# Approachable Certification Ltd - **Type:** Certification body - **Website:** https://www.approachable.uk.com - **Assessed by:** The Assurance Desk (Add-Venture Advisory Ltd) A UK certification body with UKAS accreditation for ISO/IEC 27001:2022 and ISO/IEC 27701 privacy certification. Its accreditation does not cover ISO/IEC 42001 for AI. ## Approachable Certification scores Scored 1 to 5 on six criteria. There is no overall score. ### Help when things go wrong: 4/5 Published Rules of Registration document a complaints procedure, an appeals process heard by an independent committee, and suspension/withdrawal triggers; no public UKAS sanction against the firm was found, but no outcome statistics or named audit staff are disclosed. ### Qualifications of the people who do the work: 5/5 UKAS Schedule 8320 (Issue 020, 11 Dec 2025) confirms live accreditation naming ISO/IEC 27001:2022 ISMS certification explicitly in scope, verified against the primary UKAS PDF rather than the firm's own summary page. ### What it publishes about fees: 3/5 Site states a general fee model ('fixed daily rate') but publishes no actual rate card, worked example or price range; all quotes are bespoke on request. ### Knowledge of your sector: 2/5 Sectors page is an unmodified IAF sector-code matrix applied identically across ISO 9001/14001/27001/45001, with no named sector specialists or tailored sector programmes. ### Independence from what it sells: 5/5 Published Impartiality Statement explicitly states the firm has never offered management-system consultancy or internal-audit services, with a Committee for Impartiality and a two-year cooling-off period for former-client relationships. ### Who carries the risk if the advice is wrong: 1/5 No professional indemnity insurance level, liability cap, or breach-support commitment for clients is disclosed anywhere on the site or in the published Rules of Registration. ## Sources for Approachable Certification Every line carries the page it was read on and the date it was checked. - Companies House record confirms the exact registered name, number, status and incorporation date - Source: https://find-and-update.company-information.service.gov.uk/company/08713893 - Checked: 2026-09-19 - Current UKAS Schedule of Accreditation (primary source PDF, read in full, 8 pages) confirms live accreditation covering ISO/IEC 27001:2022 - Source: https://www.ukas.com/wp-content/uploads/schedule_uploads/00011/04947/8320Management-Systems.pdf - Checked: 2026-09-19 - The same UKAS schedule also accredits a related privacy sector scheme, but contains no Artificial Intelligence Management Systems (AIMS)/ISO 42001 scope anywhere in its 8 pages - Source: https://www.ukas.com/wp-content/uploads/schedule_uploads/00011/04947/8320Management-Systems.pdf - Checked: 2026-09-19 - Published Impartiality Statement states the firm does not and has never offered consultancy or internal-audit services - Source: https://www.approachable.uk.com/impartiality-statement/ - Checked: 2026-09-19 - Published Rules of Registration set out complaints, appeals and suspension/withdrawal terms - Source: https://www.approachable.uk.com/rules-of-registration/ - Checked: 2026-09-19 ## What this provider publishes Not published means we did not find it on the firm's own pages. - Price: Not published - Indemnity cover: Not published - Credentials: Not published - Independent accreditation: Published - Client results: Not published - How it uses AI: Not published ## Strengths - Live, current UKAS accreditation (No. 8320, Issue 020, issued 11 December 2025) explicitly names ISO/IEC 27001:2022 Information Security Management System Certification in scope, confirmed by reading the primary UKAS schedule PDF rather than the firm's own summary. - Explicit, published impartiality policy stating the firm has never offered management-system consultancy or internal-audit services to clients, backed by a Committee for Impartiality and a two-year cooling-off period for auditors moving from client relationships. - Published Rules of Registration give a working complaints process and an appeals route heard by an independent committee, with named (if generic) suspension and withdrawal triggers, more procedural transparency than many small certification bodies disclose. - Combined UKAS scope also covers ISO/IEC 27701:2019 (privacy information management) as a sector scheme, useful for a buyer wanting ISO 27001 and privacy-management certification from one accredited body. ## Things to check Each one carries the factual basis it rests on. - The firm's UKAS schedule (Issue 020, 11 Dec 2025, read in full) does not include ISO/IEC 42001 (Artificial Intelligence Management Systems) anywhere in its accredited scope, only ISO 9001, 14001, 27001 and 45001, plus ISO 27701 as a sector scheme. - Basis: UKAS Schedule of Accreditation No. 8320, Issue 020 (11 December 2025), full 8-page document, https://www.ukas.com/wp-content/uploads/schedule_uploads/00011/04947/8320Management-Systems.pdf - No named lead auditors, individual auditor credentials (e.g. CQI/IRCA registration) or case studies/outcome statistics are published anywhere on the company's site. - Basis: Approachable Certification About page and ISO 27001 certification page, https://www.approachable.uk.com/about/ and https://www.approachable.uk.com/audit-certification/iso-27001-certification/ - No published fee figures or rate card: the site states a commitment to a 'fixed daily rate' model but gives no actual rate, worked example or price range, quotes are bespoke-only on request. - Basis: Approachable Certification ISO 27001 certification page, https://www.approachable.uk.com/audit-certification/iso-27001-certification/ - No professional indemnity insurance level or liability cap for the firm's own exposure is disclosed; the published Rules of Registration only require the client to indemnify Approachable Certification, not the reverse. - Basis: Approachable Certification Rules of Registration, https://www.approachable.uk.com/rules-of-registration/ - The 'Industry Sectors We Audit' page is an unmodified IAF sector-code matrix reused across all four standards, with no named sector specialists or tailored sector programmes described. - Basis: Approachable Certification Industry Sectors page, https://www.approachable.uk.com/audit-certification/industry-sectors-audit/ ## Where this firm appears - [Can the firm that prepares you also certify you?](https://theassurancedesk.com/best/certification-seeking) - [Compare providers](https://theassurancedesk.com/compare) --- **Scope.** The Assurance Desk covers data protection, AI governance and cyber security in the United Kingdom and the United States. It scores providers in both: UK-facing firms, and firms based in the United States. Every provider scored so far was selected for data-protection, AI-governance or security-assurance work. Where a page describes law, it names the country that law applies in. **Who publishes this.** The Assurance Desk is published by Add-Venture Advisory Ltd, company number 11854524, registered in England and Wales. The same owner runs Avouch, a marketing agency that sells AI visibility services to firms of the kind this site covers. That is a conflict of interest, and it is disclosed here. **Corrections.** If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.