If your organisation requires ISO certifications from suppliers before procurement can proceed, Amazon Business now holds them.
Amazon Business has been independently certified to three internationally recognised ISO standards: ISO/IEC 27001:2022 for information security management, ISO 9001:2015 for quality management, and ISO 14001:2015 for environmental management. Each was audited and validated by an accredited third-party certification body.
In regulated and public-sector procurement across Europe, these certifications are frequently pass/fail requirements. Supplier evaluations, framework bids, and security assessments that could not move forward without them now can.
ISO 27001 is the international standard for information security management systems. It requires a risk-based approach to establishing, implementing, and continually improving how an organisation protects information.
Amazon Business holds this certification for the information security management system (ISMS) supporting the people, processes, and technologies owned and operated by Amazon Business that are foundational to providing its products and services. Teams running security assessments or supplier qualification can reference this certification in their evaluation.
ISO 9001 is the international standard for quality management systems. It requires an organisation to demonstrate consistent, documented processes for testing, validation, and continual improvement.
Amazon Business holds this certification for the quality management system supporting testing, validation, security, and associated governance activities across its applications. Procurement and compliance teams assessing operational governance can reference this certification in their evaluation.
ISO 14001 is the international standard for environmental management systems. It requires an organisation to identify and manage its environmental responsibilities through a structured, documented system.
Amazon Business holds this certification for the business-to-business e-commerce supply of goods and services in the UK and Europe and associated EMEA head office facilities management, at its London corporate office (LHR16). Organisations assessing suppliers against green procurement criteria or sustainability frameworks can reference this certification in their evaluation.
ISO 27001:2022 certification confirms that Amazon Business manages information security through a structured, externally verified management system. Your team can reference an independent, third-party certification rather than relying on questionnaire responses or self-reported security postures.
ISO 9001:2015 and ISO 27001:2022 are now in place. If your qualification framework, tender criteria, or supplier checklist requires them, Amazon Business can provide these certifications as third-party evidence. Evaluations that were held up waiting on them can move forward. For procurement teams focused on streamlining vendor qualification, these certifications reduce the documentation burden and accelerate the approval timeline.
Amazon Business ISO 27001 and ISO 9001 certifications were audited and issued by Schellman, a certification body accredited by ANAB and UKAS. ISO 14001 was audited and issued by ERM CVS. Certification under UKAS accreditation is recognised across EU and EEA member states through IAF multilateral recognition arrangements, subject to local accreditation requirements.
Certificates are publicly available and searchable.
To verify ISO 27001 and ISO 9001:
To verify ISO 14001, access the certificate via ERM CVS or contact your Amazon Business account team.
Was this helpful?