A week ago, I joined a group of volunteers to help source and ship medical supplies from China to Europe so our frontline staff has everything they need to fight the coronavirus.
My work has mainly focused on verifying product certifications and I HAVE THOUGHTS ABOUT THIS 

-
-
Here is how certificate validation works:
Find a supplier
Get their certificate
Figure out who issued it
Use the certifier’s website to validate it
Verify the certifier in the Nando database
This process works, but it could be much betterShow this thread -
While it’s amazing that the European Union has defined all these standards and requires a certification process, it failed to standardize the certificates themselves nor the verification process.
Show this thread -
Each certificate looks different:
Few have security features
Some don’t list the certifier’s legal entity
Some don’t list the certifier’s website
Each certifier’s website works differently
Few certificates list their Nando number
It makes the process slowShow this thread -
The easy fix is for the EU to standardize the minimum set of information and a layout it should be presented in. All certificates should have:
Link (and QR code) to the certifier’s copy of the certificate
Link (and QR code) to the Nando listingShow this thread -
The long term fix would be to centralize not only the certification organization listings, but also the certificates themselves. Why do buyers need to hunt down individual certificates across different databases if Nando could just serve all of them?
Show this thread -
In the grand scheme of things, this is an incredibly minor inconvenience and I’m happy that doing this work is contributing in a small way to reducing the pain of this pandemic
Show this thread -
I hope that we as a society learn from this crisis in many ways and perhaps streamlining the certification validation process could be one of the small things we improve
Show this thread -
To give you an idea: Validating a certificate can take ~30 minutes if you are having a hard time locating the certifier’s website and navigating it in a foreign language, whereas this really should be 5 minutes of work.
8 hours / 30 minutes = 16
8 hours / 5 minutes = 96Show this thread -
Here’s an example: We found a new supplier with a seemingly legitimate certificate from a supposedly UK-based certifier.
Certifier doesn’t show in Nando → Hard no
Email certifier to double check → Bounced
Domain registered from China
Server configured in ChineseShow this thread -
Round 2 of this certification thread: Get ready to discuss how legitimate European certifiers also issue fake certificates
And yes, I’ll be NAMING and SHAMING some of these companies because they are putting the health of people at risk in times of crisis
Show this thread -
After verifying dozens of potential Chinese manufacturing leads for medical supplies, I noticed that 3 certification companies tended to show up much more frequently than others. These are Ente Certificazione Macchine (Italy), ICR Polska (Poland), and Celab (Italy).
Show this thread -
I first noticed this when we started receiving Celab’s fake certificates for medical supplies, which made no sense to me because they are only accredited to complete “electromagnetic compatibility” certification https://ec.europa.eu/growth/tools-databases/nando/index.cfm?fuseaction=search.nb&refe_cd=NANDO%5FINPUT%5F124828 …
Show this thread -
We then received ICR Polska certificates from potential suppliers, which was confusing because they are accredited for certifying “protective systems intended for use in potentially explosive atmospheres” which sounds like masks but isn’t https://ec.europa.eu/growth/tools-databases/nando/index.cfm?fuseaction=search.nb&refe_cd=NANDO%5FINPUT%5F233263 …
Show this thread -
And eventually we got loads of fake certificates by Ente Certificazione Macchine, which was very disconcerting because they are even accredited to certify “medical devices” but that still does not cover “personal protective equipment” https://ec.europa.eu/growth/tools-databases/nando/index.cfm?fuseaction=search.nb&refe_cd=EPOS%5F50158 …
Show this thread -
Personal protective equipment, like masks, is required to be CE certified before it can be sold on the European market — as it should be! Faulty products can kill you. All of these products have to adhere to “Regulation (EU) 2016/425”https://ec.europa.eu/growth/sectors/mechanical-engineering/personal-protective-equipment_en …
Show this thread -
The Nando database helpful lists which EU-based certification organizations are accredited for certifying products under “Regulation (EU) 2016/425” and you will see that ECM, ICR and Celab are not on it. https://ec.europa.eu/growth/tools-databases/nando/index.cfm?fuseaction=directive.notifiedbody&dir_id=155501 …
Show this thread -
And then a couple of days ago, ICR Polska all of the sudden put a warning message on top of all their webpages saying that “assessments carried out so far are of a voluntary nature” and “these certificates do not confirm conformity.” It seems like something spooked them.pic.twitter.com/0ulQt5YDVG
Show this thread -
So I started digging into what ICR meant by “voluntary nature” and I can tell you now: It’s not pretty.
