Find a Cert Body

Check a certificate under the COFRAC mark

Comité français d'accréditation accredits certification bodies in France. Open its registry, then tick what the certificate shows.

See your result: 6 checks open

The mark is a logo with a number, usually at the bottom of the certificate.

Search the COFRAC registry

Comité français d'accréditation, France

Recognised for ISO/IEC 27001

The accreditation body signs the mutual recognition arrangement for management system certification, and its record lists ISO/IEC 27001. A certificate under its mark is recognised by the other signatories.

Open the COFRAC registry In French.

  1. Open "Rechercher un organisme accrédité" (find an accredited body).
  2. Type the name. In the list next to the field choose "par nom" (by name) or "n° accréditation" (by number).
  3. Open the result, then its "attestation" and "annexe technique" (technical annex).
  4. Check that the annex names ISO/IEC 27001. If you find nothing, open the list of suspensions and withdrawals on the same page.
Tick what the certificate shows

Leave a line on "Not seen yet" until you see it.

The COFRAC registry lists the body with ISO/IEC 27001
Standard and edition
The scope names the service you buy
The company name matches your contract
Dates on the certificate
The certificate shows an accreditation mark

Your check on 2026-11-04

Certificate under the COFRAC mark

6 checks open

1 of 7 pass so far. Answer the open lines in step 3.

  • Accreditation body recognised
  • Found in the official registry
  • Edition of the standard
  • Scope covers what you buy
  • Same legal entity
  • Valid today
  • Accreditation mark

Save this check as a PDF record

  • Your answers, pass or fail, dated today.
  • The COFRAC link and the steps you followed.
  • A line to sign, for your supplier file.

What to read on the certificate

Sample ISO/IEC 27001 certificate with 5 numbered zones An invented certificate. Zone 1 is the standard and edition. Zone 2 is the scope text. Zone 3 is the certified company. Zone 4 is the dates. Zone 5 is the accreditation mark with its number. CERTIFICATION BODY NAME CERTIFICATE This certifies that the information security management system of Example Software GmbH conforms to the requirements of ISO/IEC 27001:2022 Scope: Development, operation and support of the Example HR platform, delivered as software as a service. Statement of Applicability version 4. Certificate no. 0000-ISMS Initial issue: 2025-03-14 This issue: 2025-03-14 Expiry: 2028-03-13 No. 0000 Signature 1 2 3 4 5

Invented example. Layouts differ between certification bodies. Look for the same 5 items on any certificate.

  1. Standard and edition. It must read ISO/IEC 27001:2022. Certificates to the 2013 edition ended on 2025-10-31.
  2. Scope. The services, sites and teams the audit covered. If the product you buy is not named, the certificate says nothing about it.
  3. Certified company. The legal entity. A group can hold the certificate for 1 subsidiary only. Compare it with the name in your contract.
  4. Dates. Initial issue, current issue and expiry. A cycle lasts 3 years. A longer validity is a warning sign.
  5. Accreditation mark. The logo of the accreditation body, with an accreditation number. The number leads you to the registry entry.

Check under another mark

Europe (30)

Outside Europe (6)