ISO 14001 vs ISO 45001: which certificate goes on this RFQ
A mid-market buying comparison for teams torn between ISO 14001 and ISO 45001. When an environmental certificate is the forced gate this cycle, when occupational health and safety is, and how to put one standard on the scope pack.
2026-09-25 · 18 min
This page is a buying comparison. It is for operations and EHS leads at mid-market manufacturers, warehouses, and field-service firms who are about to send a registrar RFQ and cannot agree whether ISO 14001 or ISO 45001 belongs on it.
Those standards are not interchangeable EHS logos. 14001 is an environmental management system. 45001 is an occupational health and safety management system. Customers ask for both. Salespeople will offer to quote both. The useful question is a procurement question: which certificate does this cycle have to produce, and can you staff the system behind it.
Quality versus environment, when occupational health and safety is not this cycle, is the ISO 9001 vs ISO 14001 comparison. Quality versus occupational health and safety, when environment is not this cycle, is the ISO 9001 vs ISO 45001 comparison. The three-standard plant stack, when ISO 9001 belongs beside both, is the IMS buying guide. Whether the system is real enough to book Stage 1 is first ISO certification. After you pick the standard, you still write one outbound pack, choose a registrar, read the quote, and verify accreditation for the legal entity and the edition you will claim. This page does not invent prices, day-rate totals, or accreditation identifiers. Confirm the live schedule in the quarter you would book.
The decision here is narrower: 14001 on this RFQ, 45001 on this RFQ, or neither until the system exists. Then one pack.
1. What each standard is for, in plain terms
Skip the clause lists. Buyers do not award a certificate because they memorized a table of contents.
ISO 14001 asks whether you control the environmental aspects of a defined scope and can prove it. A certification body samples that environmental management system: which aspects are significant, how you meet compliance obligations, and whether the controls you claim actually run. Buyers meet this as an aspects and impacts register someone maintains, and a compliance-obligations register someone opens. Air, water, waste, chemicals, energy, land, and the contractors who create those aspects are the usual objects. A sustainability slide, a recycling poster, or a carbon number on a website is not that system.
The certificate records the management system. It does not issue a permit, and it does not mean the plant has no impact. If a coating line, a wastewater skid, or a solvent store is how you touch the environment, the auditor will want the control that runs on a Tuesday, including what you do when a limit is missed. On a plant the EMS lives where the aspects live. A design office that only produces drawings may sit outside 14001 if you will defend that boundary. The owner is whoever can walk the register. A safety lead holding a copied aspects list is not that person.
ISO 45001 asks whether you control the occupational health and safety risks of a defined scope and can prove it. A certification body samples that OH&S management system: how you identify hazards, how workers participate, and whether incidents change the way the work is done. Buyers meet this as a hazard register someone maintains, a way workers are consulted before the procedure is frozen, and an incident record someone opens after a near miss. Machine guarding, chemical exposure, working at height, confined space, contractors on the floor, driving, and the night shift are the usual objects. A binder of toolbox talks, a poster by the clock, or last year's injury rate on a slide is not that system.
The certificate records the management system. It does not replace a statutory safety duty, and it does not mean the site had no injuries. The auditor will want the control that runs when the EHS manager is not in the room, and what a worker says about the job the procedure describes. A portal that still says OHSAS 18001 is asking for a certified OH&S system. Confirm they will accept ISO 45001 before you substitute it. The OHSMS lives where people can be harmed: the floor, maintenance, a warehouse, a lab, a field crew, and the contractors who do that work. That map is not the aspects map with a new title. A wastewater skid can be central to the EMS and a narrow OH&S story if two trained operators are the only people who enter it. A forklift aisle can be central to 45001 and a thin EMS if the significant aspects sit on the line next door. The owner is whoever can walk the hazards and sit with a worker who was not briefed for the visit. An environmental lead holding a copied hazard list is not that person.
You can hold both certificates eventually. This page is about which one this RFQ is for.
2. When 14001 is the forced gate this cycle
Start with 14001 when a customer, a permit or consent condition, a tender, an insurer, or an ESG buyer will not let you through without an environmental certificate this cycle, and you can show an EMS. A competitor's homepage does not create the gate. A named requirement with a date does.
