The Assurance DeskWhat BARR Certifications offers, and what it publishes
BARR's own materials say ANAB accredits it for two standards: ISO/IEC 27001 for information security and ISO/IEC 27701 for privacy. It publishes a certification-process page for each, covering scope, audit stages and timeline. A published policy bars any consultant who advised a client from later certifying that same client.
BARR Certifications does not publish a price or its indemnity insurance, and does not say whether it uses AI in its own work. Its homepage advertises ISO/IEC 42001 certification for AI management systems. We found no ANAB accreditation record for that standard, and its 42001 process page returns a 'page not found' error.
BARR Certifications is a separate company from BARR Advisory, a consultancy, but the two share a brand and work as partners. BARR says the pair are one of only nine US firms meeting both ANAB and AICPA requirements. We could not confirm its registration: Missouri's state register returned an error or an empty page each time.
Strengths
- ANAB accreditation (an IAF-recognized accreditation body, not a self-declared credential) confirmed for ISO/IEC 27001 and ISO/IEC 27701 certification services.
- Operates as a legally separate entity from its sister consulting firm, BARR Advisory, with a published personnel-level rule barring a consultant who advised a client from certifying that same client.
- One of a small number of US providers spanning both ANAB-accredited ISO certification and, via its partner firm, AICPA-licensed SOC 2 attestation, relevant to buyers wanting privacy/security and AI-management certification from one relationship.
- Publishes a standard-specific certification-process page (scope, audit stages, timeline) for each standard where its accreditation is independently confirmed (27001, 27701).
Things to check
- Markets ISO/IEC 42001 (AI management systems) audit and certification services on its homepage, but no ANAB accreditation record for ISO/IEC 42001 could be located, the only located accreditation announcement names ISO/IEC 27001 and 27701 alone, and BARR has no dedicated ISO 42001 process page (404).
- We could not read the state registers. Ask for its company details and current status.
- No published fee schedule, professional indemnity insurance disclosure, or own-AI-use disclosure was found anywhere on BARR Certifications' public site.
Common questions
Does BARR Certifications publish its fees?
No. We found no fee schedule, price range or rate card on its home, policies, FAQ or contact pages.
Is BARR Certifications accredited to certify ISO/IEC 42001?
Unconfirmed. Its homepage advertises ISO/IEC 42001 audit and certification. The accreditation announcement we found, in BARR's own materials, names only ISO/IEC 27001 and 27701, and its 42001 process page returns a 'page not found' error.
Is BARR Certifications separate from BARR Advisory?
Yes. It is a separate legal entity, and a published policy bars any consultant who advised a client from later certifying that same client. The two firms share a brand and work as partners.
Is BARR Certifications registered in Missouri?
Unconfirmed. Missouri's business register returned an error on one check and an empty page on two more. BARR's own materials place its office in Kansas City, Missouri.
Evidence for each BARR Certifications score
Show our working
Notes behind each thing to check
- Markets ISO/IEC 42001 (AI management systems) audit and certification services on its homepage, but no ANAB accreditation record for ISO/IEC 42001 could be located, the only located accreditation announcement names ISO/IEC 27001 and 27701 alone, and BARR has no dedicated ISO 42001 process page (404). (Compared the homepage claim on https://www.barrcertifications.com/ ('ISO 27001, 27017, 27018, 27701, and 42001 ... Audit and Certification Services') against the accreditation scope named in https://www.barradvisory.com/barr-certifications/ (27001 and 27701 only), and a 404 response at https://www.barrcertifications.com/how-it-works/iso-iec-42001/.)
- We could not read the state registers. Ask for its company details and current status. (Missouri's business entity search (https://bsd.sos.mo.gov/Search/Business) returned HTTP 403 on a direct fetch and an empty body on two Bright Data Web Unlocker attempts; a prior pass on the Kansas Secretary of State register also failed to return results.)
- No published fee schedule, professional indemnity insurance disclosure, or own-AI-use disclosure was found anywhere on BARR Certifications' public site. (Reviewed the home, policies, FAQs and contact pages on barrcertifications.com; none disclose pricing, PI insurance cover, or what AI tooling (if any) BARR itself uses in its certification workflow.)
| Criterion | Score | Evidence |
|---|---|---|
| Help when things go wrong | No published record of certificate suspension or withdrawal action was located anywhere on BARR's public site; the fact-set shows no track-record evidence either way, only its absence. | |
| Qualifications of the people who do the work | ANAB accreditation is confirmed only for ISO/IEC 27001 and 27701; the ISO/IEC 42001 scope marketed on the homepage has no matching accreditation announcement and its process page 404s. | |
| What it publishes about fees | Drawback explicitly states no fee schedule, rate card or pricing was found after reviewing the home, policies, FAQs and contact pages. | |
| Knowledge of your sector | Confirmed accredited practice in ISO/IEC 27701 privacy management is genuine specialism evidence, but the parallel ISO/IEC 42001 AI-governance claim is unverified marketing, not confirmed practice. | |
| Independence from what it sells | Published policy bars personnel who did prior consultancy for a client from performing certification activity for that same client, a documented impartiality control. | |
| Who carries the risk if the advice is wrong | No PI insurance disclosure was found on the public site, and the legal entity's registration status could not be verified on any state Secretary of State register. |
Sources for BARR Certifications
- BARR Certifications holds ANAB accreditation to certify organizations to ISO/IEC 27001 and ISO/IEC 27701. (ANAB-accredited for ISO/IEC 27001 and ISO/IEC 27701 only (per located source)) (barradvisory.com, checked 20 September 2026)
- BARR's own materials state that BARR Certifications and its partner firm BARR Advisory together are one of only nine U.S. firms meeting both ANAB (ISO 27001/27701 certification) and AICPA (SOC 2 attestation) requirements. (9 firms nationally (self-reported)) (barradvisory.com, checked 20 September 2026)
- BARR Certifications is headquartered in Kansas City, Missouri. (Kansas City, MO) (barradvisory.com, checked 20 September 2026)
- BARR Certifications' published policy bars personnel who previously performed management-system consultancy for a client from carrying out certification activities for that same client. (Documented conflict-of-interest control at personnel level) (barrcertifications.com, checked 20 September 2026)
- BARR Certifications' homepage markets audit and certification services for ISO 27001, 27017, 27018, 27701 and 42001, but only 27001 and 27701 have a dedicated certification-process page on the same site, and only those two are named in the located ANAB accreditation announcement; the ISO/IEC 42001 process page returns HTTP 404. (ISO/IEC 42001 accreditation scope unconfirmed) (barrcertifications.com, checked 20 September 2026)
ANAB accreditation to certify organisations to ISO/IEC 27001 and ISO/IEC 27701 (barradvisory.com, checked 2026-09-20)
Seeking ISO 42001 certification
Where this firm appears
If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.
This is an independent editorial guide, not legal advice.