Certification Agreement

These Terms and Conditions of Certification ("Terms") govern the relationship between BCERT LTD, a company incorporated in England and Wales with its registered office at 7 Bell Yard, London, WC2A 2JR, United Kingdom ("BCERT LTD" or "the Certification Body"), and any organisation that applies for or holds certification issued by BCERT LTD ("the Client"). By submitting an application for certification or by maintaining a certification issued by BCERT LTD, the Client agrees to be bound by these Terms in full. These Terms apply to all certification schemes operated by BCERT LTD, including ISO 9001:2015 and ISO/IEC 27001:2022.

1. Definitions

Term	Definition
BCERT LTD	The Certification Body; a company incorporated in England and Wales, registered office at 7 Bell Yard, London, WC2A 2JR, with IAS accreditation application reference IASQ10466 (accreditation pending).
Client	Any organisation that applies for, holds, or has previously held certification issued by BCERT LTD.
Certification	The formal recognition by BCERT LTD that a Client's management system conforms to the requirements of a specified standard.
Certificate	The document issued by BCERT LTD evidencing the grant of certification, specifying the Client's name, scope, standard, and validity dates.
Certification Mark	The BCERT LTD logo and/or certification mark as defined in BCERT's Mark Usage Procedure, licensed to certified clients for use within the permitted scope.
IAS Accreditation Symbol	The official symbol of the International Accreditation Service (IAS) indicating BCERT LTD's accredited status. Subject to strict rules of use as defined by IAS and this Agreement.
Combined Mark	The BCERT LTD Certification Mark displayed together with the IAS Accreditation Symbol, as permitted under applicable IAS rules.
Certification Cycle	The three-year period comprising initial certification, surveillance audits, and recertification.
Audit	A systematic, independent examination of a management system to determine the extent to which audit criteria are fulfilled.
Nonconformity	Non-fulfilment of a requirement of the applicable standard or of BCERT LTD's certification requirements. May be Major or Minor.
Suspension	A temporary cessation of the validity of the Client's certificate, during which the Client must not make use of the Certificate or Certification Mark.
Withdrawal	Permanent termination of a Client's certification by BCERT LTD, whether voluntary or enforced.
Scope of Certification	The defined boundary of the management system subject to certification, as agreed between BCERT LTD and the Client and stated on the Certificate.

2. BCERT LTD Obligations

BCERT LTD shall:

1. Conduct all certification activities in accordance with ISO/IEC 17021-1:2015 and the requirements of IAS accreditation application reference IASQ10466 (accreditation pending).
2. Conduct audits impartially and assign competent audit personnel with appropriate qualifications and sector expertise relevant to the Client's scope and applicable standard.
3. Notify the Client of the proposed audit team composition in advance, and address any substantiated objections to team members in accordance with BCERT LTD's Impartiality Policy.
4. Provide the Client with an Audit Plan at least 5 working days before the commencement of any planned audit.
5. Deliver the Audit Report to the Client within 10 working days of the completion of the audit.
6. Maintain the confidentiality of all information obtained from the Client during certification activities, in accordance with Clause 12 of these Terms.
7. Handle all Client complaints and appeals in accordance with BCERT LTD's Complaints and Appeals Procedure (P/12).
8. Inform the Client of any changes to certification requirements with adequate notice, allowing reasonable time for compliance.
9. Maintain publicly accessible information on the certification status of all certified clients via the BCERT LTD certificate registry at bcert.uk/registry.
10. Notify the Client immediately if BCERT LTD's IAS accreditation is suspended, withdrawn, or materially affected, and advise the Client of the implications for their certification status.

2A. BCERT LTD's Right to Make Certification Decisions

In accordance with ISO/IEC 17021-1:2015 Clause 6.1.3 and Clause 9.5, BCERT LTD retains full and sole responsibility for all certification decisions. No other party — including the Client, any third party, or any associated body — may direct, influence, or override BCERT LTD's certification decisions. BCERT LTD expressly reserves the exclusive right to:

• Grant certification — where the management system has been assessed and found to conform to the requirements of the applicable standard;
• Refuse certification — where the management system does not meet the requirements of the applicable standard, or where the Client has provided fraudulent or materially misleading information;
• Maintain certification — confirming continuing conformance following a satisfactory surveillance audit;
• Renew certification — issuing a new certificate following a successful recertification audit at the end of the three-year certification cycle;
• Suspend certification — temporarily withdrawing certification validity where the Client fails to meet its obligations under this Agreement;
• Restore certification — reinstating a suspended certificate where the Client has resolved all grounds for suspension to BCERT LTD's satisfaction;
• Withdraw certification — permanently revoking a certificate where grounds for withdrawal are established;
• Extend or reduce the scope of certification — following a scope amendment audit or assessment.

