Pillar guide · India · 2026

PSU vendor compliance
without the guesswork.

A practical, current guide to ISO certification, Quality Assurance Plans, and sector-specific approvals needed to qualify for tenders and vendor enlistment with India's central and state Public Sector Undertakings — across power, oil & gas, defence, aerospace, railways, steel, mining, and heavy engineering.

₹13L+ Cr Annual PSU procurement value (India)
300+ Central PSUs and PSE bodies
100+ ISO and sector standards we cover
13+ Active PSU engagements

What "PSU vendor compliance" actually means

India's 300+ Central Public Sector Enterprises (CPSEs) and several hundred State PSUs together procure goods, services, and works worth more than ₹13 lakh crore every year. To bid for or supply on those contracts, your organization has to clear a pre-qualification layer that is unmistakably different from a private enterprise tender. The clauses are explicit, documentation-heavy, and inspected — and a single missing certificate disqualifies an otherwise winning bid.

Three documents form the spine of that compliance layer: (1) a recognized accredited ISO 9001 management-system certificate, (2) typically ISO 14001 + ISO 45001 alongside, and (3) a contract-specific Quality Assurance Plan (QAP) approved by the customer. Layered on top are sector-specific approvals — DGMS for mining, PESO for petroleum, RDSO for railways, DGAQA for defence — and product-specific certifications (BIS marks, API monograms).

This page maps the territory: which standards each PSU sector typically requires, how the 4-stage vendor-readiness journey works, what goes into a QAP, the common pre-qualification clauses we see in tender documents, and how MSMEs in particular can use the Public Procurement Policy to enter the PSU supply chain. If you've read past it once and want to start, talk to us — first scoping call is free.

PSU sector compliance map

Six PSU sectors and the certification stack each demands

Generic ISO 9001 alone is rarely enough. Each PSU sector adds its own overlay — DGMS for mining, RDSO for railways, OISD for oil & gas, DGAQA for defence. Below is the realistic compliance stack we see in current tender documents.

Power & Energy

Key PSUs: NTPC · NHPC · NEEPCO · DVC · PowerGrid · NLC India · SJVN · THDC · BHEL

Typical stack
  • ISO 9001
  • ISO 14001
  • ISO 45001
  • ISO 27001 (control rooms)
  • ISO 50001 (energy)
  • Sector-specific QA plans

Thermal, hydro, and transmission contractors face the deepest QA plan scrutiny. Welder certification, material traceability, and weld inspection records are commonly inspected. ISO 3834 (welding) is increasingly cited.

Oil, Gas & Petroleum

Key PSUs: IOCL · ONGC · GAIL · NRL · BPCL · HPCL · Engineers India · OIL · IOCL Petronas

Typical stack
  • ISO 9001
  • ISO 14001
  • ISO 45001
  • API specs (API 6A, 6D, Q1)
  • ISO 29001 (petroleum QMS)
  • OISD compliance

OISD (Oil Industry Safety Directorate) standards layer on top of ISO. API monogramming is common for upstream equipment. PESO (Petroleum & Explosives Safety) clearances are tender-critical for hazardous storage and handling equipment.

Defence & Aerospace

Key PSUs: HAL · BEL · BEML · BDL · MIDHANI · Mazagon Dock · GRSE · Garden Reach

Typical stack
  • ISO 9001 + AS 9100/AS 9120
  • ISO 14001
  • ISO 45001
  • ISO 27001
  • MIL-STD references
  • DGAQA / DGNAI inspection

Defence vendors face an additional layer beyond ISO — DGAQA (for army/DRDO supply), DGNAI (naval), CEMILAC (aerospace airworthiness). AS 9100 is non-negotiable for aerospace. Component traceability documentation is heavily inspected.

Steel, Mining & Metals

Key PSUs: SAIL · NMDC · MOIL · KIOCL · Hindustan Copper · NALCO · Coal India · CCL · SCCL

Typical stack
  • ISO 9001
  • ISO 14001
  • ISO 45001
  • DGMS approvals (mining)
  • BIS marks on output
  • ISO 50001

DGMS (Director General of Mines Safety) approvals are mandatory for equipment supplied to coal and metalliferous mines. BIS product certification (ISI mark) is often a separate parallel track from ISO 9001 quality systems certification.

Railways & Transport

Key PSUs: Indian Railways · RDSO · ICF · RCF · MCF · DLW · IRCON · RVNL · DMRC · KMRC

Typical stack
  • ISO 9001
  • ISO/TS 22163 (IRIS — rail QMS)
  • ISO 14001
  • ISO 45001
  • RDSO product approvals
  • Vendor directory listing

RDSO (Research Designs & Standards Organisation) vendor approval is the gateway for most rolling stock, signalling, and track components. RDSO Part-1 and Part-2 vendor categories carry different audit depths. IRIS (ISO/TS 22163) is increasingly required.

