Ask most facility managers what happens during their R2 audit and they'll describe one thing: the day the auditor walks the floor. But if you're pursuing initial R2v3 certification, that walkthrough is only half the process. Before it ever happens, your certification body runs a separate audit against your documentation, your scope, and your general readiness. Miss that distinction and you'll misjudge your timeline, your budget, and — most commonly — walk into Stage 2 with problems that should have been caught weeks earlier.
R2v3 certification bodies are accredited by the ANSI National Accreditation Board (ANAB) against the R2 Certification Body Requirements, which is itself built on ISO/IEC 17021-1:2015, the international standard governing how management system certifications are conducted. That standard is where the two-stage structure comes from. It isn't an R2-specific quirk — it's the same audit architecture used for ISO 9001, ISO 14001, and ISO 45001 certifications, applied here to the R2v3 Core Requirements and Appendices.
In my work helping electronics recyclers through this process, I've seen the same misunderstanding sink timelines over and over: facilities treat Stage 1 as a formality and pour all their preparation into Stage 2. That's backwards. Stage 1 is where you find out whether you're actually ready to be audited at all.
What Stage 1 and Stage 2 Actually Are
Under ISO/IEC 17021-1:2015 clause 9.3.1.2, the Stage 1 audit exists to evaluate your management system documentation, assess your site-specific conditions, confirm your understanding of the standard's requirements, review the scope of certification you're requesting, and — critically — determine whether you're ready for Stage 2. It is not a pass/fail audit in the way most facilities imagine an audit. Nobody gets "certified" or "denied" at Stage 1. Stage 1 exists to answer one question: is this facility ready to be audited at all — not to determine whether it passes.
Stage 2 is the audit most people picture when they hear "R2 audit." This is where the certification body evaluates whether your Environmental, Health, and Safety Management System (EHSMS) and your processing operations are actually implemented the way your documentation says they are — through direct observation, worker interviews, records review, and physical verification of controls tied to R2v3's Core Requirements and Appendices A through G.
Why R2 Splits Certification Into Two Phases
The logic is simple once you see it: you don't want an auditor spending a full day on-site only to discover in the first hour that your scope statement doesn't match your actual operations, or that your downstream vendor documentation doesn't exist yet. That's an expensive way to find out you're not ready. Stage 1 catches structural and documentation gaps while they're still cheap to fix — before travel, scheduling, and on-site auditor time are on the line.
It also protects the credibility of the certificate itself. A Stage 2 auditor who spends their time chasing missing SOPs isn't spending that time verifying real-world implementation. Splitting the process means each stage does the job it's actually suited for.
Stage 1: The Readiness Review
Stage 1 is primarily a documentation and readiness assessment. Many certification bodies conduct it remotely or with a brief site visit, since the goal is reviewing records and confirming scope rather than observing full operational implementation. Expect the auditor to cover:
- Scope definition — confirming exactly which processes, materials, and locations your certification will cover, and whether that matches what you actually do
- EHSMS documentation — your policy, procedures, risk assessments, and legal compliance register tied to Core Requirement 1
- Focus Materials identification — whether you've correctly identified and documented the R2 Focus Materials your facility handles, per Appendix A
- Data security and sanitization procedures — whether written procedures exist for data-bearing device handling, even before Stage 2 verifies they're followed
- Downstream vendor due diligence records — whether you've begun qualifying downstream vendors per Appendix F
- Resource allocation for Stage 2 — auditor time needed based on facility size, staff count, and process complexity
- Prior audit history, if this isn't your first certification cycle
The output of Stage 1 is a report identifying any areas of concern that must be resolved before Stage 2 can proceed, plus a confirmed Stage 2 audit plan: duration, team composition, and dates. If Stage 1 turns up major gaps — no legal register, no documented Focus Materials list, a scope statement that doesn't match operations — the certification body will not move forward to Stage 2 until those are addressed. That's not a failure. That's the stage doing exactly what it's designed to do.
Stage 2: The Certification Audit
Stage 2 is on-site, and it's where your actual operations get tested against the standard. Where Stage 1 asks "do you have a procedure for this," Stage 2 asks "is this procedure actually what happens on your floor." The auditor will:
- Walk the full facility, observing intake, sorting, processing, testing/repair, and shipping areas
- Interview staff directly — not to catch people out, but to confirm they understand and follow the procedures your documentation describes
- Pull and verify records: training logs, calibration records, incident reports, throughput and inventory tracking, downstream shipment documentation
- Verify data sanitization and destruction controls in practice, including equipment settings and chain-of-custody records for data-bearing devices
- Review physical and facility security controls against the requirements in Appendix B
- Check focus material handling, storage, and labeling against what was represented in Stage 1
- Sample downstream vendor files to confirm the due diligence documented in Stage 1 is actually being applied to real shipments
- Assess emergency preparedness measures and EHS risk controls in the actual work environment
At the end of Stage 2, the auditor holds a closing meeting and presents findings. Nonconformities get documented as Corrective Action Requests (CARs), categorized by severity. Minor nonconformities typically require a corrective action plan with a defined timeline; major nonconformities generally must be resolved and verified before certification can be granted at all.
