A certification badge or logo on a website proves nothing by itself. Verifying an ISO certificate means checking three things: that the certificate is currently valid, that it was issued by a body with real accreditation, and that its scope actually covers the service you're buying.
How to verify an ISO certificate
Published 3 September 2026 · Reviewed 3 September 2026 · By Steven MoreySteven Morey has spent 27 years in digital, leading marketing and sales for technology businesses in Australia and the US. Through Opollo, his MSP marketing agency, he's run thousands of campaigns for hundreds of managed service providers. That's where the pricing questions in these guides come from.
What to ask the provider for
Ask for the certificate number, the name of the issuing certification body, the issue and expiry dates, and the scope statement in writing. A provider with a genuine, current certificate has all of this on hand immediately; hesitation or a vague answer is itself useful information.
What to check independently
Confirm the issuing body is itself accredited, in Australia typically by JAS-ANZ (the Joint Accreditation System of Australia and New Zealand) or another IAF (International Accreditation Forum) member body. Many certification bodies publish a public register of current certificate holders; ask the provider to point you to their own listing rather than only supplying a PDF. Check the expiry date against today's date, and check the scope statement names the actual service you're buying, not just the business in general.