Heavy Engineering & Capital Goods

Key PSUs: BHEL · HEC · BEML · MIDHANI · IDPL · HMT · HSL · CIL contractors

Typical stack
  • ISO 9001
  • ISO 14001
  • ISO 45001
  • ASME / IBR / PED if pressure vessels
  • Welding qualification (ISO 3834)
  • NABL-accredited test reports

Pressure parts, boiler components, and large fabrication contracts require IBR (Indian Boiler Regulations) compliance and welder qualification. NABL-accredited material test certificates from steel mills are inspection-critical.

How we deliver

The 4-stage PSU vendor readiness journey

The same engagement framework used for our active PSU clients — from gap to first awarded tender.

  1. 01

    Pre-qualification readiness assessment

    We start by reading the actual tender documents or vendor enlistment criteria — not generic checklists. Each PSU publishes specific clauses on quality systems, financial turnover, technical experience, and HSE requirements. We map your current state against those clauses and produce a gap report with timeline estimates.

  2. 02

    Certification stack rollout

    Most PSU tenders require ISO 9001 as baseline, plus 14001 + 45001 (the integrated EHS triad), and increasingly ISO 27001 for IT/OT supply. We sequence the rollout based on tender deadlines — fastest path to certificate without compromising audit defensibility.

  3. 03

    Quality Assurance Plan (QAP) authoring

    Most PSU contracts ask for a contract-specific QAP — a document mapping every manufacturing/inspection stage, the standard referenced, the responsible party, and the record evidence. We author the QAP, get customer approval, and align internal SOPs to match.

  4. 04

    Inspection, test, and audit support

    We accompany PSU customer inspections (often Third Party Inspection agencies like RITES, TUV, BVQI, Lloyd's), pre-dispatch inspections, and surveillance audits. The goal is zero non-conformances at inspection — anything raised is closed inside the same visit.

What tender documents actually ask for

The 8 most common pre-qualification clauses

Composite picture from current Central PSU tender documents across sectors. The exact wording varies; the substance is consistent.

ISO 9001 baseline

Almost every Central PSU tender lists ISO 9001:2015 as mandatory pre-qualification. Non-accredited certificates (those not issued by IAF/NABCB-recognized CBs) are rejected at scrutiny.

EHS triad

ISO 14001 + ISO 45001 are typically required for any on-site work, manufacturing supply, or hazardous handling. Increasingly required even for office-based services.

Financial turnover

Most tenders require 3-year average turnover ≥30% of estimated contract value. Audited financial statements + GST returns mandatory.

Similar-work experience

Past completion of similar-value contracts (50–80% of estimate) for any govt/PSU is the most common technical clause. Performance certificates from past customers are accepted.

Manufacturing capacity / lab capacity

On-site verification of declared capacity. NABL accreditation of in-house labs (ISO/IEC 17025) raises the credibility floor.

GST + EPF + ESIC compliance

Active GST registration, EPF & ESIC compliance certificates, and clearance from PF/ESI on past dues. CIN and MSME/Udyam registration accepted as supplementary.

Solvency certificate

From scheduled bank, typically 25–50% of contract value. PSU contracts almost universally require this for security.

BIS / sector-specific licences

For products under BIS mandatory certification or sector-specific approvals (DGMS, PESO, DGAQA, RDSO, IBR), vendor must hold the licence in active state on tender submission date.

Anatomy of a Quality Assurance Plan (QAP)

The QAP is the single document PSU customers care most about during execution, because it is the contract translated into inspectable action. A generic ISO 9001 manual does not substitute. A well-authored QAP has eight discrete elements for every manufacturing or service stage.

  • 01 Manufacturing stage list — raw material in to finished good out
  • 02 Standard/specification referenced at each stage
  • 03 Inspection method (visual / dimensional / NDT / functional / metallurgical)
  • 04 Inspection sample plan (100% / AQL / batch)
  • 05 Inspection agency (manufacturer / customer rep / Third Party Inspection)
  • 06 Acceptance criteria
  • 07 Record evidence format (mill TC / inspection report / certificate)
  • 08 Hold / witness / surveillance / review classification per stage

Each stage is then classified into one of four categories: Hold (manufacturer must not proceed past this stage without customer/TPI clearance), Witness (customer is invited; can proceed if they don't attend after notice), Surveillance (random sampling by customer), or Review (record review only, no physical presence). Most contested non-conformances we close on behalf of clients arise from miscategorizing a stage. We get that right at authoring time.

Most-asked questions

FAQs about PSU vendor compliance

The questions we hear from manufacturers, contractors, and MSMEs preparing for their first PSU tender bid.

01 Which ISO certifications are mandatory for PSU vendor registration in India?

Almost every Central and State PSU mandates ISO 9001:2015 issued by an IAF/NABCB-recognized certification body as the baseline quality-system requirement. For supply contracts that involve on-site work, hazardous material handling, or manufacturing, ISO 14001 (environmental) and ISO 45001 (occupational H&S) are increasingly mandatory in addition. Sector-specific overlays apply: AS 9100 for aerospace (HAL/BEL), ISO/TS 22163 for railways (RDSO), ISO 27001 for IT/OT supply, and ISO 13485 for medical devices.

