How to Verify a Tilt and Turn Window Company Credentials: The Certificate You Can Check Is Not the One That Answers Your Question

Start Here: Verification Is Not One Action, It Is Six Different Actions

The word credentials sounds like one thing. In a window purchase it is at least six, and they are not the same kind of object. One is a government record. One is an audit opinion about a company. One is a laboratory result about a specimen. One is a legal declaration signed by the seller. One is a letter from somebody else's supplier. One is a photograph of a finished building. You cannot verify them with the same move, and the move that works beautifully on the first one does nothing at all on the third.

That is the whole reason this question is hard. Buyers who have been told to "check the credentials" usually perform one check, on the one document that happens to be easy to check, and then treat the other five as done. The rest of this article is about which check belongs to which object, and about the uncomfortable fact that the object you most want to check is the one with no global register behind it.

Six Things That Get Called Credentials, and What Each One Can Never Tell You

Read the right-hand column once more. Five of the six rows carry a blind spot that no amount of checking closes. That is not cynicism, it is the shape of the objects. A certificate about a company is not a statement about a window, and no amount of looking at it harder turns it into one.

The First Hard Fact: The Standards Body Does Not Certify Anybody

Start with the sentence that settles more arguments than any other. The international standards organisation states publicly, on its own certification pages, that it does not perform certification or issue certificates, and that it does not permit anyone to use its logo in connection with certification. It goes further: because certification is performed by external bodies, a company or organisation cannot be certified by the standards body at all.

The same source adds that a certified organisation should use the certification body's own logo, not the standards body's logo, and that organisations should not use the standards body's logo to represent their certification status. Which gives you a very cheap first filter: a supplier page that shows the standards body's mark next to the word certified is displaying something that the standards body has asked people not to display. That is not proof of fraud. It is proof that nobody in that marketing department read the page they were borrowing the logo from.

Every Certificate Names Two Organisations, and Most Buyers Read Only One

Look at any management system certificate. There is the company that was audited, and there is the company that did the auditing. The second one is the certification body. On most certificates there is also a third party in the form of a small mark: the accreditation body, which is the organisation that assessed the certification body itself.

One honest caveat, and it comes from the standards body itself rather than from us: accreditation is not compulsory, and non-accreditation does not necessarily mean a certification body is not reputable. There are competent unaccredited bodies. There are also accredited ones whose scope does not cover what you are buying. The point of the accreditation mark is not that it proves goodness. It is that it makes the claim checkable, because the accreditation body maintains a register you can look at.

The Chain Has Three Links. Most Checks Stop at the First.

The One Global Register: What It Holds, and the Three Things It Deliberately Does Not

The standards body points buyers at a single global database for accredited certification, run in partnership with the International Accreditation Forum and described by that forum as the exclusive global register for accredited certifications. It is the closest thing this industry has to a public truth machine, and it is worth understanding precisely, because its limits are more instructive than its capabilities.

• You search either the company name or the certificate identifier. There is no other way in.
• A result shows the standard, the scope, the status, the certification body and the accreditation body. According to the forum's own guidance for certification bodies, no dates are shown.
• An unidentified user can validate a limited number of certificates per day, and a registered identified user somewhat more. The published figures in the forum's own guide are five and twenty per day respectively.
• No user can download or view a list of certificates issued by a given certification body, accreditation body, standard or economy. The database is designed to validate individual certificates, not to be browsed.
• The forum's own brochure describes its coverage in terms of certificates issued by a certification body accredited under the main scope of one particular conformity assessment standard: the one for bodies auditing and certifying management systems.

That last bullet is the one to underline. The global register you can actually search is built around management system certification. Your window is not a management system.

A PDF Carries a Printed Date. A PDF Does Not Expire.

Here is the sentence that should change how you file certificates: a certificate is a document, and certification is a status. The document carries dates. The status lives with the issuer, and it can change without the document changing at all.

