Certifidex
Menu
Standards and certification

The right standard.
Traced to its source.

"ISO certified," "accredited," "compliant" — words thrown around loosely. Certifidex is a source-backed library that traces each one back to what it actually requires, who it applies to, and who is authorised to issue it.

Certifidex covers 48 ISO management system standards, 42 certification schemes, 21 industry guides, 173 assurance frameworks and 10 binding regulations, each dated to when its facts were last checked against the primary source. It does not issue certificates or sell advisory or consultancy services — certification decisions are always made by an independent, accredited body.

Standards
48
Certification schemes
42
Industry guides
21

Selling to the EU or UK? Check which marking your product needs

Primary-sourcedDated verificationNo paid placement
Browse the library How it works

Requirements Finder

Find your country’s exact requirements

Pick a country and a sector — legal obligations, regulations, buyer-driven schemes and voluntary standards, each traced to a verified, dated source.

Country

Sector

Pick a country and a sector to see what applies.

Pick a country and a sector to see what applies.

48 ISO management system standards

42 Certification schemes

173 Frameworks & audits

10 Regulations

21 Industry guides

23 Country guides

ISO Standards

Start your research in the right place.

What each standard is for, who it applies to and how it is certified — in plain language, with the official source on the page.

Browse all ISO standards →

Certification

Non-ISO certification programmes.

Programmes with their own scheme owners, their own rules and their own types of issuing body — none of them ISO standards. One word covers very different things, so every record is shown with its class.

GLOBALG.A.P.Accredited third-party certification
Agriculture and Aquaculture Certification

A good agricultural practice programme requested by exporters and retailers at primary production.

FSSC 22000Scheme owner's certification programme
Food Safety Certification Scheme

Requested by retailers and buyers across the food chain — built on ISO 22000 but a separate scheme from it.

EU EcolabelPublic-authority ecolabel
EU Ecolabel

A voluntary environmental label for defined product and service groups placed on the EU market — licensed by a public authority.

LEEDRating or award programme
Green Building Rating Programme

A points-based rating for building and interior projects — it certifies the project, not the company.

SMETA (Sedex Members Ethical Trade Audit)Audit report or method
Sedex Ethical Trade Audit Methodology

SMETA is not a certificate — it is an audit methodology. In Sedex's own words: 'Sedex owns and evolves the SMETA methodology.' 2024 saw 115,000 site visits.

C-TPATGovernment status programme
US Customs Trade Partnership Status (C-TPAT)

IMPORTANT: this is NOT a certification scheme — it is a voluntary government partnership/status programme run by US Customs and Border Protection (CBP). More than 11,400 certified partners, covering over 52 percent (by value) of cargo imported into the US.

All certification programmes →

Frameworks & Audits

Assurance beyond the ISO catalog.

Attestations, authorization programs, certifiable frameworks and audit schemes that sit outside the ISO management-system catalog. Every record names its class honestly — an attestation is a report, not a certificate — and links to the owner's own pages.

SOC 2Attestation
SOC 2

SOC 2 is an AICPA attestation: the output is an examination report, not a certificate, examining a service organization's system and controls.

FedRAMPAuthorization program
Federal Risk and Authorization Management Program

FedRAMP is the U.S. federal cloud authorization program run by GSA under the FedRAMP Authorization Act — agencies grant authorizations, not certificates.

NIST CSF 2.0Framework
The NIST Cybersecurity Framework (CSF) 2.0

The NIST Cybersecurity Framework 2.0 is guidance a business aligns with, not a certification — published by NIST as CSWP 29 on 26 February 2024.

All frameworks & audits →

Regulations

The law, in its own words.

Binding legal instruments whose scope, dates and penalty ceilings are quoted verbatim from the official text, article numbers and source links included. Whether one applies to your organisation is a question this library never answers for you.

GDPREU
Regulation (EU) 2016/679

GDPR is Regulation (EU) 2016/679, applicable from 25 May 2018 — its territorial scope and fine ceilings are reproduced verbatim on this page.

NIS2 DirectiveEU
Directive (EU) 2022/2555

Directive (EU) 2022/2555 (NIS2): Article 2 sets out which entities are in scope; Member States had to transpose it by 17 October 2024.

DORAEU
Regulation (EU) 2022/2554

Regulation (EU) 2022/2554 (DORA) applies from 17 January 2025; Article 2 lists the financial entities and ICT third-party providers in scope.

