Certification Schemes

• Establish criteria, responsibilities, contents and frequencies for publication, maintenance and update of FVR's mandatory public information as certification body, per:
• - ISO/IEC 17021-1:2015 clause 8 (Information requirements)
• - ISO/IEC 17024:2012 clause 7.2 (Public information)

• Applies to all information FVR must make publicly available by normative mandate, including:
• - Public status enquiry of any certificate by QR or folio (systems: active, suspended, withdrawn or expired; persons: in force, suspended, withdrawn or in transition — §8)
• - Public processes (scheme, rules, general costs)
• - Certificate and mark use rules
• - Complaint and appeal mechanism
• - Public impartiality policy
• - Body information (structure, accreditation, contact)
• Applies to both service lines (17021 + 17024).
• This information is made publicly available without request throughout all geographical areas in which FVR operates: Mexico, Latin America and the United States. Where FVR extends its operation to a further area, the public information is verified as accessible from that area before certification activity begins there.
• Public information is maintained in Spanish and in English. English is FVR's official language; where a discrepancy exists between versions, the English version prevails. The availability of both versions is verified as part of §16.

• Channel · Responsible — Use
• FVR website (public section) · RC + MK — Public information channel; eleven policy and process pages display the current controlled SGC text, while the remaining pages are subject to controlled review
• Certificate register · TD — Source for the folio-by-folio public enquiry; no browsable directory is maintained
• Accreditation Body (when applicable) · TD — Accreditation-required information
• Corporate materials · MK + RC — Presentation + brochures with verified public info

• The public enquiry of §8 returns, without request and for every certificate issued by FVR, the minimum content set out below, folio by folio; there is no browsable list. §5 details the fields for the management systems line and §6 those for the personnel line.
• Minimum required content: unique certificate number · certificate-holder name · standard or scheme and version · certification scope · issue or effective date · expiry date for management-system certificates or continuity condition for personnel certificates · current status · accreditation status, where applicable · covered geographical location, including every site within a multi-site management-system scope. The public enquiry returns the fields applicable to each line from the certificate record.
• Suspended and withdrawn certificates remain identifiable in the enquiry with their status and the effective date of the last status change; the reason remains in the certificate event log and is not made public. A withdrawn certificate keeps answering as withdrawn and is retained as a historical record. A folio the ERP does not find is not a valid FVR certificate.
• The validity of any certificate can be verified without request through the enquiry at www.fvr.mx/verify (§8) and, on request, through the channels of §11.1. No information beyond the content of this section is published without the written consent of the certificate holder (§14).

• Certificate number — Consecutive, no renewal suffix
• Certified client legal name — Full legal name
• Certified scope — Processes, products, included sites
• Standard(s) — ISO 9001, ISO 14001, ISO 45001, ISO 22000, HACCP, ISO/IEC 27001, ISO 37001 and ISO 50001, as applicable
• Issue date — Original certificate issuance
• Expiry date — 3-year validity from decision
• Current status — Active, Suspended, Withdrawn, In RA process
• Accreditor — Accreditation Body (post-accreditation when applicable)
• Last audit — Type (CA, FSA, SA, RA) + date

• Certificate number — Consecutive
• Certified person name — Full name
• Scheme — ISO 9001, ISO 14001, ISO 45001, ISO 50001, ISO 22000, ISO/IEC 27001, ISO 37001, HACCP or FSSC 22000
• Level — RQ, AU, TL
• Issue date — Certification decision
• Continuity condition — No expiry date; validity follows the reference-standard edition and the applicable maintenance conditions
• Current status — In force, Suspended, Withdrawn, In transition