The certificate does not replace the permit. If the condition says you must operate a certified EMS, you show the system. The limits, the monitoring, and the consent stay yours. Quoting 14001 does not move a regulator's deadline, and it does not authorize a discharge the consent does not allow.
Put 14001 on this RFQ when most of these are true:
- A named customer, portal, tender, permit or consent condition, insurer, or ESG buyer requires 14001, or an accredited EMS certificate, on a date you can point at.
- You can describe the aspects in scope: air, water, waste, chemicals, energy, land, and the contractors who create them, and which legal entity operates that work.
- Someone other than a hopeful safety manager owns the aspects and impacts register, compliance obligations, operational controls, and the response when a limit is missed, and can be interviewed.
- The register matches the plant you operate. Significant aspects have controls and records. Boundaries you will defend have a reason you can explain at Stage 1. A supervisor would recognise the list on a walk of the floor.
- You can name where those aspects occur. That address may be one line, a treatment plant, a waste dock, or a yard. It may not be every office, and it may not be every place a person can be hurt.
- 45001 pressure is a forecast: a safety slide, an insurer conversation you expect, a private-equity note that OH&S might come up. A forecast is not a date that kills a contract this cycle.
- You are not offering an environmental certificate as a stand-in for an OH&S promise already in the contract, the tender, or the contractor prequalification. If the exhibit names ISO 45001 or a certified OH&S management system, 14001 will not clear it.
A later 45001 add is a normal plan. One line on the pack is enough. Leave 45001 off this RFQ while the hazard register is still a wish. If ISO 9001 is also a living system and belongs on the same programme, that argument is the IMS buying guide. If the live fork is quality versus environment, and 45001 is not part of this cycle, the buying comparison is ISO 9001 vs ISO 14001.
If the tender requires 14001 and the EMS does not exist, build the system, then send the pack. An RFQ sent so the quote creates a deadline is how Stage 1 writes findings you already knew. Readiness still has the first-certificate shape. The content is the EMS. Who writes the system versus who certifies it is consultant vs certification body.
3. When 45001 is the forced gate this cycle
Start with 45001 when a customer, an insurer, a tender, or a contractor prequalification will not let you through without an occupational health and safety certificate this cycle, and you can show an OHSMS. That is the usual case for plants, warehouses, labs, and field crews whose buyers score injuries, participation, and contractor control before they score an aspects register. A light-footprint professional-services firm is in this section only when the work is physical. A desk and a fire drill are not a gate.
The certificate does not replace the legal duty to keep people safe. Quoting 45001 does not close an investigation, and it does not authorize a task the procedure forbids.
Put 45001 on this RFQ when most of these are true:
- A named customer, portal, tender, insurer, or contractor prequalification requires 45001, or an accredited OH&S certificate, on a date you can point at.
- You can describe the hazards in scope: the work, the people exposed, the contractors, and which legal entity operates that work.
- Someone other than a hopeful environmental manager owns hazard identification, worker participation and consultation, operational controls, and incident learning, and can be interviewed with a worker who does the job.
- The hazard register matches Tuesday. Significant hazards have controls and records. Workers were consulted in a way you can show, not only signed onto a slide. Boundaries you will defend have a reason you can explain at Stage 1.
- You can name where those hazards occur, including the shift that runs them. That address may be a warehouse, a maintenance shop, a customer site, or a vehicle. It may not be the wastewater skid that dominates the EMS.
- 14001 pressure is a forecast: an ESG questionnaire you expect, a permit you already hold that does not name a certified EMS. A forecast is not a date that kills a contract this cycle.
- You are not offering an OH&S certificate as a stand-in for an environmental promise already in the contract or the consent. If the exhibit names ISO 14001 or a certified environmental management system, 45001 will not clear it.
If the prequalification requires 45001 and the OHSMS does not exist, build the system, then send the pack. A downloaded procedure and a month of toolbox talks will not survive Stage 1, and they will not survive a worker interview. Readiness still has the first-certificate shape. The content is the OHSMS. Worker evidence is floor time. How to write that on the pack is remote vs on-site ISO audits.