All such decisions are made exclusively by BCERT LTD's Certification Manager, who is independent of the auditor(s) who conducted the audit in question. The Client may challenge any certification decision through BCERT LTD's formal Complaints and Appeals process in accordance with Clause 11 of this Agreement.

3. Client Obligations

The Client shall:

1. Maintain a management system that conforms to the requirements of the applicable standard(s) and all relevant legal and regulatory requirements throughout the certification cycle.
2. Cooperate fully with BCERT LTD audit teams, providing access to all necessary personnel, documentation, processes, sites, and records required for audit purposes.
3. Pay all certification fees as agreed in the certification contract within the specified payment terms.
4. Notify BCERT LTD without undue delay of any significant changes, including changes to legal status, ownership, organisational structure, management, processes, or the scope of the management system.
5. Implement corrective actions to address any nonconformities identified during audits within the timeframes agreed with BCERT LTD.
6. Use the Certificate and Certification Mark only in accordance with Clause 8 of these Terms and BCERT LTD's Mark Usage Procedure.
7. Cease all use of the Certificate, Certification Mark, and any reference to certified status immediately upon suspension, withdrawal, or expiry of the certificate.
8. Not make misleading, false, or unauthorised statements about certification status, scope, or the implications of certification to any third party.
9. Permit BCERT LTD to conduct unannounced or short-notice audits where required under the applicable standard, IAF guidance, or accreditation requirements.
10. Raise any complaint or appeal with BCERT LTD through the formal process (P/12) before escalating the matter to IAS or any other external party.

4. Certification Scope

The scope of certification is defined in the Client's application, agreed between the parties, and stated on the Certificate issued by BCERT LTD. The scope specifies the processes, activities, products, services, sites, and/or organisational units covered by the certified management system.

Any proposed change to the certified scope — including the addition or removal of activities, processes, sites, or products/services — must be notified to BCERT LTD in writing prior to implementation. BCERT LTD will assess whether the proposed change can be accommodated within the existing certification or whether additional audit activity, a scope amendment audit, or a new application is required.

BCERT LTD reserves the right to adjust the scope of certification at any time if the certified management system no longer covers the activities represented by the current scope, including as a result of the Client's failure to notify changes.

5. Audit Process

Initial certification is conducted in two stages:

• Stage 1 Audit — A documentation review and readiness assessment conducted at BCERT LTD's discretion (on-site, remote, or a combination), evaluating the Client's management system documentation, context, and readiness for Stage 2.
• Stage 2 Audit — An on-site (or remote, where permitted) implementation audit evaluating the effectiveness of the management system in practice across all relevant processes, functions, and locations within the defined scope.

The certification decision is made independently of the audit team, by a designated BCERT LTD Certification Decision Maker not involved in the audit, in accordance with BCERT LTD's Certification Decision Procedure (P/13). Certification is granted only when all Major nonconformities have been closed and BCERT LTD is satisfied that the management system meets the applicable standard.

The Client will receive a written Audit Report summarising audit findings, nonconformities raised, and the certification recommendation within 10 working days of audit completion.

6. Certification Cycle (3 Years)

Each certificate issued by BCERT LTD is valid for a period of three years from the date of the initial certification decision, subject to satisfactory completion of surveillance audits and continued conformance. The certification cycle consists of:

• Initial Certification — Stage 1 and Stage 2 audits as described in Clause 5, leading to the first issuance of the certificate.
• First Surveillance Audit — Conducted within 12 months of the initial certification date, covering a representative sample of the management system.
• Second Surveillance Audit — Conducted within 24 months of the initial certification date (within 12 months of the first surveillance audit).
• Recertification Audit — A comprehensive audit conducted before the certificate expiry date (within 36 months of initial certification), evaluating continued effectiveness and suitability of the complete management system for the purpose of renewing the certificate for a further three-year cycle.

Failure to complete required audits within the prescribed intervals may result in suspension or withdrawal of certification in accordance with Clause 10.

