ISO certification shows customers, regulators and lenders that your management system meets an internationally recognised standard: quality (ISO 9001), environment (ISO 14001), health and safety (ISO 45001), food safety (ISO 22000), information security (ISO 27001) and others. We help you pick the standard your buyers and tenders actually ask for, build the system around how you already work, run the internal audit and take you through the certification body's Stage 1 and Stage 2 audits to an accredited certificate that any buyer can verify.
Legal basis: Voluntary international standards published by the International Organization for Standardization (ISO); certification bodies operate under ISO/IEC 17021-1 and accreditation by NABCB. Individual standards are referenced by Indian regulators and public tenders, for example ISO 22000 in FSSAI audits, ISO 13485 under the Medical Devices Rules, 2017 and ISO 14001 in incentives offered by several State Pollution Control Boards
Who needs it
- Manufacturers and exporters whose buyers, OEMs or international customers ask for ISO 9001, 14001 or 45001 in vendor registration
- Companies bidding for government, PSU or large-corporate tenders that list ISO certification as a qualification criterion
- Service companies, IT firms, hospitals, labs and logistics providers that need a quality, safety or security certificate to win contracts
- Start-ups and MSMEs that want a structured management system before they scale
- Units with certificates that have lapsed, come from a non-accredited body, or are due for surveillance or recertification
- Groups that want one integrated management system (IMS) covering quality, environment and safety instead of three separate ones
Common in:Manufacturing & Industrial UnitsImporters & Brand OwnersHospitals & Healthcare
Documents required
- 1Certificate of Incorporation / partnership deed / Udyam registration, PAN and GST
- 2Scope of business: products, services, sites and number of employees to be covered
- 3Organisation chart and list of key processes, departments and responsible persons
- 4Existing policies, manuals, procedures, forms and records, if any
- 5Statutory licences relevant to the standard (SPCB consents for ISO 14001, factory licence for ISO 45001, FSSAI licence for ISO 22000)
- 6Customer and supplier lists, key contracts and customer requirements or audit reports
- 7Equipment list, calibration records and maintenance logs where applicable
- 8Training, internal audit and management review records once the system is running (we help create these)
Missing something? We help you obtain or regularise supporting documents before filing.
How we get it done
- 1
Standard selection and scoping
Day 1–5We confirm which standard, or combination, your customers, tenders and regulators actually require, define the certification scope and sites, and shortlist accredited certification bodies with quotes.
- 2
Gap analysis
Day 3–10An on-site or remote review compares your current practices with every clause of the standard and produces a prioritised action plan.
- 3
Documentation and implementation
Day 10–40We draft the policy, manual, procedures, formats and risk registers around how you already work, train process owners and run the system long enough to generate records.
- 4
Internal audit and management review
Day 35–50Our auditor tests the system clause by clause, non-conformities are closed and the first management review is held, all of which the certification body requires before its audit.
- 5
Certification audit and certificate
Day 45–75The certification body conducts the Stage 1 (documentation) and Stage 2 (implementation) audits; we attend, close any findings, and the accredited certificate is issued with surveillance dates added to your compliance calendar.
If you skip certification
ISO certification is voluntary, so there is no statutory penalty for not having it. The cost shows up commercially: vendor registrations rejected, tenders disqualified at the eligibility stage, customer audits failed and premium buyers lost to certified competitors. A certificate from a non-accredited body, or one bought without a real audit, is routinely rejected by buyers and tender committees and can be treated as misrepresentation, while a certified company that misses surveillance audits has its certificate suspended and then withdrawn.
Why MYDA Group
Specialists, not generalists
Environmental compliance is our only practice, so your file is handled by people who do this every day.
Fixed fee, written scope
You know the professional fee and the statutory fees before we start. No surprise add-ons.
Inspection and audit-ready
We prepare your site and team for the board visit or certification audit and attend it with you.
Lifetime reminders
Every condition, return and renewal goes into your compliance calendar with alerts.
Frequently asked questions
Which ISO standard do I need?
It depends on who is asking. ISO 9001 (quality) is the most widely requested in vendor registrations and tenders; ISO 14001 (environment) and ISO 45001 (occupational health and safety) are expected of manufacturers, contractors and anyone supplying large industrial groups; ISO 22000 for food businesses; ISO 27001 for IT, BPO and anyone handling customer data; ISO 13485 for medical devices. Many companies certify to 9001, 14001 and 45001 together as an integrated management system, which costs far less than doing each separately.
What is the difference between an accredited and a non-accredited certificate?
An accredited certificate is issued by a certification body that is itself audited by an accreditation body such as NABCB (India), UKAS (UK) or ANAB (US), all members of the International Accreditation Forum. It carries the accreditation mark and can be verified on the IAF CertSearch database. Non-accredited "ISO certificates" sold online for a few thousand rupees carry no such oversight and are usually rejected by serious buyers and tender committees. We only work with accredited bodies.
How long does ISO certification take?
A small organisation with committed management can be certified in 30 to 45 days. Larger or multi-site companies, or standards with heavier technical requirements such as ISO 27001 or ISO 13485, typically take 60 to 120 days because the system must run long enough to generate records before the certification audit.
What does the fee include and what is extra?
Our professional fee covers gap analysis, documentation, training, internal audit and support during the certification audit. The certification body's audit and certificate fees are separate and depend on the standard, the number of employees and sites; we obtain two or three quotes for you. Surveillance audit fees apply in years one and two and a recertification audit in year three.
Can one certificate cover multiple sites?
Yes. A multi-site certificate covers a head office and its branches or plants under one management system, with the certification body sampling sites for audit. This is usually cheaper than certifying each site separately.