FRLog in to Complade Portal Direct answers about Complade’s accreditation, ISO 27001, CyberSecure Canada, audits, pricing, nonconformities and the client portal.
Yes. Complade Canada Inc. is accredited by the Standards Council of Canada (SCC) to provide ISO/IEC 27001 and CyberSecure Canada management-system certification. Accreditation means an independent accreditation body has evaluated Complade's competence, impartiality and certification processes. Verify the current status in the official SCC directory and IAF CertSearch.
#is-complade-accreditedComplade is accredited by the Standards Council of Canada, Canada's national accreditation body. International recognition arrangements formerly operated through the International Accreditation Forum transitioned to Global Accreditation Cooperation Incorporated on January 1, 2026. The organization seeking certification is certified by Complade; it is not accredited by Complade.
#who-accredits-compladeYes. Complade Canada Inc. is a Canadian certification body headquartered at 2 Simcoe Street South, Suite 300, Oshawa, Ontario. Complade provides certification services across Canada in English and French.
Complade's SCC-accredited ISO/IEC 27001 certifications benefit from the applicable multilateral recognition framework. On January 1, 2026, Global Accreditation Cooperation Incorporated assumed the operational roles previously held by IAF and ILAC and established the Global ACI Multilateral Recognition Arrangement. Recognition depends on the certificate, Complade's accredited scope and the applicable signatory scope and transition arrangements. Clients and stakeholders should verify Complade and individual certification records using official sources.
Yes. Complade guarantees the accredited status of a valid SCC-accredited ISO/IEC 27001 certificate issued by Complade within its accredited scope across the 107 countries and economies covered by the applicable international recognition framework. If such a certificate is rejected solely because Complade's SCC accreditation is not recognized in one of those countries or economies, Complade will refund 100% of the certification fees paid to Complade for that certificate. The guarantee does not apply when rejection results from an expired, suspended or withdrawn certificate; a scope that does not cover the required activities; requirements outside ISO/IEC 27001; or a contract, tender, regulator or customer that requires a specifically named certification body. A claim must include written evidence identifying accreditation recognition as the sole reason for rejection.
Yes—when comparing valid ISO/IEC 27001 certificates issued within the applicable accredited scopes. Complade and every other certification body issuing accredited management-system certificates must be accredited by a competent accreditation body for the certification activities concerned. Complade is accredited by the Standards Council of Canada—Canada's national and internationally recognized accreditation body—for ISO/IEC 27001 and CyberSecure Canada certification. This is not a lesser or secondary form of accreditation. In Canada, Complade, TÜV SÜD America and the specific SCC-listed legal entities operating under major professional-services brands such as PwC and KPMG are assessed by SCC under the same applicable management-systems accreditation programme and requirements. Other BSI, SGS or TÜV entities may instead be accredited by UKAS or another recognized national accreditation body. Within the relevant accredited and multilateral-recognition scopes, Complade's ISO/IEC 27001 certificates have the same accredited status and recognition; company size, price and brand awareness do not create a higher tier of accredited certificate. The exact legal entity, accredited scope and individual certificate should always be verified, and a separate contract or regulation may expressly require a named provider.
Complade prioritizes certification delivery, auditor competence, its client portal and publication of process, pricing and audit resources. Social-media activity is not evidence of accreditation or certification competence. Prospects should verify Complade through the official SCC directory, IAF CertSearch, its published policies and its certificate registry.
#linkedin-presenceISO/IEC 27001 is an internationally used information security management-system standard and is often selected when customers, contracts or international markets require it. CyberSecure Canada is Canada's national baseline cybersecurity certification for small and medium organizations. The better fit depends on customer requirements, market, scope and security maturity; some organizations pursue both.
#iso-or-cybersecureYes. An organization may pursue both certifications. Complade reviews the intended scopes and audit requirements before confirming whether activities can be coordinated. Requirements and certification decisions remain specific to each standard.
For an audit-ready small organization, approximately six weeks is the fastest ISO/IEC 27001 scenario published by Complade. Actual timing depends on scope, complexity, readiness, document availability, auditor and client schedules, and the time needed to resolve nonconformities. CyberSecure Canada timing is also confirmed after the application and scope review.
