If you are thinking about switching your registrar or certification body, you may be wondering whether your existing ISO certificate can simply move with you, or whether you would have to start the certification process from scratch. The good news is that certificate transfers are a recognised and well-established process in the world of ISO certification. The not-so-good news is that the process and rules can be complicated, and getting the details wrong can leave your business in a difficult position.
This guide explains exactly how ISO certificate transfers work, what the rules and limitations are, why the type of accreditation your current certificate carries matters enormously, and what you should check before making any move.
What Is an ISO Certificate Transfer?
A certificate transfer, sometimes called a certificate migration or registrar switch, is the process by which a business moves its ISO certification from one certification body (also called a registrar) to another, without having to undergo a full initial certification audit from scratch.
Rather than treating you as a new applicant, the incoming registrar reviews the evidence from your most recent certification cycle, assesses your management system documentation, and may carry out a transfer audit before issuing a new certificate in its own name. If the transfer is handled correctly, your certification status remains continuous and there is no gap in your certificate.
Transfers are common. Businesses switch registrars for many reasons: cost, service quality, a change in the registrar's scope of accreditation, a merger or acquisition, or simply because their current registrar has withdrawn from the market. Whatever the reason, the process is manageable provided you follow the correct steps.
The Golden Rule: Accreditation Scope Must Match
The single most important rule in any ISO certificate transfer is this: your incoming registrar must hold accreditation for the same standard and, where relevant, the same industry scope as your outgoing certificate.
This sounds straightforward, but it catches businesses out more often than you might expect. Accreditation is not a blanket permission to certify any business to any standard. A registrar's accreditation is specific to particular standards (for example, ISO 9001 or ISO 14001) and, in some schemes, to particular industry sectors or activities.
If you transfer to a registrar whose accreditation does not cover your standard or scope, the resulting certificate may be technically invalid for the purposes your customers, procurement frameworks, or regulators require, even if it looks identical to your previous one.
Key Principle: Before agreeing to any transfer, ask your incoming registrar to confirm in writing that their accreditation covers your standard, your scope of activities, and any applicable sector scheme (such as IATF 16949 for automotive or AS9100 for aerospace). Do not take this on faith.
Why IAF Recognition Matters
The International Accreditation Forum (IAF) is the global body that oversees accreditation bodies around the world. IAF operates a Multilateral Recognition Arrangement (MLA) which means that an accreditation issued by an IAF MLA member body is recognised by all other member bodies. In practical terms, this is what makes an ISO 9001 certificate issued by a UK-accredited registrar acceptable to a customer in Germany, the United States, or Japan.
When a national accreditation body holds IAF MLA membership, the certificates issued by registrars it has accredited carry international weight. If an accreditation body is not an IAF MLA member, its accreditation, and therefore the certificates issued under it, are not internationally recognised in the same way.
This is not a technicality. For businesses that export, supply multinational customers, or operate in regulated sectors, IAF recognition is a commercial and contractual requirement, not merely a quality indicator.
The principal IAF-recognised accreditation bodies relevant to businesses in the English-speaking world are:
- UKAS (United Kingdom Accreditation Service) in the UK
- ANAB (ANSI National Accreditation Board) in the United States
- IAS (International Accreditation Service) in the United States
- INAB (Irish National Accreditation Board) in Ireland
- JAS-ANZ in Australia and New Zealand
If you are transferring your certificate, your incoming registrar should be accredited by one of these bodies (or another full IAF MLA member appropriate to your region) for the specific standard you are certified to.
UKAS-Accredited vs. Non-IAF-Accredited Certificates in the UK
In the UK, the distinction between UKAS-accredited certification and certification issued under bodies such as ASCB (Accreditation Service for Certifying Bodies) is one that businesses regularly underestimate, sometimes with serious consequences.
UKAS is the UK's sole government-appointed national accreditation body. It is a full member of the IAF MLA, which means that certificates issued by UKAS-accredited registrars are internationally recognised. UKAS accreditation is required for certification to carry weight in UK public procurement, regulated industries, and supply chains where customers specify accredited certification.
ASCB is an independent accreditation body that operates outside the IAF framework. It is not government-appointed and does not hold IAF MLA membership. This means that certificates issued under ASCB-accredited registrars are not internationally recognised in the same way as UKAS-accredited certificates, and may not be accepted where customers or procurement frameworks specify certification from an IAF-recognised accreditation body.
Warning: Check What Your Customers Actually Require. Some businesses have discovered, after the fact, that a certificate issued by a non-IAF-accredited body was not accepted by a customer or public sector buyer. If you currently hold an ASCB-accredited certificate and are considering a transfer, verify whether your customers and supply chain relationships require UKAS (or IAF-equivalent) accreditation before you proceed. If they do, you should seek transfer to a UKAS-accredited registrar.
It is worth noting that this distinction is not unique to the UK. In every market, there is a meaningful difference between accreditation from a national body that holds IAF MLA membership and accreditation from a body that does not. Always verify the status of the accreditation body in your country.
Transfer vs. Recertification: Which Route Applies to You?
