Find a Cert Body

Check a certificate or a certification body in 2 minutes

A logo proves nothing alone. The official registry of the accreditation body does. Pick the body, open its registry and tick what you see.

See your result: 7 checks open

The mark is a logo with a number, usually at the bottom of the certificate.

Search the official registry

Choose a body in step 1. You get its registry and the exact clicks.

Tick what the certificate shows

Leave a line on "Not seen yet" until you see it.

The registry lists the body with ISO/IEC 27001
Standard and edition
The scope names the service you buy
The company name matches your contract
Dates on the certificate
The certificate shows an accreditation mark

Your check on 2026-11-04

Your certificate

7 checks open

0 of 7 pass so far. Answer the open lines in step 3.

  • Accreditation body recognised
  • Found in the official registry
  • Edition of the standard
  • Scope covers what you buy
  • Same legal entity
  • Valid today
  • Accreditation mark

Save this check as a PDF record

  • Your answers, pass or fail, dated today.
  • The registry link and the steps you followed.
  • A line to sign, for your supplier file.

What to read on the certificate

Sample ISO/IEC 27001 certificate with 5 numbered zones An invented certificate. Zone 1 is the standard and edition. Zone 2 is the scope text. Zone 3 is the certified company. Zone 4 is the dates. Zone 5 is the accreditation mark with its number. CERTIFICATION BODY NAME CERTIFICATE This certifies that the information security management system of Example Software GmbH conforms to the requirements of ISO/IEC 27001:2022 Scope: Development, operation and support of the Example HR platform, delivered as software as a service. Statement of Applicability version 4. Certificate no. 0000-ISMS Initial issue: 2025-03-14 This issue: 2025-03-14 Expiry: 2028-03-13 No. 0000 Signature 1 2 3 4 5

Invented example. Layouts differ between certification bodies. Look for the same 5 items on any certificate.

  1. Standard and edition. It must read ISO/IEC 27001:2022. Certificates to the 2013 edition ended on 2025-10-31.
  2. Scope. The services, sites and teams the audit covered. If the product you buy is not named, the certificate says nothing about it.
  3. Certified company. The legal entity. A group can hold the certificate for 1 subsidiary only. Compare it with the name in your contract.
  4. Dates. Initial issue, current issue and expiry. A cycle lasts 3 years. A longer validity is a warning sign.
  5. Accreditation mark. The logo of the accreditation body, with an accreditation number. The number leads you to the registry entry.

All 37 registries

"Recognised for ISO/IEC 27001": the body signs the recognition arrangement for management systems, and its record names ISO/IEC 27001. The levels explained.

Accreditation bodies with registry steps. Choose a row for the steps.
Body Country Recognition for ISO/IEC 27001 Registry language
AA Austria Recognised for ISO/IEC 27001 German
BELAC Belgium Recognised for ISO/IEC 27001 English
BAS Bulgaria Recognised for ISO/IEC 27001 English
HAA Croatia Recognised for management systems Croatian
CYS-CYSAB Cyprus Not recognised for management systems Greek (English version)
CAI Czech Republic Recognised for ISO/IEC 27001 English
DANAK Denmark Recognised for management systems Danish
EAK Estonia Recognised for management systems Estonian
FINAS Finland Recognised for ISO/IEC 27001 Finnish (English version)
COFRAC France Recognised for ISO/IEC 27001 French
DAkkS Germany Recognised for ISO/IEC 27001 English
ESYD Greece Recognised for ISO/IEC 27001 Greek
NAH Hungary Recognised for ISO/IEC 27001 Hungarian (English version)
ISAC Iceland Not recognised for management systems Icelandic (English version)
INAB Ireland Recognised for ISO/IEC 27001 English
ACCREDIA Italy Recognised for ISO/IEC 27001 Italian (English version) Single-certificate lookup: ACCREDIA: certified organisations
LATAK Latvia Recognised for ISO/IEC 27001 Latvian
LA Lithuania Recognised for ISO/IEC 27001 English
OLAS Luxembourg Recognised for ISO/IEC 27001 French
NAB-Malta Malta Not recognised for management systems English
RvA Netherlands Recognised for ISO/IEC 27001 Dutch (English version)
NA Norway Recognised for ISO/IEC 27001 Norwegian (English version)
PCA Poland Recognised for ISO/IEC 27001 English
IPAC Portugal Recognised for ISO/IEC 27001 Portuguese
RENAR Romania Recognised for ISO/IEC 27001 Romanian
SNAS Slovakia Recognised for ISO/IEC 27001 Slovak (English version)
SA Slovenia Recognised for management systems Slovenian
ENAC Spain Recognised for ISO/IEC 27001 Spanish (English version)
SWEDAC Sweden Recognised for ISO/IEC 27001 Swedish
SAS Switzerland Recognised for ISO/IEC 27001 German (English version)
UKAS United Kingdom Recognised for ISO/IEC 27001 English Single-certificate lookup: UKAS CertCheck
A2LA United States Not recognised for management systems English
ANAB United States Recognised for ISO/IEC 27001 English
IAS United States Recognised for ISO/IEC 27001 English
NABCB India Recognised for ISO/IEC 27001 English
SCC Canada Recognised for ISO/IEC 27001 English
UAF United States Recognised for ISO/IEC 27001 English

When a check fails

A failed line is a question for the supplier, not proof of a fake.

  1. Ask the supplier for the direct link to its registry entry.
  2. Ask for the current certificate. Old PDFs stay in circulation after a recertification.
  3. If the scope misses the service you buy, ask for a written statement of what the audit covered.
  4. If the accreditation body is not recognised, treat the certificate as a self-declaration. Ask for other evidence, such as a SOC 2 report.

IAF CertSearch lists only certificates that bodies choose to upload. Global ACI replaced IAF and ILAC on 2026-01-01; certificates with the older IAF MLA mark stay valid.