Where we work · Azerbaijan
ISO and GRC certification consulting in Azerbaijan
Achieve ISO and GRC certification in Azerbaijan with Sterling: 8,100+ client engagements in 60+ countries, 20+ years.
- 21 standards, one team
- Accredited certification route
- Dubai office team
- Effivity and Academy included
Sectors that ask for certification in Azerbaijan
Clients include
ISO and GRC certification in Azerbaijan at a glance
Azerbaijan's customs statistics for 2025 put oil-and-gas goods at 85.51 per cent of exports, which leaves the non-oil trade, from fruit and vegetables to plastics and aluminium, as the place where an ISO certificate most often decides whether a buyer signs. Several rules sit behind that demand. The Law on Food Safety requires HACCP-based procedures in food businesses, the Central Bank's regulations set information security requirements for banks in light of ISO/IEC 2700X, and the Law on Personal Data requires state registration of personal data information systems with the Ministry of Digital Development and Transport. Certification bodies are accredited through the Azerbaijan Accreditation Center (AzAK), and the Azerbaijan Standardization Institute (AZSTAND) publishes the national AZS texts of ISO standards. The Alat Free Economic Zone adds a manufacturing and logistics cluster beside the Baku International Sea Trade Port. Sterling's Dubai office serves Azerbaijani organisations on site where the work needs it and remotely otherwise, drawing on 8,100+ client engagements in 60+ countries, 20+ years of practice, and Effivity and Sterling Academy included with the engagement. Certificates are always issued by accredited certification bodies, never by Sterling.
ISO and GRC standards Sterling delivers in Azerbaijan
Each card opens Sterling's guide to the standard: what it requires, how certification or compliance works and what sets the time and cost.
Quality & operational excellence
Information security, cyber & cloud
Privacy & data protection
AI governance & digital trust
Environment, energy & climate
Health & safety
Governance, risk & resilience
Financial services, payments & AML
Food safety & agriculture
Healthcare, medical devices & life sciences
Laboratories, inspection & accreditation
Automotive, aerospace, rail & defence
Construction, energy, oil & gas
Regulators and laws that drive certification in Azerbaijan (8)
| Law or regulator | What it asks for | Standards it cites |
|---|---|---|
| Law of the Republic of Azerbaijan "On Personal Data" (Fərdi məlumatlar haqqında) The Law assigns its duties to the "relevant executive authority". The Regulation on the Ministry of Digital Development and Transport, as amended by Presidential Decree of 2 December 2024, gives that Ministry the state registration of personal data information systems, the state register, and checks that collection, processing and protection meet the Law | Covers collection, processing and protection of personal data and cross-border transfer. It requires written consent (including through the Electronic Government Information System) that names the data subject, the owner or operator, the purpose, the data and operations, the consent period and withdrawal terms; limits collection to what the purpose needs and requires prompt destruction once it is met; treats biometric data and special categories (race or nationality, family life, religion, health, convictions) under stricter conditions; requires technical and organisational protection measures, audit logs and contracts with operators; requires state registration of personal data information systems, with listed exemptions; gives data subjects rights to information, correction, objection and complaint; and bars transfer abroad where the receiving country's law does not give equivalent protection, unless the subject consents or life and health require it. | |
| Food Safety Agency of the Republic of Azerbaijan (AQTA) Food producers, processors and caterers | Law "On Food Safety" No. 523-VIQ of 5 May 2022: Article 16 requires food business operators that produce and process food and feed to apply HACCP-based procedures and keep an internal food safety control system based on them; Article 19 applies the same duty in catering and service outlets. | HACCP |
| Central Bank of the Republic of Azerbaijan Banks and local branches of foreign banks | Regulations on information security management in banks, Decision No. 20/1 of 14 July 2021: minimum information security requirements "in light of the requirements of" ISO/IEC 2700X, built around an information security management system approved by the Supervisory Board, with policies, incident management, and information security when dealing with card organisations. | ISO/IEC 27001 |
| Analytical Expertise Centre (AEM), a public legal entity working with the Ministry of Health Medicines and medical devices | The Centre's legislation page lists the Law on Medicines, rules for expert examination and for state registration of medicines, medicinal substances and medical devices, and a risk-based classification of medical devices. | |
| Ministry of Digital Development and Transport Digital services, e-government and personal data systems | Regulation on the Ministry (Presidential Decree No. 1785 of 12 January 2018, amended by Decree of 2 December 2024) makes it the central executive authority for digital development, e-government, telecommunications, high technologies including information technologies and artificial intelligence, and personal data, with state registration of personal data information systems and their state expert examination through a subordinate body. | |
| Azerbaijan Standardization Institute (AZSTAND), a public legal entity established by Presidential Decree No. 1234 of 10 February 2017 Standards (standards role only) | Prepares, adopts and withdraws national standards, manages the State Standards Fund and represents Azerbaijan in international and regional standardisation bodies; its site lists the national texts AZS ISO 9001:2020, AZS ISO/IEC 27001:2022, AZS ISO 14001:2021, AZS ISO 45001:2021, AZS ISO 37001:2025 and AZS ISO/IEC 17025:2020 among its most requested standards. | ISO 9001, ISO/IEC 27001, ISO 14001, ISO 45001, ISO 37001, ISO/IEC 17025 |
| Ministry of Labour and Social Protection of Population, whose site lists the State Labour Inspection Service among its bodies Employers (occupational safety and health) | The ministry's site names the inspection body; this record uses it for that name only and draws no duty from it. | |
| Ministry of Ecology and Natural Resources Businesses with environmental impact | The ministry's site publishes the list of national environmental standards prepared by the technical committee AZSTAND/TK-09 "Ecology". |
Accreditation and recognition
- Azerbaijan Accreditation Center (AzAK): National accreditation body — a public legal entity that AzAK's own site calls the competent single national body for accreditation. It accredits testing and calibration laboratories, inspection bodies, reference material producers and bodies certifying products, management systems and persons, with a scheme for management system certification bodies under ISO/IEC 17021-1. Since Cabinet of Ministers Decision No. 165 of 22 May 2025 it has been subordinate to the Anti-Monopoly and Consumer Market Control State Agency.
Look for a certification body whose accreditation scope covers your standard and sector, from a national accreditation body recognised under the international arrangements of Global ACI (Global Accreditation Cooperation Incorporated, formerly the IAF MLA). Sterling does not certify.
Economic zones
- Alat Free Economic Zone (AFEZ), run by the Alat Free Economic Zone Authority: export-oriented manufacturing, logistics
Sterling in Azerbaijan
Sterling delivers in Azerbaijan from its Dubai office: one team from scoping to certificate, with Effivity ISO & GRC software and Sterling Academy access included. Sterling does not certify; certification decisions stay with independent bodies.
Questions Azerbaijan clients ask
Is Azerbaijan's personal data law in force, and who supervises it?
Yes. The Law "On Personal Data", No. 998-IIIQ of 11 May 2010, is published in a consolidated text listing amendments up to Law No. 1193-VIQD of 28 June 2024. The Law names a "relevant executive authority", and the Ministry of Digital Development and Transport's Regulation, as amended by Presidential Decree of 2 December 2024, gives that Ministry the state register of personal data systems and the checks. Confirm current duties with your counsel.
Who accredits ISO certification bodies in Azerbaijan, and what recognitions does it hold?
The Azerbaijan Accreditation Center (AzAK) is the national accreditation body, with a scheme for bodies certifying management systems. Its site records European co-operation membership in category B, and full ILAC, APAC and Global ACI membership for ISO/IEC 17025. For a management system certificate, ask the certification body for its accreditation certificate and scope rather than assuming the recognition applies.
Is HACCP compulsory for food businesses in Azerbaijan?
For businesses that produce and process food and feed, and for catering outlets, yes in the sense that the Law "On Food Safety" (No. 523-VIQ of 5 May 2022) requires HACCP-based procedures and an internal food safety control system built on them. The Law speaks of procedures and control, not of a certificate, so a HACCP certificate is evidence a buyer may ask for. Check your own duties with the Food Safety Agency.
Do Azerbaijani banks have to follow ISO/IEC 27001?
Not by name. The Central Bank's Regulations on information security management in banks (Decision No. 20/1 of 14 July 2021) set minimum requirements "in light of" ISO/IEC 2700X, around an information security management system approved by the Supervisory Board. The text does not mention a certificate, so ISO/IEC 27001 certification is a way to evidence a comparable system rather than a stated duty.
Which sectors drive ISO and compliance demand in Azerbaijan?
Oil and gas dominates: the State Customs Committee's 2025 table puts oil-and-gas goods at 85.51 per cent of exports. Among non-oil lines, fruit and vegetables, plastics, chemicals, aluminium, cotton fibre and beverages appear, and AZPROMO reports non-oil exports grew 8.1 per cent in 2025. Banks and free-zone manufacturers add information security and quality demand.
In which language are ISO audits run in Azerbaijan?
Agree the language with the certification body when you apply. Azerbaijani is the official language under Article 21 of the Constitution, and the laws and regulations a management system must answer to are published in Azerbaijani, so documents are often held in Azerbaijani with English for foreign buyers. Name any interpreter and the language of controlled documents before the audit is scheduled.
Start with a free discovery call
A Sterling consultant goes through your entities, your regulators and your target date with you. No proposal until the scope is agreed.
Sources
- Law of the Republic of Azerbaijan "On Personal Data" (Fərdi məlumatlar haqqında) — afsa.gov.az; president.az; mincom.gov.az (accessed 18 Oct 2026)
- Law "On Food Safety" No. 523-VIQ of 5 May 2022: Article 16 requires food business operators that produce and process food and feed to apply HACCP-based procedures and keep an internal food safety control system based on them; Article 19 applies the same duty in catering and service outlets — afsa.gov.az (accessed 18 Oct 2026)
- Regulations on information security management in banks, Decision No. 20/1 of 14 July 2021: minimum information security requirements "in light of the requirements of" ISO/IEC 2700X, built around an information security management system approved by the Supervisory Board, with policies, incident management, and information security when dealing with card organisations — cbar.az; uploads.cbar.az (accessed 18 Oct 2026)
- The Centre's legislation page lists the Law on Medicines, rules for expert examination and for state registration of medicines, medicinal substances and medical devices, and a risk-based classification of medical devices — pharma.az (accessed 18 Oct 2026)
- Regulation on the Ministry (Presidential Decree No. 1785 of 12 January 2018, amended by Decree of 2 December 2024) makes it the central executive authority for digital development, e-government, telecommunications, high technologies including information technologies and artificial intelligence, and personal data, with state registration of personal data information systems and their state expert examination through a subordinate body — president.az; mincom.gov.az (accessed 18 Oct 2026)
- Prepares, adopts and withdraws national standards, manages the State Standards Fund and represents Azerbaijan in international and regional standardisation bodies; its site lists the national texts AZS ISO 9001:2020, AZS ISO/IEC 27001:2022, AZS ISO 14001:2021, AZS ISO 45001:2021, AZS ISO 37001:2025 and AZS ISO/IEC 17025:2020 among its most requested standards — azstand.gov.az (accessed 18 Oct 2026)
- The ministry's site names the inspection body; this record uses it for that name only and draws no duty from it — sosial.gov.az (accessed 18 Oct 2026)
- The ministry's site publishes the list of national environmental standards prepared by the technical committee AZSTAND/TK-09 "Ecology" — eco.gov.az (accessed 18 Oct 2026)
- Azerbaijan Accreditation Center (AzAK) — accreditation.gov.az; global-aci.org (accessed 18 Oct 2026)
- Alat Free Economic Zone (AFEZ), run by the Alat Free Economic Zone Authority — afez.az (accessed 18 Oct 2026)
Talk to a consultant
Plan your certification with the Dubai team.
Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.
uae@sterling-grc.com+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page
What would you like to achieve?
Choose a starting point. The enquiry form takes about a minute.
Book my free discovery callContinue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice