How to Verify an ICV Certificate in the UAE

An ICV certificate can influence supplier selection, but a certificate attachment should not become an approved score without verification. The buyer needs to know that it belongs to the bidder's legal entity, remains valid, came through an authorised certifying body and matches the evidence used in the sourcing event.

This checklist is designed for procurement, vendor-management and compliance teams. It supports a documented review; it does not replace the participating entity's tender rules or MoIAT guidance.

1. Match the ICV certificate to the bidding legal entity

Compare the legal name on the certificate with the trade licence, tender submission, quotation, contracting entity, VAT record and bank-account beneficiary. Normalise punctuation and common legal suffixes, but do not treat a group name, brand, branch or affiliate as the same entity without evidence.

If the names differ, record the discrepancy and ask the supplier to document the relationship. Do not transfer an ICV score across related entities by assumption. Start with the controls in Vendoreye's guide to verifying a UAE supplier's legal identity.

2. Check the official MoIAT ICV directory

MoIAT publishes an open-data directory covering authorised certifying bodies and companies with valid ICV certificates. Search using the legal name and review plausible spelling or transliteration variants. The directory is a strong verification source because it is maintained by the programme authority, but preserve the lookup date and result because directory data can change.

A missing result is not a reason to invent a match. Mark the record as unable to verify, ask the supplier for clarification and use the official contact or process where necessary. As of the 11 October 2026 research snapshot, the directory displayed more than 8,700 valid-company results; treat that count as dynamic, not a permanent programme statistic.

3. Confirm the certifying body is authorised

Capture the certifying body's name from the certificate and compare it with MoIAT's current authorised list in the same open-data service. Authorisation should be checked at the time of review. Do not rely on a buyer's old spreadsheet of approved firms when the Ministry provides the current source.

4. Calculate validity from the correct date

The official supplier certification guidelines say the certificate remains valid for 14 months from the issue date of the audited financial statements. Record that underlying date, the certificate issue date and the calculated expiry date. If the dates are unclear or inconsistent, hold the score for clarification rather than guessing.

Set renewal reminders early enough for the supplier to prepare new financial information and complete certification. A useful alert pattern is 90, 60 and 30 days before expiry, followed by an expired state that prevents an old score from being reused without explicit exception approval.

5. Capture the score and verification evidence

Store the score as structured data alongside the source document, not only in a PDF filename or free-text note. The minimum record should contain:

• Supplier legal name and internal vendor identifier.
• Certificate number and ICV score.
• Certifying body.
• Audited-financial-statement issue date.
• Certificate issue date and calculated expiry date.
• Official directory result and source URL.
• Verification date, reviewer and outcome.
• Exception, escalation or clarification notes.

6. Apply the score only under the tender's evaluation rules

Verification establishes whether the evidence can be relied on. It does not decide how much the score matters. Apply the ICV result using the participating entity's published tender method and your approved evaluation governance. Keep technical compliance, mandatory eligibility and commercial evaluation distinct unless the tender expressly combines them.

For the broader programme context and supplier application requirements, read the complete UAE ICV certificate guide.

ICV certificate verification decision states

A binary verified checkbox hides useful risk information. Use clear states such as official directory match, certificate reviewed, legal-entity mismatch, expired, not found and clarification pending. Retain the source and timestamp for each state.

If the certificate expires during an evaluation or before award, follow the tender's rules and obtain an accountable decision. Do not silently keep the old score active simply because it was valid when onboarding began.

Continuous ICV monitoring with Vendoreye

Vendoreye can connect the certificate, extracted fields, directory lookup, reviewer decision and expiry alerts to the same legal-entity record. Procurement teams can then use approved ICV data in prequalification and sourcing while preserving who checked it, when they checked it and what changed.

Explore Vendoreye vendor verification or book a demo to design an ICV verification workflow around your buyer policy.