Accreditation vs Certification in Saudi Arabia: What Labs, Inspection Bodies and Training Providers Actually Need

Accreditation vs certification in Saudi Arabia comes down to what is being assessed and who performs the assessment. Certification is a third-party attestation that a product, process, service, management system or person meets defined requirements. Accreditation formally recognises that a conformity assessment body is competent and impartial for specified testing, inspection or certification activities. In the Kingdom, the national accreditation body is the Saudi Accreditation Center (SAAC), while the Saudi Standards, Metrology and Quality Organization (SASO) sets standards and technical regulations and runs conformity programmes. Laboratories, inspection bodies and certification bodies pursue accreditation, while ordinary businesses seeking ISO management-system recognition normally pursue certification.

The three-layer chain behind every credible certificate

The confusion clears once you see the chain of recognition underneath a certificate. There are three layers, and each checks the one below.

Layer one is the accreditation body. In Saudi Arabia this is SAAC, with the GCC Accreditation Center (GAC) acting at regional level. An accreditation body assesses whether a conformity assessment body is technically competent, impartial and consistent; it does not issue ordinary ISO management-system certificates to businesses. Internationally recognised accreditation bodies operate in accordance with ISO/IEC 17011 and are peer evaluated for recognition under the applicable arrangement.

Layer two is the conformity assessment body, or CAB. CABs include certification bodies, testing, calibration and medical laboratories, inspection bodies and personnel certification bodies. An accredited CAB holds accreditation for a defined scope and, depending on its activity, issues certificates, test or calibration reports, or inspection reports.

Layer three is your organisation. An ordinary business may hold a management-system certificate or rely on an accredited test, calibration or inspection report. It is normally described as certified rather than accredited unless it is itself a conformity assessment body. Learn more about Qdot's accreditation services.

A common error in Saudi tender and supplier documents is collapsing layers one and two. A business may claim to be "SAAC certified", although SAAC normally accredits the conformity assessment body that performs the relevant certification, testing or inspection. Similarly, a SASO certificate or SABER/SALEEM registration is a product-conformity requirement and is a different thing from accreditation.

Above all three layers sits Global Accreditation Cooperation Incorporated, known as Global ACI. It accredits and certifies nobody. It operates the arrangement through which one country's accreditation is recognised in another.

Who does what in Saudi Arabia

Several Saudi bodies appear in compliance conversations, and they are often confused. They have different mandates, so confirm which one applies to your activity before you submit an application.

SAAC, the national accreditation body

SAAC accredits conformity assessment bodies against the relevant ISO/IEC standards, for example testing and calibration laboratories under ISO/IEC 17025, medical laboratories under ISO 15189, inspection bodies under ISO/IEC 17020 and certification bodies under the ISO/IEC 17065, 17021-1 and 17024 families. Its exact list of schemes, scopes and international recognition status changes over time, so check SAAC's current published scheme list and its status within the Global ACI arrangement for your activity.

SASO, standards and conformity programmes

SASO develops Saudi standards and technical regulations and administers conformity programmes for products, such as the SABER platform and related schemes. These programmes may require testing, inspection or certification by recognised or accredited bodies. SASO programmes define what you must comply with; accreditation is how the bodies assessing you prove their competence.

GAC, the regional layer

The GCC Accreditation Center (GAC) supports accreditation across the Gulf Cooperation Council. Where GCC-wide acceptance matters, such as for GCC conformity schemes, check how GAC and SAAC recognition applies to the scope you need.

Sector regulators and licensing bodies

Some sectors have their own authorities. The Saudi Food and Drug Authority (SFDA) regulates food, drugs and medical devices, including halal-related requirements. The Saudi Central Board for Accreditation of Healthcare Institutions (CBAHI) accredits healthcare facilities against its own standards. Training and education providers are licensed or evaluated by bodies such as the Technical and Vocational Training Corporation (TVTC) and the Education and Training Evaluation Commission (ETEC), depending on the type of provider. These authorities grant regulatory permission or sector-specific accreditation; they are not the same as ISO/IEC 17011-based accreditation of conformity assessment bodies. Always confirm the current scope of each authority directly.

Which standards you are accredited to, and which you are certified against

The verb changes depending on which layer of the chain the standard sits in.

Several ISO/IEC 17000-series standards establish requirements for particular types of conformity assessment bodies, which can be accredited for a defined scope. Certifiable management-system standards establish requirements for an organisation's management system, against which the organisation may seek certification. This is why "ISO 17025 certification" is not the technically correct phrase for a laboratory: the laboratory is accredited against ISO/IEC 17025. Using the correct term when preparing a laboratory for ISO/IEC 17025 assessment helps avoid confusion during the application and assessment process.

What changed in 2026 and why older guidance may be wrong

Two important changes occurred in early 2026, and much published guidance predates them. For the consultant side of this chain, see our guide to choosing an ISO certification consultant in Saudi Arabia.

Global ACI replaced two international organisations. On 1 January 2026, Global Accreditation Cooperation Incorporated began operating as the single body managing multilateral recognition arrangements across conformity assessment, unifying the work previously done by the International Accreditation Forum and the International Laboratory Accreditation Cooperation. One Global ACI Multilateral Recognition Arrangement replaced the former IAF MLA and ILAC MRA.

For an organisation holding a certificate, the immediate effect is limited. Existing recognised accreditations and certificates continue through the transition, and no ISO standard changed because Global ACI began operating. IAF MLA and ILAC MRA marks may still appear under approved transitional arrangements, so their presence does not by itself make a certificate invalid.