• Event — Effect on the public enquiry EN
• Certificate issuance following a favorable CA technical review — The new certificate answers in the enquiry once issuance is recorded — Immediate
• Favorable RA decision — Validity update
• Suspension — Status change to "Suspended" — Immediate (24 business hours maximum)
• Withdrawal — Status "Withdrawn" in the enquiry, record retained — Immediate (24 business hours maximum)
• Scope reduction — Current scope update
• Transfer (TA) — New FVR certificate registration + origin note
• Accreditation granted (new standard or extended scope) — The accreditation status in §12 is updated from the ERP catalogue and links to the accreditation body's directory for the current scope — Immediate, once the accreditation certificate is recorded in the ERP
• Client legal name changes — Update after verification
• There is no directory to update: the enquiry in §8 reads the certificate record, so each event is reflected once the corresponding issuance, lifecycle change or accreditation update is recorded under FVR_RD-PR-01 or FVR_RD-PR-04, as applicable. The deadlines above govern the applicable record, not a separate publication step.

• Anyone can confirm the status of a certificate without intermediaries, by two routes that give the same answer: the QR code printed on FVR_RD-FO-02, which encodes `fvr.mx/verify/{folio}`, and the folio typed at `www.fvr.mx/verify`. The page reads the current certificate record and displays the status recorded at that moment. There is no list or directory to keep in step: the enquiry reads the same record that FVR_RD-PR-01 (grant / maintain) and FVR_RD-PR-04 (suspension / withdrawal / reduction) update when the decision is recorded, so the answer changes the moment the decision is written. This is the means required by 17024 §7.1.1 and the verification on request of 17024 §7.2.1; a browsable public directory is neither required nor offered.

• Per FVR_DD-EQ-01 Part 1 (PUBLIC):
• - FVR_DD-EQ-01 §7 Standards covered + versions
• - FVR_DD-EQ-01 §8 Eligibility criteria (4 mandatory)
• - FVR_DD-EQ-01 §9 Audit types and cycle (CA, FSA, SA, RA, TA)
• - FVR_DD-EQ-01 §10 Audit modalities
• - FVR_DD-EQ-01 §11 Certificate and mark use rules
• - FVR_DD-EQ-01 §12 Auditor competence criteria
• - FVR_DD-EQ-01 §13 Accreditation status
• - FVR_DD-EQ-01 §14 General commercial terms
• - FVR_DD-EQ-01 §16 Public suspension / withdrawal causes
• For each of the nine personnel-certification schemes, FVR publishes without prior request the levels offered, the entry prerequisites for each level, including where none apply, the competence assessed, the assessment method, the passing criterion and the fee. RC verifies that the published information corresponds to the scheme in force.

• The binding mark and certificate use rules are documented in FVR_RD-PR-02. The public website provides a plain-language summary of its general rules (§4.1), obligations following suspension, withdrawal or scope reduction (§4.3), and handling of misuse (§4.5).

• The official website www.fidesveritasregister.com publishes, on its «How we work» page, the current edition of FVR_QA-PR-01:
• - Reception channel: e-mail to support@fidesveritasregister.com, written directly or through the «File a complaint or appeal» button, which opens an e-mail to that mailbox with the subject «Complaint or appeal» («Queja o apelación» in Spanish); there is no complaints form. FVR_GD-POL-06 §16 still names support@fvr.mx with the subject «QUEJA» or «APELACIÓN», so the two instructions are to be reconciled
• - Process stages
• - Maximum times per stage (SLA — see FVR_QA-PR-01 §7): acknowledgement within 24 working hours; resolution within 15 working days for an administrative complaint and within 30 calendar days for a technical appeal or a third-party complaint
• - Free policy (filing a complaint or appeal is free)
• - Complainant protection policy (no retaliation)
• - Annual aggregated results (statistics — no individual case identification), pending publication: the procedure commits to them but no page carries them today
• Whistleblowing is a separate channel, with its own page and form (FVR_GD-POL-04 §9). While www.fvr.mx remains in service, it also publishes the procedure at www.fvr.mx/procesos/reclamaciones, with e-mail to support@fvr.mx.

