How Much Does ISO Certification Cost? How Audit Days, Scope and the 3-Year Cycle Set the Fee
Most "ISO certification cost" figures online are guesses with no source. The real price is built from audit days, and audit days follow published accreditation rules. Here is how the fee is worked out, what it covers over three years, and what changes it.
A finance lead asks a simple question before signing off an ISO project: how much will certification cost? The first three quotes she collects differ by thousands, and none of them explains why. The gap is rarely about the certificate itself. It comes from how many audit days each body planned, what the price includes, and what gets added later.
This guide explains how ISO certification cost is set by an accredited certification body, so you can compare quotes on the same basis and spot the ones that will grow after you sign.
Quick answer: ISO certification cost depends mainly on the number of audit days your scope needs. Accredited certification bodies calculate audit days from published rules, such as IAF MD 5 for ISO 9001, ISO 14001 and ISO 45001, based on how many people work in scope, how many sites you have and how complex the work is. The fee covers a 3-year cycle: an initial audit in two stages, two yearly surveillance audits, then recertification. There is no honest single price, but there is a clear method.
What Sets the Cost of ISO Certification?
The certification fee is mostly the auditor's time. An audit day is normally 8 hours, and the number of days is not chosen freely. Accreditation rules set a starting point, and the certification body can only adjust it for specific reasons.
People in scope
The effective number of people working in the management system is the main input to the audit day tables.
Sites and shifts
More locations and more shifts mean more time to sample how the system works in practice.
Risk and complexity
High-risk activities, such as hazardous processes, add time. Low-risk, simple operations can reduce it.
The standard
Each standard has its own audit time rules, and auditing several standards together can save time.
How Many Audit Days Does ISO Certification Take?
For quality management (ISO 9001), the starting point comes from Table QMS 1 in IAF MD 5:2023. These figures are for the initial audit, Stage 1 and Stage 2 together, before any adjustment.
| People in scope | Initial audit days (QMS) | People in scope | Initial audit days (QMS) |
|---|---|---|---|
| 1 to 5 | 1.5 | 66 to 85 | 6 |
| 6 to 10 | 2 | 86 to 125 | 7 |
| 11 to 15 | 2.5 | 126 to 175 | 8 |
| 16 to 25 | 3 | 176 to 275 | 9 |
| 26 to 45 | 4 | 276 to 425 | 10 |
| 46 to 65 | 5 | 426 to 625 | 11 |
A certification body can reduce these times for valid reasons, but under IAF MD 5 the total reduction cannot exceed 30%. Other standards use their own rules: environmental and safety systems also use IAF MD 5 with tables that reflect risk, information security uses ISO/IEC 27006-1, food safety uses ISO 22003-1, and AI management systems use ISO/IEC 42006. If two quotes for the same scope show very different audit days, ask each body how it calculated them.
What the Fee Covers: The 3-Year Certification Cycle
An ISO certificate runs for three years, so a fair comparison looks at the whole cycle, not only the first audit.
| Year | Audit | How long it takes |
|---|---|---|
| Year 1 | Initial audit: Stage 1 (readiness) and Stage 2 (implementation) | The audit days from the table, after adjustments |
| Year 2 | First surveillance audit | Around one third of the initial audit time |
| Year 3 | Second surveillance audit | Around one third of the initial audit time |
| End of year 3 | Recertification audit, before the certificate expires | Around two thirds of the time an initial audit would need at that point |
So the year-one invoice is only part of the cost. Ask every body for a price that covers all three years, and check whether surveillance and recertification are fixed in the proposal or left open.
Want a price for all three years, fixed before you start? Book a free scope review and we will send one fixed-fee proposal.
Request a fixed-fee proposalWhat Raises or Lowers the Price
| Raises the cost | Lowers the cost |
|---|---|
| More people and more sites in scope | A focused, well-defined scope |
| High-risk or complex activities | Simple, low-risk operations, within the 30% limit on reductions |
| Each extra standard audited separately | An integrated management system audited together |
| Major nonconformities that need a follow-up visit | Records ready before Stage 1, and a completed internal audit and management review |
| Auditor travel to remote sites | Remote or hybrid audits where the risk allows, which cut travel but not audit days |
Certification Cost vs Implementation Cost
Many published figures mix two different budgets. Keeping them apart makes quotes much easier to compare.
- Certification: the accredited certification body's audits and certificate over the 3-year cycle. This is what audit days measure.
- Implementation: building the management system, by your own team or a consultant. A certification body cannot do this work for the organizations it certifies, because it must stay impartial.
- Internal costs: staff time for documentation, training, the internal audit and the management review.
- Small extras: a copy of the standard, and any travel the audit needs.
Read more about who does what in our guide to what an ISO certification body is.
