ISO Certification for Railway Suppliers and Operators: ISO 9001, IRIS Readiness, ISO 55001, and ISO 45001
ISO certification for railway suppliers and operators gives buyers proof. It shows rolling stock makers, transit agencies, and regulators that quality and safety are controlled across every part and every shift. Accredify Global certifies rail management systems, including ISO 9001, ISO 45001, ISO 14001, and ISO 55001. We also run ISO 22163 gap assessments before your IRIS audit. You get a tailored proposal after a free scoping review.
What ISO Certification for Railways Covers
ISO certification for railway suppliers and operators is an independent audit of how a rail business manages quality, safety, environment, and assets against ISO standards. Suppliers usually start with ISO 9001. Those selling to rolling stock makers often move on to IRIS Certification to ISO 22163, the rail quality standard built on ISO 9001. A successful ISO audit leads to a certificate valid for three years.
Rail has its own approval schemes alongside ISO. IRIS Certification is issued only by IRIS-approved certification bodies. In North America, the Association of American Railroads (AAR) approves freight component suppliers under M-1003. Safety cases are assessed by independent safety assessors.
Accredify Global is an accredited certification body. We certify the ISO systems underneath these schemes and assess your readiness for IRIS, so the IRIS audit holds no surprises.
Rail Standards in 2026: IRIS Rev. 04, ISO 22163:2023, and ISO 55001:2024
IRIS Certification Rev. 04 has applied since 1 January 2024. It is based on the 2023 edition of ISO 22163, published in July 2023, which replaced the 2017 technical specification. UNIFE, which owns the scheme, opened it to distributors and turnkey suppliers. It also simplified the route for SMEs and added bronze, silver, and gold performance ratings.
ISO 55001:2024 replaced the 2014 edition. Infrastructure managers and operators holding asset management certificates must transition by 31 July 2027, after which 2014 certificates lapse.
ISO 9001:2026 was published in September 2026. It carries its own transition period. Because ISO 22163 builds on ISO 9001, rail suppliers should plan both moves together.
Sources: IRIS Rev. 04 launch (UNIFE) · IRIS Rev. 04 and ISO 22163:2023 (DQS) · ISO 55001:2024 transition (UKAS) · M-1003 registry (AAR)
Which Rail Businesses Need ISO Certification?
Anyone supplying, running, or maintaining the railway whose customers check certificates first.
Bogies, brakes, doors, interiors, and electrical systems.
Control, communication, and onboard electronics. See ISO for electronics.
Track, civils, electrification, and stations. See ISO for construction.
Passenger and freight operators and metro systems.
Fleet maintenance, overhaul, and repair workshops.
Wheels, axles, couplers, and castings for freight cars.
ISO Certification for Railways: Standards and What We Provide
Quality and safety first, then the rail schemes and asset standards your customers name.
| Standard or scheme | What it covers | Who usually needs it | What Accredify Global provides |
|---|---|---|---|
| ISO 9001 | Quality management | Every supplier, as a first step | Certification |
| ISO 22163 / IRIS | Rail-sector quality management | Suppliers to rolling stock makers and operators | Readiness (IRIS-approved bodies certify) |
| AAR M-1003 | North American freight supplier quality | Freight car and locomotive component makers | Readiness (AAR approves) |
| ISO 45001 | Occupational health and safety | Depots, track workers, and contractors | Certification |
| ISO 14001 | Environmental management | Operators, depots, and manufacturers | Certification |
| ISO 55001 | Asset management | Infrastructure managers and operators | Certification |
| ISO 50001 | Energy management | Operators managing traction energy | Certification |
| ISO 27001 | Information security | Operators and signaling suppliers | Certification |
| ISO 44001 | Collaborative relationships | Alliance and framework partners | Certification |
ISO 50001 is within our UAF accreditation scope. For the other standards listed, your proposal names the certification body that will issue your certificate.
ISO 22163 (IRIS) vs ISO 9001: What Rail Adds
The rail standard keeps every ISO 9001 requirement. These are the additions IRIS auditors focus on.
| Topic | ISO 9001 | ISO 22163 adds |
|---|---|---|
| Project management | General planning | Structured project management for rail contracts |
| Configuration | Control of changes | Formal configuration management of products |
| Safety and RAMS | Not addressed | Product safety, reliability, and maintainability |
| First article inspection | Not required | Verification of first production items |
| Obsolescence | Not addressed | Managing parts that go out of production |
| Performance rating | Pass or fail | Bronze, silver, or gold rating under IRIS |
What a Rail Audit Checks
We follow real orders and maintenance jobs, from tender to delivery or return to service.
Areas we test
- Tender and contract review against customer specifications
- Configuration control and drawing revisions
- First article inspection and special processes such as welding
- Supplier control for safety-critical parts
- Track access, possession, and contractor safety
- Maintenance planning and asset records
- Obsolescence and spare parts management
Common gaps we find
- Customer specifications not flowed down to suppliers
- First article inspection skipped after design changes
- Welding qualifications out of date
- Asset registers that do not match the network
- No plan for components going obsolete
How ISO Certification for Railways Works, Step by Step
A common path: certify ISO 9001 with us, then close the ISO 22163 gaps before your IRIS audit. Our ISO certification process guide has more detail.
