A supplier's capability deck arrives with nine logos across the bottom: ISO 9001, ISO 14001, FSC, Sedex, BSCI, GRS, BRC, Disney FAMA, and one nobody can identify. All nine look equally official. They answer four different questions, and two are not certifications at all.
Four Different Things Called "Certificates"
- Management system certification — ISO 9001, ISO 14001, ISO 45001. Audits the process, not the product.
- Chain of custody claims — FSC, PEFC, GRS. Audits the material flow behind one specific claim.
- Social audit reports — SMETA on Sedex, amfori BSCI, WRAP. Findings, with no pass or fail.
- Scheme approvals — BRCGS Packaging, Disney FAMA, ISTA labs. Required by specific buyers only.
| Scheme | What it governs | Who genuinely needs it | Cost and cycle | How to verify |
|---|---|---|---|---|
| ISO 9001:2015 | Documented quality process control | Any buyer placing repeat orders | $2,000–5,000 initial, $1,000–2,000/yr surveillance | IAF CertSearch or the cert body's register |
| FSC CoC | Certified fibre from forest to finished box | EU/UK retail, public paper commitments | $1,500–4,000 initial + annual audit, per-TC fee | info.fsc.org licence search, then the TC |
| Sedex SMETA | Labour, health & safety, environment | UK/EU retail, supermarket vendors | Membership + $600–1,500 per audit, annual | Sedex site ID, request the report PDF |
| BRCGS Packaging | Hygiene for food-contact packaging | Anyone packing food or cosmetics | $3,000–6,000 audit, annual | BRCGS directory, check grade and scope |
ISO 9001 Certifies Discipline, Not Quality
ISO 9001 does not mean the boxes are good. It means the factory can show documented process control, inspection records and a corrective-action loop. A certified factory can still ship a bad lot; a workshop without it can produce excellent boxes.
Check three things on the PDF rather than the logo. Scope wording: "manufacture of printed paper packaging" is a factory, "sales of packaging products" is a trading desk, and both can hold the same certificate. Site address: the certificate covers one location, so confirm it matches where your order is actually produced. Validity: three-year cycle with annual surveillance, and lapsed surveillance is common. Verify the number on IAF CertSearch or the issuing body's own register (SGS, TÜV, BV, Intertek) instead of trusting a scan.
FSC: The Certificate Is Not the Transaction Certificate
FSC chain of custody (FSC-STD-40-004) lets a factory label output FSC 100%, FSC Mix or FSC Recycled and print a licence code in the form C######. The certificate proves the system exists, not that your order used certified board.
That proof is the transaction certificate (TC), a per-shipment document issued through the FSC database tying a quantity of certified material to one invoice. Under the credit system a factory banks credits from certified purchases and spends them on outgoing orders — the same factory can legitimately run one FSC order and one non-FSC order in the same week. If a brand claim depends on it, request the TC before the container ships and reconcile the quantity against the invoice. Our food and bakery packaging page covers how fibre claims sit alongside hygiene requirements, which FSC does not address.
Sedex and SMETA: A Report, Not a Pass
Sedex is a membership platform; SMETA is the audit methodology used to produce reports on it. There is no certificate and no grade. A 2-pillar audit covers labour standards plus health and safety; 4-pillar adds environment and business ethics. UK and EU retail vendors ask for it because their compliance teams need the report on file. Independent brands and Amazon sellers rarely do — do not pay for an audit nobody will request. If one is requested, supply the report date, the site ID, and the corrective action plan for every finding.
What Certificates Cannot Tell You
None of these documents predicts print quality, colour consistency, or whether a factory will hold a 25-day lead time. They filter the first shortlist; they do not replace a sample and a pre-production meeting. Our folding cartons and materials and finishes pages list the board grades and process controls we run against, and certificate scans with scope and expiry visible are available on request.
FAQ
Do I need an FSC supplier if my box is not marketed as eco-friendly?
No. You need it when a customer, retailer or tender requires a paper-sourcing claim. Without a claim, virgin and recycled board are both legal; the FSC premium typically runs 3–8% on material cost.
Can a trading company hold ISO 9001 and FSC?
Yes, and both can be legitimate — but read the scope. A trader's ISO 9001 scope usually says "sales," and its FSC certificate may cover trading only, meaning the converting is subcontracted. If you are paying factory-direct prices, the scope should name the production site.
Is Sedex the same as a factory audit I can rely on?
It is a shared audit report, not an accreditation. Its value is the underlying SMETA report and whether findings were closed. Membership alone costs little and proves nothing about working conditions.