HIPAAUS
Public Law 104-191 (Aug. 21, 1996); Administrative Simplification rules at 45 CFR Parts 160 and 164

HIPAA is Public Law 104-191 (1996); the applicability rule in 45 CFR 160.102 and the civil penalty tiers are reproduced verbatim on this page.

CCPAUS
Cal. Civ. Code §§ 1798.100–1798.199.100 (Division 3, Part 4, Title 1.81.5)

The CCPA is Cal. Civ. Code §§ 1798.100–1798.199.100; the "business" thresholds and the administrative fine ceiling are reproduced verbatim here.

UK GDPRGB
Regulation (EU) 2016/679 (UK GDPR)

The UK GDPR is Regulation (EU) 2016/679 as it applies in UK law; Article 3 scope and the Article 83 fine ceilings are reproduced verbatim here.

Data Protection Act 2018GB
2018 c. 12

The Data Protection Act 2018 (2018 c. 12) sits alongside the UK GDPR; s.207 scope and the s.157 penalty maximums are reproduced verbatim here.

Texas Data Privacy and Security ActUS
Tex. Bus. & Com. Code ch. 541 (added by HB 4, 88th Legislature, Regular Session, 2023)

The Texas Data Privacy and Security Act applies by business-size test rather than a revenue threshold; its scope and $7,500 penalty cap are reproduced here.

Virginia Consumer Data Protection ActUS
Va. Code §§ 59.1-575 et seq. (Title 59.1, Chapter 53)

Virginia's Consumer Data Protection Act has no revenue threshold: scope turns on consumer counts, and the statute's own exemption list is reproduced here.

PECRGB
S.I. 2003 No. 2426

PECR's cookie rule and penalty regime were rewritten on 5 February 2026; this record carries the wording now in force, not the superseded text.

All regulations →

Accreditation Bodies

Who accredits the certifiers.

The accreditation body is the organisation that accredits a country's certification bodies and runs the official register where a certificate can be checked. One record per body, linking to that register.

ANABUnited States
ANSI National Accreditation Board
NVLAPUnited States
National Voluntary Laboratory Accreditation Program (NIST)
NATAAustralia
National Association of Testing Authorities
All accreditation bodies →

Industry guides

Start with your sector.

Which records can become candidates in a given field, and which questions actually decide. A sector name alone does not produce a result.

01Manufacturing and IndustryQuality, environment, workplace safety and supply chain requirements→02Food and AgricultureFood safety, production, processing and traceability programmes→03Technology and DataInformation security, service management and AI governance→04Construction and Built EnvironmentSite safety, environment, quality and project-focused requirements→05HealthcareHealthcare services, medical devices and laboratory requirements→06Tourism and ServicesHospitality, events and sustainable service programmes→
All industry guides →

Countries

Jurisdictions, not languages.

A full guide opens for a country once its data is verified — every other country is reachable through its national accreditation body.

AU
Australia
BR
Brazil
CA
Canada
CN
China
EU
European Union
DE
Germany
All country guides →

Entry points

Pick a way in.

The same records, indexed six ways.

By standardEvery published ISO management system standard.By schemeCertification programmes that are not ISO standards.By frameworkAttestations, authorization programs and audit schemes that are not ISO standards.By regulationLegal instruments, reproduced in their own wording with the article numbers.By sectorWhat tends to be a candidate in a given field.By searchA name, a topic or an industry.

How this library works

Every record points at its source.

A certificate is a claim about a document, a body and a scope. This library keeps those three things separate, shows where each one comes from, and dates the check.

Search the library
01
Primary sourceEvery record links to the document or register it was taken from.
02
Verification dateEvery record shows when its facts were last checked against that source. The date moves when the check is repeated, not when the page is edited.
03
Separate classesAn ISO standard, a scheme owner's programme, an ecolabel and an award are not the same object, and are never merged.
04
Plain languageWhat it covers, who it applies to, what triggers an assessment and what it does not replace.
05
Nothing unverifiedA record is not published until its source is confirmed. Unconfirmed ones stay in the queue.

Scope of this library

What this library does, and what it does not.

Stated plainly, so you know what you are reading and what you still have to do elsewhere.

What this library does

  • Explains what a certificate is, who issues it, and how it's verified
  • Separates certification, accreditation, permits and awards
  • Ties every claim to a primary source

What this library does not do

  • Issue certificates itself — that's always an independent certification body's job
  • Sell advisory or consultancy services — clearly labeled, self-serve product templates are a separate, non-editorial offering
  • Publish anything unverified
Read the full editorial statement →