Canadian certification body accredited by the Standards Council of Canada
Complade
Menu
English
Start your application
English
Start application

Certification explained

How accredited certification works

Who writes the standards, who assesses certification bodies, and who issues your certificate? This guide explains the roles using Complade’s ISO 27001 certification as an example.

From international recognition to your certificate

  1. International recognitionGlobal ACIFormer roles of IAF and ILAC
  2. AccreditationStandards Council of CanadaAssesses Complade’s competence and impartiality
  3. Audit and certificationComplade Canada Inc.Audits the ISMS and makes the certification decision
  4. Certified organizationYour organizationImplements, operates and maintains its ISMS
A simplified view of responsibilities, not ownership. Peer evaluation also involves regional accreditation cooperation bodies.

Who does what?

Global ACI

Global Accreditation Cooperation Incorporated (Global ACI) took over the roles of IAF and ILAC on 1 January 2026. Its Multilateral Recognition Arrangement (MRA) relies on peer evaluation of accreditation bodies. Regional cooperation bodies conduct most of these evaluations.

How the MRA works · The transition from IAF and ILAC

Standards Council of Canada (SCC)

SCC accredits Complade Canada Inc. for the activities listed in its accreditation scope. Accreditation assesses the certification body’s competence and impartiality. It is distinct from certification of a client’s ISMS.

View Complade’s SCC accreditation scope

Complade Canada Inc.

Complade conducts certification and surveillance audits. The certification decision is made independently of the team that conducted the audit. ISO/IEC 17021-1 sets requirements for management system certification bodies; ISO/IEC 27006-1 adds requirements specific to ISMS auditing. Complade does not implement your ISMS or write your policies.

ISO/IEC 17021-1 · ISO/IEC 27006-1 · Our impartiality policy

Your organization

Your team defines the ISMS scope, manages risks, implements controls and keeps evidence of their operation. The certificate covers the ISMS within its stated scope. Responsibility for information security remains with your organization.

Stage 1 document requirements

What does international recognition mean?

The MRA supports acceptance of accredited results among its signatories within recognised scopes. It does not guarantee acceptance by every buyer or regulator. Check the required standard, certificate scope and any market or contract requirements. Read Global ACI’s guidance

References to IAF, the IAF MLA and IAF CertSearch still appear in documents and lookup tools. Global ACI’s website continues to link to IAF CertSearch for certificate verification. Global ACI

How to check an ISO 27001 certificate

  1. Check the organization’s name, standard, scope and certificate dates.
  2. Check the issuer’s accreditation for the relevant standard in its accreditation body’s directory.
  3. Check the certification record and confirm that it meets your intended use.

Find a Complade certificate · IAF CertSearch

Your certification with Complade

Review the process and pricing, then apply to receive your quotation and review the agreements.

ISO 27001 · Pricing · Start your application