ISO Certification in India (2026): What It Is, the Real Process, Costs and How to Avoid Fake Certificates

A buyer has asked for your "ISO certificate", a tender lists ISO 9001 as an eligibility condition, or a consultant has offered to get you one by next week. Before you pay anyone, it helps to know what ISO certification actually is, who is allowed to issue it, and what a fair process looks like. This guide is for Indian MSMEs and covers the four standards you are most likely to need, the audit process through accredited bodies, what drives the cost, the 2026 revisions, subsidies, and how to tell a real certificate from a worthless one.

Quick answer

ISO certification means an independent certification body has audited your management system against an ISO standard (such as ISO 9001 for quality) and found it conforms. ISO itself does not issue certificates. In India, look for a body accredited by NABCB (Quality Council of India) or another accreditation body in the international recognition arrangement. Certification runs on a three-year cycle with yearly surveillance audits.

• Voluntary — no general legal mandate, but customers, exporters and tenders often require it

• Process: gap study → system in place for a few months → Stage 1 + Stage 2 audit → certificate

• Cost is mostly audit days, set by staff count (IAF MD 5), plus optional consultancy

• ISO 9001:2026 was published on 16 September 2026; 2015 certificates stay valid during the transition

• Verify any certificate against NABCB's list and the issuing body's register

What ISO certification is (and isn't)

The International Organization for Standardization (ISO) writes standards; it does not audit or certify companies. Certification is done by certification bodies (CBs) — companies such as TÜV, Bureau Veritas, DNV, or the Bureau of Indian Standards (BIS), which itself runs a management system certification scheme.

A certificate carries weight only when the CB is accredited. Accreditation means an accreditation body has checked that the CB follows ISO/IEC 17021-1 — the rules for auditing management systems competently and impartially. India's accreditation body for CBs is NABCB, a board of the Quality Council of India. NABCB is part of the international mutual recognition arrangement, so a NABCB-accredited certificate is recognised abroad in the same way as one accredited in the UK or Germany. Since 1 January 2026, the work of the International Accreditation Forum (IAF) and ILAC has been taken over by a single body, Global Accreditation Cooperation.

ISO certification is also not the same as:

• BIS product certification (ISI mark) — mandatory for products under Quality Control Orders.
• FSSAI registration or licence — a legal requirement for food businesses. ISO 22000 sits on top of it, not instead of it.
• ZED certification — a Ministry of MSME rating (Bronze/Silver/Gold) of quality and environmental practices, subsidised for MSMEs.

The four standards MSMEs ask about

Others you may meet: ISO 45001 (occupational health and safety), ISO 50001 (energy) and sector schemes such as IATF 16949 for automotive suppliers.

What the 2026 revisions mean for you

ISO 9001:2026 was published on 16 September 2026. Its committee's transition plan says certification bodies issue new certificates only to the 2026 edition from 31 March 2028, and existing ISO 9001:2015 certificates must transition by 30 September 2029. The changes add emphasis on leadership, quality culture and risk, but keep the familiar structure. If you are starting now, ask your CB which edition it can audit you to; many will still certify to 2015 until they are accredited for 2026, and you'll then transition at a later audit.

ISO 14001:2026 was published in April 2026, with ISO 14001:2015 certificates to transition by 30 April 2029. The revision puts more weight on climate change, life-cycle thinking and environmental performance.

How ISO certification works, step by step

From decision to certificate

1. 1

   Pick the standard and scope

   Decide which standard the buyer or tender actually needs, and which sites, products and processes the certificate will cover. A narrow, honest scope is cheaper and easier to defend.

2. 2

   Build and run the system

   Document what the standard requires — policy, objectives, risk assessment, controlled procedures, records — and run it for real. Most CBs want to see a few months of records, at least one internal audit and one management review before Stage 2.

   Tip: A consultant is optional. Many small units manage with ISO's own handbooks and a trained internal auditor.

3. 3

   Choose an accredited certification body

   Shortlist two or three bodies accredited for your standard and industry code. Check them on NABCB's list (or the accreditation body named on their certificates) before signing.

   NABCB accredited bodies
4. 4

   Stage 1 audit

   The auditor reviews your documentation and readiness, often partly remotely, and points out gaps that would block Stage 2.

5. 5

   Stage 2 audit

   On-site audit of how the system works in practice — interviews, records, shop-floor checks. Non-conformities must be corrected and evidence sent within the CB's deadline.

6. 6

   Certification decision and certificate

   An independent reviewer at the CB decides. The certificate states the standard and edition, scope, sites, issue and expiry dates, and the accreditation mark.

7. 7

   Surveillance and recertification

   Surveillance audits in years 1 and 2, and a recertification audit before year 3 ends. Miss one and the certificate is suspended or withdrawn.

Timeline. For a small manufacturer starting from scratch, three to six months from kick-off to certificate is realistic: two to four months to put the system in place and generate records, then a few weeks for audits and closing findings. A unit that already has good process control and records can be faster. Anyone promising an accredited certificate in days is skipping the audit.