Stage 1 vs. Stage 2 at a Glance
| Stage 1 | Stage 2 | |
|---|---|---|
| Primary question | Are you ready to be audited? | Is your system actually implemented? |
| Typical format | Remote or brief on-site document review | Full on-site audit |
| Focus | Documentation, scope, legal register, EHSMS structure | Implementation, staff behavior, physical controls, records |
| Interviews | Limited, usually management/EHS lead | Extensive, across processing and floor staff |
| Records reviewed | Policies, procedures, scope statement | Training logs, throughput data, downstream shipments, sanitization logs |
| Typical duration | Hours to one day | One to several days, depending on facility size |
| Output | Readiness report, Stage 2 plan, required pre-Stage-2 fixes | CARs, audit findings, certification recommendation |
| Certification decision made here? | No | Yes — recommendation goes to the CB's decision-making function |
What Happens Between the Two Stages
The gap between Stage 1 and Stage 2 is working time, not waiting time. Whatever the Stage 1 report flags has to get closed before the Stage 2 date, and depending on what's missing, that gap can run anywhere from a couple of weeks to a couple of months. If your Focus Materials documentation was incomplete, or your downstream vendor files were thin, this is the window to fix it — not the week before Stage 2. Facilities that treat this gap as a formality tend to walk into Stage 2 with the same problems still open, and that's when Stage 2 turns into a longer, more expensive audit than it needed to be.
After Stage 2: What Determines Certification
Passing Stage 2 without major nonconformities doesn't mean the certificate issues that day. The auditor's findings go to the certification body's independent decision-making function — a person or committee separate from the audit team, as required under ISO/IEC 17021-1 — who reviews the evidence and makes the certification decision. If minor CARs are outstanding, you'll typically submit a corrective action plan and evidence of implementation within a set window, commonly 30 to 90 days depending on the certification body, before the certificate is issued.
Once certified, your facility doesn't go through Stage 1 and Stage 2 again on a routine cycle. Instead, you move into annual surveillance audits for the following two years, then a full recertification audit before your three-year certificate expires. That recertification audit resembles Stage 2 in depth but typically doesn't require a separate Stage 1 unless your scope has changed materially. For a full breakdown of what differs between those ongoing audits, see our guide on what to expect from an R2 surveillance audit versus a recertification audit.
Getting Ready for Both Stages
Because Stage 1 and Stage 2 test different things, preparing for them well means treating them as different projects with different deliverables — not one long audit-prep sprint. Facilities that score themselves honestly against the standard before either stage begins consistently avoid the CARs that stall a certification decision. Our R2 audit preparation guide walks through what to have in place before a certification body ever sets foot on-site, stage by stage.
FAQ
What's the actual difference between an R2 Stage 1 and Stage 2 audit? Stage 1 reviews your documentation, scope, and general readiness — usually off-site or in a short visit. Stage 2 is a full on-site audit that verifies whether your EHSMS and processing controls are actually implemented as documented, and it's where nonconformities and the certification recommendation are determined.
Can Stage 1 and Stage 2 happen on the same day? Some certification bodies will combine them for smaller, low-complexity facilities, but ISO/IEC 17021-1:2015 clause 9.3.1.2 still requires the Stage 1 objectives to be met before Stage 2 begins. For most R2v3 facilities, especially first-time applicants, the two are scheduled separately with time in between to close any gaps.
What happens if my facility fails Stage 1? There's no formal "fail" at Stage 1 — instead, the certification body issues a readiness report identifying what has to be resolved before Stage 2 can proceed. Common gaps include an incomplete legal compliance register, an undefined or mismatched scope statement, and missing Focus Materials documentation.
How long is the gap between Stage 1 and Stage 2 typically? It varies by certification body and by how much work Stage 1 turns up, but a few weeks to a couple of months is common. Facilities with clean documentation going into Stage 1 tend to move through that gap faster.
Does passing Stage 2 mean I'm certified immediately? Not automatically. The audit team's findings, including any Corrective Action Requests, go to the certification body's independent decision-making function. Certification is issued once minor CARs are closed and the decision-maker approves the recommendation — this can add several weeks after the Stage 2 site visit ends.
Last updated: 2026-09-11
Jared Clark
Principal Consultant, Certify Consulting
Jared Clark is the founder of Certify Consulting, helping organizations achieve and maintain compliance with international standards and regulatory requirements.