Management system certification · Abu Dhabi
Certification, recorded so it can be checked.
We audit management systems against international standards and, where a system conforms, we say so in a certificate anyone can verify in one step. Every certification we grant is published — including any we suspend.
UMA operates to ISO/IEC 17021-1. Accreditation by EIAC has not yet been granted, and UMA does not yet issue accredited certification. What this means →
- Standards
- ISO 9001 · 14001 · 45001 · ISO/IEC 27001 · 42001 · ADHICS
- Public register
- Every certificate we issue, searchable without a login
- Published deadlines
- Appeals decided in 60 days · complaints in 30
Six standards, audited against
the evidence in front of us.
ISO/IEC 27001
Information security
How you determine information security risks, choose controls against them, and check whether those controls actually work.
Read moreADHICS
Healthcare information security, Abu Dhabi
The Department of Health – Abu Dhabi information and cyber security standard for healthcare entities operating in the emirate.
Read moreISO/IEC 42001
Artificial intelligence
How you govern the AI systems you build, provide or use — impacts, data and model control, human oversight, accountability.
Read moreHow certification works.
- 01
Application
You tell us the standards, the scope, how many people are in it and how many sites.
- 02
Application review
We work out the audit time, confirm we have a competent auditor for every standard, and quote.
- 03
Stage 1 audit
Is the management system designed and documented well enough to be audited against?
- 04
Stage 2 audit
Is it actually implemented and working — on the evidence, at your sites.
- 05
Findings and corrective action
Anything that does not conform is written up, and you respond with a corrective action.
- 06
Certification decision
Taken by someone who had no part in your audit. That independence is enforced, not promised.
- 07
Certificate
Issued, and published in the public register the same moment.
- 08
Surveillance
Once in each of the two years after certification. The first is due within 12 months of the decision.
- 09
Recertification
Before the three years are up, the whole system is audited again.
0
Working days to acknowledge every complaint and every appeal
0
Days to decide an appeal, from the day it reaches us
0
Days to resolve a complaint
0
Years of certificate validity, with surveillance in each
Enforced by the system, not by memory.
Undertakings are easy to write. These are constraints in the system that runs UMA — they refuse the action rather than record a policy about it.
- Records
- Append-only. A correction supersedes; nothing is ever deleted.
- Independence
- Nobody decides certification on an audit they worked on.
- Competence
- An auditor without a current authorisation cannot be put on an audit.
- Conflicts
- Every auditor confirms they have no conflict with you before assignment. Without it, the assignment is refused.
- Pricing
- Audit days are computed from the standard, your size and your sites. Any change to a computed price carries a recorded reason.
- Publication
- A suspension appears the moment it is recorded, because status is read live rather than published on a schedule.
Every certification we issue is public.
The directory lists every certification in force. The verification page checks any certificate number against the same live record — no login, no form, no waiting for a reply. Some bodies make you email them to validate a certificate. We think that is the wrong way round.
0
certifications in force
UMA has not yet issued a certificate. We would rather show you an empty register that works than a full one you cannot check.
Talk to us.
A quotation, a question, an appeal or a complaint. Anyone can complain to us: you do not have to be our client, and it will never be held against you if you are.