ISO/IEC 17065

“ISO/IEC 17065 governs the certifier; the scheme governs what is certified. ”

ISO/IEC 17065 is frequently named as though it were a sustainability standard. It is not. It does not define responsible agriculture, human rights or environmental performance. It specifies requirements for organisations that certify products, processes and services.

The distinction is essential because a certification body can conform to ISO/IEC 17065 while operating many different schemes with very different substantive requirements.

The current published edition, ISO/IEC 17065:2012, was reviewed and confirmed in 2024, while a revision was advancing through the ISO process in 2026. The standard covers legal and contractual matters, impartiality, structure, resources, certification processes and management systems. Its purpose is confidence in competent and consistent certification.

Product certification must operate within a certification scheme. The scheme defines the object, specified requirements, evaluation techniques, sampling, surveillance, marks and claims. ISO/IEC 17065 does not write that scheme. A scheme owner may be a standards organisation, industry initiative, company, public body or another entity.

Confusing the scheme owner with the certification body obscures accountability for weak or ambiguous requirements.

The certification process separates several functions. Application review determines whether the body has competence and capacity. Evaluation gathers evidence through audit, inspection, testing or other techniques. Review examines whether the evidence is sufficient. The certification decision grants, maintains, expands, reduces, suspends or withdraws certification.

Separation between evaluation and decision helps protect impartial judgement.

Impartiality is not achieved merely by being a separate legal entity from the client. Certification bodies receive fees from the organisations they assess, may use external auditors and may operate related services. They need systems to identify, analyse and control threats from self-interest, familiarity, advocacy or commercial pressure.

A mechanism for safeguarding impartiality provides oversight but does not replace management responsibility.

Competence is scheme-specific. An auditor who understands agricultural practices may lack labour-rights expertise; a technical reviewer may understand food safety but not chain-of-custody accounting. The body should define competence for each function and maintain evidence that personnel and external resources meet it. Generic auditor qualifications do not prove competence for every sustainability issue.

Outsourcing is permitted for evaluation activities under controlled conditions, but responsibility remains with the certification body. The body should know who performed the work, assess competence, protect confidentiality and retain authority over review and decision. Outsourcing the audit does not outsource accountability for the certificate.

Surveillance and change management are central because certification is not a one-time event. Products, processes, ownership, sites, standards and scheme rules change. The body needs procedures for monitoring continuing conformity and responding to changes that affect certification. Public directories, certificate documents and status information should enable users to determine what is currently valid.

Complaints and appeals serve different purposes. A complaint may concern the certified client, the body or its activities. An appeal asks the body to reconsider a decision. Both need impartial handling, defined timelines and protection against discriminatory action. Scheme owners and accreditation bodies may provide further routes, but users should not have to navigate an opaque system to challenge harm.

ISO/IEC 17065 cannot compensate for a weak scheme, misleading claim or poor chain-of-custody model. It provides governance and process requirements for the certification body. Credibility emerges when competent certification is joined to relevant requirements, clear claims, effective oversight and access to complaint and remedy.

Practical application

Map roles among scheme owner, certification body, evaluation providers, reviewers, decision-makers and accreditation body. Confirm that the certification body's accreditation scope covers the scheme and that competence criteria address every material technical and social issue.

Review impartiality risks, outsourcing, surveillance, certificate status, complaints and appeals. Ensure public claims mirror the scheme scope and chain-of-custody model. When designing a scheme, do not place substantive sustainability requirements inside certification-body procedures where stakeholders cannot see or govern them.

Why it matters

Certification decisions affect market access and public trust. ISO/IEC 17065 provides an internationally recognised structure for competence, impartiality and consistent process, helping separate credible third-party certification from an unsupported badge or supplier assertion.

Common misconception

ISO/IEC 17065 is often described as a standard that certifies products as sustainable. It specifies how a certification body should operate. The scheme and its normative documents determine what the product, process or service must actually fulfil.

Connections

Certification is the attestation produced by the body. Accreditation assesses that body's competence, commonly against ISO/IEC 17065. ISO/IEC 17067 explains product-certification schemes, while ISO 19011 offers audit guidance but does not replace certification-body requirements.

A question worth asking

If your certification body performs every assessment perfectly, are the scheme's requirements and public claims still strong enough to support the sustainability conclusion being made?

Selected references

ISO/IEC 17065:2012. Conformity Assessment - Requirements for Bodies Certifying Products, Processes and Services. ISO/IEC 17067:2013. Conformity Assessment - Fundamentals of Product Certification and Guidelines for Product Certification Schemes. ISO Committee on Conformity Assessment. Product, Process or Service Certification Bodies - CASCO Toolbox. International Accreditation Forum.

Mandatory and Informative Documents for Product Certification. UNIDO. 2018. Quality Infrastructure for Sustainable Development.