Request a commercial quote

"*" indicates required fields

1. General descriptive information

Requestor ID*

Prefix First Last

Requestor Title / Position:

Requestor email address*

Requestor phone nr.*

Multiples contacts*

I am the only contact for my organization (requestor)

There will be another contact person (2nd contact)

2nd contact ID:*

Prefix First Last

2nd Contact Title/Function:

2nd contact Email Address:*

2nd Contact phone nr.:*

Company name:

Industry sector of my organization:

Please enter your organization's industry sector code here. If your company is registered in France, please note here the NAF/APE code as it appears on your company's k-bis. If your company is located elsewhere in Europe or outside the European Union, please note the NACE code instead if you know it.

Company unique ID:*

Company website:

Social reason of the company:

Company headquarters:*

Street Address Address Line 2 City State / Province / Region ZIP / Postal Code Country

2. Organization information

Main products and / or services provided by the organization:*

Number of sites:*

Please enter a number from 1 to 999.

Indicate the total number of sites including the head office, please.

Number of FTEs * within the organization:

Please enter a number from 1 to 999.999.

Number of FTEs in the scope to be audited:

Please enter a number from 1 to 999.999.

FTE = Full-Time Equivalent

Site 2 address:

Street Address Address Line 2 City State / Province / Region ZIP / Postal Code Country

Site 3 Address:

Street Address Address Line 2 City State / Province / Region ZIP / Postal Code Country

Site 4 Address:

Street Address Address Line 2 City State / Province / Region ZIP / Postal Code Country

More than 4 sites?

Accepted file types: doc, docx, xls, xlsx, txt, csv, pdf, Max. file size: 1 MB.

If your organization has more than 4 sites in total, please attach a file containing the contact details of all the sites (primary site and secondary sites and / or technical sites), mentioning the number of FTEs per site.

3. Certification information

Current certification status of your organization:*

This is a first (initial) certification request

My organization has been certified for at least 3 years (renewal)

My organization is in the process of certification (monitoring 1 or 2 to be carried out)

Indicate above whether this is an initial certification or a renewal of certification (including if you were not previously certified by Certi-Trust).

Would you like a transfer of certification?*

Yes

I don't know

If your organization is possibly considering a transfer of certification, please tick "Yes" so that we can inform you further about this process.

Active certifications to be transferred, if applicable:

If you checked option 2 or option 3 in the "Current certification status" section, please list the certifications currently active in your organization and, optionally, the name of the current certifier. You can encode up to 5 certifications.

Description of the organization:*

Please provide a description of the processes, infrastructure, operations, human and technical resources, functions and organizational relationships (eg organization chart) that will be included in the scope of the certification. If the information is too much to fit in the encoding field, please check the box "I want to attach files" and add up to 5 files maximum to document your declaration.

Is your organization subject to specific regulatory requirements?*

Yes

I don't know

Please list in the field opposite the different regulations that your organization has identified as applicable to its situation (several possible choices).

Applicable regulations:

Please indicate one type of regulation per line (you can add up to 15 lines per program).

Does your organization outsource processes?*

Yes

I don't know

Please list in the related field the processes entrusted to third parties (several possible choices).

Outsourced processes:

Please indicate one process per line (you can add up to 15 lines).

I want to attach files:*

Yes

If you wish to specify certain aspects in a more elaborate way, please attach the explanatory files in the field below.

Descriptive appendices:

Drop files here or

Accepted file types: doc, docx, xls, xlsx, ppt, pptx, pdf, Max. file size: 2 MB, Max. files: 5.

Add here a maximum of 5 files describing your organization (maximum size per file 2MB).

4. Information on the certification / qualification program

Type of certification scheme:*

Select a type of certification scheme to be audited on. Certi-Trust is accredited on several certification / qualification schemes in France and Luxembourg. Check the program that best suits your expectations.

Certification de Systèmes de Management :*

ISO 27001:2022

ISO 9001:2015

ISO 14001:2015

ISO 22000:2018

ISO 22301:2019

ISO 27701:2019

ISO 45001:2018

ISO 50001:2018

Health Data Host aka "Hébergeur de Données de Santé" (HDS)

PSDC (Regulation Luxembourg)

Other scheme (specify)

Check the box corresponding to the desired certification scheme. Several choices are possible.

