How to verify ISO 14001 certificate status, and spot a fake or a misleading one

Why an ISO 14001 certificate needs checking

A convincing forgery takes minutes to make. A genuine certificate can also stop meaning anything while the document itself looks unchanged: surveillance was missed, the certificate was suspended, or the site you care about was dropped from scope. So check each link against a source the holder does not control.

Environmental certificates carry particular weight. Tender panels score them and customers ask for them in ESG questionnaires. Your own system asks for the check too: under clause 8.1 Operational planning and control, which in the 2026 edition covers externally provided processes, products and services, you are expected to control contractors and suppliers whose work affects your environmental aspects.

Where to verify ISO 14001 certificate status

Use four independent sources, in this order. The holder's website and the documents it sends you are not among them.

1. The issuing certification body

The body named on the certificate decides whether it is current, and an accredited body will confirm the status of its own certificates when asked. Look up its public register, or contact it, using an address you found yourself. A QR code or verification link printed on a forged document can point to a lookalike site built for the purpose.

2. IAF CertSearch

IAF CertSearch is the global database of accredited management system certifications, and it has kept its name since Global ACI took over the roles of the IAF and ILAC. Search by company name or certificate details and compare what it holds with the paper in front of you: entity, standard, scope, sites and dates. It also supports bulk checks and alerts when certificates are suspended, withdrawn or expired. The records are supplied by certification and accreditation bodies, so an absent entry means you ask the issuer, not that you assume forgery.

3. The accreditation body

The accreditation mark on the certificate names an accreditation body, usually national, and often gives the certification body's accreditation number. Search that body's directory for the certification body, and confirm that its accreditation covers ISO 14001 and the sector of the activity certified, and that it is active. Our guide to choosing an ISO 14001 certification body explains sector coverage.

4. Global ACI's list of recognised accreditation bodies

Finally, confirm that the accreditation body itself is recognised through Global ACI, whose list of recognised accreditation bodies can be filtered by economy and by scope, including management systems certification. An accreditation body missing from that list gives the certificate no recognised standing.

What a genuine ISO 14001 certificate states

The accreditation rules that certification bodies work to set out what a certification document must identify. In practice a genuine ISO 14001 certificate shows:

• the legal name of the certified organisation, and the address of each certified site;
• the standard and its edition, ISO 14001:2015 or ISO 14001:2026;
• a scope describing the activities, products and services covered, in words specific enough to test;
• a unique certificate number;
• the date of certification and an expiry date consistent with a three-year cycle;
• the certification body's name and address, and its accreditation mark and number where it is accredited for this work.

Each detail should match the issuer's register and IAF CertSearch; a site or scope wider on paper than online is the first thing to query.

Signs of a fake or a misleading certificate

Forgeries exist, but a real document that proves less than it seems is more common.

Signs of a forgery

• No entry with the issuer, and an issuer that does not recognise the certificate number.
• The ISO logo used as if ISO had certified the organisation. ISO certifies no one and does not allow its logo to be used in connection with certification.
• Dates that do not fit a three-year cycle, or an expiry date after a period with no surveillance record.

Signs of a misleading certificate

• Unaccredited issuer. The certificate is real, but the body behind it answers to nobody. Many tenders and customers will not accept it.
• Wrong entity or wrong site. The certificate belongs to a parent, a sister company or a head office, while the work you contract for is done at a plant or a yard outside the site list.
• Scope that misses the point. "Administrative activities" certified, while the waste handling, chemical storage or dredging you contract for is not.
• Suspended, withdrawn or expired. A certification body suspends certification when surveillance or recertification audits do not happen at the required frequency; the paper does not change when it does.
• Accreditation outside the sector. The body is accredited for ISO 14001, but not for the sector of the activity it certified.

Speed is its own warning. An ISO 14001 system needs an aspects and impacts assessment, a compliance obligations register for each site and months of monitoring records before a Stage 2 audit can test it. If it takes ten days, it is not ISO 14001 certification.

ISO 14001 certificate verification checklist

Run these checks when you onboard a supplier or contractor, and again when its certificate is renewed.

What to do when a certificate fails a check

Start with the facts, not an accusation. Write to the certification body named on the document, attach a copy, and ask whether it issued the certificate and what its status, sites and scope are. Many failed checks have an innocent explanation, such as a renewal not yet uploaded.

If the issuer confirms it never issued the certificate, treat the supplier as uncertified. Record the finding in your supplier evaluation, decide whether the contract can continue without the environmental controls you were relying on, and tell the issuer and the relevant accreditation body, which take the misuse of their names seriously. If it was genuine but unaccredited or out of scope, decide commercially: accept it, set a date for accredited certification, or source elsewhere.

Your own certificate: will it pass the same checks?

Your customers can run every check above on you. Make sure your certificate names the entity that signs your contracts, lists each site that carries environmental aspects, and describes your operational activities rather than only your offices. Keep the annual surveillance audits on time, and plan the move to ISO 14001:2026 well before the 30 April 2029 deadline; our guide to ISO 14001:2026 and the transition sets out the timetable, and the one on surveillance and recertification covers the three-year cycle.

Verifying an ISO 14001 certificate: questions buyers ask