hello@sterling-grc.com +1 201 263 4443 New York ISO & GRC consulting in 60+ countries
SterlingInternational Consulting Talk to a consultantTalk to us
← ISO 45001 hub

ISO 45001 by region

ISO 45001 certification in the UAE and GCC: EIAC and GAC accreditation, contractor workforces and local OH&S practice

Clause by clause: ISO 45001:2018 requirements: every clause explained →

What is different about ISO 45001 in the UAE and GCC: where the demand comes from, how to check a body's EIAC, GAC or SAAC scope for OH&S, Dubai registration, subcontracted labour, multilingual crews and legal registers by emirate.

  • Updated September 2026
  • 5-minute read
  • Part of the ISO 45001 hub

Key points

  • In the UAE, demand for ISO 45001 usually comes through main contractors, project owners and facilities clients in their prequalification files; the federal supplier register itself asks for licence and tax documents only.
  • EIAC accredits certification bodies to ISO/IEC 17021-1. Check its directory for occupational health and safety in the body's accredited scope, because a quality-only accreditation does not cover your OH&S certificate.
  • EIAC states that certification bodies operating in Dubai must be registered with it; for Gulf sites outside the UAE, GAC and SAAC publish their own directories of accredited bodies.
  • Subcontracted and labour-supply workers under your control count towards audit time and must sit inside the system, which is where most Gulf OH&S scopes go wrong.

Why organisations in the UAE and GCC pursue ISO 45001

Registration on the UAE Ministry of Finance's Federal Supplier Register calls for a trade licence, a VAT or tax registration certificate and a copy of the owner's passport. No management system certificate appears on that list, for mainland, free-zone or foreign suppliers.

The certificate is asked for further down the supply chain. A civil contractor tendering for a package on a large development, a scaffolding or MEP subcontractor joining a main contractor's approved list, a security or cleaning provider bidding for a mall or a tower, and a maintenance firm working on an energy asset are each asked the same things: which OH&S certificate do you hold, who issued it, and does its scope cover the work you will do on our site? The decision guide tests whether that demand justifies certifying now.

Accreditation for ISO 45001 in the UAE and GCC

EIAC, the Emirates International Accreditation Centre, answers to the Executive Council of the Government of Dubai; Dubai Law No. 27 of 2015 created it to succeed the Dubai Accreditation Department. Certification bodies are accredited by EIAC to ISO/IEC 17021-1. EIAC also states that registration is mandatory for certification bodies based in Dubai, while accreditation outside Dubai is voluntary. Its Conformity Assessment Bodies Directory shows each body's accredited schemes; confirm that OH&S management systems appear there before you compare quotes.

For sites elsewhere in the Gulf, GAC, the Gulf Cooperation Council's accreditation body with a branch in Oman, accredits management system certification bodies to ISO/IEC 17021-1 with the IAF requirements, and its directory can be filtered by country. SAAC, Saudi Arabia's national accreditation body, keeps a directory of accredited bodies that includes certification bodies.

International recognition of accreditation passed to Global ACI on 1 January 2026, replacing the IAF MLA and the ILAC MRA. EIAC describes itself as an IAF MLA and ILAC MRA signatory, and SAAC lists Global ACI among its affiliations, but Global ACI had not published a list of recognised accreditation bodies when we last checked. Ask each shortlisted body which accreditation will appear on your certificate, then confirm that accreditation body's standing yourself. The guide to choosing an ISO 45001 certification body covers the rest of the comparison.

Local practice that changes an ISO 45001 project

Everyone under your control, including labour supply

Gulf projects often run on subcontractors and supplied labour. The certification body counts contractor and subcontractor personnel under your control when it sets audit time, and a large temporary contractor presence can add to it. Those workers belong inside your hazard identification, inductions and consultation. The contractor management guide sets out how to bring them under control.

Consultation in the languages your workers speak

A single site may employ crews from many countries. Worker consultation and participation only counts if the workers understood the question. Toolbox talks, inductions, permits and hazard reporting have to work in the languages each crew actually uses.

Outdoor work in summer heat

Heat exposure for outdoor crews belongs in the hazard register with its controls. Since Amendment 1:2024, the certification body will also look for your recorded decision on whether climate change is a relevant issue for the system. Any legal duties on working hours or heat apply site by site and are confirmed from your own legal advice and permits.

A legal register for each emirate and country

Occupational health and safety duties differ between emirates and again in Saudi Arabia, Oman or Qatar. Build the legal register from the licences, permits and client requirements each site actually holds, then evaluate compliance against them. Where free-zone and mainland entities share one system, agree early which entities the certificate names.

Local itemWhat it means for your projectWhere to verify it
EIAC accredited scopeThe body's accreditation must include OH&S management systems, not only qualityThe Conformity Assessment Bodies Directory on the EIAC website
Dubai registrationEIAC states that bodies based in Dubai must be registered with itThe EIAC FAQ, then the body's own registration evidence
GAC or SAAC accreditationRelevant for Gulf sites outside the UAE or a customer who asks for itThe GAC directory, filtered for management system certification and country, and the SAAC directory
Global ACI recognitionAffects acceptance of the certificate by clients abroadThe Global ACI website, then the accreditation body's own statement
Headcount including contractorsDrives audit days and the sites the auditor must visitThe certification body's quotation and its written audit time justification

How Sterling works in the UAE and GCC

Sterling's Dubai office runs OH&S engagements across the Gulf, with consultants on your sites for hazard identification, worker consultation and the legal register, backed by expert and experienced consultants and 8,100+ client engagements in 60+ countries since 2003. Sterling does not certify; the decision belongs to an independent, accredited certification body after it has audited your sites.

How Sterling supports ISO 45001 in the UAE and GCC

One OH&S system for your direct staff, subcontractors and Gulf sites

We start with a gap analysis at each site, build the hazard and legal registers with your supervisors and crews, bring contractors under the system, run the evidence in Effivity and train your internal auditors, then stay with you through Stage 1 and Stage 2. We ensure successful certification for our clients.

Book a free discovery call

ISO 45001 certification in the UAE: questions buyers ask

Which bodies can issue ISO 45001 certification in Dubai?

A certification body accredited for OH&S management systems and, according to EIAC, registered with EIAC if it operates in Dubai. Check both in the EIAC directory, and ask which accreditation mark will appear on the certificate.

Do main contractors in the UAE require ISO 45001 from subcontractors?

Many do, through their own prequalification and approved-supplier lists rather than any federal register. Read each client's prequalification file for the scope and accreditation it expects.

Do supplied labour and subcontractors count in our ISO 45001 audit?

Yes. Contractor and subcontractor personnel under your control count towards the effective headcount that sets audit time, and the auditor expects to see them inside your hazard controls, inductions and consultation.

How do we check a Gulf subcontractor's ISO 45001 certificate?

Look up the certification body in the directory of the accreditation body named on the certificate, whether EIAC, GAC or SAAC. Then confirm that the accreditation covers OH&S and that the certificate's scope and sites match the work you are buying.

ISO 45001 implementation

ISO 45001 requirements

Get the document

We e-mail the document as a PDF link. Tell us who you are and where to send it.

A quick security check confirms the request comes from a person.

By requesting the document you agree to our privacy notice. Sterling uses these details to send it and to respond to your request. We never sell your data.

Talk to a consultant

Plan your ISO 45001 certification in the UAE and GCC with confidence.

Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.

hello@sterling-grc.com

+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page

What would you like to achieve?

Choose a starting point. The enquiry form takes about a minute.

Your goal
Book my free discovery call

Continue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice