ISO 9001 for financial services: certified online

Financial services sell trust. The product is often invisible: advice, administration, execution, a statement at the end of the month. Clients cannot inspect it before they buy. A certificate gives them a neutral signal that your work follows defined and checked processes.

Corporate clients, procurement teams and partner institutions send supplier questionnaires. One of the usual questions is whether you operate a certified quality management system. Without a certificate, you answer with long explanations. With one, you give a certificate number that anyone can verify.

ISO 9001 is a quality standard. It does not replace the rules that apply to your licence or your supervisory duties. It gives you a structure to run your processes consistently and to show evidence that you do.

• ISO for small and medium businesses

The standard does not prescribe what a bank or a broker must do. It asks that you define your processes, control them and learn from errors. The table shows where that matters most in a financial firm.

The six key requirements of ISO 9001 are less abstract than they sound. These examples show what they can look like in a small or medium financial business.

1. 01

   Understand the context (clause 4)

   An independent asset manager writes down who its interested parties are: clients, custodian banks, staff and supervisory bodies. For each, it notes what they expect from the firm.

2. 02

   Define policy and objectives (clauses 5 and 6)

   An insurance broker sets a short quality policy and a measurable objective, for example to answer every client enquiry within a set number of working days. Management signs it and reviews it.

3. 03

   Assess risks and opportunities (clause 6)

   A payment fintech lists risks such as a failed interface or an unclear handover between teams. It also lists opportunities, such as automating a manual check, and decides what to do about each.

4. 04

   Define and control processes (clause 8)

   A leasing company maps the path from application to signed contract. It names an owner for each step and keeps the records that show the steps were completed.

5. 05

   Ensure resources and competence (clause 7)

   A fiduciary keeps training records for each adviser and uses a checklist when a client file changes hands. New staff follow the same steps as everyone else.

6. 06

   Monitor and improve (clauses 9 and 10)

   A bank reviews its complaint log every quarter. When the same error appears twice, it records the cause, the action taken and whether the action worked.

• Overview of all standards

ISO 9001 uses a fixed vocabulary. Here is what the main terms mean in a financial firm.

Process

A repeatable sequence of steps with an input and a result. Example: opening a custody account from the signed form to the first confirmation.

Interested party

Anyone whose expectations affect your business. Example: private clients, institutional partners, auditors and supervisory bodies.

Quality objective

A measurable target that supports your policy. Example: share of client statements sent by the agreed date.

Nonconformity

A requirement that was not met. Example: a client file without the required identification record.

Corrective action

The step that removes the cause of a nonconformity, not only the symptom. Example: adding a mandatory check to the onboarding form.

Documented information

Information you keep and control because the system needs it. Example: procedures, checklists, training records and complaint logs.

Zertify issues the certificate based on an online self-assessment. There is no on-site audit. You answer 30 yes/no questions about your quality management. If you reach at least 20 of 30, you can pay and receive your certificate within 4 hours after passing and payment.

The certificate is issued by G6 Agency AG under licence from SICE, the Swiss Institute of Certification and Education. SICE reviews every assessment before the certificate is issued. Each certificate can be verified publicly by its number and QR code, so a client or partner can check it in seconds.

The price is 599 CHF (599 EUR) in the first year, then 399 CHF (399 EUR) per year including the yearly online re-audit. The certificate is valid for 3 years and is confirmed each year by a short online re-audit. Billing is an automatic yearly subscription. You can cancel at any time in your customer account, effective at the end of the current year. Prices include 8.1% Swiss VAT for customers in Switzerland and Liechtenstein. You do not need an account to buy.

Many financial firms also need to show how they protect information. If you add a second standard, such as ISO 27001, you receive 20% off, also on the yearly fee. With three or more standards the discount is 30%.

• ISO 9001 standard page
• Pricing
• Start the free self-assessment

Some clients and tenders name the kind of certificate they want. Before you start, read the questionnaire or tender text and note what exactly is asked. If the wording is open, an online certificate with public verification may be enough. If a client specifies the classic route with an on-site audit by a certification body, ask them directly.

Our guide compares the routes side by side, so you can decide with the facts in front of you.

• Compare the certification routes
• Certification without an on-site audit
• How it works