Trust Centre
Transparency you can verify.
We're an accredited certification body — so the standards we audit you against are the ones we live by. Download our policies, verify our accreditations and see exactly how we keep your data and certificates safe.
Accreditations & registrations
Independent oversight matters. Every certificate we issue is backed by the accreditation chain below — and you can verify each one directly with the issuing body.
AIUK Global Accreditation
Accreditation International (AIUK)
ATB 21227
Independently accredited certification body for ISO management system standards.
Verify accreditationICO Registration
Information Commissioner's Office
Data Controller — UK
Registered with the UK ICO as a data controller for personal data we process.
Search the ICO registerCompanies House
The Certification People Ltd
Company No. 17201285
Registered in England & Wales. View our public filings and statutory information.
View on Companies House
AIUK Accredited Certification Body
Our scope covers ISO 9001, 14001, 45001, 27001 and 50001. Look up reference ATB 21227 on the AIUK register at any time.
Verify any certificate we've issued
Every certificate carries a unique number and QR code. Anyone — buyers, regulators, tender teams — can confirm its status, scope and validity in seconds, with no login required.
ISO 9001
Quality management
ISO 14001
Environmental management
ISO 45001
Occupational health & safety
ISO 27001
Information security
ISO 50001
Energy management
Policies & legal documents
Each policy below is published as a signed PDF with a SHA-256 verification hash. Download the file, recompute the hash on your side, and confirm it matches what we list here — that's how you know the document hasn't been altered in transit.
Privacy Policy
How we collect, use and protect personal data under UK GDPR.
Terms of Service
Contractual terms governing use of our certification services.
Data Processing Agreement
Processor obligations, sub-processors and SCCs.
Cookie Policy
Cookie categories and how to manage your preferences.
Refund Policy
Deposit, cancellation and refund terms.
Complaints & Appeals
How to raise a concern or appeal a decision.
Verify on macOS / Linux: shasum -a 256 filename.pdf · Windows: certutil -hashfile filename.pdf SHA256
Security & data protection
We hold our own platform to the same controls we audit against ISO 27001 — because if we wouldn't accept it from a client, we shouldn't ship it ourselves.
Encryption everywhere
All client data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
Role-based access
Least-privilege roles separate clients, auditors, reviewers and staff.
UK & EU hosting
Evidence and personal data are hosted in UK / EU regions by default.
Immutable audit trail
Every certification decision and evidence action is logged and retained.
Confidentiality labels
Uploads can be tagged confidential, restricted or public — and access scoped to match.
Subprocessors disclosed
Our DPA lists every subprocessor we rely on, with notice on changes.
Impartiality & independence
We do not provide management system consultancy, internal auditing or training to organisations we certify. Our impartiality committee reviews threats to independence at least annually, and any auditor with a recent commercial or personal relationship with a client is excluded from that audit.
Suspect a conflict of interest? Email impartiality@thecertificationpeople.com — every report is reviewed by a director who was not involved in the audit.
Complaints, appeals & whistleblowing
If you disagree with a certification decision, believe a certified organisation is misusing our mark, or want to raise a concern in confidence, our complaints process gives you a clear, independent route to resolution.
Need something that isn't here?
Procurement, security or legal teams can request our information security summary, insurance certificates or sub-processor list directly. We aim to respond within two working days.