What to show the buyer before the certificate exists

A status letter from your certification body. It confirms the contract, scope and audit dates, but cannot say you are certified. Many buyers accept one for a limited time. Ask before the submission date.

The letter can state

Your legal name and the contract date.
The standard and edition: ISO/IEC 27001:2022.
The scope you applied for.
Stage 1 and Stage 2 dates, done or booked.
After Stage 2: the audit team's recommendation.
The body's own accreditation.

It cannot state

That you are certified, or "certified pending".
A promised certificate date.
The certification or accreditation mark.
That you "comply with ISO/IEC 27001".

The certificate exists only after the certification decision. Nonconformities must be corrected and accepted first. If a sentence suggests otherwise, ask the body to correct it.

What you can show at each stage

Evidence by stage, weakest first
Stage reached	You hand over	The buyer learns
No contract	Quotes	Intent only
Contract signed	Letter with contract and audit dates	An independent body has a dated plan
Stage 1 done	Letter and Stage 1 conclusion	Documents reviewed; ready for Stage 2, or what to fix
Stage 2 done	Letter with result and recommendation	Full audit done; findings and decision remain
Findings accepted	Letter: decision pending	Certificate days or weeks away
Decision taken	Certificate and register entry	Full proof

Ask the buyer first

Clauses such as "working towards certification" allow a letter. "Valid certificate at submission" does not. Decode your clause, then ask:

Can the ISO/IEC 27001 certificate be provided by contract start, with a status letter from the certification body at submission?

Cover note

Fill in the brackets. Keep only lines you can prove.

Subject: ISO/IEC 27001 certification status

Our ISO/IEC 27001:2022 certification is in progress.

Certification body: [name], accredited for ISO/IEC 27001 by [accreditation body], accreditation number [number].
Scope applied for: [scope text from the application].
Contract signed: [date].
Stage 1 audit: [completed on date / booked for date].
Stage 2 audit: [completed on date / booked for dates].
Planned certification decision: [month]. This is a plan, not a promise from the certification body.

Attached: status letter from [certification body], dated [date].

We will send the certificate within 5 working days of the decision.

If the buyer says no

A consortium member or subcontractor with a certificate may cover the work.
The clause may allow "or equivalent".
The date that counts may be contract start, not submission.
If none applies, plan for the next tender.