Insights

"We need certification" — the four different things a buyer might mean

An export enquiry arrives. The buyer needs certification before the first order ships. The deadline is short.

Published by CAS — Conformity Assessment Services · 28 September 2026 · 3 min read
ShareLinkedInFacebook
"We need certification" — the four different things a buyer might mean

Key takeaways

  1. 1The question: does the organization run a system that consistently delivers what it claims?
  2. 2The question: does this product meet a specified technical requirement?
  3. 3The question: does this product meet the requirements of a specific dietary tradition?

An export enquiry arrives. The buyer needs certification before the first order ships. The deadline is short.

The single most useful thing to do next is establish which of four quite different requests has been made — because the answers have different lead times, different assessors, and in some cases no relationship to one another at all.

1. Management system certification

The question: does the organization run a system that consistently delivers what it claims?

This is the ISO family. Quality under ISO 9001, food safety under ISO 22000, environmental under ISO 14001, occupational health and safety under ISO 45001, energy under ISO 50001, business continuity under ISO 22301.

Who assesses it: a certification body, ideally one accredited for that specific standard by a national accreditation body.

What the certificate says: that a system was audited against the standard and found conforming, within a stated scope, at stated sites.

What it does not say: anything about a specific product. The certificate covers the system, not the item in the container.

Lead time: governed by audit duration under Global ACI TECH-3-004 (formerly IAF MD 5), plus the interval between Stage 1 and Stage 2, plus the certification decision.

2. Product conformity

The question: does this product meet a specified technical requirement?

Different mechanism entirely. Product conformity is assessed against product specifications, often with testing, and in regulated sectors it follows a legislative route rather than a voluntary one.

Why the distinction matters commercially: a management system certificate is sometimes offered in response to a product conformity request. It does not answer it, and a buyer who knows the difference will say so.

This is also where the most expensive misunderstanding in export compliance sits. In EU regulated sectors — CE marking and notified-body activity — the requirement is met by a body accredited by an EEA national accreditation body signatory to the EA MLA. IAF MLA recognition covers voluntary schemes. The two arrangements are not interchangeable, and no amount of ISO certification substitutes for the regulated route where the regulated route applies.

3. Dietary and faith-based certification

The question: does this product meet the requirements of a specific dietary tradition?

Kosher and halal certification sit here. They assess ingredients, equipment and process against a body of religious law, and rest on religious authority rather than on accreditation to an ISO standard.

Who assesses it: a certification body holding the relevant authority. Kosher certification is available through CAS as exclusive regional partner, with certificates issued by our partner certification body. It sits outside the EGAC accredited scope.

Lead time: often longer than expected, because status depends on ingredient chains reaching several steps back — and because some product categories require ongoing supervision rather than periodic audit.

4. Customer-specific or sector schemes

The question: does the supplier meet this particular customer's or sector's programme?

Large retailers and sector bodies operate their own schemes with their own rules, assessor pools and renewal cycles. A supplier is often assessed against one because a specific customer requires it, not because the market at large does.

The practical point: these are contractually driven. The buyer who requires one can usually tell you exactly which, and guessing is expensive.

How to answer the enquiry

Four questions settle almost every case:

Which standard or scheme, by name? "ISO certification" is not a name. ISO 9001 is.

Is it required by regulation, or by you as the buyer? This separates the regulated route from the voluntary one, and it determines which kind of body can satisfy it.

Does it need to be accredited? If yes — accredited by whom, and for what scope? Accreditation is granted scheme by scheme.

By when, and does the certificate need to name specific sites or products? Scope questions surface late and are the most common cause of a certificate that technically exists and does not satisfy the buyer.

An enquiry answered with these four is an enquiry you can quote against. One answered with "we need certification" is a schedule waiting to slip.

CAS — An EGAC accredited MS certification body No. 012418 for ISO 9001, 14001, 45001, 22000, 50001 and 22301.

Verify any certificate: cas.com.eg/certsearch

Apply for certification →Verify a certificate

Read next

"We need certification" — the four different things a buyer might mean · CAS