Certificates of conformity
What conformity statements attest, how issuer and scope affect their meaning, and why declarations, test reports and third-party certificates differ.
Tags: sourcing, documents, conformity
On this page
A certificate of conformity is a statement that an identified object meets identified requirements. In manufacturing commerce, similar documents may be called certificates of conformance, compliance certificates or supplier declarations. The title alone does not establish who evaluated the product, which requirements were covered or whether an independent body was involved.
Original example: quantity coverage is not conformity proof
Assume an invented shipment contains 120 brackets, all ordered as part P-42 revision C. A supplier statement explicitly covers 80 units from lot L1 to revision C. A separate statement covers 40 units from lot L2, but identifies revision B. No equivalence or revision-change evidence is included in the example.
The quantities add up to 120, with 80 of 120 (66.7%) covered by a statement for revision C. The other 40 units have a revision mismatch in their paperwork. Their physical conformity to revision C remains undetermined.
Suppose a test report additionally shows acceptable thickness measurements on five samples from L1. The report provides evidence about those samples and that measured characteristic. It does not convert 5/120 into a general “conformity percentage,” nor establish the other drawing requirements. Whether the sample represents the lot depends on the applicable sampling and assessment basis, which this example deliberately does not assume.
A third document covering all 120 units could add evidence, but simply adding document quantities would risk counting the same units twice. Population identity and overlap determine coverage; the number of certificates does not.
Supplier declaration versus third-party certification
Conformity assessment is broader than the certificate itself. NIST describes activities including supplier declarations, testing, inspection, certification and accreditation. It distinguishes the supplier/manufacturer as a first party, the purchaser/user as a second party and an independent entity as a third party. The relationships concern the assessment, not simply the number of signatures on a page. NIST conformity-assessment basics
ISO's conformity-assessment guidance describes a supplier's declaration of conformity as a first-party attestation that specified requirements are fulfilled. It distinguishes this from third-party assessment activity. An outside laboratory can contribute test evidence without becoming the issuer of the supplier's declaration or certifying every aspect of the finished product. ISO, attestations of conformity
ISO/IEC 17050-1:2004 provides general requirements for supplier declarations across sectors. Its object can be a product, process, management system, person or body. ISO identifies edition 1, October 2004, an English corrected version dated June 2007, and confirmation in 2025. This general framework does not replace product-specific legal or contractual requirements. ISO/IEC 17050-1:2004
The associated ISO/IEC 17050-2:2004 addresses supporting documentation that substantiates the declaration. The distinction matters: an attestation summarizes a conclusion; the underlying technical evidence is a different body of information. A short certificate need not reproduce every measurement, but its brevity does not transform an unsupported assertion into test evidence. ISO/IEC 17050-2:2004 scope
Scope gives the statement meaning
As explanatory synthesis, a conformity statement has several independent dimensions: the issuing organization, the identified item or population, the stated requirements and the condition or period covered. A part number identifies a design family; a revision identifies a version; a lot or serial range can identify a production population. None automatically substitutes for the others.
A statement concerning material composition is narrower than one covering all drawing dimensions, heat treatment, coating and functional tests. A declaration against a purchase order may incorporate several requirements by reference, but the actual scope depends on its wording and incorporated documents. “Meets specification” without an identifiable specification leaves the claimed requirement unresolved.
Revision differences are also substantive. A test report against revision B does not, by its date alone, establish conformity to revision C. The effect depends on what changed and whether the earlier evidence addresses the new requirements. Conversely, a later issue date does not necessarily imply a newer design revision.
Regulatory examples have defined jurisdictions
In the European Union, an EU declaration of conformity has a specific role under applicable product legislation. Your Europe's guidance, marked last checked August 31, 2026, explains the manufacturer's responsibility and the relationship between the declaration, conformity assessment and technical documentation. This is distinct from an ordinary commercial supplier certificate; not every manufactured object is subject to the same declaration regime. Your Europe, signing a declaration
The European Commission separately explains that some assessment routes involve a notified body. Certificates issued by that body state what was verified, while the manufacturer still issues its EU declaration under the relevant legislation. A notified-body certificate and the manufacturer's declaration are consequently different documents with related but nonidentical functions. European Commission, manufacturers and CE marking
In the United States, CPSC's General Certificate of Conformity (GCC) applies to general-use consumer products subject to relevant CPSC-enforced requirements. CPSC explains that the responsible domestic manufacturer or importer issues the GCC based on the applicable testing basis; general-use products do not universally require a CPSC-accepted third-party laboratory. Children's-product certification has different testing requirements. Thus a GCC is not a generic certificate for every industrial component and is not necessarily an independent certification. CPSC GCC FAQ
These examples explain why the same-looking document cannot be presumed equivalent across markets or product categories. The cited authority guidance describes its own regime; it does not assign a regulatory category to an unspecified product.
Related documents attest different things
| Document | Typical evidential focus | Scope limitation |
|---|---|---|
| Supplier conformity statement | Issuer's attestation against identified requirements | Independent assessment is not established by the title |
| Test report | Results for identified specimens under stated methods | Results do not automatically cover every production item or requirement |
| Third-party product certificate | Assessment under the identified certification scheme | Model, site, conditions and scheme scope remain relevant |
| Management-system certificate | Organization's management system within its scope | Not product certification for each delivered item |
ISO's expected-outcomes guidance for ISO 9001 explicitly states that the standard concerns an organization's quality management system rather than its products. Accredited management-system certification does not imply that the product itself is certified against another specification. A supplier's ISO 9001 certificate and its delivery conformity statement therefore address different objects. ISO/IAF expected outcomes of ISO 9001 certification
Evidence and continuing applicability
A conformity statement can be accurate for its stated object and still be insufficient for a broader claim. Changes in design, material, production or the applicable requirements can affect the relevance of earlier evidence. CPSC's guidance, for example, says that certificates must remain accurate and discusses material changes as a reason for renewed evaluation within its regime. CPSC GCC FAQ
A signature attributes a statement to an issuer; it is not itself a measurement or an unlimited guarantee of service performance. Certificate scope, test conditions and the intended claim remain separate questions. The legal significance of a particular document follows its applicable legislation or agreement, rather than a universal meaning of “CoC.”
Sources were reviewed on 2026-11-02 PST. ISO edition/correction dates and the EU page's checked date are expressly stated by the publishers. Other cited living guidance is not assigned a publication date from its footer or URL.