ISO 9001 by region
ISO 9001 certification in the UAE and GCC: EIAC and GAC accreditation, supplier registration and local practice
Clause by clause: ISO 9001:2026 requirements: every clause explained →
What is different about ISO 9001 in the UAE and GCC: who asks for it, how EIAC, GAC and SAAC accredit certification bodies, what supplier registers require, and the free-zone and multi-site practice that shapes the project.
Key points
- In the UAE, certification bodies are accredited by the Emirates International Accreditation Centre (EIAC), a Dubai Government entity set up under Dubai Law No. 27 of 2015 that replaced the former Dubai Accreditation Department.
- EIAC's own FAQ says certification bodies operating in Dubai must be registered under local regulation, while accreditation outside Dubai is voluntary, so the Dubai status of your certification body is worth checking before you sign.
- Across the Gulf, GAC, the accreditation body of the Gulf Cooperation Council, accredits management system certification bodies to ISO/IEC 17021-1 and publishes a searchable directory of the bodies it accredits.
- The UAE Federal Supplier Register asks for a trade licence, a VAT or tax registration certificate and an owner's passport copy, not an ISO certificate. The demand for ISO 9001 comes from individual tenders, prequalification and customers.
Why organisations in the UAE and GCC pursue ISO 9001
Most requests in the Gulf arrive through a prequalification form. Contractors, facilities management companies, trading houses and service providers bidding to government departments, semi-government entities and large developers meet a vendor questionnaire that asks for a current quality management certificate, its scope and its issuing body.
The registers themselves set a lower bar. The Ministry of Finance's Federal Supplier Register lists a trade licence, a VAT or tax registration certificate and the owner's passport copy for domestic, free-zone and foreign suppliers, with no ISO certificate. Dubai Customs' step-by-step guide to eSupply registration and qualification does not name one either. So ISO 9001 is rarely the condition for getting onto a list; it is often the condition for winning a particular contract, and each entity's tender documents decide that.
Regional headquarters in Dubai add a second driver: a group certificate covering Riyadh, Doha, Muscat or Kuwait branches, so one quality system serves customers in every GCC market.
Accreditation in the UAE and GCC: EIAC, GAC and SAAC
EIAC describes itself as a governmental entity working under the Executive Council of the Government of Dubai. It accredits certification bodies against ISO/IEC 17021-1, with quality management (ISO 9001) among the schemes it lists. Buyers still meet the name Dubai Accreditation Centre, or DAC, on older certificates; EIAC's FAQ explains that EIAC replaced that department under Law 27/2015.
GAC, which also runs a branch in Oman, accredits bodies providing audit and certification of management systems under ISO/IEC 17021-1 and the IAF requirements. In Saudi Arabia, SAAC, the national accreditation body, publishes a directory of the conformity assessment bodies it accredits, certification bodies included.
International acceptance now runs through the Global ACI arrangement, which replaced the IAF MLA and ILAC MRA on 1 January 2026. EIAC states that it is an IAF MLA and ILAC MRA signatory, and SAAC lists Global ACI among its international affiliations. The Global ACI site showed no list of recognised bodies when we checked, so confirm the current recognition of whichever accreditation body stands behind your certificate there before you rely on it. The verification guide covers the full certificate check.
Local practice that changes the project
Free zone and mainland entities
A free-zone company and a mainland company are separate licensed entities, even under one owner. The certificate names a legal entity and its sites, so decide at the start whether the scope covers the free-zone licence, the mainland licence or both, and make sure the addresses match the trade licences a tender committee will compare.
Sites across emirates and GCC countries
A head office in Dubai with a warehouse in Jebel Ali, a project office in Abu Dhabi and a branch in Riyadh is typical. The certification body samples sites, so every location must run the same processes. Check that it can audit in each country, and whether a GCC customer expects a particular accreditation.
Project-based contractors
For contractors and facilities management firms, auditors sample live project sites: subcontractor evaluation, method statements, inspection and test plans and the client's handover records. Plan Stage 2 around a project that is running.
