A certificate of conformance is a manufacturer’s statement that a product matches the buyer’s technical specifications; a certificate of compliance is a statement that the product meets external legal or regulatory requirements. That is the core of the certificate of conformance vs compliance question, and it matters because sending the wrong document can stall a shipment, void a contract, or trigger a regulatory enforcement action. Many products need both, one proving the item was built to spec and another proving it can legally be sold.
What a Certificate of Conformance Proves
A certificate of conformance answers a contractual question: did the finished product hit the dimensions, tolerances, material grades, and performance benchmarks the buyer specified? The reference points sit inside the transaction itself, usually a purchase order, an engineering drawing revision, or an industry standard cited in the contract. A machine shop shipping precision-machined parts issues a certificate of conformance confirming that every piece in the batch falls within the tolerances on the blueprint.
Contracts frequently require this document. Quality frameworks like ISO 9001 build the expectation that suppliers can demonstrate production consistency, and many requests for proposals treat ISO 9001 certification as a prerequisite for bidding.1ISO. Certification In federal contracting, the Federal Acquisition Regulation allows contracting officers to accept a supplier’s certificate of conformance in place of a separate government inspection when the supplier’s quality history justifies that trust.2Acquisition.GOV. FAR 46.315 Certificate of Conformance The certificate shifts responsibility to the supplier: if the product later turns out to be non-conforming, the supplier owns that failure.
What a certificate of conformance does not do is address whether the product is legal to sell. A batch of metal fasteners might match the buyer’s dimensional specs perfectly and still contain restricted substances that violate environmental rules. That gap is where the certificate of compliance comes in.
What a Certificate of Compliance Proves
A certificate of compliance confirms that a product meets the legal standards required to enter or remain in a given market. Instead of a purchase order, this document references statutes, safety regulations, and environmental rules enforced by government agencies. The audience is not just the customer but the regulator and, in international trade, customs officials at the border.
The range of regulations a compliance certificate can address is wide. Electronics sold into the European Union must be certified against the Restriction of Hazardous Substances (RoHS) Directive, which limits ten toxic substances including lead, cadmium, and mercury in electrical components.3European Commission. Restriction of Hazardous Substances in Electrical and Electronic Equipment (RoHS) Chemical manufacturers and importers dealing with the EU must also address the REACH Regulation, which controls how chemical substances are registered, evaluated, and restricted.4EUR-Lex. Regulation 1907/2006 – Registration, Evaluation, Authorisation and Restriction of Chemicals (REACH)
Inside the United States, compliance certification requirements can be equally specific. Composite wood products like hardwood plywood and medium-density fiberboard must be certified as compliant with formaldehyde emission limits under TSCA Title VI, and only an EPA-recognized third-party certifier can perform that certification.5U.S. Environmental Protection Agency. Formaldehyde Emission Standards for Composite Wood Products Electronic devices must go through FCC equipment authorization before they can be marketed, which involves either full certification through an accredited lab or a Supplier’s Declaration of Conformity backed by documented test results.6Federal Communications Commission. Equipment Authorization Consumer products can bring in the Consumer Product Safety Commission, which requires a General Certificate of Conformity for general-use goods subject to a safety rule and a stricter Children’s Product Certificate, based on testing by a CPSC-accepted third-party lab, for children’s products.7Office of the Law Revision Counsel. 15 USC 2063 – Product Certification and Labeling Products that fail to carry the required compliance documentation can be refused entry at customs, pulled from shelves, or both.
Note that CPSC borrows the word “conformity” for what is functionally a compliance certificate. The terminology overlaps; the underlying question — contract or regulation — is what actually tells you which document you’re dealing with.
Who Signs It: Self-Declaration vs. Third-Party Testing
One of the most practical differences between these certificates is who has the authority to sign. A first-party certificate is a self-declaration: the manufacturer tests the product internally and issues the certificate on its own authority. Most certificates of conformance work this way. The manufacturer runs dimensional checks, reviews material test reports, and declares that the batch meets the buyer’s specifications. The FCC’s Supplier’s Declaration of Conformity follows the same model for general electronic equipment.
Third-party certification brings in an independent body whose testing forms the basis of the certificate. The manufacturer still issues the document, but the claims must rest on results from an accredited outside lab. Children’s products under CPSC rules are the clearest example: the law requires a CPSC-accepted third-party lab to test the product before the manufacturer can issue the Children’s Product Certificate.8U.S. Consumer Product Safety Commission. FAQs – Certification and Third Party Testing Composite wood products can only be certified as TSCA Title VI compliant through an EPA-recognized third-party certifier.5U.S. Environmental Protection Agency. Formaldehyde Emission Standards for Composite Wood Products
The pattern is roughly this: the higher the public safety risk, the more likely a regulation will demand third-party involvement. Products that could harm children, emit hazardous chemicals, or interfere with radio communications tend to require independent testing. Products sold business-to-business against a contractual specification usually allow self-certification.