Management system certification is publicly described as running on a cycle of roughly three years, with surveillance audits at least annually and a full recertification audit before expiry. A certificate can be suspended or withdrawn in the middle of that cycle. When that happens, nothing about the PDF on your desk is altered. It still has its issue date, its expiry date, its number and its logos. The only way to know is to ask the register.

There is a related tell. The forum's digital mark is designed so that if the status of the certificate changes, the mark disappears from the certified entity's website automatically, because the mark is generated rather than pasted. A flat image file of that mark has no such property. A supplier displaying the mark as a static picture is displaying something that the mark was specifically designed not to be: a picture that cannot go stale.

The Split Almost Nobody Mentions: Two Different Rulebooks Both Called Certification

Under the single word certification sit two structurally different activities, governed by two different standards for the bodies performing them. One certifies products. One certifies management systems. They are not interchangeable, regulators treat them as non-interchangeable, and buyers who do not know the difference spend their verification effort on the wrong one.

Public commentary on this distinction puts it bluntly: a quality management certificate does not certify that any specific product is safe or compliant, it certifies that the processes used to produce products meet the standard's requirements. And a national accreditation body's published guidance adds a second, sharper point that is worth quoting because it hands you a test you can run without any expertise: avoiding the use of the logo on specific products is an indicator that the scheme is not really about product or process certification. If the issuer will not let the mark go on the window, the certificate is not about the window.

So the Register You Can Type Into Does Not Hold the Certificate You Want

Put the last three sections together and the awkward conclusion arrives on its own. The thing a buyer can verify in an afternoon, from another continent, without asking anybody for permission, is the management system certificate. The thing a buyer actually needs is evidence about a window: what configuration was tested, to which method, classified under which scale, by which laboratory, and whether the sash they are ordering is inside that envelope. That second object travels under the product certification rulebook, and there is no equivalent global database you can type a certificate number into.

This is not a reason to stop verifying. It is a reason to change what you ask for. For the product side, the checkable artefact is not a certificate at all. It is a test report with a laboratory name, a standard, a version year, a specimen description and a date, plus a written statement of whether your configuration is the one that was tested.

Product Certification Itself Comes in Six Shapes, and They Are Not Equally Strong

Even once you have a genuine product certificate, the word covers a wide range. A national accreditation body's published guidance, summarising the international standard on product certification schemes, describes six basic options for how a scheme can be built. At one end sits a scheme where a sample is tested once and nothing happens afterwards. At the other sits a scheme with a validity term tied to ongoing surveillance that includes product testing, process inspection and quality system audits.

A Building Is the Textbook Case Where Product Certification Should Be Preferred

The same accreditation body guidance draws a line that lands squarely on this industry. It says that a management system certificate leaves the client to evaluate, at the end, whether the producer delivered what was asked for, and that where the client is not capable of defining the product specifications because the product needed is complex and bought once, product certification should be preferred. It gives a one-time purchase of a house or a building as its own example.

A window package for a building is exactly that shape. You will not be able to write the full specification yourself, and you will not be able to test the delivered result yourself. Which means the guidance is telling you to reach for the harder of the two certificates to obtain and, as established above, the harder of the two to verify across a border. That tension is real and it does not have a tidy resolution. It just means the verification work for an imported window package cannot be outsourced to a logo.

The Address Field Is the Most Informative Line on the Whole Certificate

If you read one field, read the addresses. Multi-site certification is a well-established arrangement with its own mandatory document, and the rules around it contain one sentence that is worth more to a buyer than any performance number on the page: sampling decides which sites an auditor visits, not which sites the certificate covers. Every site in scope is named. A certificate covering a group carries no conclusion about an address missing from it.

The sampling rule itself is published and simple: the minimum number of sites visited at initial certification is the square root of the number of sites in scope, rounded up, with the central function audited in addition. Across a certification cycle every site must be audited at least once. Applying that published formula ourselves gives the following floors, which are worth seeing as numbers rather than as prose.