Not every registrar switch is a transfer. In some circumstances, an incoming registrar may decline to process a transfer and will instead treat your application as a new certification. Understanding the difference matters because recertification takes longer and costs more.
| Scenario | Likely Route | Typical Timeframe |
|---|---|---|
| Certificate in good standing, same standard, compatible accreditation scope | Transfer audit | 4 to 12 weeks |
| Certificate recently lapsed (less than 6 months) | Transfer with additional review, possibly gap analysis | 6 to 16 weeks |
| Certificate expired or significant lapse | Full initial certification (Stage 1 + Stage 2 audits) | 3 to 6 months |
| Moving from non-IAF to IAF-accredited certification | Full initial certification (previous cert not recognised) | 3 to 6 months |
| Changing standard (e.g. ISO 9001 to ISO 14001) | Full initial certification for the new standard | 3 to 6 months |
The timeframes above are indicative. The actual timeline depends on the incoming registrar's scheduling, the complexity of your management system, and how quickly you can supply the required documentation.
How the Transfer Process Works
While the precise steps vary between registrars, a well-managed transfer typically follows this sequence:
Step 1: Initial Enquiry and Scoping
You contact the incoming registrar and provide basic information about your business, the standard you are certified to, your current registrar, and your certification scope. The incoming registrar will confirm whether they are accredited to take on your certificate and provide a quote for the transfer service.
Step 2: Application and Documentation Review
You submit a formal transfer application. The incoming registrar will typically request copies of your current certificate, your most recent surveillance and recertification audit reports, your management system documentation (such as your quality manual or information security policy), and evidence of any corrective actions raised in your last audit cycle.
The purpose of this review is to understand the current state of your management system and to identify any gaps or concerns before the transfer audit takes place.
Step 3: Transfer Audit
In some cases, the incoming registrar will conduct a transfer audit at your premises (or remotely, depending on the nature of your business). This is typically shorter than a full Stage 2 initial audit but covers the key clauses of the standard to confirm that your management system remains effective.
Some registrars will align the transfer audit with your next scheduled surveillance audit, which can reduce costs. Others will conduct it as a standalone activity. Clarify this with your incoming registrar at the outset.
Step 4: Corrective Actions (If Required)
If the transfer audit identifies nonconformities, you will be required to address these before your new certificate is issued. Minor nonconformities may allow the certificate to be issued subject to close-out within an agreed period. Major nonconformities will need to be resolved first.
Step 5: Certificate Issuance
Once the transfer audit is complete and any corrective actions have been closed, the incoming registrar issues your new certificate. The new certificate will carry their name and accreditation logo. Your outgoing registrar's certificate should be formally withdrawn at this point, though in practice you should notify your outgoing registrar of your intention to transfer as early as possible.
Step 6: Notification and Surveillance Cycle Reset
Your new certificate will be subject to the incoming registrar's surveillance and recertification cycle. In many cases, registrars will try to align your new surveillance dates with your previous cycle to minimise disruption, but this is not guaranteed. Confirm the surveillance schedule before you sign up.
What Does a Certificate Transfer Cost?
Costs vary significantly by registrar, standard, organisation size, and the complexity of your management system. The following ranges are intended as a general guide for small and medium-sized businesses; always obtain written quotes before committing.
| Cost Component | Typical Range (USD) |
|---|---|
| Transfer application and documentation review | FREE to $800 |
| Transfer audit (not always required) | FREE to $2,000 |
| Certificate issuance fee | FREE to $400 |
| Total typical transfer cost (SME, single site) | FREE to $3,200 |
Some registrars offer discounted or fixed-price transfer packages, particularly if you are also committing to a multi-year surveillance contract. It is worth negotiating on this basis. Also factor in any early termination or withdrawal fees your outgoing registrar may charge; these are not always made clear at the outset of your certification contract, so review your existing contract carefully before giving notice.
Tip: Ask About Surveillance Timing. If your next surveillance audit with your outgoing registrar is due soon, you may be able to combine the transfer audit and first surveillance into a single visit with your incoming registrar, which can reduce costs. Ask specifically about this when you request a quote.
A Scenario: Hartley Precision Engineering Switches Registrar
Hartley Precision Engineering Ltd is a Sheffield-based precision manufacturer certified to ISO 9001. After five years with their current registrar, they have become frustrated with slow response times and increasingly generic audit feedback that does not reflect the realities of precision manufacturing.
They identify an alternative registrar with strong UKAS accreditation, specialist experience in engineering and manufacturing, and a competitive transfer package. Before proceeding, they take the following steps:
- They confirm that the incoming registrar holds UKAS accreditation for ISO 9001 and that the scope covers manufacturing activities.
- They review their existing certification contract and find no early termination fee.
- They contact the incoming registrar, who requests their last two surveillance audit reports, their current certificate, and their quality manual.
- The incoming registrar identifies a minor gap in Hartley's documented procedure for handling customer complaints and flags this before the transfer audit, giving Hartley time to address it.
- The transfer audit takes place over one day on site. Two minor nonconformities are raised, both of which Hartley closes within three weeks.
- Hartley's new certificate is issued eight weeks after their initial application. Their outgoing registrar withdraws the original certificate upon notification.