Leave 14001 off this cycle only when it is not the gate and you cannot staff both. Read the portal before you do that. Many EHS rows still name environment beside safety. A 45001 certificate you already hold does not put the aspects into scope, and it does not appoint an EMS owner.
4. What buyers get wrong
Three patterns show up in mid-market rooms. Each one produces unlike quotes, or a Stage 1 whose job is to discover fiction.
Treating either certificate as a badge. The certificate is the output of an independent audit, not a logo rented to clear a questionnaire. For 14001, a recycling poster, an energy dashboard nobody owns, and a paragraph in the annual letter are a project. For 45001, a binder of toolbox talks and an injury-rate slide are a project. The certification body samples. It does not write the aspects register, the compliance-obligations register, the hazard register, or the rule for how workers are consulted. Finish the system, or hire implementation help that will not also be the certifier, then send the RFQ. Who writes the system versus who certifies it is consultant vs certification body.
Shopping both at once with hollow systems. "Quote 14001 and 45001, we're integrated EHS" is a sentence, not a programme. Integration is real when shared processes already run (document control, internal audit, management review, corrective action) and both technical systems exist: aspects a supervisor would recognise, compliance obligations someone maintains, hazards a worker would recognise, and participation you can show. An aspects list copied from a similar plant, and a hazard list copied from the same file, marked significant everywhere, with no owner, is hollow. Pairing two PDFs asks for days on two systems you do not operate. If you want both certificates eventually, name which one is this cycle. "Both" is a claim about systems you run.
Skipping the standard customers still gate on. A plant drops 14001 because 45001 sounds more urgent, then fails the tender that still names a certified EMS. A plant drops 45001 because the ESG slide is the meeting, then fails the insurer or the contractor portal that still names OH&S. Read the portal, the contract exhibit, the consent, and the tender scoring sheet before you treat the other mark as old news. The same miss shows up one step earlier: dropping ISO 9001 because the EHS pair sounds like the whole plant story, then failing the supplier approval that still names quality. An environmental certificate does not clear a safety field. A safety certificate does not clear an environmental field. Neither clears a quality field.
"Quote whichever is easier" means the bodies are not quoting the same object. Adding ISO 9001, or ISO/IEC 27001, because someone mentioned a stack belongs on the IMS buying guide or the 9001 vs 27001 comparison, and only when that system exists. Confirm competence for the edition on the pack when you choose a registrar and verify accreditation. A strong EMS auditor is not automatically the person who can sample worker participation. A strong OH&S auditor is not automatically the person who can sample a wastewater skid.
5. How the RFQ, the scope, the sites, and the people differ
A quote is a designed audit programme. It starts from your facts. 14001 facts and 45001 facts are not the same list with a different title.
Scope. For 14001, name the activities, products, and services that have environmental aspects, and what sits outside the boundary. For 45001, name the work where people can be harmed, including contractors, and what sits outside the boundary. "The whole company" and "all EHS" sweep a sales office into a system it should not share, or drop a solvent store because it was not on the safety tour. More than one location is multi-site certification scope. Write that map before anyone counts days.
Sites. 14001 follows significant aspects: emissions, effluent, waste, chemicals, energy, and the people who control them. 45001 follows hazards: the floor, the warehouse, maintenance, field crews, vehicles, and the shift that does the work. A design office can be out of the EMS and still in the OHSMS if you will claim those workers, or out of both if you will defend that boundary. A treatment plant can be central to the EMS and only a slice of the OH&S sample. A forklift aisle can be the reverse. This cycle names one standard's sites. If you are honestly quoting both, the pack carries a site-by-standard matrix. The later add stays off the pack, with one line that says so.
People. 14001 interviews an environmental owner who can show the aspects register, the compliance obligations, and a control that runs, plus the people who monitor and respond when a limit is missed. 45001 interviews an OH&S owner who can show the hazard register, how workers were consulted, and what changed after the last incident, plus workers and contractors who do the job. "We'll bring the safety lead in at Stage 2" means the pack is early. "The environmental manager will cover safety" means the hazard list has no owner. "The quality manager will cover both" usually means neither register has an owner. If one person owns both, say so only when that person can walk both systems, including a worker conversation that was not scripted.