Has a customer set an IRIS deadline? Tell us in the scoping review and we will plan the gap assessment around it.
Book a free scoping reviewWhat Drives the Cost of ISO Certification for Railways
There is no list price. The cost follows the audit man-days your scope needs, and a free scoping review gives you a tailored proposal.
What sets the audit time
- People: shop-floor, depot, and office headcount
- Sites: plants, depots, and project offices
- Activities: design, manufacture, maintenance, or operation
- Risk: safety-critical parts and track work
- Standards: one standard, or an integrated audit
Ways to keep it efficient
- Build ISO 9001 with ISO 22163 in mind from day one
- Combine quality, safety, and environment in one audit
- Use one multi-site certificate for several depots
- Plan ISO 9001:2026 and IRIS changes together
- Close customer findings before the audit
How to Choose a Certification Body for Rail
Checks worth making before you sign, for IRIS and the ISO standards around it.
| What to check | Why it matters |
|---|---|
| IRIS approval for IRIS audits | Only IRIS-approved bodies can issue IRIS Certification listed in the IRIS portal. |
| Accreditation for ISO standards | ISO certificates should come from an accredited body. You can verify ours in the UAF directory. |
| Rail experience | Rolling stock, signaling, and track work each need different audit focus. |
| Impartiality | Your certification body should not also write your system. |
| Verifiable certificates | Customers should be able to check yours. Ours appear on our verification page. |
| Pricing | Ask for audit man-days in writing. Ours come in a tailored proposal. |
FAQ: ISO Certification for Railways
Straight answers on IRIS, AAR, ISO 55001, safety, cost, and timeline.
Which ISO certification do railway suppliers need?
Most start with ISO 9001 for quality and ISO 45001 for safety. Suppliers to European rolling stock makers and operators are often asked for IRIS Certification to ISO 22163, and North American freight suppliers for AAR M-1003.
What is IRIS Certification?
IRIS Certification is the rail industry's quality certification scheme, run by UNIFE, the European rail supply industry association. It is based on ISO 22163, which adds rail requirements to ISO 9001.
Does Accredify Global issue IRIS certificates?
No. Only IRIS-approved certification bodies can issue IRIS Certification. Accredify Global offers an ISO 22163 readiness gap assessment and certifies the ISO 9001 system it is built on.
What changed in IRIS Certification Rev. 04?
Rev. 04 started on 1 January 2024 and is based on the 2023 edition of ISO 22163. It opened the scheme to distributors and turnkey suppliers, simplified requirements for SMEs, and added bronze, silver and gold performance ratings.
What is AAR M-1003?
AAR M-1003 is the Association of American Railroads quality assurance specification for suppliers of freight car and locomotive components. AAR approves facilities and lists them in its M-1003 registry.
Is ISO 9001 enough for railway suppliers?
For many sub-tier and service suppliers, yes. Rolling stock makers and major operators often require IRIS Certification or AAR M-1003 for safety-critical parts. ISO 9001 is the base for both.
What is ISO 55001 and do railways need it?
ISO 55001 is the asset management standard. Infrastructure managers and operators use it to manage track, signaling, rolling stock and stations over their lifecycle. The 2024 edition replaced 2014, and certificates must transition by 31 July 2027.
Are RAMS and safety cases part of ISO certification?
No. Reliability, availability, maintainability and safety (RAMS) and safety cases follow the EN 50126 family. Independent safety assessors review them and rail authorities approve them, separately from ISO certification.
Which standard helps rail operators protect passengers and staff?
ISO 45001 covers occupational health and safety for workers, contractors and track access. Passenger safety is governed by rail safety regulators and the operator's safety management system.
Do rail operators need ISO 27001?
Increasingly. Signaling, ticketing and operational systems are attractive cyber targets. ISO 27001 covers information security across the business, and operators of essential services in the EU also face NIS2.
Can one certificate cover several depots and workshops?
Yes. Sites that run the same management system can share one multi-site certificate. The certification body audits a sample of sites and the central function every time.
How long does ISO certification take for a rail company?
Most companies with a working management system certify in 6 to 12 weeks from Stage 1 to the certificate. Several depots, several standards or a new system take longer.
How much does ISO certification cost for railway companies?
The cost follows the audit man-days your scope needs. Headcount, sites, products and services, and the standards in scope set the man-days. A free scoping review gives you a tailored proposal.
Can ISO 9001, 14001 and 45001 be audited together?
Yes. They share the same structure and can be audited in one integrated audit, which saves time for depot and office staff.
Does Accredify Global write our procedures?
No. As a certification body we must stay impartial, so we audit and certify but do not write your system. Your team, or a consultant you choose, closes any gaps.
Get on Track for Your Next Rail Contract
Tell us about your products, sites, and deadlines. We'll map the right ISO certification for railway suppliers and send a tailored proposal.
Book your free scoping review →Last reviewed by the Accredify Global certification team.