7. Surveillance Requirements

Surveillance audits are conducted in accordance with BCERT LTD's Audit Duration Procedure (P/14) and IAF Mandatory Document MD5:2019. Surveillance audit durations are risk-based and calculated to ensure adequate coverage of the management system within each audit cycle.

Surveillance audits shall cover, as a minimum:

• Internal audits and management review outputs
• Actions taken on nonconformities identified in previous audits
• Handling of complaints and feedback
• Effectiveness of the management system in achieving the Client's objectives
• Progress of planned activities aimed at continual improvement
• Continued operational control of the certified scope

BCERT LTD reserves the right to conduct unannounced surveillance visits where required by the applicable standard, IAF guidance (IAF MD 5), or BCERT LTD's accreditation requirements. The Client must permit such visits and provide full cooperation. Where the Client operates multiple sites, BCERT LTD will apply IAF MD 1 sampling rules to determine which sites are audited during each surveillance visit.

8. Use of Certificate, Certification Mark, and IAS Accreditation Symbol

⚖ Implements Clause 8.3 ISO/IEC 17021-1:2015

This clause sets out the conditions under which the Client is authorised to use the BCERT LTD Certificate, Certification Mark, and IAS Accreditation Symbol. All use must comply with both these Terms and BCERT LTD's Mark Usage Procedure. This clause implements Clause 8.3 of ISO/IEC 17021-1:2015 in full.

9. Changes Notification

The Client must notify BCERT LTD in writing, without undue delay, of any changes that could affect the management system or the validity of the certification. Notifiable changes include, but are not limited to:

• Legal and ownership changes: Change of legal entity name, trading name, company number, registered address, ownership structure, or acquisition/merger activity
• Scope changes: Addition or removal of processes, products, services, activities, or sites within or adjacent to the certified scope
• Management changes: Changes to senior management responsible for the management system, or to the management representative / system owner
• Process changes: Significant changes to processes, procedures, technology, or operational arrangements that could affect the management system's ability to meet the applicable standard
• Significant incidents: Data breaches, security incidents, quality failures, regulatory investigations, enforcement actions, or other events that may affect the certified management system
• Legal and regulatory changes: Changes in applicable law or regulatory requirements affecting the certified scope

BCERT LTD will assess notified changes and determine whether additional audit activity, a scope amendment, or revised certification documentation is required. Failure to notify BCERT LTD of significant changes may result in suspension of certification.

10. Suspension and Withdrawal

Grounds for Suspension	Grounds for Withdrawal
Major nonconformity not resolved within the agreed timeframe	Suspension not resolved within 90 calendar days
Surveillance or recertification audit missed or overdue	Voluntary surrender of certification by the Client
Refusal to grant BCERT LTD or IAS auditors access to sites or records	Fraudulent representation or material misrepresentation to BCERT LTD
Misuse of Certification Mark, IAS Accreditation Symbol, or Combined Mark	Systemic nonconformities demonstrating breakdown of the management system
Unassessed or undisclosed changes to the certified scope or management system	Insolvency, dissolution, or cessation of trading
Non-payment of certification fees
Suspension grounds not resolved within 90 calendar days

During suspension: The Client must immediately cease all use of the Certificate, Certification Mark, IAS Accreditation Symbol, and Combined Mark, and must not make any representations of certified status to third parties. BCERT LTD will update the public registry to reflect the suspended status.

Upon withdrawal: The Client must return the original Certificate to BCERT LTD (where issued in physical form), and must immediately and permanently cease all use of the Certificate, Certification Mark, IAS Accreditation Symbol, and Combined Mark, and remove all references to certified status from all media. BCERT LTD will update the public registry to reflect withdrawal.

BCERT LTD will provide written notice of suspension or withdrawal, stating the grounds and the right to appeal under Clause 11.

11. Complaints and Appeals

The Client has the right to submit a complaint or lodge an appeal in respect of any BCERT LTD certification decision or conduct of its personnel. All complaints and appeals are processed in accordance with BCERT LTD's Complaints and Appeals Procedure (P/12).

• Acknowledgement: All complaints and appeals will be acknowledged in writing within 2 working days of receipt.
• Resolution: BCERT LTD will endeavour to resolve all complaints and appeals within 10 working days, or notify the Client of the expected resolution timeframe where a more complex investigation is required.
• Independence: All complaints and appeals are investigated by personnel independent of those involved in the matter under review.
• Escalation to IAS: If the Client is not satisfied with the outcome of BCERT LTD's complaints or appeals process, the matter may be escalated to the International Accreditation Service (IAS). However, the Client must first exhaust BCERT LTD's internal process before escalating externally.

