ISO 9001 (revision 25)
Old revision·00:54, 8 Jan 2026·CaptionCzeslaw
| ISO 9001Management-system standard | |
|---|---|
| Current edition | ISO 9001:2015 |
| Certifies | A management system, not a product |
| Issued by | An accredited certification body |
| Distinct from | GMP |
| Topic infobox · conventions | |
ISO 9001 is an international standard specifying requirements for a quality management system. Certification is issued by an accredited certification body following audit, and attests that an organisation operates a management system meeting the standard within a defined scope.[1]
It certifies a system, not a product. An ISO 9001 certificate says nothing directly about the identity, purity or content of any material an organisation ships, and it is not a substitute for a product specification or a certificate of analysis.[1]
It is also distinct from good manufacturing practice. GMP is a regulatory framework enforced by medicines regulators through inspection; ISO 9001 is a voluntary standard certified commercially. Both can be genuine and they establish different things.[2]
What the standard requires
[edit]The 2015 edition is built around context of the organisation, leadership, planning, support, operation, performance evaluation and improvement. Its central mechanisms are documented processes, risk-based thinking, defined responsibilities, internal audit and management review.[1]
Certification requires an initial audit, surveillance audits at intervals, and recertification on a cycle of a few years. A certificate names the certification body, a number, a scope and a validity period.[1]
Scope is the field most often overlooked. A certificate covering "sales and distribution" is a different claim from one covering "synthesis, purification and packaging of peptides", and the scope is printed on the certificate.[3]
How a claim becomes checkable
[edit]| Element of a claim | Why it matters |
|---|---|
| Certification body | Determines whether the certificate is accredited |
| Certificate number | Allows verification against a register |
| Scope | Says which activities are covered |
| Validity period | Certificates expire |
A claim of "ISO 9001 certified" carrying none of these is not checkable; one carrying all four is. That is a documentary observation and applies to any organisation making the claim.[1]
Accreditation of the certification body matters, since certificates are also issued by unaccredited bodies. An accredited certificate can be verified through the accreditation body's own register.[3]
What it implies about material
[edit]Indirectly, a functioning management system supports the documentary features this wiki treats as informative: lot-specific certificates, retrievable records, controlled changes, and consistency over time. See Lot traceability.[1]
Directly, it implies nothing about any particular lot. A certified organisation can ship a defective lot, and an uncertified one can ship excellent material; certification bears on the probability of the former, not on the fact of it.
For a purchaser the practical position is that ISO 9001 is a real and verifiable claim about an organisation, and that it answers a different question from the one a certificate of analysis answers.[4]
See also
- Good manufacturing practice
- Certificate of analysis
- Lot traceability
- VendorInvestigate
- Active pharmaceutical ingredient
References
- ^ a b c d e f ISO 9001:2015, Quality management systems — Requirements.
- ^ International Council for Harmonisation, Q7: Good Manufacturing Practice Guide for Active Pharmaceutical Ingredients (2000).
- ^ a b PeptidePedia Wiki community test-report tally, 2024–2026 (self-reported; see Project:Sourcing guidelines).
- ^ United States Pharmacopeia, General Chapter <1503>, Quality Attributes of Synthetic Peptide Drug Substances.