02 What is a Quality Assurance Plan (QAP) and why do PSUs require one?

A QAP is a contract-specific document that maps every manufacturing or service stage to the applicable standard, the inspection method, the sampling plan, the responsible party, and the record evidence. PSUs require a customer-approved QAP before the first inspection because it operationalizes the contract's quality clauses — generic ISO 9001 documentation is not enough. A typical QAP for a PSU supply contract has 15–40 line items spanning raw material in to finished good dispatch.

03 Can MSMEs and startups become PSU vendors?

Yes. The Public Procurement Policy for MSMEs 2012 mandates that Central PSUs procure at least 25% of their total annual purchases from MSMEs (with sub-quotas for SC/ST and women-led units). Udyam registration is the eligibility gate. GeM (Government e-Marketplace) and individual PSU vendor portals are the registration channels. ISO 9001 is still required, but turnover and similar-work-experience clauses are often relaxed for MSMEs.

04 How does GeM portal registration relate to PSU vendor compliance?

GeM (Government e-Marketplace) is a unified procurement portal where Central and State Government buyers — including most PSUs — issue tenders. Vendor registration on GeM is free but requires PAN, GST, bank, Udyam (if MSME), and uploaded ISO certificates where applicable. GeM does not replace individual PSU vendor enlistment for high-value or specialized contracts — for those, you still need to register directly with the PSU (NTPC, IOCL, ONGC, HAL, etc.) through their vendor portal.

05 What is RDSO vendor approval and how does it differ from ISO certification?

RDSO (Research Designs & Standards Organisation) is Indian Railways' technical authority. RDSO vendor approval is product-and-source-specific: a vendor is approved to supply a specific item from a specific manufacturing facility, after RDSO inspects the facility and approves the manufacturing process. This is separate from and additional to ISO 9001 certification — ISO certifies your management system; RDSO approves your right to supply a specific item. Most railway tenders require both.

06 How long does it take to become a PSU vendor from a standing start?

Realistic timeline is 6–12 months from decision to first eligible-to-bid status. ISO 9001 certification: 8–12 weeks. Additional ISO 14001/45001: parallel or 4–6 more weeks. Sector approvals (DGMS, PESO, DGAQA, RDSO): 16–40 weeks depending on agency and inspection scheduling. Individual PSU vendor enlistment: 4–16 weeks after documents submitted. We help compress this by running parallel workstreams.

07 Do PSU tenders accept any ISO 9001 certificate, or only specific ones?

Only certificates issued by certification bodies accredited by IAF members are accepted. In India, NABCB (National Accreditation Board for Certification Bodies) is the IAF-recognized accreditor. Most PSU tenders explicitly state "ISO 9001 from NABCB-accredited or equivalent IAF-recognized accreditation body" — non-accredited or self-issued certificates are rejected at the bid scrutiny stage. We only work with CBs that hold valid IAF/NABCB accreditation.

08 What is the cost range to become PSU-tender-ready for a Jharkhand MSME?

Indicative cost for a Jharkhand-based MSME starting from no certification: ISO 9001 (consultancy + CB fee) ₹70,000–₹1,80,000; adding ISO 14001 + 45001 incremental cost ₹50,000–₹1,20,000; QAP authoring per contract ₹15,000–₹40,000; sector approvals (DGMS/PESO/RDSO) range widely depending on product. Total first-year compliance investment for a typical Jharkhand engineering MSME aiming at PSU tenders: ₹1.5 lakh – ₹4 lakh. Recovered on first awarded tender in most cases.

09 How do you support PSU customer inspections and Third Party Inspections (TPI)?

Our consultants attend customer and TPI inspections on-site. We rehearse the inspection beforehand: walk-through of the QAP, evidence file review, equipment calibration check, operator readiness. During the inspection we close any minor observation inside the visit — material substitution justification, missing record retrieval, calibration certificate cross-check. The goal is a clean inspection report on day one. Common TPI agencies: RITES, TUV Nord, BVQI, Lloyd's Register, DNV, SGS, Intertek.

10 Which PSU sectors does QualityNexus have the most depth in?

Our deepest sector experience is in Power & Energy (NTPC, NHPC, NEEPCO, DVC contractors and suppliers), Oil & Gas (IOCL distribution and depot operations, NRL refinery suppliers), Steel/Mining/Metals (HCL Ghatsila, SAIL ancillaries, Coal India suppliers), and Indian Railways (East Central Railway vendor base). These sectors anchor the East-India PSU corridor, which is our primary delivery footprint, with pan-India support for aerospace (HAL), heavy engineering (BHEL/HEC), and defence components.

Bid-ready for your next PSU tender.

Tell us the tender, the PSU, and the deadline. We come back with a gap report and a sequenced certification plan within 48 hours — fixed-price, no surprises.