Two conformity assessment standards were revised. ISO/IEC 17020:2026 was published on 27 March 2026, replacing the 2012 edition, with a shortened title focused on requirements for bodies performing inspection. ISO/IEC 17024:2026 also replaced its 2012 edition in March 2026, and ISO states the revision addresses modern challenges including AI-based assessment tools. Inspection bodies seeking ISO/IEC 17020 readiness support should review these timeline requirements early.

If you are an inspection body or personnel certification body in Saudi Arabia, check the transition plan published by SAAC and confirm any scope-specific deadline directly. A document that still references a 2012 edition should be checked against the applicable transition requirements rather than automatically treated as invalid.

Where training providers actually sit, and why the answer disappoints people

ISO/IEC 17024 does not accredit a training provider merely because it delivers courses. It applies to bodies that independently certify people against the requirements of a defined certification scheme. Training approval, organisational certification, personnel certification and regulatory licensing are separate forms of recognition.

An organisation running courses and issuing certificates of attendance is not eligible for accreditation on that basis alone. The standard becomes relevant when understanding what a personnel certification body has to put in place: a defined competence framework, an independent assessment, an impartial certification decision and a recertification cycle.

That leaves training providers a smaller and more honest set of options:

• Deliver training connected to a recognised personnel-certification scheme. Where the scheme rules permit it, a training provider may be approved or recognised by the scheme owner or personnel certification body. The personnel certification body holds the accreditation and must maintain impartiality between training and the independent certification decision. Any claim should identify the exact scheme, approving body and limits of the approval.
• Certify the organisation, not the course. ISO 9001 covers the quality management system of the training business and ISO 21001 covers educational organisations. Both are certification, and neither makes an individual course "accredited".
• Hold the correct Saudi licence. Training institutes must be licensed or approved by the relevant Saudi authority, such as TVTC for technical and vocational training. That licence is a regulatory permission to operate, separate from accreditation and certification.

The distinction that matters to a buyer is whether the document confirms participation or independently verified competence. A certificate of attendance generally confirms participation in training. Accredited personnel certification confirms that an independent certification body assessed the person's competence against a defined scheme and made a certification decision.

How to check whether a certificate is genuinely accredited

Use these steps before accepting a supplier's certificate or committing to a certification body. For more clarification, review the questions our consultants are asked most often.

1. Identify the claimed accreditation. Look for the accreditation body's name or symbol and the certification body's accreditation number or other traceable reference. Because mark-use rules vary, do not rely on the logo alone. If the status is unclear, ask the certification body to confirm whether the certificate was issued within its accredited scope.
2. Verify the accreditation body and recognition scope. Check that the accreditation body operates in accordance with ISO/IEC 17011. Where international recognition is required, verify that it is a Global ACI MRA signatory for the relevant activity and scope. Absence from the arrangement may limit international acceptance, but it does not by itself prove that an organisation is fake or acting unlawfully.
3. Read the scope, not just the logo. A body accredited for ISO 9001 certification is not automatically accredited for ISO 45001, and a laboratory accredited for one test method is not accredited for every test on its price list.
4. Verify on the public register. SAAC publishes a directory of accredited bodies, and the certification body's own certificate directory should match it. Check any SASO or sector-regulator requirement separately.
5. Check the legal entity, sites and dates. A certificate applies to the named legal entity, included sites, defined scope and stated certification period. Do not assume that a parent company's or group certificate automatically covers every subsidiary or location.

Mistakes that cost Saudi organisations time and money

• Treating price as the deciding factor. A non-accredited certificate may cost less because the certification body is not subject to accreditation oversight for that service. Confirm the accreditation, scope and tender or customer requirements, including government and major-project procurement requirements, before choosing a provider.
• Confusing product conformity with accreditation. SASO, SABER or SALEEM requirements concern products. They do not replace the accreditation of the lab or certification body that supports them.
• Assuming one recognition covers everything. Recognition for one standard, scheme or regulator does not extend automatically to another.
• Expecting a consultancy to issue the certificate. A consultancy can support implementation and readiness, but the independent certification audit and certification decision must remain with the certification body. The same legal entity should not provide management-system consultancy and accredited management-system certification to the same client.
• Relying on pre-2026 material without checking updates. Guidance using the former IAF or ILAC terminology, or the 2012 editions of ISO/IEC 17020 and ISO/IEC 17024, should be checked against current Global ACI requirements and SAAC's transition plan. Legacy terminology or marks do not automatically make an existing accreditation or certificate invalid.

Accreditation vs certification in Saudi Arabia: deciding which route applies to you

If your organisation performs testing or calibration, ISO/IEC 17025 accreditation may be required by a regulator, customer, tender or conformity programme. Inspection bodies use ISO/IEC 17020, while bodies that independently certify people use ISO/IEC 17024. Organisations seeking third-party recognition of a management system normally pursue ISO certification in Saudi Arabia, such as ISO 9001, ISO 14001, ISO 45001 or ISO/IEC 27001, through an appropriately accredited certification body. Always confirm the required route and scope with the relevant regulator, accreditation body, scheme owner or contracting authority.

Qdot works on the readiness side of that chain. We are not a certification body and not an accreditation body, and we do not issue certificates. We prepare laboratories, inspection bodies, certification bodies and management system clients for assessment through gap analysis, documentation, competence records, internal audit and pre-assessment. The decision stays with the independent body assessing you.