A valid calibration certificate has to carry a defined set of calibration certificate requirements laid out in ISO/IEC 17025:2017, the international standard for testing and calibration laboratories.1International Organization for Standardization. ISO/IEC 17025:2017 General Requirements for the Competence of Testing and Calibration Laboratories At minimum, the document must identify the laboratory and the instrument, record the measurement results with their units and environmental conditions, state the measurement uncertainty, establish metrological traceability, and be authorized by a competent signatory. Clauses 7.8.2 and 7.8.4 are where these obligations live, and an accredited lab’s certificates are reviewed against them. Miss one of the required elements and the certificate can fail an audit even when the underlying measurements were sound.
Identification Details Every Certificate Needs
The administrative content on the certificate exists to tie one document to one lab, one customer, and one specific piece of hardware. Under clause 7.8.2.1, the certificate must include:
- The laboratory’s full name and address. If the work was performed at your site or anywhere other than the lab’s permanent facility, that location has to be stated separately.
- A unique identifier for the certificate itself. On multi-page reports, every page has to be clearly linked to the same document.
- Your name and contact details as the customer.
- An unambiguous description of the item calibrated, which in practice means manufacturer, model, serial number, and the condition of the item when the lab received it.
- The calibration method or procedure used.
- The date of calibration and the date the certificate was issued. Record the date of receipt as well if it affects the validity of the results.
The standard also requires a statement that the results apply only to the item actually calibrated, so nobody extends the conclusions to similar instruments that were never tested.2National Institute of Standards and Technology. SOP 1 Calibration Certificate Review Checklist
Measurement Data and Environmental Conditions
The measurement data is the point of the whole document. Values have to be reported with their units: a reading of “10.00” with no indication of whether that’s millivolts, millimeters, or degrees Celsius is unusable for quality purposes.2National Institute of Standards and Technology. SOP 1 Calibration Certificate Review Checklist
Clause 7.8.4.1 adds that the certificate must record environmental conditions during the procedure when those conditions influence the results. Temperature and relative humidity are the usual variables, because thermal expansion and moisture affect the physical behavior of many instruments. A certificate for a precision gage block with no ambient temperature recorded cannot be meaningfully interpreted.
As-Found and As-Left Results
If the instrument was adjusted or repaired during the visit, the certificate should carry both as-found and as-left data. The as-found numbers tell you how the instrument was reading before anyone touched it. That matters because if those readings were outside tolerance, every measurement taken with the instrument since its last successful calibration is potentially suspect. The as-left data confirms the instrument meets specification after the adjustment. ISO/IEC 17025 requires the before-adjustment results “if available,” meaning the lab captures them whenever that’s technically feasible.
The Metrological Traceability Statement
Every accredited certificate must state how the measurements are metrologically traceable. Traceability means each result can be related to a recognized reference through a documented, unbroken chain of comparisons, with each link contributing to the overall uncertainty.3National Institute of Standards and Technology. Metrological Traceability Frequently Asked Questions and NIST Policy In the United States, that chain usually leads to standards held by the National Institute of Standards and Technology. Internationally, it leads to the relevant national metrology institute and ultimately to the International System of Units.4National Institute of Standards and Technology. Measurements and Standards
In practice, the traceability section of a certificate identifies the reference standards the lab used, with enough detail for an auditor to verify the chain: typically each standard’s identification and its own calibration status. A reference standard whose calibration has lapsed compromises every measurement made with it, and auditors can follow that gap through the records. Your instrument is only as trustworthy as the standard it was compared against. NIST does not dictate a specific format for documenting the chain, but its policy puts the responsibility for establishing traceability on the organization performing the measurement.5National Institute of Standards and Technology. NIST Policy on Metrological Traceability
Measurement Uncertainty and Decision Rules
A certificate without a stated measurement uncertainty is incomplete. Clause 7.8.4.1(a) requires the uncertainty to be reported in the same unit as the measured value, or as a relative term such as a percentage. A reported value of 10.00 millivolts with an expanded uncertainty of ±0.05 millivolts tells you the true value likely falls between 9.95 and 10.05. Without that figure, you cannot judge whether the instrument meets your tolerance.
Most accredited labs report expanded uncertainty using a coverage factor of k=2, giving a confidence level of roughly 95 percent under a normal distribution.6National Institute of Standards and Technology. Expanded Uncertainty and Coverage Factors ILAC policy requires accredited labs to state the coverage factor and coverage probability on the certificate and to include an explanatory note on how the expanded uncertainty was derived. The numerical value is rounded to at most two significant figures.
Uncertainty feeds directly into any pass/fail decision. If a customer requests an in-tolerance or out-of-tolerance statement, clause 7.1.3 requires the lab to document the decision rule used to compare the measurement result and its uncertainty against the specification limits. A reading right at the edge of a tolerance limit might pass or fail depending on how uncertainty is applied. A guard-banding approach, for example, tightens the acceptance zone so the probability of a false acceptance stays below a defined threshold. If the certificate carries a conformity statement, it should also identify the decision rule behind it.
