Fixed-Price vs Hourly ISO Consultants: What the Numbers Actually Show

Two failures sit behind this post. A manufacturer in regional Victoria spent $38,000 over eight months with an hourly ISO consultant and never reached Stage 2. Scope crept past the original estimate. Revision rounds multiplied. The consultant invoiced faithfully each fortnight, the project extended, and certification slipped past the tender deadline that started the whole engagement. The second failure: a service company that paid $22,000 fixed-price, received a folder of generic templates, spent three months trying to interpret the clause requirements themselves, and failed their Stage 1 audit on document adequacy.

Both billing models can go badly. The question is not which one to prefer. It is what to look for inside each one — and where the structural risks actually live.

How hourly billing works, and where the incentive breaks

A good hourly consultant brings real value: judgement earned across dozens of audits, familiarity with what auditors actually push on, the ability to read a gap and tell you which ones matter. That part works. What does not work is the billing structure that surrounds it.

When an engagement is billed hourly, the client absorbs all the scope risk. Every extended discovery session, every round of document revision, every additional clause that surfaces mid-engagement — all of it lands on an invoice. The consultant has no financial reason to move quickly and no financial consequence if the project drags. A well-intentioned, competent consultant can still run a client to $30,000 simply because the model never built in a reason to hurry.

There is a second problem that surfaces after certification. Most hourly engagements end when you pass Stage 2. The consultant hands over a document folder, wraps up the final invoice, and moves to the next client. Your team inherits a QMS that only the consultant fully understood — with no system tracking evidence expiry, no automated alerts before management reviews, no one accountable for the surveillance audit in 12 months. This is the implementation gap, and it catches more certified businesses than the initial certification failure rate suggests.

Realistic cost in 2026: $100 to $250 per hour depending on experience and market. Typical first-certification engagements for a 20 to 50-person SMB run $5,000 to $30,000. A failed Stage 2 re-engages at current rates, and the timeline resets.

What a fixed-price model should include — and what a bad one looks like

Fixed-price certification sounds like the obvious solution to the incentive problem. One fee, defined scope, no billing surprises.

The catch: a fixed-price package can be constructed in ways that provide almost none of the accountability the term implies. Templates handed to a client for self-assembly, a checklist to self-report clause coverage, no named expert who has actually read the documents — this is hourly billing repackaged at a discount, with the interpretation work silently transferred to the client.

The billing model itself does not shift the risk. What shifts the risk is whether a qualified person is accountable for the outcome.

A real fixed-price engagement has six things:

1. A named expert. A qualified person who reviews your specific documents, applies interpretive judgement to your clause gaps, and signs off on the QMS before it faces an auditor — not an account manager passing your files to someone you never meet.
2. AI-driven document ingestion, not template delivery. Your existing procedures, forms, and records are read and mapped to ISO clauses. Missing policies are drafted from your actual operations — not handed to you as generic templates to fill in.
3. A defined gap analysis. Not a self-reported clause checklist. An assessment of what your business actually has, what is missing, and in what order to address the gaps — based on your documents, not your answers to a questionnaire.
4. Audit representation. For a fully managed engagement, someone is in the room with the auditor at Stage 2. This matters: an experienced person who has attended many Stage 2 audits can clarify responses, contextualise evidence, and prevent a finding from becoming a major non-conformance.
5. Post-certification coverage. The engagement should not end when you pass. Evidence expiry tracking, management review scheduling, document version control — these keep the QMS audit-ready for the surveillance audit 12 months later.
6. A written guarantee. Not implied. Stated: if Stage 2 does not go to plan, the provider continues working at no additional charge until you pass.

Fixed-price vs hourly: the key differences

The table below compares the two models across the dimensions that actually determine the outcome of a first-certification engagement.

The parenthetical "if genuine" carries the weight. A fixed-price package that skips the named expert, skips audit representation, and offers no written guarantee is not a different model from hourly billing — it is the same risk, repackaged at a flat rate, with the interpretation work quietly transferred to you.

Red flags worth identifying before you sign

Both models carry warning signs that are easy to miss before the engagement starts and obvious once you are inside it.

In an hourly proposal

• No fixed scope or completion milestone. Phases described only in hours, with no point at which the client stops paying, is an open-ended commitment. Push for a defined deliverable at the end of each phase — and a clear ceiling before Stage 2.
• No post-certification plan. If the proposal ends at Stage 2 and says nothing about surveillance audit support or QMS handover, ask explicitly. A QMS handed over without an ongoing structure decays faster than most clients expect.
• Discovery that never seems to end. A discovery phase running beyond four weeks for a 20 to 50-person SMB is a signal. Good consultants know enough about your sector to scope efficiently. Extended discovery in hourly billing transfers cost to the client.

