ISO Certification for Oil and Gas: ISO 29001, ISO 45001, ISO 14001, and API Q1 Readiness
ISO certification for oil and gas gets suppliers through operator pre-qualification and keeps them on approved vendor lists. Accredify Global certifies the management systems operators ask for, from ISO 9001 and ISO 29001 to ISO 45001, ISO 14001, and ISO 55001. We also run API Spec Q1 readiness assessments before your API audit. You get a tailored proposal after a free scoping review.
What ISO Certification for Oil and Gas Covers
ISO certification for oil and gas is an independent audit of how an operator or supplier manages quality, safety, environment, and assets against ISO standards. Equipment makers and service companies most often hold ISO 9001 or the sector standard ISO 29001, plus ISO 45001 and ISO 14001. A successful audit leads to a certificate valid for three years, with yearly surveillance.
Operators check these certificates during pre-qualification, often through supplier registration platforms. Many also ask for API Spec Q1 or Q2 registration, which API issues through its own programs.
Accredify Global is an accredited certification body. We certify the ISO systems operators ask for. We also assess your readiness for API Q1, so you know where you stand before the API audit.
Oil and Gas Standards in 2026: API Q1 10th Edition, ISO 29001, and ISO 55001:2024
API Spec Q1 10th edition is now the only edition. API published it on 18 September 2023, and it became effective on 18 September 2024. Remaining 9th edition certificates were withdrawn on 18 March 2026.
ISO 29001:2020 is the current sector standard. It was written to be technically equivalent to API Spec Q1 9th edition and API Spec Q2 1st edition. A 2024 amendment added climate change, and an organization certified to it also meets ISO 9001.
ISO 55001 and ISO 9001 have new editions. ISO 55001:2024 for asset management replaced the 2014 edition, and existing certificates must transition by 31 July 2027. ISO 9001:2026 was published in September 2026, with its own transition period.
Sources: API Q1 10th edition transition (API) · Guidance for ISO 29001 (ISO/TC 67) · ISO 55001:2024 transition (UKAS)
Which Oil and Gas Companies Need ISO Certification?
Anyone working on an operator's approved vendor list, or trying to get on one.
Valves, wellhead, drilling, and rotating equipment makers.
Well services, wireline, coiled tubing, and inspection firms.
Engineering, construction, and turnaround contractors.
Midstream operators managing asset integrity and spills.
Downstream plants. See ISO certification for chemicals.
Shore bases and transport. See ISO for logistics.
ISO Certification for Oil and Gas: Standards and What We Provide
Start with quality and HSE, then add the others as operators and contracts require.
| Standard | What it covers | Who usually needs it | What Accredify Global provides |
|---|---|---|---|
| ISO 29001 | Sector-specific quality management | Product and service suppliers to operators | Certification |
| ISO 9001 | Quality management | Every supplier, as a first step | Certification |
| ISO 45001 | Occupational health and safety | Field services, contractors, and plants | Certification |
| ISO 14001 | Environmental management | Operators and site-based contractors | Certification |
| ISO 50001 | Energy management | Refineries, plants, and compressor stations | Certification |
| ISO 55001 | Asset management | Pipeline, terminal, and plant operators | Certification |
| ISO 27001 | Information security | Operators and digital service suppliers | Certification |
| API Spec Q1 / Q2 | API quality programs for products and services | Suppliers to operators that specify API | Readiness (API registers) |
Your proposal names the certification body that will issue each certificate. ISO 31000 is risk management guidance and is not certifiable.
ISO 9001 vs ISO 29001 vs API Spec Q1 and Q2
Three routes to proving quality in oil and gas. Your customers' contracts decide which one you need.
| Aspect | ISO 9001 | ISO 29001 | API Spec Q1 / Q2 |
|---|---|---|---|
| Sector | Any | Petroleum, petrochemical, and gas | Petroleum and gas |
| Basis | Generic quality system | ISO 9001 plus sector requirements | API's own specifications |
| Risk and contingency | Risk-based thinking | Risk assessment and contingency planning | Risk assessment and contingency planning |
| Management of change | General change control | Formal management of change | Formal management of change |
| Issued by | Accredited certification bodies | Accredited certification bodies | API programs only |
| Our role | Certification | Certification | Readiness assessment |
What an Oil and Gas Audit Checks
We follow real jobs and orders, from contract review to delivery or field service, and compare them with your system.
Areas we test
- Contract review and customer-specific requirements
- Risk assessment and contingency plans for delivery
- Management of change for people, processes, and products
- Supplier evaluation and outsourced activity control
- Product quality plans and inspection records
- Permit to work, hazard controls, and emergency drills
- Spill prevention and waste handling at sites
Common gaps we find
- Contingency plans written but never tested
- Changes to procedures made without a change review
- Critical suppliers not re-evaluated
- Field service records missing customer requirements
- Contractor safety performance not reviewed
How ISO Certification for Oil and Gas Works, Step by Step
Six stages from first call to a three-year certificate. Our ISO certification process guide has more detail.
