Accredited certification is a useful signal in supplier due diligence. It is not the due diligence process itself. Treating a certificate as the final word on a supplier's risk profile, rather than one input among several, is where due diligence stops being thorough. This page sets out where accredited certification actually fits, what it confirms, what it does not, and how to keep checking it once a supplier relationship is underway rather than only at onboarding.
Where accredited certification fits in a due-diligence framework
Due diligence typically draws on several sources: financial checks, reference checks, site visits, insurance verification, and certification status among them. Accredited certification earns its place in that list because, unlike a supplier's own claims about its processes, it has been independently assessed against a published ISO/IEC standard by a certification body that has itself been independently assessed. That two-layer independence is what distinguishes it from a supplier simply asserting it follows good practice.
It belongs alongside your other checks, not ahead of them and not instead of them. A supplier with accredited certification and a troubling financial position is still a troubling financial position. Certification speaks to one part of the picture: whether the supplier's management system for a specific standard has been independently assessed and found to meet its requirements.
What accreditation confirms, and what it doesn't
Accredited certification shows that the supplier's management system was assessed against the requirements of a specific standard, on a specific scope, as of a specific date, and found compliant, by a certification body whose own competence, impartiality and consistency are independently assessed. That is a real and useful confirmation.
It does not confirm that the supplier's performance is uniformly excellent, that every part of the supplier's operation is covered (scope matters, and a certificate can cover one site while your supplier operates several), that nothing has changed since the last assessment, or that the supplier is free of unrelated risks such as financial instability, labor practice issues outside the certified scope, or reputational exposure. A certificate is a statement about conformity to a standard's requirements, not a general assurance about the organization as a whole.
A claim that overstates what certification covers is a claim that will eventually be tested and proved inadequate.
Building re-verification into ongoing supplier monitoring
Due diligence at onboarding answers "was this supplier accredited-certified at the point we checked." It does not answer whether that remains true a year later. Certificates can lapse, be suspended, or be withdrawn, and a supplier's own paperwork will not always reflect that promptly.
Build a periodic re-verification step into your ongoing supplier monitoring cycle rather than treating certification as a one-time onboarding check. A practical starting point is to re-verify at the same cadence as your other periodic supplier reviews, and additionally whenever something prompts a closer look at a specific supplier: a quality incident, a complaint, a contract renewal, or a significant change the supplier has reported. Re-verification takes seconds using the public register and does not require contacting the supplier directly.
Red flags: claimed but unverifiable accreditation
Treat the following as reasons to look more closely, not as automatic disqualification, since errors and delays happen even with genuine accreditation:
A supplier names a certification body that does not appear as accredited when checked directly. A supplier's certificate does not appear on the public register at all. The claimed scope of certification does not match, or is broader than, what the register shows. The supplier is reluctant or slow to provide the specific certificate number or issuing body name needed to verify the claim. Any of these is worth a direct conversation with the supplier before you rely on the certification claim in your due-diligence file.
Common questions
Is an accredited certificate enough for supplier due diligence?
No. It is one independently assessed input among several, such as financial checks, references, site visits and insurance, not the due-diligence process itself.
What does accredited certification confirm about a supplier?
That the supplier's management system was assessed against a specific standard by a certification body that is itself independently assessed. It speaks to one part of the picture, not the whole supplier.
What is a red flag?
A claimed accreditation that cannot be verified.
How often should I re-check?
Through the relationship, not only at onboarding.