If "Other scheme", please specify:

If you have selected "PSDC":*

Indicate on which PSDC program your organization wishes to be certified.

If you have selected HDS:*

Outsourcing host (aka "Hébergeur Infogéreur")

Physical infrastructure host (aka "Hébergeur d'infrastructure physique")

Please indicate the program (s) on which you would like your organization to be certified.

Outsourcing host:*

Outsourced health data backups

Outsourcing of health information system operations

Provision or maintenance in operational condition of the virtual infrastructure of the health information system

Provision or maintenance in operational condition of the software platform (operating system, middleware, database) of the health information system

Indicate the areas of the repository falling within the scope of the certification.

Physical infrastructure host:*

Provision or maintenance in operational condition of the physical infrastructure of the health information system

Provision or maintenance in operational condition of premises to house the physical infrastructure of the health information system

Indicate the areas of the repository falling within the scope of the certification.

Certification of digital trust services:*

eIDAS

Other service (please specify below)

Check the box corresponding to the desired qualification scheme. Several choices are possible.

If you have selected "eIDAS":*

Qualified PSCo and Qualified Trust Services Provided

Services for issuing qualified certificates for electronic signature, electronic seal and website authentication

Qualified electronic time stamping services

Electronic Certification Service (PSCE)

Electronic Time Stamping Service (PSHE)

Qualified validation services of qualified electronic signatures and qualified electronic seals

Qualified custody services for qualified electronic signatures and qualified electronic seals

Qualified electronic registered delivery services

Electronic signature and electronic seal validation services

Electronic registered delivery services

Preservation service for electronic signatures and electronic seals

Qualified electronic archiving service (Belgium)

Qualified PSCo (Luxembourg)

Please specify on which scope(s) of certification you would like your organization to qualify.

Is your organization a PSCoE listed on the EUTL?*

Yes

If your organization is listed as a Qualified Trust Service Provider (PSCoE) on the European Trusted List, please tick "Yes".

Other type of service to qualify:

If you wish to order a service that is not listed in our service catalog, please indicate the name of the service above so that we can contact you again to discuss it if necessary.

Desired date for the audit:*

DD slash MM slash YYYY

Indicate the estimated date you want the organization to be audited (indicative only).

Method of carrying out the audit:

I would like a multi-standards integrated audit

I would prefer separate audits over time

I would like to discuss it first with Certi-Trust

If you have selected more than one certification scheme, indicate here whether you want separate audits to be performed on the different desired schemes (for example, because they cannot all take place at the same time) or whether you prefer the audits to be performed are carried out in an integrated manner (which will optimize the direct and indirect costs of this service). By default, without an explicit choice on your part, we always favor integration.

Desired scope for certification / qualification:*

Please indicate here which processes or areas of your organization you would like to see certified. If your organization opts for integrated certification (e.g. ISO 27001 & HDS or ISO 27001 & PSDC or even ISO 9001 & ISO 14001, etc.), please also indicate whether the certification scopes are the same or separate and, in this case , to what extent (the appendices at the end of the form make it possible to formalize this possible distinction).

Exclusions from the scope (valid only for ISO 27001 and/or HDS):

Please indicate here the clauses of Annex A of ISO 27001 that you wish to exclude from the scope as well as the justification for these exclusions.

Support from a consulting firm?*

Yes

I don't know

If your organization was supported by a firm external to the organization, you can enter this firm in the field opposite (optional process).

Consulting firm that supports the certification of your organization:

Company name

5. Technical appendices by certification or qualification scheme

The appendices appear below only according to the certification schemes that you have previously selected. NB: It is not allowed to select certification or qualification schemes in different accreditation scopes (Management Systems AND Products/Services, for example). These requests must necessarily be the subject of separate quotes.

Annex A - Information Security Management System (ISO 27001)

This appendix must be completed if you have selected "ISO 27001" among the possible certification choices for your organization.

FTE on the primary site within the scope of certification of the ISMS:*

Sites identification

Total FTEs in scope

Total hours per shift

Total shifts

List above the number of full-time equivalents on the primary site, per shift (generally 8h/working day) up to 3 shifts maximum. If your organization is multi-site, please also complete Form F below.

ISMS - Organizational & business aspects

NB: In the following sections, you can choose only one answer among those proposed below. If you feel that more than one answer may be applicable, always choose the one above that represents the highest level of exposure or impact for your organization.

ISMS - Organizational & business aspects

Business sector and regulatory exposure of the organization:

The organization operates in a critical and / or highly regulated industry

The organization serves clients who operate in critical or heavily regulated industries

The organization operates in a non-critical industry, with little or no regulation

Activities and Tasks carried out within the scope of certification:

Complex processes, high number of products / services, many stakeholders

Standardized and varied processes, medium to high number of products / services

Standardized processes, repetitive tasks, few different stakeholders

ISMS maturity level to be certified:

No pre-existing management system, the ISMS is recent

Aspects of the ISMS are already operated in a non-standardized way

The ISMS has been running for some time and / or other benchmarks are already implemented

ISMS - Technological and infrastructure aspects

Information System complexity level:

Complex urbanized information system, multi interfaces, heavy administration

Standard information system, homogeneous management, classic administration

Simple, partially or fully managed information system, limited administration

Outsourcing & Cloud services:

Strong dependence on outsourcing with high impact on activities

Average dependence on outsourcing with limited impact on activities

Little reliance on outsourcing with little or no impact on the business

Development of the information system:

Extensive use of in-house or outsourced software engineering, sustained application development

Moderate use of software engineering, application development limited and / or mainly outsourced

No direct use of software engineering, use of standard market software

Annex B - Quality Management System (ISO 9001)

This appendix must be completed if you have selected "ISO 9001" among the possible certification choices for your organization.

FTE on the primary site within the QMS certification scope:*

Sites identification

Total FTEs in scope

Total hours per shift

Total shifts

List above the number of full-time equivalents on the primary site, per shift (generally 8h/working day) up to 3 shifts maximum. If your organization is multi-site, please also complete Form F below.

Multi-site organization and centralized QMS?*

Yes

Indicate whether all sites operate under a single centrally administered QMS. if the answer to this question is "Yes", please also complete Annex F below.

Please check ALL the boxes that may apply to your organization's QMS:*

Complex logistics involving more than one building or location where the work is performed (e.g. a separate design center needs to be audited)

Several languages are spoken within the organization

Very large site (e.g. a very large development campus or industrial land of several hectares)

High regulatory requirements (e.g. food, pharma, aerospace, etc.)

QMS covering many complex processes or a large number of separate activities

Activities that require temporary site visits to confirm the activities of the permanent site (s) for which the management system is subject to certification

Outsourced processes or functions

Le client n'est pas « responsable de la conception » ou d'autres éléments standard ne sont pas couverts par le champ d'application

Very small site for the amount of people employed

High degree of automation of activities / processes

Lorsque le personnel comprend un certain nombre de personnes qui travaillent « hors site », par ex. vendeurs, chauffeurs, personnel de service, etc. et il est possible d'auditer substantiellement la conformité de leurs activités avec le système grâce à l'examen des enregistrements

QMS's level of preparation for certification:*

Low

Average

High

Other

QMS Maturity level:*

Very recent system, still few records

Recent system, monitored, records for all activities

System well in place, monitored and continuously improved

Other

Is another management system already in place?*

Yes

I don't know

If so, specify which system:

Annexe C - Système de Management de l'Environnement (ISO 14001)

This appendix must be completed if you have selected "ISO 14001" among the possible certification choices for your organization.

Have you already completed Annex B?*

If you also checked "ISO 9001" and completed the previous questionnaire, select the option "My organization has already answered questions relating to ISO 9001 certification".

Scope of the Environmental Management System (ISO 14001):*

Identical to the scope of the QMS

Different from the scope of the QMS

The differences relate to the FTEs employed (are they the same people?) And the sites concerned (are they identical between the management systems?)