What ISO certification costs — and why quotes differ

There is no government fee for ISO certification. Your costs are:

1. Certification body charges — audit days for Stage 1 and Stage 2, plus application/registration, certificate and travel charges. Surveillance and recertification audits are billed again in later years.
2. Consultancy (optional) — documentation, training and internal audit support.
3. Internal costs — staff time, calibration of instruments, testing, and any fixes the audit reveals.

The biggest driver is audit time, which accredited CBs must calculate using IAF MD 5. It starts from the "effective number of personnel" in scope and is adjusted for complexity, number of sites and risk. For ISO 9001 initial certification, the base figures are:

Each surveillance year takes about one third of that, and recertification about two thirds. So a quote from an accredited CB for a 20-person workshop that is built on, say, one audit day — not three — is a red flag: either it is not accredited for that scope or it is cutting the audit.

Other cost drivers: number of sites, multiple standards audited together (an integrated audit is usually cheaper than separate ones), high-risk sectors (food, chemicals, medical devices), and auditor travel to your location.

Worked example. A 20-person engineering unit in Jaipur gets ISO 9001 quotes from three NABCB-accredited bodies. Suppose the one it picks charges a total of ₹1,20,000 in year 1 (consultant plus certification body). Under Rajasthan's MSME Policy 2024 it can claim a one-time 50% reimbursement — ₹60,000 — well within the ₹3 lakh cap. Its net year-1 cost falls to ₹60,000. Budget separately for surveillance audits in years 2 and 3.

Government support: what's actually available in 2026

Central government. You will still find web pages advertising the Ministry of MSME's old ISO 9000/14001/HACCP reimbursement (75% of costs up to ₹75,000). The ministry's 2026-27 budget papers show only two schemes under its "Technology Upgradation and Quality Certification" head — ASPIRE and the MSME Champions Scheme — so don't count on that reimbursement. Ask your nearest MSME Development and Facilitation Office before relying on it.

The central support that is clearly funded is ZED certification under MSME Champions. The government pays 80% of the certification cost for micro, 60% for small and 50% for medium enterprises, with an extra 10% for women/SC/ST-owned units and units in the North-East, Himalayan, LWE, island and aspirational districts, and a ₹10,000 joining reward when you take the ZED pledge. Many states link their own incentives to ZED levels. ZED is not ISO, but working through it builds much of what ISO 9001 and 14001 auditors look for.

ZED certification costs and what a micro unit pays

ZED level	Certification cost	Micro unit pays after 80% subsidy
Bronze	₹10,000	Nil if the ₹10,000 joining reward is used
Silver	₹40,000	₹6,000 (₹30,000 after the reward, then 80% subsidy)
Gold	₹90,000	₹16,000 (₹80,000 after the reward, then 80% subsidy)

Bronze

Certification cost

₹10,000

Micro unit pays after 80% subsidy

Nil if the ₹10,000 joining reward is used

Silver

Certification cost

₹40,000

Micro unit pays after 80% subsidy

₹6,000 (₹30,000 after the reward, then 80% subsidy)

Gold

Certification cost

₹90,000

Micro unit pays after 80% subsidy

₹16,000 (₹80,000 after the reward, then 80% subsidy)

The joining reward can be used only once, on one certification, and is valid for a year after the pledge.

State governments. Several state MSME and industrial policies reimburse part of quality-certification costs. Rajasthan's MSME Policy 2024 (in force until 31 March 2029) is one clear example: a one-time 50% reimbursement of the cost of BIS, FSSAI, ISO, ZED and IPR certifications, including testing and documentation, up to ₹3 lakh. Other states' rates, caps and eligible certifications differ — check your state's MSME or industrial policy and apply within its deadline, usually counted from the certificate date.

How to spot a fake or worthless ISO certificate

A large market in India sells "ISO certificates" without real audits, often "accredited" by bodies that are not part of the international recognition system. Such certificates are rejected by serious buyers and can get you disqualified from a tender. Check these before you pay or before you accept a supplier's certificate:

Six checks for any ISO certificate

0/6

• The certificate names an accreditation body (e.g. NABCB) and carries its mark — not just an 'ISO' logo
• The certification body appears on NABCB's list (or that accreditation body's list) for that exact standard, and its accreditation is not suspended or withdrawn
• The certificate is on the issuing body's online register or IAF CertSearch, with the same company name, address and scope
• The standard edition is current — no ISO/IEC 27001:2013 certificates after 31 October 2025
• Validity is no more than three years and the certificate refers to surveillance audits
• There was a real on-site Stage 2 audit with an audit report — not just a form and payment

Share Print

Also be wary of: offers of certification "in 24 hours" or "without audit", certificates for activities the company doesn't perform, a scope so vague it could describe anyone ("trading of all items"), and accreditation bodies with official-sounding names you cannot find on the Global Accreditation Cooperation member list.