What Must Not Appear: Recalibration Intervals
A common assumption is that the certificate tells you when the instrument is “due” next. ISO/IEC 17025 prohibits this. Clause 7.8.4.3 states that a calibration certificate or label shall not contain any recommendation on the calibration interval unless the customer has specifically agreed to it. The lab took a snapshot measurement; it has no visibility into how you use the instrument, how it’s handled, or how it has drifted historically. Setting the recalibration interval is the owner’s responsibility, based on the quality system and the instrument’s own performance record.
The calibration date is there to anchor records and establish when the work occurred, not to start a countdown. A “next due” sticker on an instrument comes from the owner’s internal system or from an arrangement negotiated with the lab in advance.
Authorization and Reproduction Controls
The certificate must identify the person authorizing the report. ISO/IEC 17025 refers to “identification of the person(s) authorizing the report,” which in practice means a signature, handwritten or electronic. That individual takes responsibility for confirming the data is accurate and the procedures were followed. Accreditation bodies typically require labs to keep a list of authorized signatories with documented evidence of their competence.
In FDA-regulated industries, electronic signatures have to meet 21 CFR Part 11 to be legally equivalent to handwritten ones. Each signature must be unique to one individual, the system must use at least two identification components, and the organization must maintain audit trails for electronic records.7eCFR. 21 CFR Part 11 Electronic Records Electronic Signatures If your calibration provider delivers certificates through a digital platform, the software behind those signatures needs to satisfy those controls.
Certificates also typically carry a restriction stating the document may not be reproduced except in full without written permission from the laboratory. This prevents anyone from extracting favorable data points while omitting unfavorable ones.
Accredited Certificates vs. “Traceable Only”
Not every calibration certificate carries the same weight, and the distinction between “NIST traceable” and “ISO/IEC 17025 accredited” trips up a lot of people.
A NIST-traceable calibration means the reference standards used can be linked back to NIST through a documented chain. That is a statement about the standards. It says nothing about staff competence, procedure validation, environmental controls, or how uncertainty was calculated.
An ISO/IEC 17025 accredited calibration goes further. An independent accreditation body has evaluated the lab’s whole operation: method validity, technician competence, testing environment, and the ability to calculate and report measurement uncertainty.1International Organization for Standardization. ISO/IEC 17025:2017 General Requirements for the Competence of Testing and Calibration Laboratories For low-risk uses like a tire gauge, a traceable-only certificate may be adequate. For anything involving liability, regulatory compliance, or safety, accredited calibration is the expectation. Medical devices, pharmaceuticals, aerospace, and automotive almost universally require it. Check your quality management system and customer contracts to see which level applies.
Accreditation is also not a blanket endorsement. A lab is accredited for specific parameters, ranges, and uncertainty levels, documented in its accreditation scope. A lab accredited only for dimensional measurements will not issue an accredited certificate for a torque wrench calibration. Confirm the work you need falls inside the lab’s published scope before assuming the certificate will satisfy an auditor.
Certificates from accredited labs often carry the ILAC Mutual Recognition Arrangement mark, which exists so that accredited results from one country are accepted in another without repeat calibration. If you move product across borders, that mark can save you from redundant work at the receiving end.8International Laboratory Accreditation Cooperation. ILAC MRA and Signatories
When the As-Found Results Are Out of Tolerance
If the certificate shows as-found data outside your tolerance, the document is the start of the response, not the end. You need to assess the impact on every measurement taken with that instrument since its last successful calibration.
ISO 13485:2016, which now forms the backbone of FDA’s medical device quality requirements, is explicit. Section 7.6 requires the organization to assess and record the validity of previous measuring results when equipment is found not to conform, and to take appropriate action regarding the equipment and any product affected.9eCFR. 21 CFR Part 820 Quality Management System Regulation In practice, that means opening a nonconformance report, identifying products manufactured or inspected with the out-of-tolerance instrument, and determining whether those products are still fit for use. In serious cases where performance was critical and the output cannot be independently verified, the investigation can lead to a recall. In less critical cases, a documented rationale that the impact was negligible may be enough. Either way, the investigation itself has to be documented. Many companies correct the instrument and skip the retrospective assessment, and auditors treat that omission as a systemic failure.
How Long to Keep the Certificate
Retention periods for calibration certificates depend on your industry. There is no single universal number.
In medical device manufacturing, 21 CFR Part 820 requires compliance with ISO 13485:2016, which requires records to be maintained for at least the lifetime of the device or as specified by applicable regulatory requirements, whichever is longer.9eCFR. 21 CFR Part 820 Quality Management System Regulation For implantable devices, that can mean decades. In other sectors, such as hazardous materials transport, regulations call for retaining the most recent certificate for each piece of calibrated equipment. Check the retention rules in your regulatory environment and your own quality procedures rather than defaulting to a round number.
Whatever the period, the records have to stay legible, identifiable, and retrievable throughout their life. Electronic storage systems used in FDA-regulated manufacturing need to meet the integrity requirements of 21 CFR Part 11.