ISO Certifications
What each company holds certified, when it expires and which audits can be done together
An ISO certificate lasts three years and requires a surveillance audit every calendar year (ISO/IEC 17021-1, clause 9.6.2). Usually the PDF sits in the inbox of whoever handled it, and the expiry is discovered the day a tender asks for the valid certificate. Here each company is a row and each standard a column: status, certification body, number, scope, issue date, expiry and next surveillance audit, with alerts that cannot be switched off. And because Annex SL standards share clauses 4 to 10, the programme detects which surveillance audits by the same body fall in the same quarter and can be audited in a single visit.
Screens from DSA Compliance v6.2 in a demo environment. All data shown is fictitious.
What the rule requires, and in which article
For information only, not legal advice. Always check against the consolidated text in force.
It has no penalty regime of its own: certification is voluntary. The cost is contractual. An expired or suspended certificate no longer proves the capability a tender requires (arts. 93 and 94 of Spain's Ley 9/2017, with the conditions assessed at the bid deadline under art. 140.4) or that a customer's supplier-approval questionnaire asks for.
The badges identify the obligation the program digitises. They are not certifications or conformity accreditations.
What gets handed over when somebody asks
- Map of certifications by company and standard, including those that do not apply, with status and certification body
- Certificate PDF stored with its certification in the document store
- Excel certification dossier for tenders and customer supplier-approval questionnaires
- Log of renewal, expiry and surveillance alerts, with recipient and date
- Integrable audits detected and scheduled in the external audits programme
- Link between each standard and the platform programme that backs its evidence
This programme implements certifiable ISO standards. If your organisation already is, here you see which part is solved and which laws it covers in each country where you operate.
What we get asked about ISO Certifications
No, and no software can. Certification is granted by a body accredited under ISO/IEC 17021-1. The programme records what the body has issued, watches its dates and links each standard to the programme that gathers its evidence.
Yes. The map has one row per company: with a single company it is one row with seven standards, and it grows to a group of several companies without changing programme.
Because renewal is requested about six months ahead: the recertification audit requires arriving with a full cycle of internal audit and management review. The window is adjustable per company; the alert cannot be switched off.
Two or more Annex SL standards certified by the same body in the same company, whose surveillance audits fall in the same quarter. They share clauses 4 to 10, so the body can audit them together under IAF MD 11. The programme counts visits saved, not euros: the fee is set by the body.
The in-app notification bell, the person named as responsible for each certification and a copy mailbox. They warn that the renewal window is opening, that a certificate has expired and that a surveillance audit is approaching.
The programme says so. It flags the standards with no contracted programme behind them and links to the one that would gather their evidence: information security for ISO/IEC 27001, crime prevention for ISO 37001, health and safety for ISO 45001 or environmental management for ISO 14001, among others.
A 30-minute guided demo on the real platform, or a one-hour assessment session with a consultant.
