Why This Matters More Than Most Businesses Realise
You have worked hard to get certified. The audit is done, the certificate is issued, and now you want to tell the world about it. That is completely understandable. But this is where a surprising number of businesses make costly mistakes, sometimes without even knowing they have done anything wrong.
On this page
Using the ISO certification mark incorrectly in your marketing is not a minor administrative slip. It can result in your certification being suspended, complaints being lodged with your certification body, and in some cases, legal exposure for misrepresentation. Yet very few businesses receive clear guidance on what they can and cannot do when promoting their certified status.
This article covers the actual rules, where they come from, who enforces them, and what you should be doing in practice to stay compliant while still getting full marketing value from your certification.
First, Understand What the ISO Certification Mark Actually Is
There is a common misconception worth clearing up immediately. ISO, the International Organisation for Standardisation, does not issue certification marks. ISO is a standards development body. It publishes standards like ISO 9001 and ISO 14001, but it does not certify organisations and it does not own a certification logo that you are licensed to use.
The marks you see on company websites, email signatures, and marketing materials are issued by certification bodies, not by ISO itself. Each accredited certification body has its own registered mark or logo, along with its own rules about how that mark can be used by certified clients.
This is an important distinction. When you sign a certification agreement with a body like SAI Global, Bureau Veritas, SGS, or any other accredited certification body, you are entering into a licensing arrangement for their mark. The terms of that licence govern everything about how you can display it.
Additionally, many certification bodies also carry the accreditation mark of their national accreditation body. In Australia, that is the JAS-ANZ accreditation mark, which indicates the certification body itself has been formally assessed and recognised. Some certification bodies permit their clients to display both the certification body mark and the accreditation mark together, but the rules around this vary and must be confirmed in writing.
Where the Rules Actually Come From
The rules around certification marks sit within a layered framework, and understanding that framework helps you know who to ask when you have a question.
ISO/IEC 17021 and the Certification Agreement
The international standard ISO/IEC 17021 governs how certification bodies must operate. It includes requirements around how certified organisations can and cannot represent their certified status. Certification bodies that are accredited must comply with this standard, which means they must have documented rules for clients on mark usage and must enforce those rules.
When you receive your certificate, you will also receive a certification agreement or a similar document. That agreement contains the mark usage rules specific to your certification body. This is the document you need to read carefully, because the rules differ between bodies.
The IAF and Accreditation Body Rules
The International Accreditation Forum publishes guidance documents that inform how accreditation marks can be used. These flow down through national accreditation bodies like JAS-ANZ, which set requirements for the certification bodies they accredit, which in turn set requirements for certified organisations. It is a chain of accountability, and you sit at the end of it.
The Core Rules Most Certification Bodies Apply
While the specific rules vary by certification body, there are common principles that apply almost universally. If you are unsure about your specific body's rules, these principles will give you a solid foundation while you confirm the details.
You Cannot Use the Mark on Products or Imply Product Certification
This is the most commonly violated rule, and it is the one that causes the most serious problems. ISO management system certification applies to your organisation and its processes. It does not certify your products or services.
Placing a certification mark directly on a product, its packaging, or any labelling that could lead a customer to believe the product itself has been certified is a serious misuse. For example, if you are ISO 9001 certified and you print the certification mark on your product packaging without any qualifying statement, a customer could reasonably conclude that the product has been independently tested and certified to a quality standard. That is misleading, and your certification body will take action if they become aware of it.
The correct approach is to use the mark in contexts that clearly relate to your organisation and its management system, not to individual products. Company letterhead, your website's about page, corporate brochures, and email signatures are generally acceptable. Product labels and packaging are generally not, without very specific qualifying language.
The Scope Statement Must Be Accurate and Visible
Your certification applies to a defined scope. That scope is stated on your certificate and defines exactly what activities, sites, and processes are covered. When you use the certification mark in marketing, the scope must be represented accurately.
If your ISO 9001 certification only covers your Sydney office but you operate nationally, you cannot use the mark in a way that implies your entire organisation is certified. If your certification covers manufacturing but not distribution, you cannot use the mark in marketing that relates to your distribution services.
This is where scope limitations become very practical. Businesses that have a narrow certification scope need to be especially careful that their marketing materials do not create a broader impression of certified status than what actually exists.
The Certificate Number and Standard Reference Must Be Correct
Most certification bodies require that when you display their mark, you also include the relevant standard (such as ISO 9001:2015) and your certificate number. This allows anyone who sees the mark to verify your certification independently. Some bodies require the accreditation body's mark to appear alongside their own mark, with specific sizing and placement rules.
Getting the standard reference wrong is surprisingly common. For example, some businesses still reference outdated versions of standards after a transition has occurred. If your certification is to ISO 9001:2015 and you are referencing ISO 9001:2008 in your marketing, that is inaccurate and could be considered misleading.
You Cannot Use the Mark After Certification Has Lapsed or Been Suspended
This seems obvious, but it happens more often than you would expect. Certification is valid for a defined period, typically three years, subject to successful surveillance audits in between. If your certification lapses, is suspended, or is withdrawn, you must immediately stop using the mark in all marketing materials.
