ISO 9001, ISO 14001 and ISO 45001: What Each Covers and What to Ask a Supplier to Show.
A supplier lists three ISO numbers and the buyer files a certificate copy. That can be where a supplier review stops, and it leaves open what the certificate actually describes.
Key takeaways
- ISO 9001 concerns quality management, ISO 14001 environmental management and ISO 45001 occupational health and safety management.
- These are management system standards. A certificate describes an organization's system, not the properties of a product.
- Check the scope statement, the site, the validity dates and the issuing body on any certificate you rely on.
- Orbit holds ISO 9001, ISO 14001 and ISO 45001.
What do the three standards cover?
| Standard | Subject | A buyer might use it to ask |
|---|---|---|
| ISO 9001 | Quality management systems | How are processes, records and corrective actions managed? |
| ISO 14001 | Environmental management systems | How are environmental aspects identified and managed at the site? |
| ISO 45001 | Occupational health and safety management systems | How are workplace hazards managed? |
Orbit holds all three. The quality and certifications page lists them.
What does a management system certificate show?
It shows that an organization's system was assessed against the standard by a certification body, for a stated scope and period. It does not state a coil's alloy, a coating's performance or a lot's test results. Those come from the mill test certificate and the test reports for the order, which the certificate guide explains how to read.
Treat the ISO certificates as evidence about how a site is run, and the product documents as evidence about the product.
What should you check on the certificate?
- Scope: does the stated activity cover the work you are buying, such as manufacture of coil, and not only a sales office?
- Site: is the address the one that makes your product?
- Validity: are the issue and expiry dates current?
- Issuing body: who certified it, and is that body accredited? Ask the supplier, and check with the accreditation body where it matters to you.
- Name: does the legal entity on the certificate match the entity on your contract?
IAF CertSearch is a database of accredited certifications. For certificates that certification bodies have listed there, it can show whether a certificate is current, its scope and its sites. ISO 14001 now has a 2026 edition, so ask which edition the certificate was issued against. The ISO catalog entry is linked for reference.
How do the certificates relate to product claims?
They do not replace them. An environmental management certificate is not a recycled content figure, and a quality management certificate is not a test report. The EPD post and the recycled content post cover documents that speak to products.
If a questionnaire asks for ISO certification, attach the certificates. If it asks for a product property, point to the document that states it.
Which questions fit each standard?
The certificate opens a conversation; it does not finish it. Questions that follow from each standard's subject:
- ISO 9001: how are nonconformities recorded and closed out, and how is a customer complaint traced back to a lot?
- ISO 14001: how does the site identify its environmental aspects, and how does it track legal requirements that apply to it?
- ISO 45001: how are hazards identified in the areas where your product is handled, and how are incidents reviewed?
A supplier may answer in a procedure summary, a short call or a site visit. Choose the format that suits the risk of what you are buying.
How should the certificates sit in a supplier file?
Record the date you received each certificate, its expiry date and the scope wording. Set a reminder for the expiry date, because a certificate that lapses after your review is no longer evidence for the period that follows. Keep product documents, such as the mill test certificate for each batch, in a separate section so they are not confused with system certificates.
If your own customers ask which certificates apply to the coil you supply them, a clean file lets you answer by document rather than by memory.
What is a simple decision rule?
Ask two questions of any certificate. First, does its scope and site cover the activity and the place that make your product? Second, is it current? If both answers are yes, the certificate supports a statement about how the site is managed. For statements about the product, look to the batch documents and the test reports named on your order.
What to ask when you request supplier documents
A short request works: the certificate copies, the scope wording, and the documents that apply to your order. Tell Orbit which documents your review needs and which product you are buying. If you also need material certificates, ask for them by type on the purchase order. Orbit issues material certificates with every batch.
What if a certificate does not match your contract?
If the legal entity, site or scope on a certificate differs from what your contract names, do not assume the difference is a clerical one. Ask the supplier to explain it in writing, for example which entity operates the site and whether the certificate covers the activity you are buying. Keep the explanation with the certificate copy, so the next reviewer sees the question and the answer together.
Common questions
Does an ISO 9001 certificate mean the product meets a specification?
No. It describes the quality management system. Product conformity is shown by the test results and certificates for the order.
Can an ISO certificate be used to show a recycled content figure?
No. A recycled content figure is a product claim and needs its own basis. For Orbit it is confirmed per order and traceable to the cast batch.
Which certificates does Orbit hold?
ISO 9001, ISO 14001 and ISO 45001.
What should I ask for besides the certificate copy?
The scope statement, the site address, the validity dates and the name of the certification body.
References
- IAF CertSearch: a database of accredited certifications.
- ISO: catalog entry for ISO 14001: the ISO catalog entry referred to above.
- How to read an aluminum coil mill test certificate: product-level documents for a batch.
Reviewing a supplier file?
Tell us which documents your review needs and which product you are buying. We respond to RFQs within one business day.