The surveillance audit: the 18-month appointment nobody will remind you about

An appointment you have to set up yourself

The surveillance audit has a treacherous mechanism: nothing triggers it on your behalf. No automatic summons, no certification body knocking at your door to remind you of the deadline. It is up to you, the certificate holder, to approach your certification body, lock in the date and settle the fees within the regulatory window of month 14 to month 22 after you obtained certification.

Cross month 22 without a completed audit, and the penalty is not up for negotiation: automatic suspension. Same outcome if you refuse to undergo it or if you fail to pay the fees. And a suspension is not an administrative slap on the wrist. It is the cut-off of public and pooled funding (CPF, OPCO, France Travail), which very often means a sudden halt to a chunk of your revenue.

There is nothing sacred about month 18. But it is the safe midpoint: aiming for that date keeps a margin on both sides in case the certification body's calendar gets jammed.

What the auditor actually comes looking for

Many directors picture a shortened version of the initial audit. Wrong. The auditor does not run through all 32 indicators one by one: they work from a targeted sample. As a priority they reopen the indicators that had triggered non-conformities at the initial audit, check the effectiveness of your corrective actions, examine the indicators that can only generate major non-conformities, and systematically sweep certain foundational indicators (1, 17 and 19, plus 3 for the providers concerned).

Above all, they do not come to confirm that the system exists. They come to verify that it is alive and improving. Making use of satisfaction surveys (indicator 30), handling complaints (indicator 31), the continuous improvement approach (indicator 32): these three are almost always put under the microscope. Keeping your practices unchanged since certification will not be enough. The auditor wants proof that feedback from beneficiaries and funders is actually reshaping your services.

The whole thing fits into half a day on average, half the time of the initial audit. Shorter does not mean gentler: the format concentrates the scrutiny squarely on the sensitive points.

The auditor does not come to confirm that the system exists. They come to verify that it is alive and improving.

The all-or-nothing indicators, where everything is decided

In the Référentiel National Qualité, 17 indicators have a status of their own: numbers 4, 5, 6, 7, 10, 11, 14, 15, 16, 20, 21, 22, 26, 27, 29, 31 and 32 can only produce major non-conformities. There is no minor version of the gap. A single isolated breach on any one of them sets off the suspension procedure, with no lenient box to tick.

This is the most underestimated point in preparation. People scatter their energy across low-stakes indicators while indicator 11 (objectives and adaptation to audiences), 22 (subcontracting and umbrella employment), 31 (complaints) and 32 (continuous improvement) are handled carelessly. On those, there is no safety net.

The good news: a non-conformity does not bring the certificate down on the spot. A minor one opens a 6-month window to correct it and submit the evidence. A major one cuts that window to 3 months. What costs you the certificate is never the gap itself. It is the failure to correct it in time, or the failure to hold the audit.

Since 2025, the field takes back control

Two developments have tightened the rules. The first: the V9 reading guide applies with no transition period since 8 March 2024. Any audit after that date, whether initial, surveillance or renewal, is based on the 32 indicators reworded in V9. Preparing your surveillance audit with a dated reading of the framework means aiming at the wrong target.

The second weighs even heavier: since the Plan Qualité 2025, surveillance audits are conducted exclusively on site. Remote is over. Methods are being harmonised across certification bodies, and controls are tightening to verify the real-world implementation of your commitments. The mandatory display of the mark alongside the categories of certified actions has, in fact, added half a day to the audit.

The concrete result: the field becomes the final arbiter once again. The auditor compares your documentary evidence with what they see on site. The premises, the display of the certificate and the logo, the actual presence of the trainers, the teaching resources you advertised. An impeccable file that does not match the reality of the site is a gap.

Preparing your surveillance audit: the logic of a flow, not a binder

The classic mistake: rebuilding a beautiful binder the night before the audit. That is exactly what the auditor sniffs out. In surveillance, they look for dated traces spread out between the initial audit and month 18. Satisfaction surveys that were genuinely put to use, complaints logged as they came in, an action plan revised several times over. Treat continuous improvement as a living flow, not a file thrown together in a rush.

Start by revisiting your initial non-conformities: these are the first points the auditor will reopen, and they will demand proof that the corrections were effective, not just that they exist. On the calendar side, contact the certification body about 3 months before the deadline. Scheduling from month 14 rather than waiting until month 22 is your best insurance against the mishap that, on its own, can tip you into suspension.

Budget between 800 and 1,500 euros excluding VAT for the audit. A pittance next to what a suspension costs you in lost access to funding. The real investment is not there. It is in the consistency of the approach between two audits.