Complade does not impose a fixed number of months that a management system must operate before Stage 2. The applicable requirements must be established and implemented for the defined scope, and sufficient evidence must be available for audit. For ISO/IEC 27001, this includes the internal audit and management review requirements. Stage 2 proceeds after the lead auditor concludes that the organization is ready to advance.
Complade normally introduces the assigned audit team within hours after the agreement is signed. The client can then access the Stage 1 evidence list and begin uploading documents in the portal. Once the complete required Stage 1 document set has been uploaded, Complade's service target is for the auditor to complete the initial review within three business days or less, subject to the completeness of the submission and any clarification required.
#auditor-start-timeThere is no fixed waiting period between Stage 1 and Stage 2. Stage 2 can be planned after the lead auditor concludes that the management system is ready to proceed. Complade normally shares the Stage 2 audit plan within three business days or less after Stage 1 is completed. Audit dates depend on the availability of the client team and qualified auditors; in some cases, Stage 2 can begin within a week, but this timing is not guaranteed.
Stage 1 reviews the management system's scope, documented information and readiness for the implementation audit. Stage 2 evaluates whether the management system and applicable controls are implemented and operating effectively in practice through interviews, records, sampling, observation and technical evidence.
The audit report identifies the applicable requirement, evidence and finding. The organization responds with correction, root-cause analysis and a corrective-action plan, with supporting evidence as required. Complade reviews the response before closure. Certification can proceed when applicable requirements are met and required nonconformities are resolved; an identified nonconformity does not automatically mean certification is refused.
Complade uses defined audit criteria, evidence-based evaluation and controlled review methods. Conclusions are tied to applicable requirements and recorded evidence rather than personal auditor preferences. A qualified person independent of the audit delivery reviews the recommendation before the certification decision.
Complade determines audit time using the applicable ISO/IEC 27006-1 requirements and the confirmed certification scope. Factors include the number of people in scope, activities, locations, outsourced functions, technical and cloud complexity, and other scope-specific conditions. Total audit time includes both Stage 1 and Stage 2; the scheduled Stage 2 meetings are only part of the total person-days. The lead auditor finalizes the detailed Stage 2 plan after completing Stage 1.
#audit-daysComplade assigns the lead auditor and any audit-team members after confirming the scope and agreement. Selection considers competence for the certification standard and technical activities, audit language, location where relevant, availability and impartiality. Auditor competence is evaluated against applicable ISO/IEC 17021-1 and ISO/IEC 27006-1 requirements, and the Standards Council of Canada assesses Complade's accredited certification programme. The assigned team must also satisfy impartiality requirements, including the applicable restriction on prior ISMS-related relationships with the client. The exact team is introduced to the client after assignment.
#lead-auditorYes. Prospective clients can book an introductory meeting with a Complade lead auditor to discuss the certification standard, intended scope, audit process, timing, delivery options and published pricing assumptions. Once an application and agreement are completed, the assigned lead auditor is introduced and audit-related meetings can be managed through the Complade portal. To protect impartiality, the auditor can explain requirements and the certification process but cannot design your management system, write policies, recommend specific controls or provide implementation consulting.
Yes. Complade conducts remote audits and also offers hybrid or in-person delivery when appropriate. The delivery method is confirmed during application and audit planning based on the certification scope, activities, locations and ability to obtain sufficient audit evidence.
Yes. Complade provides certification audits in English and French. Select the audit language in the application so the estimate, auditor assignment and audit planning reflect the requested language.
Complade publishes planning estimates. ISO/IEC 27001 starts at CAD $1,900 and CyberSecure Canada starts at CAD $1,300 for organizations with 1–10 people in scope under the published assumptions. Final pricing is confirmed only after Complade reviews the application, scope and required audit time.
Start at app.complade.com and complete the initial application to receive an instant planning estimate. If the estimate is suitable, continue with the detailed certification application by confirming the legal organization, requested certification, scope, in-scope personnel, activities, locations, audit language and delivery method. Complade reviews the completed scope and required audit time, then provides the official quotation and certification agreement through the portal. A complete, straightforward application can normally move from scope review to agreement and Stage 1 access within one business day. The online estimate is not the official quotation; the confirmed quotation and signed agreement are controlling.