Facing a vendor pre-qualification deadline? Tell us in the scoping review and we will plan audits around it.
Book a free scoping reviewWhat Drives the Cost of ISO Certification for Oil and Gas
There is no list price. Audit man-days for your scope set the cost, and a free scoping review gives you a tailored proposal.
What sets the audit time
- People: office, workshop, and field headcount
- Sites: workshops, yards, bases, and offices
- Activities: design, manufacture, or field services
- Risk: hazardous areas, offshore work, or pressure systems
- Standards: one standard, or an integrated audit
Ways to keep it efficient
- Audit quality, safety, and environment together
- Use one multi-site certificate for several bases
- Build to ISO 29001 if API Q1 is your next step
- Run internal audits before Stage 1
- Close open customer NCRs before the audit
How to Choose a Certification Body for Oil and Gas
Checks worth making before you sign.
| What to check | Why it matters |
|---|---|
| Accreditation for each standard | Operators check it. You can verify ours in the UAF directory. |
| Honesty about API | Only API's programs register API Q1 and Q2. Others can only assess readiness. |
| Field audit experience | Workshops, rigs, and pipelines each need a different audit focus. |
| Impartiality | Your certification body should not also write your system. |
| Verifiable certificates | Operators should be able to check yours. Ours appear on our verification page. |
| Pricing | Ask for audit man-days in writing. Ours come in a tailored proposal. |
FAQ: ISO Certification for Oil and Gas
Straight answers on ISO 29001, API Q1, safety, assets, cost, and timeline.
Which ISO certification do oil and gas suppliers need?
Most start with ISO 9001 for quality, then ISO 45001 for safety and ISO 14001 for the environment. Suppliers to operators often move to ISO 29001, the sector-specific quality standard, or API Spec Q1.
What is ISO 29001?
ISO 29001:2020 is the quality management standard for product and service suppliers to the petroleum, petrochemical and natural gas industries. It adds sector requirements, such as risk assessment, contingency planning and management of change, to ISO 9001:2015.
What is the difference between ISO 29001 and API Q1?
ISO 29001:2020 was written to be technically equivalent to API Spec Q1 9th edition and API Spec Q2 1st edition. API Q1 has since moved to its 10th edition, and API registration is issued only through API's own programs.
Can Accredify Global issue API Q1 certification?
No. API Spec Q1 and Q2 registration is issued through API's own Monogram and APIQR programs. We offer an API Q1 readiness assessment and certify the ISO systems around it.
When did API Q1 10th edition become mandatory?
API published the 10th edition on 18 September 2023, and it became effective on 18 September 2024. Remaining 9th edition certificates were withdrawn on 18 March 2026.
What is API Q2?
API Spec Q2 sets quality requirements for service supply organizations, such as well services and field operations. The 2nd edition was released in July 2021.
Does ISO 29001 certification also meet ISO 9001?
Yes. ISO 29001 contains every ISO 9001:2015 requirement, so an organization certified to ISO 29001 also meets the criteria for ISO 9001.
What is ISO 55001 and who needs it?
ISO 55001 is the asset management system standard. Pipeline, terminal, refinery and power operators use it to manage asset risk and lifecycle cost. The 2024 edition replaced the 2014 version, and certificates must transition by 31 July 2027.
Is ISO 31000 certifiable?
No. ISO 31000 is guidance on risk management. It is useful for building a risk framework, but there is no ISO 31000 certificate.
Which standard covers cybersecurity for oil and gas control systems?
ISO 27001 covers information security across the business. IEC 62443 covers industrial automation and control systems. Many operators use both.
Do oilfield service companies need ISO 45001?
Most operators expect it, or an equivalent safety system, in pre-qualification. ISO 45001 shows how you control hazards, contractors and emergency response.
Can one certificate cover several yards and bases?
Yes. Sites that run the same management system can share one multi-site certificate. The certification body audits a sample of sites and the central function every time.
How long does ISO certification take for oil and gas companies?
Most companies with a working management system certify in 6 to 12 weeks from Stage 1 to the certificate. Several bases, several standards or a new system take longer.
How much does ISO certification cost for oil and gas companies?
The cost follows the audit man-days your scope needs. Headcount, sites, field activities and the standards in scope set the man-days. A free scoping review gives you a tailored proposal.
Can ISO 9001, 14001 and 45001 be audited together?
Yes. They share the same structure and can be audited in one integrated audit, which saves time for field and office staff.
Does Accredify Global write our procedures?
No. As a certification body we must stay impartial, so we audit and certify but do not write your system. Your team, or a consultant you choose, closes any gaps.
Get on the Approved Vendor List and Stay There
Tell us about your products, services, and deadlines. We'll map the right ISO certification for oil and gas and send a tailored proposal.
Book your free scoping review →Last reviewed by the Accredify Global certification team.