Continuing to display a certification mark after your certification has ended is misrepresentation. In commercial contexts, particularly when dealing with government tenders or major contracts, this can have serious legal consequences beyond just the certification body's disciplinary process.
If you are not sure whether your certification is currently valid, you can verify your ISO certificate online through your certification body's public register. Most accredited certification bodies maintain a searchable database of current certificate holders.
Digital Marketing and Social Media: Where the Rules Get Complicated
The rules written into most certification agreements were developed before social media and digital marketing became dominant channels. This creates some grey areas that are worth thinking through carefully.
Website Usage
Using your certification body's mark on your company website is generally permitted and encouraged. The mark should link to your certificate details or to the certification body's verification page where possible. Ensure the mark is displayed in its correct, unmodified form. Do not stretch it, recolour it, or alter the proportions. Most certification bodies provide approved digital versions of their mark for exactly this purpose.
LinkedIn and Social Media Profiles
Using the mark in your company's LinkedIn banner or social media profile is generally acceptable, but check your certification agreement for any restrictions on social media use. The same rules apply: accurate scope, correct standard, unmodified mark.
Advertising and Promotional Materials
Paid advertising, trade show banners, and promotional materials are areas where you need to be particularly careful about how the mark is contextualised. Any advertisement that uses the mark in a way that could imply product certification, or that makes claims beyond what your certification actually covers, is problematic.
A simple and effective approach is to include a brief qualifying statement near the mark, such as: “Certified to ISO 9001:2015 for [your certified scope]. Certificate No. XXXX.” This removes ambiguity and demonstrates that you understand what your certification actually covers.
What You Can Say Without Using the Mark
Even if you are uncertain about the rules for using the graphical mark, you can always make written statements about your certified status. Saying “We are certified to ISO 9001:2015 by [certification body name]” is factually accurate and does not involve any mark usage rules. This is a safe and clear way to communicate your certification in contexts where you are not sure about the graphical mark requirements.
You can also reference your certification in tender responses, capability statements, and proposals without using the graphical mark at all. In fact, for responding to tenders that require ISO certification, a clear written statement supported by a copy of your certificate is often more useful than a logo.
What Happens When the Rules Are Broken
Certification bodies take mark misuse seriously because it undermines the credibility of the entire certification system. If a certification body discovers that a client is misusing their mark, the typical process involves a formal notification requiring the client to correct the issue within a defined timeframe. If the issue is not corrected, the certification body can suspend or withdraw certification.
In cases involving deliberate misrepresentation, particularly where the mark has been used on products or in contexts designed to deceive customers or tender evaluators, the consequences can extend beyond the certification relationship. Consumer protection laws in Australia, administered by the ACCC, cover misleading and deceptive conduct, and falsely claiming certified status could potentially fall within that framework.
The reputational damage of having your certification suspended or withdrawn is also significant, particularly if you have been using your certified status as a differentiator in your market. Clients and procurement teams that discover a lapsed or misrepresented certification will not simply move on. They will question the integrity of your business more broadly.
Practical Steps to Get This Right
Here is what I recommend to every business I work with after they receive their certificate.
- Read your certification agreement in full. Specifically look for the section on mark usage. If it is not clear, contact your certification body and ask for written clarification.
- Request the approved digital files for the mark. Your certification body should provide you with approved versions of their mark in the correct formats. Do not use a mark copied from a website or screenshot.
- Audit all your existing marketing materials. Check your website, email templates, brochures, social media profiles, and any product packaging. Ensure the mark is only used where it is permitted and that it is displayed correctly.
- Set a reminder for your certificate expiry and surveillance audit dates. If your certification lapses for any reason, you need to know immediately so you can remove the mark from all materials.
- Train anyone who handles your marketing. Your marketing team or agency needs to understand these rules. They are the ones producing the materials, and they cannot apply rules they do not know exist.
- Keep a copy of your current certificate accessible. Anyone who needs to verify or reference your certified status should be able to access the current, valid certificate quickly.
A Note on Accreditation Marks
Some businesses display the JAS-ANZ mark or another accreditation body's mark alongside their certification body's mark. Whether you are permitted to do this depends entirely on the rules set by your certification body. Some bodies include the accreditation mark on the combined logo they provide to clients. Others do not permit clients to display the accreditation mark independently.
Understanding the difference between certification and accreditation helps here. The accreditation mark belongs to the accreditation body. It signals that the certification body has been assessed and recognised, not that your organisation has been directly assessed by the accreditation body. Using it incorrectly can create a false impression of a higher level of oversight than actually applies to your certification.
Getting Certified and Getting It Right From the Start
The mark usage rules are one of those things that are much easier to get right from the beginning than to fix after the fact. If you are still in the process of choosing a certification body, it is worth asking about their mark usage policies as part of your evaluation. Some bodies are more flexible than others, and knowing the rules upfront helps you plan your marketing approach before you invest in materials.
If you are at the stage of choosing a certification body and want to compare your options properly, CertBetter can help. You submit one form and receive up to three competing quotes from accredited, vetted certification bodies. The service is completely free for businesses, and it gives you a clear basis for comparison before you commit to a three-year certification relationship.