Two further published cautions belong in this section. First, organisations can have sites that are simply not within the scope of the certification and not listed on it at all; the certificate is not wrong, the site is just outside it. Second, the quieter failure mode described by practitioners is not a bad audit, it is the site that was never on the certificate in the first place, usually because it opened mid-cycle and was never reported. The corrective habit recommended is to read the site list against the addresses on your current contracts, once a year, and raise the difference yourself.

One more structural point, because it decides whether sampling is available at all. Sites are only interchangeable for sampling when they do substantially the same work under the same management system, with a central function that can actually require a change at any site. An office that produces drawings and a plant that extrudes and assembles are not doing substantially the same work. Where the work differs materially, sampling does not reach the different site and it has to be assessed on its own account.

Three Names Must Match Character by Character

Verification across borders fails most often on names, not on numbers. The name on the certificate, the name on the business registration, the name on the proforma invoice and the name on the bank account should be the same legal entity, spelled the same way. Procurement teams checking group structures routinely ask whether the bidding legal entity is genuinely the certified one, because if one company holds the certificate and a different trading company submits the tender, the buyer has to ask what exactly is covered. The same question belongs on the first page of any enquiry sent to entry doors manufacturers or to window factories: which legal entity will appear on the contract, and is that the entity named on the certificate.

Sourcing practitioners put this in one line that is worth memorising: a genuine certificate held by the trading company is not the same as a certificate held by the factory, and you should always trace certification to the actual production site. The same author notes that a certificate whose scope only covers trading activities tells you nothing about the shop floor where your parts will be made. That is the entire argument for asking for the site list rather than the certificate summary.

Warning Signs That Cost Nothing to Spot

For Tilt and Turn Windows Specifically: What a Real Product File Looks Like

Everything above is generic to any manufactured product. Now to the specific artefact. A tilt and turn window is a single sash on a perimeter of hardware that performs two different motions, and the file that describes it has a recognisable shape. The harmonised product standard publicly cited for windows and pedestrian doorsets without fire or smoke characteristics carries a version with an amendment, and that full reference including the amendment year is part of what you should be quoting, because the number alone is the easy half and the year is the half that decides what was tested.

For orientation, one classification ladder is widely reproduced in public consultancy material: the watertightness classes run in steps from a class with no numerical requirement, then upward through a sequence of pressure differences, with the upper classes described as suited to commercial buildings and exposed locations, and the highest numbered class to high-rise buildings and coastal areas. The same public material notes that the test is performed either with the specimen protected or unprotected, and that the two are not the same result. Treat that ladder as a description of one publicly published table and verify it against the current edition before you rely on a class number.

Then the part that surprises people. Public summaries of the conformity system for ordinary windows and doors without fire or smoke characteristics describe initial type testing being carried out by a notified body or a laboratory accepted by it, with factory production control managed by the manufacturer itself. Read that twice. The part that decides whether the hundredth window matches the first one is not the part that anyone outside the factory can read.

The Hardware File Is a Separate Credential with a Different Owner

A tilt and turn sash does two motions on one frame, and the mechanism that makes that possible is made by somebody who is not the window factory. That produces a credential with an unusual property: it belongs to a third party, and it is usually easier to verify than the window factory's own paperwork, because you can write to the hardware manufacturer and ask whether a named company is authorised and whether your sash dimensions fall inside the published application range.

It is also, in practice, the ceiling. The largest sash a given platform will carry is published by the platform owner as a function of sash dimensions and glass weight, not by the factory assembling it. We have written about that ceiling elsewhere, so the point here is narrow: when you are verifying credentials, ask for the hardware supplier's letter and for the application range table, and check your own numbers against it yourself. It is the one credential in this article that you can verify without anybody's permission and without any expertise.

For a sense of what this looks like in practice on our own side, see the Projects pages and the tilt and turn category, and then ask us for the documents behind them rather than the photographs.

