Why ISO 17100 Certification Matters for Translation Businesses
ISO 17100 is the international standard for translation services. It specifies requirements for the resources, processes, and quality assurance activities that translation service providers must have in place. Getting certified to this standard is not just a marketing exercise. It signals to clients that your organisation follows a documented, auditable workflow with qualified people at every step.
On this page
If you are a translation agency or a language services business considering certification, you need to understand what the certification process actually involves. The path follows the same general structure used for most ISO management system certifications: a two stage initial audit, followed by surveillance audits at defined intervals within a three year certification cycle. Understanding each stage before you enter the process will save you time, money, and the frustration of arriving unprepared.
This article walks you through the entire ISO 17100 certification process, from selecting a certification body to what happens at the end of your three year cycle.
Choosing a Certification Body
Before any audit takes place, you need to engage an accredited certification body. In Australia, certification bodies must be accredited by JAS-ANZ (the Joint Accreditation System of Australia and New Zealand) or another internationally recognised accreditation body that is a member of the International Accreditation Forum. This accreditation is what gives your certificate credibility in the marketplace.
Not all certification bodies offer ISO 17100 certification. It is a sector-specific standard, and some bodies focus primarily on quality, environmental, and safety management standards. You will need to confirm that the body you approach has the technical competence and scope to audit against ISO 17100.
When comparing certification bodies, ask about their experience with translation and language services, their audit team competencies, and their fees. The fees will typically cover the Stage 1 audit, Stage 2 audit, annual surveillance audits, and recertification. Get a clear quote upfront so you can plan your budget across the full three year cycle.
Exemplar Global Recognised Training ProviderRTP No. 310970
The Application and Pre-Audit Documentation Review
Once you have selected a certification body and submitted your application, the body will request documentation to understand the scope and complexity of your organisation. This typically includes your quality manual or equivalent system documentation, your organisational structure, the languages you work in, and the types of translation services you provide.
The certification body uses this information to calculate the audit duration. Audit time is generally based on the number of staff, the complexity of your processes, and the breadth of your service scope. For ISO 17100, the auditor will also need to understand how many translators, revisers, and reviewers you engage, whether they are employees or freelancers, and how you manage their competence records.
This pre-audit stage is also your opportunity to conduct a thorough gap analysis against the standard. If you have not already done a structured gap analysis, do it now. Compare your current practices against every clause of ISO 17100, identify where documented evidence is missing or incomplete, and address those gaps before the Stage 1 audit begins.
Stage 1: The Documentation Audit
The Stage 1 audit is sometimes called the readiness review or the documentation audit. Its purpose is to assess whether your organisation is ready to proceed to the Stage 2 audit. The auditor is not yet verifying that your system is fully implemented. They are checking whether your documented system is adequate and whether you understand the requirements of the standard.
What the Stage 1 Auditor Reviews
For ISO 17100, the Stage 1 audit will typically examine the following:
- Your quality management documentation and how it addresses the specific requirements of ISO 17100
- Evidence that you have defined the scope of your certification, including the language combinations and service types covered
- Documented procedures for the pre-production phase, including how you handle enquiries, quotations, and project agreements under Clause 4
- Your documented production workflow, including how you manage translation, revision, and any additional production steps under Clause 5
- Post-production procedures covering feedback, archiving, and data protection under Clause 6
- Competence records for translators, revisers, reviewers, and project managers, demonstrating that they meet the qualification requirements in Clause 3
- Evidence that your internal audit programme is established and that at least one internal audit has been conducted
- Evidence that a management review has been completed
That last point catches many organisations off guard. The Stage 1 audit is not just a document review. The certification body wants to see that your management system is actually running. If you have built a set of procedures but never conducted an internal audit or a management review, you are not ready for Stage 1.
Stage 1 Findings and Outcomes
After the Stage 1 audit, the auditor will identify any areas where your documentation does not adequately address the standard, or where there are gaps in your system readiness. These may be raised as nonconformities or as points requiring clarification before Stage 2 can proceed.