Language and audit logistics
Records in the Gulf are usually in English, sometimes with Arabic for government correspondence. Confirm that the certification body can assign an auditor who reads both where needed, and schedule audit days around Ramadan hours and the summer peak of leave.
Local items to check, and where
| Local item | What it means for your project | Where to verify it |
|---|---|---|
| EIAC accreditation of the certification body | Confirms the body is accredited for quality management and your sector scope | The Conformity Assessment Bodies Directory on the EIAC website |
| Dubai registration of the certification body | EIAC says bodies operating in Dubai must be registered locally | The EIAC FAQ, then ask the body for its registration |
| GAC or SAAC accreditation | Relevant where a GCC customer names a regional or Saudi accreditation | The GAC accredited bodies directory, filtered for management system certification, and the SAAC directory |
| Supplier registration | Trade licence and tax documents, not ISO 9001, at the federal register | The Ministry of Finance Federal Supplier Register page, and each entity's own portal |
| Tender and prequalification | May ask for ISO 9001, its scope and the issuing body | The tender documents or vendor questionnaire for each contract |
How Sterling works in the UAE and GCC
Sterling runs UAE and GCC engagements from its Dubai office, with consultants on site at your locations and remotely where that suits the work. The team draws on an international practice of 8,100+ client engagements in 60+ countries since 2003. Sterling does not certify: an independent, accredited certification body audits you and decides, and we help you choose one whose accreditation your customers accept.
How Sterling supports organisations in the UAE and GCC
One quality system for every licence, site and GCC market
We begin with a gap analysis across your entities and sites, build the quality management system around how your teams already work, run it in Effivity, train your people and internal auditors, and stay with you through Stage 1 and Stage 2 with the body you select. We ensure successful certification for our clients.
Book a free discovery callISO 9001 in the UAE and GCC: questions buyers ask
Must our ISO 9001 certification body be accredited by EIAC?
Not necessarily. A body accredited by another internationally recognised accreditation body is generally accepted, but EIAC says bodies operating in Dubai must be registered locally, and some tenders name EIAC. Check the tender or customer requirement first.
Is ISO 9001 required for UAE government supplier registration?
Not for the Federal Supplier Register, which asks for a trade licence, tax registration and a passport copy. Individual government and semi-government tenders can still require it, so read each set of documents.
Is a certificate accredited by the Dubai Accreditation Centre still valid?
Check it before you rely on it. EIAC replaced the Dubai Accreditation Department under Law 27/2015, so confirm the certificate and its body in the EIAC directory and the certification body's register.
Can one ISO 9001 certificate cover our free-zone and mainland companies?
Yes, if both entities run the same system and the certification body agrees the scope. The certificate must name each legal entity and site as licensed.
ISO 9001 by region
Every guide in the ISO 9001 series is written for one question and links back to the hub for the whole picture.
- ISO 9001 certification in Australia
- ISO 9001 certification in India
- ISO 9001 certification in the Netherlands and Europe
- ISO 9001 certification in Singapore and South East Asia
- ISO 9001 for technology and software
- The 2026 ISO Certification Plan
- ISO 9001 certification in the Philippines
- ISO 9001 certification in the UAE and GCC
- ISO 9001 certification in the United Kingdom
- ISO 9001 timeline
- ISO 9001 training
Keep exploring
Explore more about ISO 9001
Watch a video on how to implement ISO 9001 here.
Watch a video on ISO 9001 requirements here.
ISO 9001 resources
- ISO 9001:2026 transition serviceGap analysis to transition audit, by 30 September 2029
- ISO 9001 + ISO 14001 2026 transitionBoth standards in one coordinated programme
- ISO 9001 implementation planBuild your phased plan in the free Project Plan Generator
- ISO 9001:2026: what changes and how to transitionFor organisations certified to the 2015 edition
- Sterling Academy: ISO 9001 Awareness e-learningComing soon: view the course
Services for ISO 9001
Talk to a consultant
Plan your ISO 9001 certification in the UAE and GCC with confidence.
Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.
hello@sterling-grc.com+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page
What would you like to achieve?
Choose a starting point. The enquiry form takes about a minute.
Book my free discovery callContinue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice