hello@sterling-grc.com +1 201 263 4443 New York ISO & GRC consulting in 60+ countries
SterlingInternational Consulting Talk to a consultantTalk to us

Sterling office · China

Sterling International Consulting Shanghai, ISO consultants for China

Sterling's Shanghai office, in the Jin Mao Tower in Pudong, is where our expert and experienced ISO consultants plan and lead engagements for organisations across China: quality, information security, environment, health and safety, food safety and data protection, built with your teams and carried through to the certification audit. We ensure successful certification for our clients.

  • One all-inclusive proposal for a defined scope: consulting, Effivity software, Sterling Academy access and internal auditor training, as applicable to your standard, in a single proposal
  • A team for Shanghai and mainland China, part of a group with offices in 21 countries, implementing management systems since 2003
  • The Sterling Promise: 100% on-time completion, 100% success, 8,100+ client engagements. Sterling does not certify; an accredited body audits and decides

What we do here

Everything a Sterling engagement includes, delivered from Shanghai.

The same engagement we deliver in 60+ countries, led from Shanghai for manufacturers, exporters, suppliers to multinational groups and service companies. One consultant leads your project from gap analysis to the certificate, and your people do the work alongside us, so the system stays yours after we leave.

  • Scope, gap analysis and implementation plan

    With responsibilities, dates and decision owners, agreed before work starts.

  • Process development and documentation

    Tailored to your operations, on Sterling's own template sets, built with your process owners.

  • Effivity ISO & GRC software

    Your system runs in Effivity from day one, included with the engagement at no additional cost.

  • Training for everyone

    Internal auditor training for your audit team, as applicable to your standard, and preferential Sterling Academy access, including complimentary awareness training for your people as part of the engagement.

  • Internal audit and management review

    Conducted or facilitated as agreed, with findings closed with evidence before the certification body arrives.

  • Certification readiness and support

    Preparation for Stage 1 and Stage 2, and support until the certificate is issued.

Certification decisions remain with the independent certification body.

Standards in demand

The standards organisations in China ask us about most.

Requests usually come from an overseas customer, a group headquarters or a supplier approval programme asking for a certificate. Alongside the ISO management system standards, the Shanghai team helps companies meet the Personal Information Protection Law, which the Cyberspace Administration of China (CAC) coordinates: internal rules, impact assessments, compliance audits and the route for sending personal information abroad. If you are unsure which standard applies, the discovery call settles it.

Reaching the office

Visiting Shanghai.

The office is in the Jin Mao Tower at 88 Century Avenue, in Shanghai's Pudong District. Most of our work happens at your premises and online, so meetings at the office are by appointment: write to china@sterling-grc.com and we will confirm a time.

  • District: Pudong District, Shanghai
  • Street: 88 Century Avenue
  • Building: Jin Mao Tower

Please arrange your visit in advance so the consultant leading your engagement is in the office when you arrive.

The region

Shanghai and the other Sterling offices in Asia-Pacific.

Shanghai is one of the Sterling offices across Asia-Pacific, with our regional headquarters in Manila and offices in Singapore, Tokyo, Kuala Lumpur, Jakarta, Ho Chi Minh City and Sydney, so a group with entities in several countries works with one engagement team and one plan.

All Sterling offices · ISO and GRC consulting in Southeast Asia

Client experience in China

On the record: what clients in China say about working with Sterling.

Client feedback wall: letters on file

The food safety team leader reports that implementation was built around the company's own processes and existing HACCP plan, and that roles, operational controls, verification activities and corrective actions became much easier for employees to understand.

Food Safety Team Leader — I-Scream Ltd, China · ISO 22000 · Food & beverage

Each account is drawn from a signed letter or e-mail on file and reported in our words, with the signatory's role and organisation attached; the original letters are available on request. Ask for references in your sector before you decide.

  • 60+countries where Sterling has delivered certification
  • 21countries with a Sterling office, eight regions, one coordinated team
  • 2003the year the group began implementing ISO management systems; the same method, refined, since
  • 8,100+client engagements across the group, from single-site SMEs to multinationals

FAQs

Questions clients in China ask before they engage us.

The specific answers for your organisation come from the discovery call. These are the general ones.

Where is Sterling in Shanghai, and who do I contact?

Our office is in the Jin Mao Tower, 88 Century Avenue, Pudong District, Shanghai. Write to china@sterling-grc.com and a Sterling consultant replies within one working day. The first step is a free discovery call of about thirty minutes, where we agree your scope, standards and target date before any proposal is written.

Does Sterling issue the ISO certificate?

No. Sterling does not certify. We build the management system with your team, prepare the evidence and support you through the audit, and an independent, accredited certification body audits and decides. Before you appoint a body, check its accreditation for your standard and scope. Since 1 January 2026, the Global ACI arrangement has replaced the IAF MLA and ILAC MRA as the basis for international recognition of accredited certificates.

Does the Personal Information Protection Law apply to us?

Very likely, if you handle personal information in China. The Personal Information Protection Law has been in force since 1 November 2021, and it also reaches processing outside China where the purpose is to provide products or services to people in China or to analyse their behaviour. The CAC coordinates its supervision. There is no certificate for PIPL compliance as such; we help you build the internal rules, assessments and audits the law expects.

How can we send personal information out of China?

The law sets out routes: a security assessment by the CAC, personal information protection certification by a professional institution under CAC rules, or a contract with the overseas recipient on the CAC's standard contract. The volume and sensitivity of the information decide which route applies. Rules for the certification route took effect on 1 January 2026. We prepare the evidence with you; the institution or authority decides.

Can the Shanghai team support our sites elsewhere in Asia-Pacific?

Yes. Shanghai works with our regional headquarters in Manila and the offices in Singapore, Tokyo, Kuala Lumpur, Jakarta, Ho Chi Minh City and Sydney, and the group has offices in 21 countries. Multi-site and multi-country groups work with one engagement team, one plan and one Effivity system, while the certification body confirms how sites in each country are sampled and audited.

Keep exploring

More places we work

Talk to a consultant

Plan your certification with the Shanghai team.

Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.

china@sterling-grc.com

+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page

What would you like to achieve?

Choose a starting point. The enquiry form takes about a minute.

Your goal
Book my free discovery call

Continue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice