ISO 37001:2025 Anti-Bribery Management
ISO 37001 process: from self-assessment to verifiable certificate
You answer 38 yes/no questions online. If you pass, SICE reviews your assessment and Zertify issues the certificate within 4 hours of passing and payment. Anyone can check it on a public verification page.
01: Steps
The ISO 37001 process in six steps
The whole route runs online. No auditor visits your office, and you do not need an account to buy. What you need is an anti-bribery management system that already exists in your company.
Start the self-assessment
Open the assessment and answer 38 yes/no questions about your anti-bribery management system. It is free and needs no registration.
Meet the pass rule
All 14 must-meet questions need a yes. Of the other 24 questions, at least 16 need a yes. The must-meet questions are the core of the assessment, not every requirement of the standard.
Order the certificate
Once you have passed, you order and pay online. The price is shown in the last section of this page.
SICE reviews your assessment
SICE looks at every assessment before a certificate is released. Zertify issues the certificate under licence from SICE.
Receive the PDF
The certificate arrives within 4 hours of passing and payment. It carries a certificate number and a QR code.
Confirm it every year
A short online re-audit once a year keeps the certificate current. The certificate itself is valid for 3 years.
02: Assessment
What the 38 questions cover
The questions follow the requirements of ISO 37001:2025. Before you start, collect the documents you would hand to a customer who asks how you prevent bribery. Answer from what exists today, not from what is planned for next quarter.
- Bribery risk assessment
- You know where bribery could arise in your business, for example in tenders, with agents or in dealings with authorities, and you update that assessment regularly.
- Anti-bribery policy
- A written policy exists and has been communicated to staff and business partners.
- Compliance function
- Someone holds this role independently and has direct access to the management.
- Due diligence
- Transactions, business associates and personnel are checked according to their risk.
- Financial and non-financial controls
- Payments follow approval rules, and non-financial areas such as gifts and hospitality are regulated too.
- Reporting channel
- Employees can raise concerns through a channel that protects them against retaliation.
A no on one of the 14 must-meet questions means the assessment is not passed. The gap has to be closed in your organisation, not in the questionnaire.
03: After passing
What happens after you pass the assessment
SICE reviews the submitted assessment. Only after that review does Zertify issue the certificate. You receive it as a PDF with its number and a QR code.
The QR code leads to a public verification page. A purchasing department, a tender office or a customer auditor can scan it and see that the certificate exists and is current. Nobody has to write to you and wait for a scan of a document.
Each year a short online re-audit confirms that your anti-bribery system is still in place. If you cancel the subscription, the certificate ends with the paid year.
04: Comparison
Zertify route or the classic audit route?
The classic route means a certification body sends an auditor to your premises. Some customers and tenders name exactly that route, so read the wording of your supplier questionnaire or tender before you decide.
| Aspect | Zertify | Classic route |
|---|---|---|
| Basis | Online self-assessment, 38 yes/no questions, reviewed by SICE | On-site audit by a certification body |
| Appointments | None, you answer when it suits you | Audit dates agreed with the certification body |
| Time to certificate | Within hours of passing and payment | Set by the body and its audit schedule |
| Yearly follow-up | Short online re-audit | As defined by the certification body |
| Verification | Public, by number and QR code | Depends on the body |
Which route fits depends on who asks for the certificate and what they accept.
05: Demand
Who asks for an ISO 37001 certificate
The question usually arrives as a line in a supplier questionnaire: what measures do you take against bribery? Companies with public sector customers meet it in tenders. Exporters and internationally active SMEs meet it when they onboard with a new partner abroad.
Construction, engineering and infrastructure firms, healthcare and medical technology suppliers, and commodity traders and logistics providers hear it often. So do suppliers to groups that apply a code of conduct. A verifiable certificate gives the other side a document to file, where otherwise they get a free-text answer.
06: Zertify
How Zertify fits in and what it costs
Zertify issues the ISO 37001:2025 certificate for anti-bribery management under licence from SICE. The route is the one described above: self-assessment, review, certificate, yearly online re-audit.
The price is CHF 749 (€749) in the first year, then CHF 499 (€499) per year including the yearly online re-audit. It is an automatic yearly subscription. You can cancel at any time in the customer account, effective at the end of the current year. Prices include 8.1% Swiss VAT for customers in Switzerland and Liechtenstein.
If you certify several standards, you get 20% off for two and 30% off for three or more, on the yearly fee as well.
07: FAQ
Questions about the ISO 37001 process
That depends on how ready your documentation is when you start the self-assessment. Once you have passed and paid, the certificate follows within 4 hours.
No. The self-assessment is free and needs no registration, and you can buy the certificate without opening an account.
Then the assessment is not passed. These questions are the core of the assessment, so the missing element has to be put in place in your company first.
Zertify issues it under licence from SICE. SICE reviews every assessment before the certificate is issued.
Every certificate has a number and a QR code on the PDF. Both lead to a public verification page.
No. The basis is the online self-assessment, and a short online re-audit follows every year. If a customer insists on an on-site audit, the classic route with a certification body is the alternative.
08: Guide
Related pages
Start your ISO 37001 self-assessment
Answer 38 yes/no questions and see whether you meet the pass rule.
Free and without registration.