A buyer's guide to machine shop certifications in Canada
A supplier sends you a capability sheet with eight logos across the bottom. One of them is a person's credential, not the company's. Two are for a facility that will not be running your part. One expired last year.
None of that is unusual, and none of it is necessarily dishonest. Certification in Canadian manufacturing is a genuinely useful signal, but it is a narrower signal than most capability sheets imply, and reading it correctly takes about ten minutes per supplier once you know what you are looking at.
Here is what each certification actually covers, how to check one, and where the traps are.
What a certification actually buys you
It helps to be precise about this, because the vague version ("they're ISO certified, so they're good") is what leads buyers to over-trust the logo and under-ask the questions.
A quality management certification tells you a shop has a documented system that an outside auditor has examined: procedures written down, records kept, instruments calibrated on a schedule, non-conforming parts segregated, corrective action taken when something goes wrong, and document control so the operator is working from the current revision of your drawing.
What that buys you as a buyer is not a guarantee of good parts. It is:
A shorter path to root cause. When a part fails, a certified shop can tell you which machine ran it, which operator, which material lot, and against which drawing revision. An uncertified shop often cannot, and you end up scrapping a whole batch because nobody can isolate the problem.
Less qualification work on your side. Much of what a supplier audit looks for is what the certification body already checked. Starting from a certified shop means a shorter audit, not no audit.
A defined complaint mechanism. Certified shops are required to have a corrective-action process and to keep records of it. You have something to invoke that is not just goodwill.
Something to point at in your own audit. If you are certified yourself, your auditor will ask how you control your supply base. A certified supplier is the easy answer.
That is the real benefit, and it is worth paying for. It is also the whole benefit. A certificate is a statement about a system, not about a part.
The certifications you will see in Canada
Quality management
ISO 9001 is the general quality management standard and the baseline most industrial buyers screen on. Roughly speaking, if a Canadian shop of any size has one certification, it is this one.
AS9100 adds aerospace and defence requirements on top of ISO 9001: configuration management, risk management, counterfeit part prevention, first article inspection to AS9102. For airframe, engine, or defence platform work it is usually mandatory rather than preferred.
IATF 16949 is the automotive equivalent, built on ISO 9001 with production part approval (PPAP), advanced product quality planning (APQP), and statistical process control. Relevant in Ontario well beyond the obvious tier ones, because many shops here serve both automotive and general industry.
ISO 13485 covers medical devices, with much heavier emphasis on risk management, traceability, and design controls.
Welding and trade
This is where Canadian practice diverges from American, and where buyers from outside Canada most often misread a supplier sheet.
CWB certification to CSA W47.1 is a company certification for fusion welding of steel, issued by the Canadian Welding Bureau. It comes in three divisions, and the division tells you how the company's welding engineering is resourced:
- Division 1: a qualified welding engineer employed full time, in house.
- Division 2: a qualified welding engineer engaged on contract.
- Division 3: may take sublet work, with the Division 1 or 2 fabricator retaining responsibility for it.
If your work is structural steel to CSA standards, the division matters. Related CWB certifications cover aluminum (CSA W47.2), reinforcing bar (W186), and resistance welding (W55.3).
Pressure and regulated work
ASME stamps (the U stamp for pressure vessels, and related designators) cover boiler and pressure vessel construction. In Ontario, pressure equipment is regulated provincially, and shops doing this work typically also hold TSSA certificates for manufacturing or repairing pressure vessels and fittings. If your part is a pressure boundary, this is not a nice-to-have.
Defence and export control
Controlled Goods Program (CGP) registration is Canadian and is a legal requirement, not a credential a shop opts into. If a company examines, possesses, or transfers controlled goods, which covers a great deal of defence-related hardware and technical data, it must be registered.
ITAR is the US International Traffic in Arms Regulations. Canadian companies handling US defence articles or technical data are subject to it, generally through contract terms and the Canadian Exemption.
Cybersecurity
Newer, and increasingly a condition of award rather than a differentiator. CPCSC is the Canadian program for defence suppliers, with Level 1 live since April 2026. CMMC is the American equivalent, and it can reach a Canadian shop indirectly: a US defence contractor must pass the same requirements on to the subcontractors that handle the sensitive information. NIST SP 800-171 is the control set underneath CMMC. These move fast enough to deserve their own article: see what actually applies right now.