Show this thread -
Turns out these companies have two business lines:
Actual regulatory certification
Fake certificates as marketing documents
Both of those look official, come with the same branding, and pass the document validation check.
However, these marketing documents are BULLSHIT.Show this thread -
These certification organizations will sell fake certificates as “voluntary certification” which only has to live up to the certifier’s standards, not the regulatory ones. Manufactures can essential buy the branding of a legitimate certification organization for marketing.
Show this thread -
ECM calls this their “Voluntary Mark for Product Certification” and helpfully describes it as: “The Mark may only be used for advertising and promotional purposes and can not in any way refer to the product's compliance with regulations.” http://www.entecerma-it.cn/img/pdf/ECM-Mark-Regulation.pdf …pic.twitter.com/2xISQmdAox
Show this thread -
Celab is even more straightforward and says “the voluntary certificate is not for customs purposes or to demonstrate to the supervisory compliance with the requirements of the CE marking of a product.” https://celab.com/en/ce-marking/voluntary-certificate/ …pic.twitter.com/CFqeUfxU4X
Show this thread -
However, the real and the fake certificates both look official, come with the same logos, and show up in the same verification system. The only difference is that you have to carefully determine whether it’s a “voluntary one.”pic.twitter.com/JaC05xORrD
Show this thread -
I don’t know what the history is behind this, but it feels like a loophole. Some Chinese manufacturers are clearly abusing it in their effort to dump poor quality medical products onto the European market for a quick buck.
Show this thread -
I’m surprised that the European Union allows their accredited certification organisations to run a side-business handing out fake certificates based on the brand value they built within the official system. It’s unconscionable. Let’s fix it
Show this thread -
In case you’re wondering “do these fake certificates work,” I present to you: Well-meaning citizens donated 40,000 masks to the city of Vienna, with what seems to be a fake certificate https://www.ots.at/presseaussendung/OTS_20200331_OTS0106/corona-chinesische-community-uebergab-mehr-als-39000-mundschutzmasken-fuer-wiener-einsatz-organisationen … CE 2703 = ICR Polska = Fake https://ec.europa.eu/growth/tools-databases/nando/index.cfm?fuseaction=search.nb&refe_cd=NANDO%5FINPUT%5F233263 …pic.twitter.com/vNKAej34rh
Show this thread -
And the European Safety Federation has also taken note of these fake certificates: “We have the impression that manufacturers outside the EU (and probably even ‘newcomers’ and importers in the EU) are not entirely familiar with the EU Legislation” https://www.eu-esf.org/covid-19/4513-covid-19-suspicious-certificates-for-ppe …pic.twitter.com/pUgAn2MT70
Show this thread -
The official response of ICR Polska seems to be that manufacturers are aware that these documents do not certify conformity with the regulation. However, that’s clearly not how manufacturers, resellers or buyers are currently interpreting it in practice. https://www.eu-esf.org/covid-19/4513-covid-19-suspicious-certificates-for-ppe …pic.twitter.com/EO3UfoZ4lE
Show this thread -
Also note how ICR Polska has toned down their warning messagepic.twitter.com/dmgYcSj6eV
Show this thread -
So which organisations can you trust for mask certification? 32 in Europe: https://ec.europa.eu/growth/tools-databases/nando/index.cfm?fuseaction=directive.notifiedbody&dir_id=155501&pro_id=155522 … 45 in China: https://www.cnas.org.cn/english/photonews/03/902316.shtml …
Show this thread - Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.
at
retweets