One page, the same pack to every body. The full checklist is how to build a registrar RFQ / scope pack. For this decision, these rows have to be explicit:
| Fact | If 14001 is this cycle | If 45001 is this cycle |
|---|---|---|
| Standard and edition | The 14001 edition you will claim | The 45001 edition you will claim |
| What is in scope | Activities, products, and services with environmental aspects, and the boundary | Work where people can be harmed, including contractors, and the boundary |
| Document the owner can show | An aspects and impacts register people use, plus compliance obligations and the controls on significant aspects | A hazard register people use, plus worker participation and incident learning |
| Sites | Where significant aspects occur, which may add a treatment plant, a store, or a yard, and may leave an office out | Where those hazards occur, including the shift, the warehouse, field work, and contractors |
| Owner | Named environmental owner who can walk the register | Named OH&S owner who can walk hazards and sit with a worker |
| The other standard | Later add, or not this cycle | Later add, or not this cycle |
| Who implemented | Internal, named consultant, or none | The same disclosure. The implementer is not the certifier |
Headcount is a band per site, not the about-page total. A night shift still counts when the hazard or the significant aspect runs at night. A thinner story for one logo ends the comparison. What comes back (programme structure, travel, exclusions, environmental competence, OH&S competence, and how worker interviews are staffed) is what CB quotes include. If 45001 is the standard, say that worker interviews are on site. Do not let a remote day count erase the floor. That split is remote vs on-site ISO audits.
6. One EHS programme this cycle, a sequential add, or the full IMS with 9001
Sometimes one certification body should quote 14001 and 45001 together. Often that request is the plant-stack habit applied before either system exists, or before anyone has decided whether ISO 9001 belongs in the same buy.
One programme this cycle is honest when both EHS systems already run under one legal entity, shared processes are real, both owners can sit the audit, and each standard has its own site story or an honest site-by-standard matrix. You may still receive two certificates. Say which processes are shared and which work is standard-specific. Aspects and compliance obligations are environmental work. Hazards, worker participation, and incident learning are OH&S work. They are not one register with two covers. Let the certification body restate the method. Do not ask them to invent integration you do not operate. A lead who has never stood at the aspect you will claim is not an EMS lead. A lead who will not interview a worker is not an OHSMS lead. Ask how they staff both.
If you already hold 9001, say so on the pack: the legal entity, who issued the certificate, and whether this RFQ is an EHS add or a request to sample quality again. An existing quality certificate does not put aspects or hazards into scope. It tells a body whether they are extending a programme they already run or quoting a stranger. If that body cannot cover the standard you are adding, the honest options are a second certification body or a transfer. Write that choice before you compare replies.
A sequential add is the better buy when only one system is real. Certify the gate this cycle. Add the other standard when its owner, its sites, and its documented information exist. A later add is still an RFQ, and the new scheme still gets Stage 1. Tell the shortlist which standard comes later. If the body you award now cannot cover it, the honest options are wait, add a second certification body, or plan a transfer.
The full IMS with 9001 is a different decision. When quality is also being certified this cycle, or a customer requires all three marks now and all three systems exist, the honest product is often one operations-stack programme: 9001, 14001, and 45001 together. How to write that three-standard matrix, and when not to, is the IMS buying guide. This page stops at environment versus occupational health and safety. Do not add 9001 on this pack to look thorough. If quality is the other side of the argument and 45001 is not this cycle, use the ISO 9001 vs ISO 14001 comparison. If quality is the other side of the argument and environment is not this cycle, use the ISO 9001 vs ISO 45001 comparison. If 9001 is the third real system, switch to the IMS guide before you send.
Keep ISO/IEC 27001 off this pack unless information security is the gate this cycle. That comparison is ISO 9001 vs ISO 27001. One body for the operations standards and another for information security is a legitimate design when you write it on purpose. Confirm the legal entity in how to choose a registrar and how to verify accreditation.
7. Choose what goes on this RFQ, then send one pack
Make the call in one sitting. The output is a sentence at the top of the scope pack.
- Write the actual requirement. Portal, contract, tender, permit or consent condition, insurer, contractor prequalification, ESG buyer. Use their words. If one field says a certified EMS and another says a certified OH&S system, note which revenue is blocked this cycle. If a field still says quality, note that too.