Special processes
Nadcap accredits special processes rather than companies as a whole: heat treating, non-destructive testing, chemical processing, coatings, welding. If your part needs any of those and you are in aerospace, the primes will generally require the processor to be Nadcap accredited. Note that a shop may hold AS9100 and still outsource a Nadcap process, so ask about the whole chain.
Environmental and safety
ISO 14001 (environmental) and ISO 45001 (occupational health and safety, which replaced the withdrawn OHSAS 18001) increasingly appear in RFP scoring, especially on public sector and large corporate work. They say nothing about part quality, and should not be read as if they do.
How to actually read a certificate
Ask for the certificate itself, not the logo. Then check four things.
1. The scope statement. This is the single most-skipped field and the one that matters most. Every certificate names the sites and the activities it covers. A shop with three facilities may be certified at one. A shop certified for "machining of metallic components" is not certified for the welding it also does. If the scope does not cover the site and process that will run your part, the certificate does not apply to your part.
2. The registrar, and whether it is accredited. A certificate is only as good as the body that issued it, and anyone can print one. In Canada the Standards Council of Canada (SCC) is the national accreditation body for management system certification, working to ISO/IEC 17021-1. Certificates from SCC-accredited bodies are recognised internationally through the IAF.
3. Whether it is real and current. The IAF CertSearch database lets you verify an accredited certificate directly, and SCC publishes a directory of the bodies it accredits. This takes a minute and is the single highest-value check in this article. Confirm the expiry date while you are there: certification is maintained by surveillance audits, usually annual, and lapses.
4. The revision. Standards get revised and old revisions get withdrawn. ISO 9001:2015 is current; ISO 9001:2008 was withdrawn in 2018. A certificate citing a withdrawn revision is not evidence of a current certification.
Three distinctions that catch buyers out
Company certification versus an individual's credential. "CWB Certified Welding Inspector" and "AWS Certified Welding Inspector" are qualifications held by a person. They are genuinely valuable, and they are not the same as the company being certified to CSA W47.1. A shop can employ a certified inspector without holding company certification, and both appear on capability sheets looking equivalent. They are not.
Third-party assessed versus self-declared. Some things on this list are audited by an accredited outside body. Others are attestations a company makes about itself. Both have their place, but they carry different weight, and the distinction is becoming central in cybersecurity, where a self-assessment and a third-party assessment are different procurement outcomes rather than two grades of the same thing.
Certified versus "compliant" versus "working toward". These words are doing very different jobs. "ISO 9001 certified" means an accredited body audited them and issued a certificate. "ISO 9001 compliant" usually means they built a system to the standard and never had it audited. "Pursuing certification" means neither has happened yet. All three can be honest and useful statements. Only the first is a certification.
What certification does not tell you
Worth saying plainly, because over-reading the logo is as costly as ignoring it.
A certification does not tell you the shop can hold your tolerance, has capacity in your timeframe, has run a part like yours before, is financially stable, or will hit your delivery date. It tells you a system exists and was audited.
Capability and certification are separate questions and both need asking. Pair the certificate check with a capability review, a look at comparable work, and a first article on the first run. The certificate makes the rest of your diligence shorter. It does not replace it.
What to ask for
A short list that covers most of the ground:
- A copy of each current certificate, not a logo sheet.
- The scope statement, and confirmation that it covers the site and processes that will run this part.
- The registrar's name, and its accreditation body.
- Expiry and last surveillance audit date.
- For welding, the CWB division and the standards held.
- For special processes, who performs them and whether that processor is accredited.
- For defence work, CGP registration status and cybersecurity level, including whether it was self-assessed or third-party assessed.
If a supplier cannot produce items one through four quickly, that is itself informative. A shop with a working quality system has these on hand.
Finding certified shops in Ontario
OMN records Ontario machine shops, fabricators, and custom manufacturers with their capabilities and certifications as structured, searchable data, so you can filter the directory by certification and see who holds what before you make contact.
Certifications on a profile are shop-reported unless OMN has reviewed supporting documentation, in which case the profile says so. Either way, do the certificate check above before you place work. A directory is a way to build a shortlist quickly, not a substitute for qualifying a supplier.
