ISO 17025 Accreditation: Complete Guide for Testing Laboratories

Three years ago, a North American supplement brand sent us a certificate of analysis from a European contract laboratory. The lab had ISO 9001 certification, a professional-looking report, and competitive pricing. What it didn’t have was ISO/IEC 17025 accreditation — and that single gap cost the brand its FDA export documentation and a six-month market delay.

ISO 17025 is the international standard that separates laboratories that say they produce reliable results from those that can prove it. If you’re selecting a testing partner, submitting regulatory dossiers, or building a quality system for your own lab, understanding this standard isn’t optional.

What Is ISO 17025 Accreditation?

ISO/IEC 17025:2017 is the international standard for the competence of testing and calibration laboratories, published jointly by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). It specifies the general requirements for competence, impartiality, and consistent operation that a laboratory must demonstrate to be considered technically capable of producing valid results.

Accreditation under ISO 17025 means a national accreditation body — such as A2LA (USA), UKAS (UK), COFRAC (France), or DAkkS (Germany) — has independently assessed the laboratory against the standard and confirmed conformance. It is not self-certification. It is third-party verification.

The current version, ISO/IEC 17025:2017, replaced the 2005 edition and introduced significant changes around risk-based thinking, a technology-neutral approach to measurement uncertainty, and stronger alignment with ISO 9001:2015 process concepts.

Why Does ISO 17025 Matter for Regulatory Submissions?

Regulatory authorities across the EU, USA, and Canada increasingly require or strongly prefer test data from ISO 17025 accredited laboratories. Here’s why it matters in practice:

EU Cosmetics Regulation (EC) No 1223/2009 requires that analytical testing supporting a Cosmetic Product Safety Report (CPSR) be conducted by competent laboratories. Accreditation under ISO 17025 is the most recognised demonstration of that competence.

FDA 21 CFR Part 111 (dietary supplement GMP) requires that laboratory controls include methods that are scientifically valid. While FDA doesn’t mandate ISO 17025 explicitly, accredited labs provide the documented method validation and uncertainty data that satisfy FDA auditors.

Health Canada’s Natural Health Products Regulations similarly expect test results from qualified laboratories, and ISO 17025 accreditation is the standard benchmark used by Health Canada reviewers.

EU Food Supplement Directive 2002/46/EC and associated EFSA guidance reference the need for validated analytical methods — again, ISO 17025 accredited labs provide this by default.

The practical consequence: if your contract laboratory isn’t ISO 17025 accredited, your test data may be challenged during regulatory review, and you may need to repeat testing at an accredited facility — at significant cost and delay.

What Are the Core Requirements of ISO 17025?

The standard is structured around two main sets of requirements:

Management Requirements

These cover the organisational and administrative framework of the laboratory:

• Impartiality: The laboratory must identify risks to its impartiality and demonstrate it is free from undue commercial, financial, or other pressures that could influence results
• Confidentiality: Procedures for protecting client information and test data
• Document control: Version-controlled procedures for all laboratory activities
• Handling of nonconforming work: Documented processes for identifying and managing test results that don’t meet acceptance criteria
• Corrective actions: Root cause analysis and systematic correction of identified problems
• Internal audits: At least annual internal audits against the standard
• Management reviews: Periodic review of the quality system by senior management

Technical Requirements

These address the actual competence of the laboratory to produce valid results:

• Personnel: Demonstrated competence of all staff performing testing, including education, training, and experience records
• Facilities and environmental conditions: Documented monitoring of temperature, humidity, contamination, and other conditions that affect results
• Equipment: Calibration and maintenance records for all measurement equipment, with calibration traceable to national or international measurement standards
• Measurement traceability: All measurements traceable to SI units through an unbroken chain of calibrations
• Sampling: Documented sampling plans where the laboratory performs sampling
• Handling of test items: Procedures for receiving, labelling, storing, and disposing of samples
• Technical records: Complete, contemporaneous records of all testing activities
• Reporting of results: Requirements for test reports and calibration certificates, including measurement uncertainty

The 2017 revision added a specific requirement for laboratories to evaluate measurement uncertainty for all testing activities — a significant change from the 2005 version that many labs initially struggled to implement.

How to Get ISO 17025 Accreditation: Step-by-Step

The accreditation process typically takes 12 to 24 months for a laboratory starting from scratch, and 6 to 12 months for a laboratory with an existing quality management system. Here is the standard pathway:

1. Gap analysis: Compare your current laboratory practices against ISO/IEC 17025:2017 requirements. Identify areas needing development — typically measurement uncertainty, personnel competence records, and equipment calibration traceability.

2. Quality manual and procedure development: Write or update your quality manual, standard operating procedures (SOPs), and work instructions to meet the standard. This is the most time-intensive phase.

3. Implementation: Train all laboratory staff on the new procedures. Run the quality system for a minimum of 3 to 6 months to generate the records that demonstrate consistent application.

4. Internal audit: Conduct a full internal audit against the standard. Address all findings before applying for accreditation.

5. Management review: Hold a formal management review meeting, document the outputs, and confirm the quality system is functioning effectively.

6. Application to accreditation body: Submit your application to the relevant national accreditation body (see below). Include your scope of accreditation — the specific test methods and matrices you want accredited.

7. Document review: The accreditation body reviews your quality manual and procedures. They may issue preliminary findings requiring correction before the on-site assessment.

8. On-site assessment: Assessors (typically a lead assessor plus technical experts for your specific test methods) visit the laboratory. They observe testing, interview staff, and review records. Expect 1 to 3 days depending on scope.

9. Corrective action: Address any nonconformities identified during the assessment. Minor findings typically require a written corrective action plan; major findings may require a follow-up visit.

