The question comes up in every conversation with a certification body: can we use AI without putting our accreditation at risk? The short answer is yes — as long as you respect the line ISO/IEC 17021 draws clearly: decisions are made by competent personnel of the body.
What the standard requires
ISO/IEC 17021-1 requires impartiality, demonstrable competence, and that the certification decision be made by people at the body other than those who performed the audit. None of that bans tools; what it bans is delegating judgment. A word processor doesn’t decide, and neither does a well-designed AI agent: it prepares.
In practice that splits the operation into two layers. Preparation — reading documentation, mapping clauses, drafting reports, assembling audit packs, chasing deadlines — can be automated. Decision — grading a finding, accepting a closure, granting or maintaining certification — must not be. The distinction isn’t philosophical: it is exactly what your assessor will want to see documented.
The questions your accreditation body will ask
The first is traceability: who reviewed what, and when? Did every agent deliverable stay a draft until a person approved it? Was the final grading signed by someone competent? A well-designed system answers with records, not promises: every run, every edit and every approval carries a name and a date.
The second is confidentiality: where certified clients’ data lives, who can see it, and whether it is used to train models. Client isolation and a commitment to never train on your data belong in the contract — not in the sales deck.
The conclusion is less dramatic than it sounds: AI is not in conflict with accreditation. An automated back office with traceable human decisions is, in practice, easier to defend in front of your accreditation body than an operation held together by folders, spreadsheets and email. That is the design behind Eight agents. One certification cycle. — eight agents that carry the preparation, and a review queue where your people decide.
Related articles
See it in your own operation
We run the agents on a real audit file of yours.
- —30 minutes, no commitment
- —Your accredited procedures and formats
- —Every decision stays with your people