Product & Regulatory

ISO 29001 — sector-specific quality for oil and gas.

A quality management system tailored to the supply chain of the petroleum, petrochemical, and natural gas industries — stricter product realisation, tighter supplier controls, explicit risk treatment.

Request a readiness assessment Our approach

What it is

The sector-specific QMS for oil, gas, and petrochemicals.

ISO/TS 29001 specifies quality management system requirements for the design, development, production, installation, and service of products for the petroleum, petrochemical, and natural gas industries. It takes ISO 9001 as its foundation and adds sector-specific supplementary requirements developed by the oil and gas community to reflect the consequences of quality failure in their supply chain.

Certification is particularly valuable for suppliers of items used in exploration, production, pipelines, refining, and petrochemical manufacturing — where a failure in a single component can result in environmental, safety, and commercial consequences several orders of magnitude greater than the component's value. The standard is referenced by major operators as a baseline for their approved supplier lists.

Who needs it

Suppliers of equipment, materials, and services to the oil and gas supply chain.

Manufacturers of valves, pumps, wellheads, tubular goods, instrumentation, control systems, coatings, and specialist materials used upstream, midstream, and downstream; service providers delivering inspection, testing, fabrication, and installation; and EPC contractors building facilities for operators. IOC, ONGC, ADNOC, Saudi Aramco, QatarEnergy, Petrobras, and the major international operators all list ISO 29001 alongside API specifications and customer-specific requirements as baseline supplier expectations.

Benefits

What a well-built BIFMA system earns you.

Operator approved-supplier eligibility.

ISO 29001 is a common shortlisting criterion in operator supplier pre-qualification, alongside API monogram and customer-specific requirements.

Sector-specific rigour.

Supplementary requirements address the expectations operators actually have — traceability, material verification, NDE, and records retention well beyond ISO 9001 baselines.

Supply chain discipline.

Sub-tier supplier control under ISO 29001 is materially stricter than under ISO 9001, reflecting the consequence of sub-tier failure in the sector.

Risk alignment with HSE.

Integrates cleanly with ISO 14001 and ISO 45001 programmes typical of oil and gas operations, forming the QMS leg of a tri-partite management system.

Change control at project scale.

Management of change, where the cost of getting it wrong is measured in lost production, is treated with the seriousness that operators expect.

Platform for sector audits.

Operator site audits, second-party audits, and industry scheme audits (API Q1/Q2, BS 8902 where applicable) are materially easier on an ISO 29001 base.

Requirements, in outline

What the standard actually asks of you.

ISO/TS 29001 is implemented with ISO 9001. All ISO 9001 requirements apply in full; ISO 29001 adds sector supplementary requirements across the clauses. Additional requirements concentrate in the product realisation area — Clause 8 in the harmonised structure — covering design and development control specific to the sector, purchasing (with explicit expectations on supplier evaluation, approved vendor listing, and source inspection), control of production and service provision (including process validation, product identification and traceability to the level the sector expects, and control of customer-supplied product), and preservation of product.

The standard places particular emphasis on control of externally provided processes, products, and services, with rigour beyond ISO 9001. Documentation of material traceability, heat numbers, NDE records, and inspection reports must match what operator and EPC auditors will look for. Competence requirements for personnel performing inspection, testing, welding, heat treatment, and other special processes align with API specifications, ASME codes, and other industry norms where applicable.

Our approach

Five stages, from discovery to certificate.

Scope & sector mapping

Map products and services against the specific operator expectations, customer-specific requirements, and parallel industry schemes (API, ASME, NACE) that apply.

Product realisation discipline

Design control, supplier qualification, material traceability, inspection and test plans, NDE coverage, and preservation — the heart of ISO 29001 implementation.

Supplier development

Approved vendor list, sub-tier supplier audits, source inspection protocols, and escalation where performance drops. Far stricter than ISO 9001 defaults.

Internal audit & management review

Internal audit programme covering manufacturing, product, and system audits; management review conducted to operator-audit depth.

Certification audit

Stage 1 and Stage 2 attendance, findings response, and surveillance support. For organisations also pursuing API Q1 or similar, we coordinate timing to reduce parallel audit burden.

Timeline & investment

Honest ranges, not placeholder pricing.

An ISO 9001-certified supplier typically reaches ISO 29001 Stage 2 in fourteen to twenty weeks. Organisations starting without ISO 9001 certification, or with sub-tier chains in multiple jurisdictions, typically run to five to seven months. Availability of qualified NDE personnel and welding procedure qualification records is frequently the rate-limiting variable.

Fees depend on product complexity, number of sites, sub-tier supplier population, and whether API scheme alignment is in parallel scope. Certification body fees are separate.

Frequently asked

Questions we answer on most BIFMA calls.

Related but distinct. API Q1 is the API's own quality management standard for manufacturers of oil and gas industry equipment, issued under API's monogram licensing. ISO 29001 is ISO's sector-specific QMS. Many suppliers hold both; API Q1 is a contractual requirement for API monogrammed products, while ISO 29001 is accepted by a broader operator base.

Well services (API Q2) is a separate API scheme that ISO 29001 does not directly cover. Drilling contractors and well-services firms typically certify to Q2 specifically; ISO 29001 is most common among equipment and materials suppliers.

ISO 29001 is the quality leg; ISO 14001 (environment) and ISO 45001 (health and safety) cover other dimensions. An integrated management system across the three is the common configuration for serious sector suppliers.

Yes. The standard is explicit about product identification and traceability, including heat number traceability for pressure-containing components and full retention of NDE and inspection records. Operators routinely test this in audits.

For components with potential for catastrophic consequence — typically defined in the customer or EPC specifications — source inspection is the operator-expected norm and the ISO 29001 audit will look for it.

Related services

Get a readiness assessment for ISO 29001.

Half a day with a senior consultant, a clause-level gap report, and a candid timeline. No commitment beyond the assessment itself.

Request assessment