Published 4 November 2026 · 7 min read
Once your quality system is close to ready, you need someone to audit it. That someone is a certification body, and in Australia there are dozens of them accredited to certify ISO 9001. Their websites all say much the same thing, and their quotes can look very different.
The good news is that the most important difference between them is easy to check, and most of the rest comes down to a handful of questions you can ask in one email. This article walks through what actually differs, what does not, and the red flags worth knowing before you sign anything.
A certification body is the independent company that audits your business and issues your certificate. In Australia, those bodies are themselves assessed and accredited by JAS-ANZ, the Joint Accreditation System of Australia and New Zealand.
When a tender, a government buyer or a head contractor asks for ISO 9001 certification, they almost always mean a certificate from an accredited body. A certificate from a body that is not accredited can look identical on paper and still be rejected.
So before you compare anything else, check the JAS-ANZ register of accredited bodies (register.jas-anz.org). It takes about a minute. Look for two things:
Bodies accredited overseas by another accreditation body that is part of the international recognition arrangement can also issue recognised certificates. If you are bidding for Australian government work, though, read the tender carefully. Many specify JAS-ANZ accreditation by name, and it is the simplest option to defend.
This surprises people. Accredited bodies all audit against the same standard, under the same international rules for how certification audits must be run. Two of those rules matter most when you are comparing quotes.
Audit time is not something they make up. The number of audit days your business needs is worked out from set international tables, based mainly on how many people work in your business, how many sites you have and how complex your work is. Two accredited bodies quoting the same business should land on a similar number of days. If one quote has far fewer days than the others, ask why.
The audit process is the same shape everywhere. Every accredited body runs a Stage 1 audit (a readiness and documentation review), a Stage 2 audit (the main audit of how your system actually works), yearly surveillance audits, and a recertification audit every three years. Our article on what actually happens during a Stage 1 audit explains the first step in detail.
Your certificate also does not carry more weight because a bigger name issued it. An accredited certificate is an accredited certificate. Choose on fit and value, not on logo.
Since the number of days should be similar, most of the price difference comes from the daily rate, plus the extras around it. Look for application fees, certificate fees, administration fees, report fees and travel. A quote that looks cheap on the day rate can catch up quickly once those are added.
A certificate runs on a three-year cycle. The first audit is only part of the cost. Ask every body to quote the whole cycle: Stage 1, Stage 2, two surveillance audits and the recertification audit. That is the only fair way to compare.
Accreditation is also granted by industry sector. A body that regularly audits construction businesses will understand a builder's records and risks faster than one that mostly audits labs. Ask whether they audit businesses like yours, and whether they have auditors approved for your sector. For specialised work such as medical, food or defence supply, this matters a lot.
You are not really buying from a company. You are spending several days with one auditor. A good auditor asks clear questions, explains findings in plain language and knows the difference between a real gap and a paperwork preference. It is reasonable to ask who is likely to audit you, whether you can keep the same auditor across the cycle, and how to request a change if the fit is wrong.
Ask whether they have auditors based near you. A local auditor usually means lower travel costs and more flexible dates. Ask too how far ahead they are booking audits, especially if a tender deadline is driving your timeline.
This one is new. ISO 9001:2026 was published in September, and every certification body has to be approved by its accreditation body before it can issue accredited certificates to the new version. Under the international transition rules, accreditation bodies like JAS-ANZ have until 31 March 2027 to be ready to assess certification bodies, and those approvals run through to 30 September 2027. From 31 March 2028, new certificates can only be issued to the 2026 version.
Different bodies will get there at different times. If you plan to certify to 2026, or you hold a 2015 certificate and need to transition by 30 September 2029, ask when they expect to be able to audit against the new version. Our guide to whether to certify to 2015 or 2026 covers how that timing affects your choice.
Pick three accredited bodies and send each one the same short email. Tell them your headcount, number of sites and what your business does, then ask:
Put the answers side by side. How clearly and quickly each body replies is useful information too. It is a fair preview of what working with them will be like.
Before you approach a certification body, it helps to know how ready you actually are. A free gap analysis in Lead Comply shows which parts of the standard you have covered and what still needs work, so you can book your audit with confidence rather than hope.
Ready to see how straightforward ISO 9001 can actually be? Lead Comply walks Australian small businesses through the whole process, step by step.
Try Lead Comply free