When You Need One, the Other, or Both
Ask two questions about the product in front of you. First, does a purchase order or contract call for documented proof that the item meets an agreed technical specification? If yes, you need a certificate of conformance. This is the routine paperwork of business-to-business manufacturing: aerospace parts, custom machined components, raw materials with specific grade requirements. If the order says “provide a cert of conformance,” the buyer wants proof that what arrived matches what was ordered.
Second, does a government regulation require documented proof of safety, environmental, or legal compliance before the product can be sold or imported? If yes, you need a certificate of compliance. If you make consumer products, electronics, chemicals, medical devices, or building materials, at least one federal or international regulation almost certainly requires a compliance certificate or its functional equivalent.
Many products require both, because the two documents answer different questions about the same item. A medical device manufacturer shipping components to a customer might issue a certificate of conformance confirming the parts meet the buyer’s dimensional and material specifications, while separately holding FDA documentation proving the device is legally marketed in the United States. Exporters can also encounter a hybrid: an FDA Certificate to Foreign Government, which requires the device to be legally marketed in the U.S., listed with the FDA, manufactured under the Quality Management System Regulation at 21 CFR 820, and free of any open recall.9FDA. Types of Export Certificates An electronics company selling into the EU needs its internal conformance documentation plus RoHS and REACH compliance declarations for the same product.10EUR-Lex. Directive 2011/65/EU – Restriction of Hazardous Substances in Electrical and Electronic Equipment Neither certificate substitutes for the other.
What Each Document Must Contain
Both types share a core set of data points, and the specifics shift depending on which regulations or contract terms apply.
A typical certificate of conformance includes:
- Product identification: part numbers, serial numbers, batch or lot codes, and a description matching the purchase order.
- Quantity and dates: number of units covered and the manufacturing date or date range.
- Specifications referenced: the engineering drawing revision, industry standard, or purchase order clause the product was built against.
- Test results or inspection data: summary of dimensional checks, material certifications, or performance tests.
- Authorized signature: name and title of the person certifying accuracy.
A certificate of compliance adds regulatory detail:
- Applicable regulations: specific citations to the safety rules, standards, or bans the product satisfies.
- Third-party lab identification: if required, the name, address, and accreditation of the testing body.
- Test dates and locations: when and where compliance testing took place.
- Certifier identification: the manufacturer or importer issuing the certificate, with full contact information.
CPSC’s General Certificate of Conformity is a useful worked example. It must include seven elements: a product description detailed enough to match the certificate to the specific item, the applicable CPSC safety rules, identification of the certifier, contact information for the person maintaining test records, the date and place of manufacture, the date and place of testing, and identification of any third-party lab used.11U.S. Consumer Product Safety Commission. General Certificate of Conformity No specific form is mandated, but every element must appear, and the entire document must be in English. A mismatch between the certificate and the physical inventory at the dock is one of the fastest ways to get a shipment rejected.
What Happens If the Certificate Is False or Missing
Issuing a false certificate or failing to provide a required one carries real consequences, and the severity depends on which agency’s rules are in play.
Under the Consumer Product Safety Act, knowingly violating certification requirements can result in civil penalties of up to $100,000 per violation, with a cap of $15 million for a related series of violations. Those statutory amounts are subject to periodic inflation adjustments that push them higher.12Office of the Law Revision Counsel. 15 USC 2069 – Civil Penalties
When false certifications involve products sold to the federal government, the False Claims Act adds exposure. The statute imposes treble damages plus a per-claim penalty. The statutory baseline runs from $5,000 to $10,000 per false claim, and inflation adjustments have pushed the effective range to roughly $14,308 to $28,619 per claim as of 2025.13Office of the Law Revision Counsel. 31 USC 3729 – False Claims A single shipment with a falsified certificate covering hundreds of items can generate enormous liability because each item may count as a separate claim.
Criminal exposure exists as well. Under 18 U.S.C. § 1001, knowingly making a false statement or using a false document in any matter within federal jurisdiction carries up to five years in prison.14Office of the Law Revision Counsel. 18 USC 1001 – Statements or Entries Generally A quality manager who signs a certificate knowing the testing was never actually performed is not just risking a fine. That is where quality paperwork crosses into criminal law.