After you're certified

• Keep the system alive. Internal audits, management reviews and corrective-action records must continue; surveillance auditors will ask for the last year's evidence.
• Use the certificate correctly. Don't put the ISO or accreditation logo on products — the certificate covers your management system, not your goods. Follow your CB's rules on using its mark.
• Plan transitions. Ask your CB how and when you will move to ISO 9001:2026 or ISO 14001:2026; many organisations combine it with a surveillance or recertification audit.
• Put it to work. Add the certificate to your buyer pre-qualification packs and to tender bids — for example on the GeM portal, where buyers can ask for it as an eligibility condition.

Official links

Official sources

• NABCB — accredited management system certification bodiesCheck a CB's accreditation by standard
• NABCB homeIndia's accreditation board for certification bodies
• BIS — Management Systems CertificationGovernment certification body option
• MSME Sustainable (ZED) CertificationPledge, apply and claim subsidy
• Rajasthan MSME Policy 2024 (PDF)Clause 6.6 — certification reimbursement
• IAF MD 5 — audit time rules (PDF)How audit days are calculated

What to do next

Confirm with the customer or tender exactly which standard and scope they need, then shortlist accredited certification bodies from NABCB's list and compare quotes on audit days, not just price. Make sure your Udyam registration is in place — most state reimbursements and ZED need it. If you sell to government buyers, read our GeM registration guide next.

This is general information, not legal or tax advice — confirm on the official source or with a professional.

Frequently asked questions

Is ISO certification mandatory in India?

No law makes ISO 9001, 14001, 22000 or 27001 certification compulsory for a business in general. It is voluntary. In practice it becomes necessary when a customer, export buyer, OEM or tender asks for it. Don't confuse it with BIS product certification (the ISI mark) or FSSAI licensing, which are legal requirements for certain products and food businesses.

How long is an ISO certificate valid?

An accredited management system certificate runs on a three-year cycle. In years one and two the certification body does a surveillance audit, which per IAF MD 5 takes about one third of the initial audit time. Before the third year ends you need a recertification audit, roughly two thirds of the initial time, to get a new three-year certificate.

How much does ISO 9001 certification cost for a small business?

There is no government fee. You pay the certification body for audit days plus application, certificate and travel charges, and optionally a consultant. Audit days depend mainly on staff numbers: under IAF MD 5, a 1–5 person firm needs about 1.5 audit days for initial ISO 9001 certification, and a 26–45 person unit about 4 days. Get two or three written quotes from accredited bodies.

Can I get an ISO certificate online in one day?

Not a genuine accredited one. Accredited certification needs a Stage 1 review and an on-site Stage 2 audit by the certification body, and then a certification decision. Websites selling an 'ISO certificate in 24 hours' usually issue paper from unaccredited bodies or fake accreditation boards. Buyers and tender committees increasingly check accreditation, and such certificates get rejected.

How do I check whether an ISO certificate is genuine?

Look for the accreditation body named on the certificate, then confirm the certification body is accredited for that standard: for Indian bodies, check NABCB's list of accredited management system certification bodies. Then confirm the certificate itself with the issuing body's online register or IAF CertSearch, matching company name, address, scope, standard edition and validity dates.

Does the government give a subsidy for ISO certification?

Some state MSME policies do. Rajasthan's MSME Policy 2024, for example, reimburses 50% of quality and system certification costs (including ISO) up to ₹3 lakh per unit. At the central level, the Ministry of MSME now funds ZED certification, paying 80% of the cost for micro units, rather than ISO fees directly.

Sources & verification

Figures on this page were checked against the sources below when it was last reviewed on 7 October 2026. Each rate and limit is stored once with its own official source and review date, and official update channels are monitored daily so changes are picked up. How we verify

1. 1.Management System Certification — accredited certification bodies — NABCB, Quality Council of India · accessed 7 October 2026
2. 2.NABCB — National Accreditation Board for Certification Bodies — Quality Council of India · accessed 7 October 2026
3. 3.IAF MD 5:2023 — Determination of audit time of quality, environmental and OH&S management systems — International Accreditation Forum · accessed 7 October 2026
4. 4.ISO 9001:2026 has been released — ISO/TC 176/SC 2 · accessed 7 October 2026
5. 5.ISO 14001:2026 published: transition period and next steps — LRQA · accessed 7 October 2026
6. 6.IAF MD 26:2022 — Transition requirements for ISO/IEC 27001:2022 — International Accreditation Forum · accessed 7 October 2026
7. 7.Global Accreditation Cooperation Incorporated replaces IAF and ILAC — Asia Pacific Accreditation Cooperation · accessed 7 October 2026
8. 8.Rajasthan MSME Policy 2024 — Government of Rajasthan · accessed 7 October 2026
9. 9.MSME Sustainable (ZED) — Subsidy on cost of certification — Ministry of MSME / Quality Council of India · accessed 7 October 2026
10. 10.Notes on Demands for Grants 2026-27 — Demand No. 68, Ministry of MSME — Ministry of Finance (Union Budget) · accessed 7 October 2026