10. Accreditation granted: Once all findings are resolved, the accreditation body issues your accreditation certificate and scope. Accreditation is typically valid for 4 years, with annual surveillance assessments.

Which Accreditation Body Should You Use?

The accreditation body you choose depends on your geography and the regulatory markets you serve. All bodies listed below are signatories to the ILAC Mutual Recognition Arrangement (MRA), meaning their accreditations are recognised internationally.

Accreditation Body	Country	Key Markets Served
A2LA (American Association for Laboratory Accreditation)	USA	FDA, USDA, EPA, DoD
UKAS (United Kingdom Accreditation Service)	UK	UK regulators, EU (legacy recognition)
COFRAC (Comité Français d’Accréditation)	France	ANSM, DGCCRF, EU regulators
DAkkS (Deutsche Akkreditierungsstelle)	Germany	EU regulators, German federal agencies
ENAC	Spain	EU regulators
ACCREDIA	Italy	EU regulators
SCC (Standards Council of Canada)	Canada	Health Canada, CFIA

For laboratories serving both EU and North American markets, dual accreditation — typically COFRAC or DAkkS for EU, and A2LA for the USA — is increasingly common. The additional cost is justified by the regulatory flexibility it provides.

What Does ISO 17025 Accreditation Cost?

Costs vary significantly by accreditation body, laboratory size, and scope complexity. As a general guide:

• Application fees: €500 to €2,500 depending on the body
• Initial assessment: €3,000 to €15,000 depending on scope (number of test methods, laboratory size, number of assessor days)
• Annual surveillance: €1,500 to €5,000 per year
• Internal preparation costs: €20,000 to €80,000 for staff time, procedure development, equipment calibration, and proficiency testing participation — this is typically the largest cost

For a small laboratory with a focused scope (e.g., 5 to 10 test methods), total first-year costs including preparation typically run €30,000 to €60,000. Larger multi-site laboratories with broad scopes can spend considerably more.

Maintaining Accreditation: What Happens After You’re Accredited?

Accreditation is not a one-time achievement. Maintaining it requires:

• Annual surveillance assessments: Most bodies conduct annual on-site or remote assessments to verify continued conformance
• Proficiency testing participation: Accredited laboratories must participate in external proficiency testing (interlaboratory comparisons) for each accredited test method, typically once or twice per year
• Scope changes: Adding new test methods or matrices requires notification to the accreditation body and may require additional assessment
• Nonconformity management: Any major nonconformity identified during surveillance must be corrected within defined timeframes or accreditation may be suspended

At Care Europe, we work with European testing laboratories to prepare for initial accreditation and to manage the ongoing compliance requirements. The most common failure point we see is proficiency testing — laboratories that don’t establish a systematic programme for participating in interlaboratory comparisons find themselves scrambling at surveillance time.

ISO 17025 vs. ISO 9001: What’s the Difference?

This is the question we hear most often from manufacturers evaluating contract laboratories.

ISO 9001 is a quality management system standard applicable to any organisation. It addresses processes, customer focus, and continual improvement. It does not assess technical competence to produce valid test results.

ISO 17025 is specific to testing and calibration laboratories. It includes all the management system elements relevant to laboratories plus the technical requirements — personnel competence, equipment calibration, measurement traceability, and measurement uncertainty. A laboratory with ISO 9001 but not ISO 17025 has demonstrated it manages its processes well. It has not demonstrated it produces technically valid results.

For regulatory purposes, ISO 17025 is the relevant standard. ISO 9001 is not a substitute.

The EU Context: COFRAC and the European Accreditation Network

Within the EU, accreditation bodies are governed by Regulation (EC) No 765/2008, which established the European co-operation for Accreditation (EA) network. Each EU member state has a single national accreditation body — COFRAC in France, DAkkS in Germany, ACCREDIA in Italy, and so on.

Under the EA Multilateral Agreement (MLA), accreditations issued by any EA member body are recognised across the EU. This means a COFRAC-accredited French laboratory’s test reports are accepted by German, Italian, or Spanish regulatory authorities without additional verification.

For North American brands entering the EU market, this is practically important: you don’t need a separate accreditation for each EU country. One COFRAC or DAkkS accreditation covers your EU regulatory needs.

---

Key Regulatory References

Document	Source	Relevance
ISO/IEC 17025:2017	ISO.org	Full standard text and scope
ILAC P15 — Application of ISO/IEC 17025	ILAC.org	International implementation guidance
EA-4/02 M — Expression of Uncertainty	European Accreditation	Measurement uncertainty methodology
COFRAC accreditation scope search	COFRAC.fr	Verify French laboratory accreditation
A2LA accreditation directory	A2LA.org	US accredited laboratory search

Care Europe Perspective: In our work with North American brands entering EU markets, we consistently see ISO 17025 accreditation status as the single most common documentation gap — often discovered only after a regulatory submission has been filed. We recommend verifying accreditation scope (not just certificate existence) before signing any contract laboratory agreement. The scope document specifies exactly which test methods and matrices are covered; a lab accredited for metals may not be accredited for pesticide residues in the same matrix.

ISO 17025 accreditation is the baseline expectation for any laboratory producing data for regulatory submissions. If you’re evaluating contract laboratories for EU market entry, require accreditation certificates and check the scope — the accreditation must cover the specific test methods and matrices relevant to your product. If you’re building or upgrading a laboratory quality system for accreditation, the 12-to-24-month timeline is realistic only with a structured implementation programme.

At Care Europe, we guide European manufacturers and North American brands through laboratory selection, accreditation preparation, and regulatory dossier development. Contact us at [email protected] to discuss your specific situation.