ISO certification in Spain: bodies and costs.

ISO certification in Spain is granted by ENAC-accredited bodies such as AENOR, Bureau Veritas, SGS, LRQA or TÜV. Choosing the right body is a strategic decision, not just a price comparison.

Once your management system is implemented and you have run the first internal audit, the next step is to choose the certification body that will audit you and issue the official ISO certificate. The choice will accompany your company for at least three years (initial audit plus two surveillance audits plus recertification) and is not just a price comparison: accreditation, sector experience, geographic coverage and after-sales matter more than the headline figure.

ENAC: the accreditation that gives the certificate value

In Spain, ENAC (Entidad Nacional de Acreditación) is the body that accredits certification bodies. A certificate issued by a body that is not ENAC-accredited (or accredited by an equivalent body within the IAF agreement) has no international validity and is increasingly rejected by tenders and supply chains.

Before signing any quote, check the certification body's accreditation status on the ENAC website. Accreditation is granted by standard and by scope: a body may be accredited for ISO 9001 but not for ISO 27001, or for industry but not for healthcare. The accreditation scope must cover your sector activity.

Main ENAC-accredited certification bodies in Spain

The following table summarizes the profile of the most active certification bodies in the Spanish market, their typical positioning and indicative annual cost ranges for an SME of 20-50 employees in ISO 9001.

Certification body	Profile	Indicative annual range	Best for
AENOR	Spanish, historical reference, strong in public sector	€2,200-4,500	Public sector customers, Spanish brand recognition
Bureau Veritas	French multinational, broad sector coverage	€2,000-4,200	International supply chains, exporters
SGS	Swiss multinational, the world's largest TIC group	€2,100-4,400	Global presence, multi-country audits
LRQA (Lloyd's)	British, strong in industry and energy	€2,300-4,800	Heavy industry, energy, automotive
TÜV (Rheinland / SÜD / Nord)	German, technical authority	€2,400-4,900	Automotive, manufacturing, German-speaking customers
DNV	Norwegian, strong in maritime and oil & gas	€2,300-4,700	Maritime, oil & gas, classification
EQA / Applus / OCA	Spanish, competitive prices	€1,500-3,200	Cost-sensitive SMEs, regional presence

The ranges are indicative for ISO 9001 in an SME of 20-50 employees, single site, low-medium-risk sector. For ISO 14001 add 20-30%; for ISO 45001 add 25-35%; for ISO 27001 add 40-60%. Multi-site and high-risk sectors (healthcare, food, energy, aerospace) push the figure 30-80% above the ranges shown.

Certification audit process: phase 1 and phase 2

The initial audit is split into two phases separated by 2-6 weeks. Phase 1 (also called documentary or readiness audit) verifies that the system is documented, that an internal audit has been done, that the management review has taken place and that the organization is mature enough to face phase 2. The phase 1 report identifies "areas of concern" that must be solved before phase 2.

Phase 2 is the audit proper. The auditor team visits the site, interviews staff, samples records and verifies real operation. It lasts between 1 and 4 days on site for an SME, depending on size and sector. At the end the auditor issues findings (nonconformities and observations) and a recommendation to grant the certificate, which the body's certification committee then ratifies.

The three-year cycle: initial, surveillance, recertification

The ISO certificate has a three-year validity. The cycle works as follows:

• Year 0: initial audit (phase 1 + phase 2). Certificate issued.
• Year 1: first surveillance audit (about 50-60% of initial duration).
• Year 2: second surveillance audit (same as year 1).
• Year 3: recertification audit (about 70-80% of initial duration). New certificate issued.

The total cost of the three-year cycle for an SME with ISO 9001 typically ranges between €5,000 and €18,000, depending on the body and the company complexity.

Selection criteria beyond price

Five criteria matter more than the headline price:

• Sector experience: an auditor who knows your sector adds value with their questions; an auditor who does not understand the sector becomes a bureaucratic obstacle.
• Geographic coverage: if you have sites in several Autonomous Communities (or abroad), check that the body audits all of them without sub-contracting.
• Reputation among your customers: ask three customers from your target sector which certification bodies they recognize. The certificate has the value the customer gives it.
• After-sales service: response times to queries between audits, availability for transfers, clarity in the financial offer.
• Stability of the audit team: continuity of the lead auditor across cycles reduces re-explaining your context every year.

Frequent mistakes when choosing a certification body

• Choosing only by price without checking the ENAC accreditation scope.
• Choosing a global brand when your customers only recognize AENOR (typical in Spanish public sector).
• Hiring the certification body and the consultancy from the same group (real or apparent conflict of interest).
• Not negotiating the multi-year contract: discounts of 10-20% are common when committing to the full three-year cycle.
• Forgetting to verify that the auditor has Spanish-speaking capability if your team does not work in English.

How to request comparable quotes

Ask 3-4 ENAC-accredited bodies for quotes using a standardized brief: name and address, sites, employees by site, sector activity, standards to certify, presence of subcontracted processes, existing certifications. The body will return a number of audit days and a daily rate. The comparison is between total days x daily rate, not the headline figure.

Audit-day rates in Spain range between €700 and €1,200 net depending on the body. The total number of days depends on the standard, the size and the IAF mandatory table that the body applies. Book a 45-minute session and we will review your quotes side by side before you sign.

Frequently asked questions

Which is the most prestigious ISO certification body in Spain?

AENOR is the historical reference in Spain and the most recognized by Spanish public sector customers. For multinational supply chains, multinational bodies such as Bureau Veritas, SGS, TÜV or LRQA are often preferred. All ENAC-accredited bodies are legally equivalent.

How much does an ISO 9001 certification audit cost?

Between €1,500 and €8,000 per year depending on company size, sector complexity and number of sites. The first three-year cycle (initial audit + two surveillance audits + recertification) typically falls between €5,000 and €18,000.

How long does it take to get an ISO certificate?

From the start of system implementation: 4-6 months for a single-site SME, 6-12 months for medium-sized industrial companies, 12-18 months for multi-site groups. The certification audit itself takes 2-5 days on site spread across two phases.

What is the difference between accreditation and certification?

Accreditation is the technical recognition issued by ENAC (or its European equivalents) that certifies a certification body is competent to issue ISO certificates. The certification body in turn certifies your company. Without accreditation, the certificate has no international validity.

Can I change certification body mid-cycle?

Yes. You can transfer the certificate to another ENAC-accredited body without restarting the cycle, provided the current certificate is valid and there are no open major nonconformities. The transfer audit is shorter and cheaper than an initial audit.