company, the scope, the route and how much outside help you need. The classic route with an on-site audit by a certification body usually costs more than a self-assessment certificate and brings follow-up audits in later years. Ask for written offers that show the fees for every year, not just the first.
Is the audit fee the biggest part of the cost?
Not necessarily. Internal time, consultants and follow-up work can match or exceed the certification body's fee. A self-assessment route has no on-site audit fee, but you still have to spend time answering the assessment honestly.
Are there recurring costs after the certificate is issued?
In the classic route, yes: surveillance audits and a recertification audit at the end of the validity cycle. Internally, plan time for internal audits, management reviews and corrective actions. A Zertify certificate is a yearly subscription with the full price in the first year and a lower yearly fee after that, cancellable at any time for the end of the year. With any other provider, check the terms for renewal or recertification fees.
Is a Zertify certificate accepted in tenders?
Only if the tender does not require an on-site audit by a certification body. G6 Agency AG issues Zertify certificates under licence from SICE on the basis of an online self-assessment, and SICE reviews every assessment first. If a tender or contract explicitly demands such an audit, take the classic route with an on-site audit by a certification body.
How fast can I get a certificate from Zertify?
Within 4 hours of passing the assessment and completing the payment.