Common Stage 1 findings in ISO 17100 audits include incomplete competence records for freelance translators, missing documented agreements with clients that capture the project-specific requirements referenced in Clause 4, and inadequate evidence that revision by a second qualified person is consistently applied as required under Clause 5.
The Stage 1 audit also helps the auditor plan the Stage 2 audit. They will identify which processes and records to focus on and determine whether any specialist technical knowledge is needed in the audit team.
Stage 2: The Implementation Audit
The Stage 2 audit is where the real work happens. This is the on-site (or remote) audit where the auditor verifies that your management system is implemented, operational, and effective. They are not just reading documents. They are tracing your processes through actual project records, interviewing your team, and confirming that what is written in your procedures matches what is actually happening.
What the Stage 2 Auditor Examines
For ISO 17100, a Stage 2 audit typically covers the following areas in depth:
- Pre-production conformity: The auditor will select a sample of completed projects and trace them back through the pre-production phase. They will check that client enquiries were handled correctly, that agreements captured all required project specifications, and that any client-specific requirements were documented and communicated to the production team.
- Production workflow conformity: This is the core of any ISO 17100 audit. The auditor will verify that every project in the sample went through the required production steps. Translation, check, revision by a second qualified person, and any additional services must be documented. The auditor will look for evidence that shortcuts were not taken, particularly on the revision step.
- Reviser and translator qualifications: The auditor will cross-reference the translators and revisers who worked on sampled projects against your competence records. They will confirm that each person meets the qualification requirements of Clause 3, whether through formal translation qualifications, documented equivalent competence, or the transitional pathway.
- Post-production activities: The auditor will check that completed projects were handled appropriately after delivery. This includes client feedback processes, archiving of project records, and data protection measures for client materials.
- Internal audit and management review: The auditor will verify that your internal audit programme is functioning and that management review meetings are being conducted with appropriate inputs and outputs.
- Nonconformity and corrective action: If any nonconformities have been identified through your internal audits or client feedback, the auditor will check that root cause analysis was conducted and that corrective actions were implemented and verified.
Audit Sampling in Practice
The auditor cannot review every project you have completed. They will select a sample based on risk, the breadth of your service scope, and the language combinations in your certification scope. If you work across a large number of language pairs, expect the auditor to sample across several of them rather than focusing only on your highest-volume languages.
Prepare your project files so they are easy to navigate. The auditor needs to move efficiently through the evidence. If your records are scattered across multiple systems or folders with inconsistent naming conventions, you will lose time and create the impression that your document control is not well managed.
Stage 2 Outcomes
At the end of the Stage 2 audit, the auditor will present their findings at a closing meeting. Possible outcomes include:
- Recommendation for certification: No major nonconformities were found. Minor nonconformities, if any, are agreed with a defined timeframe for closure.
- Conditional recommendation: Minor nonconformities must be closed before the certification body makes its final decision.
- Not recommended for certification: Major nonconformities were found. These must be addressed, and the organisation may need to undergo a further audit before certification can be granted.
If the recommendation is positive and the certification body's review panel approves it, your ISO 17100 certificate will be issued. The certificate will specify the scope of certification, the standard version, and the validity period.
The Three Year Certification Cycle
ISO 17100 certification is not a one-time event. It operates on a three year cycle with ongoing obligations. Understanding this cycle is essential for maintaining your certificate without interruption.
Year One: Surveillance Audit One
Approximately twelve months after your initial certification, the certification body will conduct the first surveillance audit. This audit is shorter than the Stage 2 audit. It does not cover every clause of the standard. Instead, it focuses on key processes, any areas where findings were raised during the Stage 2 audit, and evidence that your system continues to operate effectively.
For ISO 17100, the first surveillance audit typically examines your internal audit results from the past year, any corrective actions raised and their closure, evidence of ongoing compliance with the production workflow requirements, and any significant changes to your organisation, personnel, or service scope since certification.
Personnel changes are a common trigger for findings at surveillance audits. If a key reviser has left and you have engaged a replacement, the auditor will want to see that the new person meets the qualification requirements and that their competence records are complete.