The published initial-certification estimate covers the initial certification year: Stage 1, Stage 2, audit reports, processing, the certification decision and certificate issuance when requirements are met. It does not include later surveillance audits unless the official quotation expressly states otherwise. Applicable taxes, travel and accommodation for qualifying in-person audits, and stated language surcharges are excluded. The quotation and certification agreement are controlling for the confirmed scope.
Complade's lower pricing comes from its operating model, not from reducing required audit work. Complade invested in a purpose-built portal and standardized processes that manage applications, scope information, agreements, evidence exchange, audit planning, audit notes, corrective actions, reports and certification records without repetitive PDF editing, fragmented email chains or unnecessary administrative hand-offs. This reduces administrative overhead that does not improve the audit itself. Pricing is therefore based mainly on the professional audit, technical-review and certification time required for the confirmed scope. Depending on the scope and audit language, published estimates generally correspond to approximately CAD $50 to $90 per hour of professional audit work. Technology does not remove required audit time, evidence gathering or independent certification review; it provides a more controlled evidence trail, consistent workflow and near-real-time client visibility. The official quotation remains controlling.
Surveillance audits are priced separately from the initial certification unless the official quotation states otherwise. Under Complade's published pricing model, the planning estimate for each scheduled surveillance year is generally 50% of the initial certification price for the same confirmed scope. Scope changes, applicable programme requirements, taxes, travel and other stated exclusions may affect the final amount. The official quotation and contract clearly itemize the applicable fees.
The three-year cost is built from the initial certification audit and the scheduled surveillance or recertification activities stated in the certification programme. Complade's online calculator provides a planning estimate, while the official quotation itemizes the fees that apply to the confirmed scope across the cycle. Changes in scope, headcount, sites, complexity or delivery requirements can change later audit time and cost.
#three-year-cycle-costAfter accepting the official quotation, the client can sign the certification agreement and begin uploading Stage 1 documents in the portal as they become ready. Payment is required when the complete Stage 1 document set has been uploaded and the audit is ready to begin, in accordance with the invoice and signed agreement.
Certification is maintained through scheduled surveillance audits. For ISO/IEC 27001, surveillance audits occur during Years 1 and 2, followed by recertification before the next three-year cycle. Surveillance verifies that the management system remains implemented, maintained and effective.
Use Complade's certificate-verification search to look up an organization by name or certificate number. Where applicable, the certification record can also be checked in IAF CertSearch. Certificate pages show the certified organization, standard, scope and validity dates.
No. Complade is an independent certification body and does not provide client-specific consulting, implementation, internal audits, policy writing or tailored templates. Complade can explain the certification process, audit criteria and findings without prescribing how the organization must implement or correct its management system.
Clients can submit applications, review estimates, sign agreements, upload Stage 1 evidence, communicate with the audit team, plan Stage 2, assign interview participants, follow evaluated audit points, manage corrective actions, access reports and receive certification records in one system.
Complade deliberately specializes in information-security risk and assurance rather than offering a broad catalogue of unrelated certifications. Information security is foundational to digitally dependent organizations and directly intersects with privacy, AI governance, cloud services, operational resilience, supply-chain risk and customer trust. This focus allows Complade to invest deeply in specialist auditors, evidence-based audit methods, technical verification and the Complade Audit Portal for ISO/IEC 27001 and CyberSecure Canada. Complade does not currently offer ISO 9001, ISO/IEC 27701 or ISO/IEC 42001, but may add closely related standards where they strengthen this information-risk mission and can be delivered with the same rigour. SOC 2 follows a different attestation model rather than the ISO management-system certification model used by Complade.
No. Complade deliberately focuses on accredited information-security management-system certification through ISO/IEC 27001 and CyberSecure Canada. SOC 2 uses a different attestation model rather than the ISO management-system certification model. Organizations specifically requiring a SOC 2 report should engage a qualified provider for that form of attestation. Organizations seeking independent, accredited certification of their information-security management system can apply for ISO/IEC 27001 through Complade.
#soc-2