Legal & Compliance

ISO certification, with the fine print said out loud.

ISO 9001, ISO 22000 and ISO 27001. We review your processes against the standard, help you write what is missing, audit the result and issue a certificate you can point anybody at. It is a non-accredited certificate, and the next panel explains exactly what that means.

₹2,299 professional fee · ₹1,599 for startups

Not a government registration. No government charges.

What "non-accredited" means, in plain words

This certificate is issued by Vybe Technologies. We are not a certification body accredited by NABCB, by any other member of the International Accreditation Forum (IAF), or by any accreditation board anywhere. The certificate carries no IAF, ILAC or NABCB mark, and it must not be presented, described or displayed as though it does.

ISO itself does not certify anybody. ISO writes the standards; certification is always done by a third party, and it is the accreditation sitting behind that third party that gives a certificate weight with a regulator, an overseas buyer or a large tender.

Our certificate is verifiable in exactly one place: our own portal. Anyone can check the number and see who holds it, against which standard, for what scope and until when.

So, plainly: if a customer, a tender, a regulator or an overseas buyer requires an accredited certificate, this is not it, and we will tell you that rather than take your money. Ask them whether accreditation is required before you buy an ISO certificate from us or from anyone else.

Who needs it

Businesses that want a documented management system and a certificate to show for it, where the people asking have not specified that the certificate must be accredited. Commonly a first step before an accredited audit.

This is our own certificate, verifiable on our portal and nowhere else. It carries no IAF, ILAC or NABCB mark and must not be presented as though it does. Ask whoever is asking you for ISO whether accreditation is required, before you buy a certificate from us or from anybody.

What we need from you

  • Company details, and the scope you want certified
  • Which standard you are after: ISO 9001, ISO 22000 or ISO 27001
  • Whatever policies, procedures and records you already have
  • A contact who can answer questions about how the work actually runs

In detail

ISO certification (non-accredited)

ISO 9001, quality management

The general-purpose one, and the one most often asked for. It is about whether your business does what it says it does repeatably: defined processes, responsibilities that are written down, records that show what happened, and a habit of looking at what went wrong and changing something. It applies to any kind of business, which is why it is the certificate most tenders and vendor forms name.

ISO 22000, food safety management

For anyone in the food chain: manufacturing, processing, catering, storage, transport and retail. It is built around hazard analysis, the controls you put in place at the points that matter, and the records that show those controls were actually applied. It sits alongside your FSSAI licence rather than replacing it. FSSAI is the legal requirement; this is the management system.

ISO 27001, information security management

The one customers ask software and services companies for. Access control, asset and data handling, supplier risk, incident response, backups and continuity, all driven by a risk assessment you have actually done rather than a policy folder you downloaded. If your customers are starting to send you security questionnaires, this is the shape of the answer they are looking for.

What the fee actually buys

A review of how you work against the clauses of the standard, and a plain list of where the gaps are. Help writing the policies, scope statement, procedures and records you are missing, rather than a template pack emailed to you. A documented audit of the result. And then the certificate, carrying a number, a scope, a standard and an expiry date, which anybody can verify with us. The certificate number and the verification route are issued with it, so a customer can check it without coming through you.

Where this is genuinely useful, and where it is not

It is useful when a client or a vendor onboarding form asks for evidence of a management system without specifying accreditation, when you want the discipline of a real system at a price that makes starting possible, and as a stepping stone: the documentation work carries straight over to an accredited audit later. It is not useful, and we will not sell it to you, when a tender, a regulator, an overseas buyer or a large enterprise vendor programme requires an accredited certificate. Ask them which they need. If the answer is accredited, you need a body accredited under the IAF, and that is a different service at a different price.

FAQ

Questions, answered.

Is this the same as an accredited ISO certificate?

No, and it is important that you understand the difference before you buy. An accredited certificate is issued by a certification body that has itself been assessed by an accreditation board, such as NABCB in India, under the International Accreditation Forum. That chain is what gives the certificate weight with a regulator, an overseas buyer or a large tender. Our certificate is issued by Vybe Technologies. We are not accredited by NABCB or by any other accreditation body, the certificate carries no IAF, ILAC or NABCB mark, and it must not be presented as though it does.

So what is it worth?

It is worth what the person asking you for it will accept. A great many vendor onboarding forms, client questionnaires and smaller tenders ask whether you are ISO certified without specifying accreditation, and a certificate with a real audit and a verifiable number behind it answers that. Beyond that, the work itself has value regardless of the certificate: most businesses that go through it end up with documented processes they did not have. What it is not worth is anything at all to somebody who requires accreditation, and we say so on every page where it appears.

How is the certificate verified?

On our portal, and only there: vybe.net.in/verify. Each certificate carries a number, and the number resolves to the holder, the standard, the scope and the validity dates, so a customer can confirm it themselves without asking you for a scan. Verification is free and needs no account, and the certificate carries a QR code that goes straight to its own result. If a number you have been shown does not resolve, write to legal@vybe.net.in and we will confirm in writing whether it came from us.

Can we use the ISO logo on our website?

No. ISO writes the standards and does not certify anyone, and its logo is not available for use by certified organisations, whether their certificate is accredited or not. What you can do is say in words that your management system has been certified to the standard, and name who certified it. We will tell you the exact wording to use, and we would rather you used it than something that overstates the position.

How long does certification take?

It depends almost entirely on what you already have. A business with documented processes can be through the gap review, the corrections and the audit in a couple of weeks. A business starting from nothing takes longer, because the documentation has to be written and, more to the point, has to describe what you actually do. We will give you a realistic timeline after the gap review rather than before it.

What if we need an accredited certificate later?

None of the work is wasted. The management system, the documentation and the records are what an accredited body audits too, and a business that has been through this once is in a far better position going into that audit than one starting cold. Tell us that is where you are heading and we will keep the documentation in the shape an accredited auditor will expect.