Services
Every stage of your certification cycle
From your first Stage 1 audit to renewal three years later, and everything in between: transfers, integrated audits, optional pre-assessments and public training.
- Fixed three-year quotations
- Sector-competent auditors
- On-site audits across the UK
- Independent certification decisions
- Initial CertificationIndependent Stage 1 and Stage 2 certification auditsIndependent Stage 1 and Stage 2 audits leading to a certification decision and an ISO certificate valid for three years, subject to surveillance.
- Surveillance AuditsAnnual audits that keep your certificate validAnnual surveillance audits that confirm your certified management system continues to work effectively and keep your certificate valid.
- Recertification AuditsRenew your certificate for a further three-year cycleRecertification audits completed before your certificate expires, reviewing performance over the cycle and renewing certification for three years.
- Certificate TransferMove an existing accredited certificate to HexaTransfer an existing accredited ISO certificate from another certification body, following a pre-transfer review in line with IAF MD 2.
- Integrated Management SystemsCombined audits for several ISO standardsCombined certification audits for organisations running one integrated system across several ISO standards, applying IAF MD 11 principles.
- Pre-assessment (Gap Analysis)An optional readiness check before certificationAn optional readiness check that identifies gaps against the standard before your certification audit. Findings only, with no consultancy or advice.
- Management System TrainingPublic awareness and internal auditor coursesPublic, non-client-specific awareness and internal auditor courses that help staff understand ISO standards and audit their own systems.
Audit planner
Get an indicative audit profile in seconds
Audit time is calculated from published accreditation rules, not guesswork. Move the slider to see the typical audit days for ISO 9001 at your size.
- Based on the IAF MD 5 quality management table
- Adjusted for complexity, sites and shifts in your quote
- Integrated audits can reduce combined time
- Initial certification
- 3days
- Stage 1 + Stage 2
- Each surveillance
- 1days
- Years 1 and 2
- Recertification
- 2days
- Year 3
Indicative only. Final audit duration is confirmed in your quotation after reviewing scope, risk, sites and shifts. Larger organisations are quoted individually.
Get my exact quoteBenefits
What ISO certification does for your organisation
Certification is more than a badge. Done well, it gives you a management system that keeps improving and a certificate that opens doors.
Qualify for more tenders
Answer pre-qualification questions on quality, environment, safety and security with independent evidence buyers accept.
Meet supply chain demands
Satisfy prime contractors and major customers who require certified suppliers, and spend less time on their audits.
Reduce risk and incidents
A system built on risk assessment and corrective action catches problems early, before they reach customers or people.
Work more efficiently
Defined processes, clear responsibilities and measured objectives cut rework, errors and wasted effort.
Stay on top of compliance
Certified systems require you to identify and evaluate legal obligations, which supports conversations with regulators.
Strengthen your reputation
Display a verifiable certificate that tells customers, insurers and investors your organisation is well run.
Certificate verification
Check a Hexa certificate
Need to know whether a supplier's certificate is current? Customers, buyers and other interested parties can ask us to confirm the details held in our records.
We confirm the organisation name, certificate number, ISO standard, certified scope, status, and issue and expiry dates.
FAQs
Frequently asked questions
What does a certification body like Hexa actually do?
A certification body independently audits your management system against an international standard such as ISO 9001 or ISO/IEC 27001. If the system meets every requirement and works in practice, we issue a certificate and then carry out surveillance audits to confirm it continues to work. We are the independent third party, separate from you and from any consultant you use.
How long does it take to get ISO certified?
Most of the time is spent building and running your management system before the audit. Once your system has operated for a few months, with an internal audit and a management review completed, the Stage 1 and Stage 2 audits and the certification decision usually take six to twelve weeks from booking.
How much does ISO certification cost?
Fees are driven by audit duration, which depends on headcount, the number of sites, the standards in scope and the complexity and risk of your activities. Every Hexa quotation is fixed and itemised for the full three-year cycle, including Stage 1, Stage 2, both surveillance audits and travel, so there are no surprises.
Is the certificate valid for three years?
Yes. A management system certificate is valid for three years, provided you pass the surveillance audits held at least once each calendar year. Before the certificate expires we carry out a recertification audit to renew it for a further three years.
Can you write our management system for us?
No. Certification bodies must stay impartial, so we cannot design, write or implement the system we certify. You can build it yourself or with any consultant you choose. We can offer an optional pre-assessment that identifies gaps, without telling you how to fix them.
What happens if the auditor finds a nonconformity?
Nonconformities are graded as major or minor. You submit a root-cause analysis and corrective action plan, and for majors you also provide evidence the fix is effective before certification can be granted. Minors are normally verified at the next audit. Your auditor explains the process clearly at the closing meeting.
How is audit duration calculated?
Audit time is calculated using the accreditation rules for each standard, mainly IAF MD 5 for quality, environmental and health and safety systems, and ISO/IEC 27006 for information security. Headcount, number of shifts, sites and risk all affect the number of days, and any adjustment is documented.
What do we need in place before the Stage 1 audit?
You need a defined scope, the documented information the standard requires, evidence that the system has been operating, a completed internal audit covering the whole scope and a management review. Your auditor will confirm in writing whether you are ready for Stage 2.
How do customers check that our certificate is genuine?
Customers can contact Hexa through our certificate verification page, quoting the certificate number. We confirm the organisation name, scope, standard, issue date and current status. Keeping a verifiable record is part of how certification protects your credibility.
Do you cover the whole of the UK?
Yes. Hexa audits organisations in England, Scotland, Wales and Northern Ireland, from single-site businesses to multi-site groups. Browse our location pages to see how certification supports organisations in your city and region.
Start your certification
Get a fixed, three-year certification quote
Tell us about your organisation and the standards you need. We will confirm audit days, scope and dates in writing, with no obligation.