- Match it to a system you can show. 14001 needs an aspects and impacts programme, compliance obligations, and controls you can walk. 45001 needs hazards, worker participation, and incident learning you can walk, including a worker who was not rehearsed. If that system does not exist, do not send. Build it, or hire an implementer who will not certify you, and disclose them on the pack.
- Name one primary standard. Mark the other "later add" or "not this cycle," unless both systems and both owners are real enough to defend at Stage 1. If 9001 is a third system you can staff and a customer requires it now, stop and use the IMS buying guide before this pack goes out. If the argument is quality versus environment and 45001 is not this cycle, use the ISO 9001 vs ISO 14001 comparison instead.
- Name the owner and the sites for that standard. Environmental owner and the locations where the significant aspects occur, or OH&S owner and the locations where people can be harmed, including the shift and the contractors. If one person owns both, say that only when they can walk both.
- Write one pack and send it to every body you might award. How to choose them is how to choose a registrar. Confirm the legal entity's accreditation for this edition, on the live schedule, in how to verify accreditation before you invite a body you cannot award. If you already hold 9001, name that certificate on the pack so the add is comparable.
If the room is still split after step 3, you have two procurements. Run the one that unblocks revenue and park the other until its system exists.
When that sentence is true, send one registrar RFQ / scope pack. Submit the same page with the Get quotes button below, including to the logo you already like. The standard on the page has to be the standard you can staff.
Frequently asked questions
- Should a mid-market firm pursue ISO 14001 or ISO 45001 first?
- Put ISO 14001 on this RFQ when a customer, permit or consent condition, tender, insurer, or ESG buyer will not let you through without an environmental certificate this cycle and an EMS with a living aspects and impacts programme already exists. Put ISO 45001 on this RFQ when a customer, insurer, tender, or contractor prequalification will not let you through without an occupational health and safety certificate this cycle and an OHSMS with hazards, worker participation, and incident learning already exists. The other standard is a later add unless both systems and both owners are real.
- Can we ask certification bodies to quote 14001 and 45001 together?
- Only when both systems already run under one legal entity, shared processes are real, and each standard has a named owner and an honest site list. Otherwise name one standard as this cycle and the other as a later add. A request to quote both with a hollow aspects list or a hollow hazard register produces day counts for a system you do not operate.
- Is ISO 14001 or ISO 45001 a badge we can buy without the underlying programme?
- No. An ISO 14001 certificate is the output of an independent audit of an environmental management system: significant aspects and impacts, compliance obligations, and operational controls people use. An ISO 45001 certificate is the output of an independent audit of an OH&S management system: hazard identification, worker participation, and incident learning. A recycling poster or a binder of toolbox talks is not that system. Build it, or hire an implementer who will not also certify it, then send the RFQ.
- How do sites and owners differ on a 14001 quote versus a 45001 quote?
- 14001 follows significant environmental aspects and a named environmental owner who can walk the aspects register, compliance obligations, and the control that runs when a limit is missed. 45001 follows where people can be harmed and a named OH&S owner who can walk hazards, worker participation, and incidents, including contractors and the shift that actually does the work. A wastewater skid, a solvent store, a warehouse, and a field crew are not the same map. Do not reuse one site list, or one owner, for the other standard.
- Is quoting 14001 and 45001 together the same as stacking 9001, 14001, and 45001?
- No. This page is the choice between environment and occupational health and safety on this RFQ. Stacking 9001 with 14001 and 45001 is the operations-stack decision when quality also belongs on the same programme. Use the integrated management systems guide for that three-standard buy. If the fork is quality versus environment, and 45001 is not this cycle, use the ISO 9001 vs ISO 14001 comparison. Do not add a third standard here to look thorough.
- What if one customer requires 14001 and another requires 45001?
- Those are two gates. Put the standard that unblocks revenue this cycle on the pack, and mark the other as a later add unless you can staff both systems now. If customers still gate on ISO 9001 as well, and all three systems exist, stop and use the integrated management systems guide. Two half-scoped RFQs sent to different logos will not converge into one programme.