In a fixed-price proposal

• No named expert. If the proposal names a platform but not the person who will review your QMS, the expert layer may be nominal or outsourced to whoever is available.
• Template delivery without document ingestion. A fixed-price package that hands you templates to fill in rather than reading your existing documents is giving you the same work as a self-serve subscription at a higher price.
• No written guarantee. If the proposal does not state what happens at a failed Stage 2 audit, assume you restart at full cost. Ask directly before signing: "If we fail Stage 2, what happens next and what does it cost?"
• No post-certification coverage. An engagement ending at first certification leaves you with the same surveillance audit problem as an hourly engagement that ended at handover.
• Currency and geography not specified. If the pricing page does not clearly show whether fees are in AUD, USD, or GBP, and does not confirm service availability in your region, ask before committing. A fixed price that later requires local add-ons is not fixed.

The guarantee question

Most buyers do not ask it directly. They should.

Ask it directly: "If we fail Stage 2, what happens next, and what does it cost us?" An hourly consultant will give you the honest answer — re-engagement, scoped to the remediation, billed at current rates. A template-only platform will hedge: the document deliverable was complete, the audit outcome is yours to manage. A genuine fixed-price service with a written guarantee will say something different: we keep working until you pass, at no extra charge.

Kaiso's commitment is explicit: the fixed price includes working with your business until Stage 2 passes. If the first attempt does not go to plan, Kaiso continues at no additional cost. That guarantee is credible because the incentive structure supports it — every hour of additional work beyond plan comes out of Kaiso's margin, not yours. That is the structural difference a written guarantee signals.

The guarantee question also reveals something else. A provider who hedges the answer, qualifies it with conditions, or does not have a clear policy has not thought through what they are actually committing to deliver. Clarity on the failure case is a proxy for clarity on the engagement overall. If they cannot answer "what happens if I fail?" cleanly, they may not have a clean answer to "what exactly are you delivering?" either.

Kaiso offers two fixed-price tiers: DIY at $2,999 (plus $299/month), where you drive the evidence-gathering with AI document drafting and expert review at every gate; and Managed at $4,999 (plus $499/month), where Kaiso handles the entire engagement including dealing with the certification body and representing you in the audit room. Either way, the guarantee holds.

For a broader comparison of how software, consultants, and hybrid services compare as a whole — not just on billing model — the software vs. consultant breakdown covers the three paths across seven dimensions, including ongoing maintenance and what happens after you pass.

Frequently asked questions

How much does an hourly ISO 9001 consultant cost in 2026?

Hourly ISO 9001 consultant rates typically run $100 to $250 per hour depending on experience, market, and whether the engagement is remote or on-site. A first-certification engagement for a 20 to 50-person SMB usually totals $5,000 to $30,000 across the full implementation. Failed audits that require re-engagement reset at the current rate. These figures are consistent across Australian and US markets as of August 2026.

Are fixed-price ISO certification services legitimate?

Yes — when they include a named expert who reviews your QMS, AI-driven document ingestion from your real operational documents, audit representation, post-certification tracking, and a written guarantee for the Stage 2 outcome. Fixed-price packages that deliver only generic templates for self-assembly, with no named expert and no guarantee, are not meaningfully different in outcome from self-serve template platforms. The billing model alone does not determine quality; the accountability structure does.

What should a fixed-price ISO 9001 proposal include?

Six things: a named expert (not just a platform), AI ingestion of your existing documents rather than template delivery, a gap analysis based on your actual documentation, audit representation in the Stage 2 meeting, post-certification tracking for surveillance audits, and a written guarantee stating what happens if Stage 2 does not pass. A proposal missing any of these warrants a direct question before signing.

What is the incentive problem with hourly ISO consulting?

An hourly billing model gives the consultant no financial incentive to complete the engagement quickly. Extended discovery phases, multiple revision rounds, and additional clauses that surface mid-engagement all appear identically on an invoice. The client absorbs all scope risk. This is not a character flaw in consultants — it is a structural feature of the billing model. Fixed-price arrangements flip the incentive: additional time past the plan comes out of the provider's margin, not the client's budget.

What happens if I fail my ISO 9001 Stage 2 audit with a fixed-price service?

With a genuine fixed-price service that includes a written guarantee, the provider continues working to remediate the findings and prepare you for re-audit at no additional cost. With an hourly consultant, re-engagement is scoped and billed at the current rate. With a template-only fixed-price platform, the client typically handles remediation themselves. Before signing any engagement, ask directly what the provider's policy is for a failed Stage 2 — and ask for it in writing.