The Client will not suffer any adverse consequences as a result of submitting a good-faith complaint or appeal.

12. Confidentiality

BCERT LTD treats all information obtained from the Client during certification activities as strictly confidential. This includes management system documentation, audit findings, internal records, personnel information, and any other commercially sensitive information disclosed in connection with certification.

BCERT LTD will not disclose Client information to third parties except:

• As required by law, court order, or competent regulatory authority
• To IAS (the accreditation body) or its appointed witnesses during accreditation oversight activities, where required by accreditation requirements
• With the Client's explicit written consent

Publicly available information is limited to: the Client's name, applicable standard(s), defined scope of certification, certificate status, and validity dates, as published in the BCERT LTD certificate registry.

All BCERT LTD personnel and contracted auditors are bound by confidentiality obligations that survive the termination of their engagement with BCERT LTD. All personnel involved in certification activities are required to sign a Confidentiality and Impartiality Declaration prior to commencing any work.

13. Data Protection (UK GDPR)

BCERT LTD processes personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018).

The lawful basis for processing personal data in connection with certification activities is:

• Performance of a contract — processing necessary to provide certification services under this Agreement
• Legitimate interests — processing necessary for BCERT LTD's legitimate interests in operating an accredited certification body, including maintaining audit records, managing complaints, and fulfilling accreditation obligations

Personal data obtained in connection with certification activities will be retained for a minimum of 5 years from the date of the relevant certification activity, in accordance with BCERT LTD's Document Retention Policy and accreditation requirements.

Data subjects have the right to access, rectify, or request deletion of their personal data, subject to applicable legal and accreditation retention requirements. For data protection enquiries, contact BCERT LTD's Operations Manager at info@bcert.uk.

BCERT LTD's full Privacy Policy is available at bcert.uk/privacy.

14. Liability

Certification by BCERT LTD does not constitute a warranty, guarantee, or endorsement of the Client's products, services, or management practices. Certification signifies that the management system was assessed and found to meet the requirements of the applicable standard at the time of audit.

BCERT LTD's certification does not relieve the Client of its legal, regulatory, or contractual obligations to any third party. The Client remains solely responsible for the effectiveness of its management system.

Limitation of liability: BCERT LTD's aggregate liability to the Client arising from or in connection with these Terms or any certification activity — whether in contract, tort (including negligence), or otherwise — shall not exceed the total fees paid by the Client to BCERT LTD in the twelve (12) months preceding the event giving rise to the claim.

Exclusion of consequential loss: BCERT LTD shall not be liable for any indirect, consequential, special, punitive, or exemplary loss or damage, including but not limited to loss of business, loss of profit, loss of revenue, loss of data, or reputational damage, howsoever caused.

Nothing in these Terms limits BCERT LTD's liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, or any other liability that cannot be excluded by law.

15. Termination

Either party may terminate this Agreement by providing 30 days' written notice to the other party.

BCERT LTD may terminate this Agreement with immediate effect, without prior notice, if:

• The Client engages in fraudulent activity or makes material misrepresentations to BCERT LTD
• The Client commits a serious or repeated breach of these Terms that is not capable of remedy or is not remedied within any notice period given
• The Client is dissolved, enters administration, receivership, or liquidation proceedings, or ceases to trade

Upon termination for any reason:

• All outstanding certification fees remain due and payable in full
• The Client must immediately cease all use of the Certificate, Certification Mark, IAS Accreditation Symbol, and Combined Mark
• The Client must remove all references to certified status from all websites, marketing materials, documentation, and other media

BCERT LTD will update the public certificate registry to reflect the termination of certification within 5 working days of the effective termination date.

16. Governing Law and Jurisdiction

These Terms are governed by the laws of England and Wales. Any dispute arising out of or in connection with these Terms that cannot be resolved through BCERT LTD's complaints and appeals process shall be subject to the exclusive jurisdiction of the courts of England and Wales.

These Terms, together with the certification contract and BCERT LTD's published procedures (including P/12, P/13, P/14, and the Mark Usage Procedure), constitute the entire agreement between the parties in relation to certification services and supersede all previous agreements, representations, and understandings. Any amendment to these Terms must be made in writing and agreed by both parties.