Initial, surveillance, and renewal Qualiopi audits: what's the difference?

Three audits, three different logics, but a single certification to protect: many training-provider founders only discover the surveillance audit exists after obtaining their initial certification, caught off guard by a deadline they hadn’t anticipated. Here’s what actually distinguishes the three stages of the Qualiopi cycle.

The certification cycle at a glance

	Initial audit	Surveillance audit	Renewal audit
Timing	Before first certification	18 months after the initial audit	3 years after the initial audit
Purpose	Obtain certification	Verify continued compliance	Open a new 3-year cycle
Scope	All applicable indicators	Narrower scope, often sample-based	All applicable indicators, reviewed in full
Typical duration	1 to 2 days depending on the provider’s size	Usually shorter than the initial audit	Comparable to the initial audit
Consequence of a major non-conformity	Certification not granted until corrected	Certification may be suspended	Renewal may be refused

The initial audit: the gateway into certification

The initial audit is the most demanding of the three: it covers every indicator applicable to the provider’s declared scope (types of courses, target audiences). The auditor checks that each required piece of evidence exists, that it’s consistent with the rest of the file, and that the provider has a genuine quality organisation — not just documents produced for the occasion. Methodical preparation, with a multi-week countdown plan, remains the best way to approach this first audit calmly.

The 18-month surveillance audit: checking compliance holds up over time

The surveillance audit happens 18 months after the initial audit, at the midpoint of the cycle. It generally covers a narrower scope, often through sampling indicators, with particular attention to minor non-conformities identified during the previous audit: the auditor checks they were actually corrected, not just promised. It’s also the point at which a significant change in activity (new audiences, new formats, changes in key staff) needs to be documented and justified.

The most common mistake at this stage is treating the surveillance audit as a mere formality after passing the initial audit: providers who let up on quality monitoring between the two audits regularly end up with non-conformities that continuous tracking would have prevented.

The 3-year renewal audit: starting the next cycle on solid ground

The renewal audit marks the end of a 3-year cycle and the start of the next. Unlike the surveillance audit, it covers all 32 applicable indicators in full, with the same rigour as the initial audit — arguably more, since the auditor now has a three-year track record and can compare stated practices against how the provider has actually evolved. Not leaving enough time between the certificate’s expiry and preparing the renewal is one of the most common causes of a certification gap, with immediate consequences on access to OPCO and CPF funding.

What stays constant across all three audits

Regardless of the audit type, three principles never change: lapsing of the activity declaration must be ruled out ahead of any audit (a lapsed NDA blocks certification), minor and major non-conformities follow the same classification and correction-deadline rules regardless of the cycle stage, and the certifying body must in every case be COFRAC-accredited to deliver a certificate that funders will accept.

What audit-quality research tells us

The distinction between these three audits connects to a broader question studied in audit economics: what actually guarantees that an audit uncovers real non-conformities rather than amounting to a superficial check? In a landmark 1981 article in the Journal of Accounting and Economics titled “Auditor size and audit quality,” researcher Linda DeAngelo showed that perceived audit quality depends less on its nominal length than on the auditor’s independence and their reputational stake in disclosing findings rather than downplaying them (see the article on Google Scholar). Applied to the Qualiopi cycle, this insight helps explain why COFRAC accreditation, which governs each certifying body’s independence and methodological rigour, matters more than the sheer length of the surveillance or renewal audit: a narrower audit run by a rigorous certifying body remains more reliable than a longer one lacking real independence.

Cost also varies by audit type

The fee charged by the certifying body generally varies by audit type, on top of the provider’s size and the number of sites to cover. The initial audit and the renewal audit, which cover every applicable indicator, are usually the most expensive; the surveillance audit, with its narrower scope, is typically cheaper. It’s worth asking the certifying body, right when signing the initial contract, for a price grid covering all three audits of the cycle rather than a quote limited to the initial audit alone — see our article on the cost of Qualiopi certification for a full picture of costs over three years.

Planning for all three deadlines in your quality calendar

The most robust approach is to log all three audits in a single calendar from the moment you obtain initial certification, rather than treating them as isolated events: a reminder at 12 months to prepare for the 18-month surveillance audit, and a reminder at 30 months to prepare for the 3-year renewal audit, leaving enough margin to fix any non-conformities identified internally before the auditor arrives.

Take action

The Complete Qualiopi Kit includes preparation checklists for all three audit types and the evidence expected for the 32 indicators of the framework. The ebook “Create Your Training Organisation in 30 Days” helps you build a quality organisation from day one, and the complete pack brings both resources together.