Year Two: Surveillance Audit Two
The second surveillance audit follows approximately twelve months after the first. It follows a similar format but may focus on different processes to ensure that the full scope of the standard is covered across the cycle. The certification body plans surveillance audits to achieve coverage of all significant clauses over the three year period, not just the most visible ones.
By the second surveillance audit, the auditor expects to see a system that is maturing. Corrective actions from earlier audits should be closed. Internal audits should be producing useful findings rather than clean results every time. Management review records should show that your leadership team is genuinely engaging with the data your system generates.
Year Three: Recertification Audit
At the end of the three year cycle, you must undergo a recertification audit to renew your certificate. This is a more comprehensive audit than a surveillance audit. It covers the full scope of the standard and assesses the overall effectiveness of your management system over the three year period.
The recertification audit is essentially a repeat of the Stage 2 audit, though experienced organisations tend to move through it more efficiently because their systems are established and their teams are familiar with the audit process. The auditor will review the history of your internal audits, corrective actions, and management reviews across the entire cycle, not just the most recent year.
If the recertification audit is successful, a new three year certificate is issued and the cycle begins again. If you allow your certificate to lapse by missing a surveillance audit or failing to schedule the recertification audit in time, you may need to restart the process from Stage 1.
Maintaining Conformity Between Audits
The biggest mistake organisations make after achieving ISO 17100 certification is treating it as a project that is now complete. Certification is not a destination. It is an ongoing commitment to operating your translation processes in conformity with the standard.
Between audits, you need to maintain your internal audit programme, keep competence records current for all translators and revisers, document project agreements and production records consistently, and address any client complaints or internal quality issues through your corrective action process.
If your organisation grows, adds new language pairs, or changes its production workflow, you need to assess whether those changes affect your certification scope. Significant changes should be communicated to your certification body. Adding a new language combination that falls outside your current scope, for example, may require a scope extension audit.
For anyone involved in managing or auditing translation service providers, understanding how the Stage 1 and Stage 2 audit process works in practice is essential groundwork before entering the certification process.
Exemplar Global Recognised Training ProviderRTP No. 310970Common Reasons ISO 17100 Certification Is Delayed
Having supported organisations through various ISO certification processes, the most common reasons for delays are predictable and avoidable:
- Incomplete competence records: Translator and reviser qualifications are central to ISO 17100. If you cannot produce documented evidence that your people meet the standard's requirements, the auditor cannot confirm conformity. Build your competence records before you apply for certification, not during the Stage 1 audit.
- Inconsistent revision records: The requirement for revision by a second qualified person is the signature requirement of ISO 17100. Auditors look for this in every sampled project. If your project records do not consistently show who performed the revision and when, you have a problem that will generate a nonconformity.
- No internal audit history: The certification body expects to see that your internal audit programme is running. A single internal audit conducted the week before the Stage 1 audit is not convincing evidence of an operational system.
- Scope creep without documentation: Some organisations certify a narrow scope and then quietly expand their services without updating their system documentation or notifying the certification body. This creates gaps that are visible to an experienced auditor.
If you are preparing your team for the certification process, reviewing how to prepare for a certification audit as the quality manager will give you a practical framework that applies across ISO standards including ISO 17100.
How Audit Workshop Training Supports Your ISO 17100 Journey
Whether you are the quality manager responsible for maintaining your organisation's ISO 17100 system, an internal auditor conducting the audits your certification body expects to see evidence of, or a lead auditor working with translation service providers, formal auditor training gives you the skills to approach these audits with confidence.
Audit Workshop delivers practical, accredited training for internal auditors and lead auditors across ISO 9001, ISO 14001, and ISO 45001. The auditing skills you develop through these courses, including how to plan and conduct audits, gather evidence, write nonconformity reports, and manage closing meetings, are directly transferable to ISO 17100 audits. The standard may be sector-specific, but the audit methodology is the same.
If you are building your internal audit capability or considering a career in ISO auditing, explore the step by step guide to becoming an ISO internal auditor to understand where to start.