The total cost to Hartley, including the transfer audit and new certificate, is approximately $1,800.
What Registrars Look for During a Transfer Review
Understanding what your incoming registrar is assessing helps you prepare. Their primary concerns are:
- Whether your current certificate is valid and in good standing, with no open major nonconformities
- The quality and completeness of your most recent audit reports, including evidence that any previous nonconformities were properly closed
- Whether your management system documentation is up to date and reflects the current version of the standard
- Whether there have been significant changes to your business, scope, or processes since your last audit that the incoming registrar should be aware of
- Whether your outgoing registrar's accreditation is recognised and compatible
Red Flags That Can Complicate or Block a Transfer:
- Open major nonconformities on your current certificate: most incoming registrars will not proceed until these are resolved.
- A certificate that is close to expiry: if your 3-year certification cycle is nearly complete, consider whether a full recertification with the new registrar is more practical.
- Significant unexplained gaps in your audit history: if you have missed scheduled surveillance audits, you will need to explain why.
- A non-IAF-accredited outgoing certificate: the incoming IAF-accredited registrar cannot simply 'transfer' a non-recognised certificate; you will need to start afresh.
- Scope creep not documented in your management system: if your business activities have expanded beyond your certified scope, this needs to be addressed before or during the transfer.
What to Look for in Your New Registrar
A transfer is an opportunity to make a positive change, not just to switch like-for-like. When evaluating incoming registrars, consider the following:
| Factor | What to Ask |
|---|---|
| Accreditation status | Which accreditation body accredits you for this standard? Can you confirm IAF MLA membership? |
| Sector experience | Do your auditors have experience in our specific industry? Can you provide auditor CVs or profiles on request? |
| Audit scheduling | How far in advance are audits typically booked? What is your typical lead time for transfer audits? |
| Transfer fees and contract terms | Is there an early exit clause? What happens if we need to suspend or withdraw certification in future? |
| Multi-standard capability | If we seek additional certifications in future (e.g. ISO 14001 or ISO 45001), are you accredited to certify us? |
| Customer references | Can you provide references from similar-sized businesses in our sector? |
| Public Reviews | Check review platforms to see what previous customers have said about your registrar. ISOCentral includes popular review platforms, such as Google and Trustpilot. |
Important Warnings for Business Owners
Do Not Cancel Your Existing Certificate Before Your New One Is Issued. A common mistake is to give formal notice to the outgoing registrar before the incoming registrar has confirmed it can proceed and issued the new certificate. This can leave you without valid certification for a period, which may breach contractual obligations with customers who require continuous certification. Always wait until your new certificate is in hand before withdrawing from your current registrar.
Check Your Existing Contract for Exit Clauses. Certification contracts frequently include notice periods of 60 to 90 days and, in some cases, early termination fees. Read your contract carefully before initiating a transfer. If in doubt, take legal advice. Budget for the overlap period when you may be paying both registrars.
Non-IAF Certificates Cannot Be Transferred to IAF-Accredited Bodies. If your current certificate was issued by a registrar accredited by a non-IAF body (for example, ASCB in the UK), an incoming UKAS-accredited registrar cannot simply carry over your certification history. You will need to go through full initial certification. If this applies to you, factor this into your timeline and budget planning.
Inform Your Customers. If your customers or supply chain partners require sight of your certificate, notify them that a transfer is taking place and provide them with your new certificate as soon as it is issued. There may be a short period during which your certificate number changes; customers who have registered your old certificate number in their supplier approval systems will need to update their records.
Transfer Checklist for Business Owners
Use this checklist before and during your certificate transfer to avoid common pitfalls.
Before You Begin
- Confirm that your current certificate is valid and in good standing
- Check that there are no open major nonconformities on your certificate
- Review your existing certification contract for notice periods and exit terms
- Obtain a copy of your two most recent audit reports and your current certificate
- Verify that your management system documentation is up to date
- Confirm whether your business scope has changed since your last audit
Choosing Your Incoming Registrar
- Confirm that the incoming registrar is accredited for your specific standard
- Verify that their accrediting body holds IAF MLA membership (for UK: UKAS; US: ANAB or IAS; Ireland: INAB)
- Confirm that their accreditation scope covers your industry activities
- Obtain a written quote covering all transfer costs
- Ask about the surveillance schedule and whether the transfer audit can align with your next due surveillance
- Review the incoming registrar's contract terms and exit clauses
During the Transfer
- Submit all required documentation promptly
- Address any pre-audit findings or gaps identified during the documentation review
- Do not cancel your existing certificate until your new certificate is in hand
- Close any nonconformities raised during the transfer audit within the agreed timeframe
- Notify your outgoing registrar in writing in accordance with your contract terms
After the Transfer
- Provide your new certificate to customers, procurement portals, and supply chain contacts
- Update any internal documentation that references your registration number or certification body
- Record your new surveillance and recertification dates in your management review schedule
- Ensure your website and marketing materials reflect your updated certificate details
Remember: A well-managed transfer should be seamless for your customers. The goal is continuous, uninterrupted certification with no gap in validity. Plan your timeline carefully, communicate early with both registrars, and keep your customers informed.