Please check ALL the boxes that may apply to your organization:*

Risks of hazards and environmental impacts resulting from, or likely to occur, as consequences of incidents, accidents and potential emergency situations, previous environmental problems to which the organization has contributed

The organization has implemented a CSR approach

Prior existence of a sustainable development program, whether or not linked to a CSR approach

This list only includes elements specific to ISO 14001 which have not already been listed in appendix B.

FTE on the primary site within the EMS certification scope (integrated with another MS):*

Sites identification

Total FTEs in scope

Total hours per shift

Total shifts

If the scope of your EMS is different from that of your QMS, please list above the number of full-time equivalents on the primary site, per shift (generally 8h/working day) up to 3 shifts maximum. If your organization is multi-site, please also complete Form F below.

Multi-site organization and centralized EMS?*

Yes

Indicate whether all sites operate under a single centrally administered EMS. if the answer to this question is "Yes", please also complete Annex F below.

FTE on the primary site within the scope of EMS certification (solo):*

Sites identification

Total FTEs in scope

Total hours per shift

Total shifts

List above the number of full-time equivalents on the primary site, per shift (generally 8h/working day) up to 3 shifts maximum. If your organization is multi-site, please also complete Form F below.

Level of preparation for EMS certification:*

Low

Average

High

Other

EMS maturity level:*

Very recent system, still few records

Recent system, monitored, records for all activities

System well in place, monitored and continuously improved

Other

Appendix D - Health Data Host (HDS - aka "Hébergeur de données de santé)

This appendix must be completed if you have selected "HDS" among the possible certification choices for your organization.

Have you already completed Annex A?*

If you have also checked "ISO 27001" and completed the previous questionnaire, select the option "My organization has already answered questions relating to ISO 27001 certification".

My organization is already ISO 27001 certified:*

Yes, by Certi-Trust

Yes, by another Conformity Assessment Body

No, not yet

Other Certification Body for ISO 27001:*

CAB Name

Certificate ID (Certi-Trust):*

Multi-site organization and centralized ISO 27001 & HDS system?*

Yes

Indicate whether all sites operate under a single centrally administered HDS. If the answer to this question is "Yes", please also complete Annex F below.

Level of centralization of the ISO 27001 & HDS management system:*

Low (most clauses are managed in a decentralized manner)

Average (several clauses are managed in a decentralized manner)

High (most clauses are managed by a few groups like IT, HR, general services, etc.)

Indicate here the level of centralization for the governance of your management system.

Annex F - Multi-site organization

This appendix serves to refine our understanding of the organizational mode that is implemented within your organization on its various sites of activity.

To document my answer, I want to:*

Complete the Certi-Trust table presented below

Provide my own documentation meeting the Certi-Trust criteria

Presentation of the different sites and their use:*

Site identification

Activities carried out on this site

Total FTEs in scope for this site

If you have already completed the site addresses in the "Signage" section above, you can only indicate "Site 1", "Site 2," Site 3 ", etc. in the first column. We will establish the relationship by ourselves.

Documents highlighting the different sites of my organization:*

Drop files here or

Accepted file types: doc, docx, xls, xlsx, ppt, pptx, pdf, jpg, jepg, png, Max. file size: 2 MB, Max. files: 10.

Characteristics of the multi-site organization:*

The organization identifies its core function. The core function is part of the organization and is not subcontracted to an external organization

All sites have a legal or contractual link with the core function of the organization and are subject to a single management system, which is defined, established and subject to continuous monitoring and internal audits by the core function

The core function has the organizational authority to define, establish and maintain the single management system

All sites are subject to the organization's internal audit program

Please check ALL of the boxes that apply to your organization's situation.

Responsibilities of the core function within your organization:*

Management System Documentation

Changes to the Management System

Management Reviews

Management of complaints

Corrective action assessment

Planning of internal audit and evaluation of results

Statutory and legal requirements applicable to the relevant international standards

Check ALL that apply within your organization. The core function is, among other things, responsible for ensuring that data is collected and analyzed at all sites and is able to demonstrate its authority and capacity to initiate organizational changes in the various areas presented above.

Internal audit carried out for each site of the management system?*

Yes

Specify the date for each site:*

Site identification

Audit date