• Any interested party may request information about FVR, its certification processes or the status of a certificate, through the channels published on the website. Requests are received in writing and are free of charge.
• FVR acknowledges receipt within 2 working days and provides the applicable information within 10 working days. Where the request concerns information classified as confidential under §14, FVR states that it cannot be disclosed and the reason, without disclosing the information itself.
• First response is handled by commercial personnel through the support channel published on the website, who record the request and channel it to the areas involved. Escalation to the Technical Director where the request concerns a certification decision, and to the General Director where it concerns impartiality.
• Every request and its response are recorded with the date of receipt, the requester, the subject, the area to which it was channelled, the response given and its date. The record is retained as documented information.

• Legal identity — Legal name, seat, legal representative
• Mission and values — Published on the official website at www.fidesveritasregister.com/sobre-fvr.html
• Impartiality policy — Public version of FVR_GD-POL-02, published on www.fidesveritasregister.com («How we work») with the text and code of its current edition, taken from www.fvr.mx/procesos/imparcialidad, which serves it from the management system
• Independence policy — Public version of FVR_GD-POL-05, published on www.fidesveritasregister.com («How we work») with the text and code of its current edition, taken from www.fvr.mx/procesos/independencia, which serves it from the management system
• Accreditation status — Accreditation Body (when applicable) + accreditation number
• Operated schemes — Management systems; personnel schemes for ISO 9001, ISO 14001, ISO 45001, ISO 50001, ISO 22000, ISO/IEC 27001, ISO 37001, HACCP and FSSC 22000
• Contact — Official communication channels: the official website www.fidesveritasregister.com and the mailbox support@fidesveritasregister.com; while www.fvr.mx remains in service, it and support@fvr.mx also receive
• Certificate status enquiry — By folio or by QR on www.fidesveritasregister.com and, while it remains in service, on www.fvr.mx; both query the same certificate record in the ERP (§8)

• **TD** — Approves publishable content, validates certificate status accuracy
• RC — Controls the site's editorial and normative content, requests its updates and verifies correspondence with the current controlled documents
• **MK** — Implements visual changes on website without altering normative content
• **ERP** — Answers the public enquiry folio by folio from the certificate record the cycle decisions update; there is no directory to synchronise

• Client personnel personal data — Must not be published (LFPDPPP MX + GDPR EU)
• Client confidential commercial information — Must not be published (FVR_GD-POL-03)
• FVR internal processes — Must not be published (internal use; see FVR_DD-EQ-01 Part 2)
• Individual complaints without public resolution — Must not be published; only annual aggregate statistics are public
• Complainant identity — Must not be published without written authorization (FVR_QA-PR-01 §9)
• Detailed technical decisions — Must not be published; only the final decision, scope and status are public
• Internal MS documents — Must not be published, except for documents specifically designated as public

• Certificate issuance following a favorable CA technical review (FVR_RD-PR-01) — The new certificate answers in the enquiry once issuance is recorded
• Favorable RA decision (FVR_RD-PR-01 §3.7) — Automatic validity update
• "Maintain" decision post FSA/SA (FVR_RD-PR-01 §3.6) — No change in the public enquiry (internal record)
• Suspension (FVR_RD-PR-04 §6) — Status "Suspended" in the enquiry as soon as it is recorded; no public note is published
• Withdrawal (FVR_RD-PR-04 §7) — Status "Withdrawn" in the enquiry as soon as it is recorded; the record is retained
• Scope reduction (FVR_RD-PR-04 §14) — The enquiry displays the updated scope once it is recorded
• Transfer TA (FVR_RD-PR-05) — New record post-decision

• - Continuous: the public enquiry reads the certificate record itself, so there is no directory to reconcile with the internal database
• - Semi-annual: manual sampling by RC of the site's published text (policies, schemes, contact, both languages) against the controlled document in force, for the pages that do not read the corpus
• - Annual: MS internal audit verifies public information coverage per clause 8.1 of ISO/IEC 17021-1 and clause 7.2 of ISO/IEC 17024

• - Certificate event log in the ERP (type, reason, user, IP, date — automatic)
• - Semi-annual sampling records of the site's text (RC)
• - Cycle decisions recorded in the ERP that change a certificate's status
• Retention: 5 years post-event (FVR_CD-MZ-01).

Approvals / Aprobaciones