ISO Certification Cost for Small Businesses
Small businesses pay less because audit days scale with headcount. Under the ISO 9001 table, an organization with 1 to 5 people starts at 1.5 initial audit days, and one with 16 to 25 people starts at 3. A single site, a narrow scope and records that are ready before Stage 1 keep the fee near that starting point. The biggest risk to a small budget is usually not the audit, but scope creep and extra visits added after the first quote.
Cost by Standard
Each standard has its own audit time rules and cost drivers. See the cost section for the standard you need:
| Standard | Audit time set by | Cost guide |
|---|---|---|
| ISO 9001 (quality) | IAF MD 5 | ISO 9001 certification cost |
| ISO 14001 (environment) | IAF MD 5 | ISO 14001 certification cost |
| ISO 45001 (health and safety) | IAF MD 5 | ISO 45001 certification cost |
| ISO 27001 (information security) | ISO/IEC 27006-1 | ISO 27001 certification cost |
| ISO 22000 (food safety) | ISO 22003-1 | ISO 22000 certification cost |
| ISO 42001 (AI management) | ISO/IEC 42006 | ISO 42001 certification cost |
| ISO 13485 (medical devices) | IAF MD 9 | ISO 13485 certification cost |
How to Compare ISO Certification Quotes
- Check the body is accredited for your standard, and that its certificates can be verified online.
- Ask for the audit days for Stage 1, Stage 2, each surveillance and recertification, and how they were calculated.
- Ask for a price for the whole 3-year cycle, not just year one.
- Check what is excluded: travel, follow-up visits, certificate fees, extra sites.
- Be wary of a price far below the audit day tables. It usually means a non-accredited certificate, or days cut beyond what the rules allow.
ISO certification in the US and worldwide
See how audits, timelines and costs work in the United States, or find guidance for your country.
Fixed-Fee ISO Certification with Accredify Global
One fixed fee
A single fixed-fee proposal covering the initial audit, surveillance and recertification, with no hidden costs or scope creep added later.
Audit days shown
We show the audit days behind the price, calculated from the accreditation rules for your standard.
Senior auditor
A senior auditor leads your audit from Stage 1 through to the certification decision.
Accredited
We are accredited by UAF, an IAF MLA signatory, and every certificate we issue can be checked on our verification page.
See all the standards we certify on our ISO certification services page, or how our certification audits run from scope review to certificate.
Want to know your audit days and fee?
Tell us your standard, headcount and sites. We will show you the audit days and send one fixed-fee proposal for the full 3-year cycle.
Book your free scope review →ISO Certification Cost FAQ
How much does ISO certification cost?
It depends mainly on the number of audit days your scope needs. Accredited certification bodies set audit days from published rules, such as IAF MD 5 for ISO 9001, based on people in scope, sites and complexity. The fee covers a 3-year cycle of an initial audit, two surveillance audits and recertification.
How are ISO audit days calculated?
For ISO 9001, ISO 14001 and ISO 45001, the starting point is a table in IAF MD 5 based on the effective number of people in scope. For example, the ISO 9001 initial audit starts at 3 days for 16 to 25 people. The certification body then adjusts for sites, risk and complexity, and reductions cannot exceed 30%.
How much does ISO certification cost for a small business?
Less than for a larger company, because audit days scale with headcount. Under the ISO 9001 table, 1 to 5 people starts at 1.5 initial audit days. A single site, a narrow scope and records ready before Stage 1 keep the fee close to that starting point.
Do I have to pay every year for ISO certification?
Yes. A certificate runs for three years, with a surveillance audit in years two and three, each around one third of the initial audit time, and a recertification audit before it expires. Ask for a price that covers the whole cycle.
Is ISO certification cost the same as consulting cost?
No. Certification cost is the accredited body's audits and certificate. Implementation, whether by your team or a consultant, is a separate budget. A certification body cannot build the system for an organization it certifies, because it must stay impartial.
Why are some ISO certification quotes much cheaper?
A price far below the audit day tables usually means a non-accredited certificate, or audit days cut beyond what the accreditation rules allow. Check that the body is accredited for your standard and ask how its audit days were calculated.
Do remote audits reduce ISO certification cost?
They remove travel costs, but they do not reduce audit days. Time spent auditing remotely counts toward the total audit time.
Does certifying several ISO standards together cost less?
Often, yes. When standards such as ISO 9001, ISO 14001 and ISO 45001 run as one integrated system, they can be audited together, which can reduce the total audit time compared with separate audits.
Does Accredify Global publish a price list?
No, because no two scopes need the same audit days. After a free scope review we send one fixed-fee proposal for the full 3-year cycle, show the audit days behind it, and add no hidden costs or scope creep later.