# RA Cert Ltd - **Type:** Certification body - **Website:** https://racert.com - **Assessed by:** The Assurance Desk (Add-Venture Advisory Ltd) A UK certification body accredited by UKAS for ISO/IEC 27001:2022 only, which also assesses lottery and gaming firms against the World Lottery Association's security standard. ## RA Cert scores Scored 1 to 5 on six criteria. There is no overall score. ### Help when things go wrong: 3/5 Documented complaints and appeals process with named response timescales and an independent Appeals Panel exists (racert.com/complaints-appeals-process/), but no named lead auditors, disclosed audit-outcome case studies, or any published record of certificate suspension/withdrawal action were found in either direction, a search for RA Cert suspension, withdrawal or complaint news returned nothing. ### Qualifications of the people who do the work: 2/5 Genuinely holds a current UKAS accreditation (No. 10720) for the relevant standard, ISO/IEC 27001:2022, verified directly against the live Issue No. 008 schedule (9 April 2026), but racert.com/standards/ claims UKAS-accredited authority to issue six further standards/frameworks (ISO/IEC 42001, ISO/IEC 27701, ISO 22301, ISO 9001, NIST CSF, Essential Eight, WLA) that do not appear on that schedule, a material and unqualified overstatement of accredited scope. ### What it publishes about fees: 1/5 No pricing, rate card or quote calculator is published anywhere on racert.com; certification is offered on a contact-for-quote basis only. ### Knowledge of your sector: 4/5 Independently listed by the World Lottery Association itself as an affiliated Assessment Service Entity for WLA-SCS lottery/gaming-sector security assessments, a genuine, third-party-corroborated sector niche, alongside published SME-focused ISO/IEC 27001 messaging. ### Independence from what it sells: 4/5 racert.com/impartiality/ explicitly states no consultancy or related services are undertaken that could compromise certification independence and that decisions are free of commercial/financial pressure; falls short of full marks only because no named impartiality committee or governance body was found (unlike some peer certification bodies). ### Who carries the risk if the advice is wrong: 1/5 No professional indemnity insurance disclosure, liability terms, or client-standing commitment were found anywhere on racert.com. ## Sources for RA Cert Every line carries the page it was read on and the date it was checked. - Companies House registration confirmed - Source: https://find-and-update.company-information.service.gov.uk/company/14679031 - Checked: 2026-09-19 - UKAS accredited scope is limited to ISO/IEC 27001:2022 only - Source: https://www.ukas.com/download-schedule/10720/ManagementSystems/ - Checked: 2026-09-19 - RA Cert's own website overstates its UKAS-accredited scope - Source: https://racert.com/standards/ - Checked: 2026-09-19 - Published impartiality policy separating certification from consultancy - Source: https://racert.com/impartiality/ - Checked: 2026-09-19 - Independently verified sector affiliation with the World Lottery Association - Source: https://world-lotteries.org/services/industry-standards/security-and-risk-management-2/affiliated-assessment-service-entities - Checked: 2026-09-19 - Majority ownership and control sits with an Australian parent company - Source: https://find-and-update.company-information.service.gov.uk/company/14679031/persons-with-significant-control - Checked: 2026-09-19 - Most recent filed UK accounts are dormant-company accounts - Source: https://find-and-update.company-information.service.gov.uk/company/14679031/filing-history - Checked: 2026-09-19 - No fee or pricing information published - Source: https://racert.com/certification-process/ - Checked: 2026-09-19 ## What this provider publishes Not published means we did not find it on the firm's own pages. - Price: Not published - Indemnity cover: Not published - Credentials: Not published - Independent accreditation: Published - Client results: Not published - How it uses AI: Not published ## Strengths - Genuinely holds a current, verified UKAS accreditation (No. 10720) for the specific standard relevant here, ISO/IEC 27001:2022 ISMS certification, confirmed directly against the live UKAS Schedule of Accreditation (Issue No. 008, issued 9 April 2026). - Published impartiality policy that explicitly rules out consultancy or related services that could compromise certification independence, with certification decisions stated to be free of commercial or financial pressure. - Documented complaints and appeals process with named response timescales (5 working days to acknowledge, 30 days for a formal response to a complaint; a separate 30-day appeal window) and an independent Appeals Panel whose decision is final. - Independently verifiable, distinctive sector niche: listed directly by the World Lottery Association as an affiliated Assessment Service Entity for WLA Security Control Standard (WLA-SCS) assessments in the lottery/gaming sector, corroborated outside RA Cert's own marketing. ## Things to check Each one carries the factual basis it rests on. - Its own website claims UKAS-accredited authority to issue ISO/IEC 42001, ISO/IEC 27701, ISO 22301, ISO 9001, NIST CSF, Essential Eight and WLA certifications, none of which appear on its live UKAS Schedule of Accreditation, whose accredited scope is limited to ISO/IEC 27001:2022 only. - Basis: racert.com/standards/ (fetched 19 Sep 2026) states verbatim: 'Yes, RACERT is a UKAS accredited certification body, authorised to issue internationally recognised certifications including ISO/IEC 27001, ISO/IEC 42001, ISO/IEC 27701, ISO 22301, ISO 9001, NIST CSF, Essential Eight, and WLA.' RA Cert Ltd's UKAS Schedule of Accreditation (ref. 10720, Issue No. 008, issued 9 April 2026), fetched directly from ukas.com/download-schedule/10720/ManagementSystems/ on 19 Sep 2026, lists a single accredited scope: 'Information Security Management Systems (ISMS) to ISO/IEC 27001:2022.' No other standard appears anywhere in the three-page schedule. - No fee or pricing information is published anywhere on its website; prospective clients must make contact for a quote. - Basis: No pricing figures, rate card or quote calculator were found on racert.com's homepage, standards pages, or certification-process page (all fetched 19 Sep 2026); a guessed /pricing/ URL returns HTTP 404. - No professional indemnity insurance disclosure, named lead auditors, or disclosed audit-outcome case studies were found anywhere on the site. - Basis: racert.com's certification-process and complaints-appeals-process pages (fetched 19 Sep 2026) mention only an unnamed 'qualified lead auditor' and describe the complaints/appeals procedure; no PI insurance, liability terms, or case-study outcomes are disclosed anywhere on the site. - The UK certifying entity's most recent filed accounts are dormant-company accounts, despite already holding live UKAS accreditation and operating a public-facing certification business. - Basis: Companies House filing history for RA CERT LTD (14679031) shows the latest filed accounts are 'Accounts for a dormant company,' made up to 28 February 2025 and filed 28 November 2025, after the company had already obtained UKAS accreditation. ## Where this firm appears - [Can the firm that prepares you also certify you?](https://theassurancedesk.com/best/certification-seeking) - [Your sector adds its own rules to UK data protection law](https://theassurancedesk.com/best/sector-regulated) - [Compare providers](https://theassurancedesk.com/compare) --- **Scope.** The Assurance Desk covers data protection, AI governance and cyber security in the United Kingdom and the United States. It scores providers in both: UK-facing firms, and firms based in the United States. Every provider scored so far was selected for data-protection, AI-governance or security-assurance work. Where a page describes law, it names the country that law applies in. **Who publishes this.** The Assurance Desk is published by Add-Venture Advisory Ltd, company number 11854524, registered in England and Wales. The same owner runs Avouch, a marketing agency that sells AI visibility services to firms of the kind this site covers. That is a conflict of interest, and it is disclosed here. **Corrections.** If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.