What We Can Put in Writing, and the Gaps We Will Not Paper Over

We are the manufacturer writing this, so the honest section is the one about us. The pattern to notice is that several of our published numbers are perfectly real and perfectly useless as credentials, because they measure a different property from the one a buyer assumes.

A Twelve-Field Block You Can Paste Into One Email

The practical output of all this is a short request. Send it once, before the deposit, and read the answers rather than the attachments. Note the middle column: for a buyer comparing several suppliers, the field that is most often left blank is also the field that decides the whole purchase.

Ten Questions, and What an Answer That Carries No Information Sounds Like

When Verification Is the Wrong Tool

Frequently Asked Questions

Can a window company be certified by the standards body?

No. The standards body states publicly that it does not perform certification and does not issue certificates, and that a company cannot be certified by it. It also asks organisations not to use its logo to represent certification status. If a supplier page shows that logo next to a certified claim, the useful move is not to accuse anyone of fraud but to ask which certification body actually issued the certificate, and then to check that body.

Is there one database where I can check any certificate?

Not for everything. There is a global register for accredited certification, described by the international accreditation forum as the exclusive global register of its kind, and it is searched by company name or certificate identifier. Its own guidance says it shows standard, scope, status, certification body and accreditation body, and no dates, and that it is built around certificates issued under the management system conformity standard. Product certificates travel under a different rulebook and do not have an equivalent single global register, which is why the product side has to be checked against the issuer directly.

The certificate I was sent is dated and looks current. Is that enough?

No, and this is the single most common mistake. A certificate is a document; certification is a status held by the issuer. The document carries dates and the status can change without the document changing. Management system certification runs on a cycle of roughly three years with surveillance at least annually, and it can be suspended or withdrawn mid-cycle while the PDF keeps circulating. Check the register, not the file.

The certificate covers the group. Does it cover the factory making my windows?

Only if that address is named. Published guidance on multi-site certification says plainly that sampling decides which sites an auditor visits, not which sites the certificate covers, and that a certificate covering a group carries no conclusion about an address missing from it. Sites can also sit outside the scope entirely. Ask for the site list and read your own factory address against it.

Why will you not print other people's certificate numbers?

Because a copied identifier goes stale immediately and cannot be traced, and because reproducing somebody else's record is exactly how misattributed numbers spread through an industry. We are also a manufacturer writing about our own category, and publishing or repeating third-party scores and identifiers would make this page worse, not better. Verify against the issuer.

What is the one thing I should ask for if I only ask for one?

The test report, and specifically the specimen description inside it. Everything else in this article is about a company. The specimen description is about a window, and it is the only place where the words tilt and turn, a sash size and a glass build-up appear together on a page that somebody outside the factory signed. If the specimen does not match what you are ordering, no certificate above it matters.

The Short Version

• Credentials is six different objects. Each has its own verification move, and five of the six have a blind spot that no check closes.
• The standards body certifies nobody. Anyone showing its logo as a certification mark has not read the page they took it from.
• There are three links: certified entity, certification body, accreditation body. Most checks stop at the first.
• The global register holds management system certificates. Your window is not a management system.
• A PDF carries a printed date. A PDF does not expire. Check the register, not the file.
• If the scheme will not let the mark go on the product, it is not a product scheme.
• A building is the textbook case where product certification should be preferred, which is awkward, because that is the harder one to verify across a border.
• The address field is the most informative line on the certificate. Ask for the site list, not the summary.
• Four names must match character by character: registration, certificate, contract, bank account.
• The hardware application range is the one credential you can verify yourself, without permission and without expertise, and it is usually the real ceiling.
• If you ask for one document, ask for the test report and read the specimen description. That is the only page where a company's paperwork becomes a statement about your window.
• We operate two production centres, which makes the site-list question concrete rather than theoretical. Ask us the same questions you would ask anyone else, and ask for the documents rather than the photographs. Start at the contacts page.