Unannounced Qualiopi audit: when can a provider be audited outside the cycle?

Most training providers think in three-year cycles: initial audit, surveillance audit around month 18, renewal audit. That calendar remains the rule, but it is no longer the only control mechanism. A report can trigger a complementary audit outside the cycle, and since 2026 COFRAC can itself carry out a direct check with a certified provider. Here is what these two mechanisms actually change, and how a provider can prepare without living in fear of a surprise inspection.

The complementary audit: the mechanism set up since 2023

The framework for the complementary audit was set by the order of 31 May 2023 (arrêté du 31 mai 2023) on various measures regarding the quality certification of training organisations, which took effect on 1 September 2023 for most of its provisions — except for the rules on handling non-compliances, reports and certification transfers, which applied immediately.

In practice: when a report of non-compliance with the National Quality Framework reaches the certification body, it reviews it and decides on its own whether a complementary audit is warranted. Two safeguards frame the procedure:

• The identity of the person filing the report is kept confidential by the certification body;
• A precautionary suspension of the certification can be issued pending the audit, if the presumed seriousness of the facts justifies it — it is lifted if the audit does not confirm the non-compliance.

The complementary audit is carried out remotely or on-site depending on the nature and seriousness of the report. Unlike a surveillance or renewal audit, there is no standard notice period: the certification body sets the timeline based on urgency.

Who can report an organisation, and about what

A report can come from anyone in contact with the provider: a dissatisfied trainee, a funder (OPCO, Caisse des Dépôts for the CPF/EDOF, France Travail), an employee or former contributor, a competitor, or the DREETS during an administrative check. The most frequent grounds overlap exactly with what your complaints-handling register is already meant to cover: a programme that doesn’t match what was sold, a trainer without the announced competencies, published performance figures without evidence, or a refusal to handle a trainee’s complaint.

That’s a useful reminder: an empty or poorly kept complaints register isn’t just a non-compliance against indicator 31 — it’s also a sign that internal tensions found no outlet, and risk reaching the certification body directly as a report.

2026: COFRAC tightens its direct control of providers

The law against social and fiscal fraud adopted in May 2026 adds a second mechanism, distinct from the report-triggered complementary audit: COFRAC, the national accreditation body that accredits Qualiopi certification bodies, can now go up the chain and directly verify, on the ground, that a certified provider genuinely matches what its certificate attests — not only through the certification body. France Compétences supports this control, notably by relaying reports coming from auditors themselves or from sector providers.

This 2026 law also tightens the audit rhythm for providers deemed at risk: their surveillance audit frequency moves from 18 months to 12 months, a tightening worth comparing with the standard pace detailed in our article on the Qualiopi surveillance audit. Another development in the same push: since 1 June 2026, auditors who carry out Qualiopi audits must themselves hold a certification listed on the Répertoire spécifique — a professionalisation requirement that builds on the decree of 28 December 2023, which already requires certification bodies to submit an annual activity report to the ministry in charge of vocational training, to the national accreditation body, and to France Compétences.

Why notice changes everything: what the research says

The value of unannounced inspections isn’t specific to vocational training — it’s a classic subject in regulatory economics and quality management research. A 2014 study by Dechenaux and Samuel, published in the European Journal of Political Economy (see on Google Scholar), shows that inspections announced in advance give inspected structures time to stage temporary compliance — a “window dressing” effect that fades once the inspection is over. Conversely, a systematic review by Klerks and co-authors of Dutch nursing homes, published in 2013 in the International Journal of Nursing Studies (see on Google Scholar), nuances that finding: the lack of notice doesn’t necessarily surface more shortcomings, but it does give a more faithful picture of how the structure actually runs day to day.

Applied to Qualiopi, the lesson is simple: an evidence file hastily rebuilt before a scheduled audit may well pass that audit — but that is precisely the kind of file a complementary audit or a COFRAC check is likely to catch out, since it happens without leaving time to prepare it.

How to prepare without living under constant pressure

The good news: an unannounced audit doesn’t require a different file from a scheduled one — only a file that is always up to date. Three habits are enough:

• Keep your evidence binder current on an ongoing basis, indicator by indicator, rather than in a sprint before a known date — the audit preparation checklist works just as well in “always ready” mode as in an 8-week retro-planning;
• Handle every complaint in the register as soon as it happens, with its response and its trace — this is your best protection against a report that grows out of something never resolved internally;
• Document your corrective actions in a living continuous-improvement plan, in line with indicator 32, turning a finding into proof of seriousness rather than an admission of neglect.

If the audit confirms a non-compliance

The consequences follow the same rules as a scheduled audit: a minor non-compliance opens the right to a corrective action within 6 months, a major non-compliance suspends the certification pending correction within 3 months. Our article on the most frequent Qualiopi non-compliances and the one on the corrective action plan detail the steps to follow; if disagreement with the findings persists, challenging a non-compliance with the certification body remains possible.

Take action

A solid evidence file is built once, then maintained — it doesn’t need to be rebuilt every time an audit is announced, scheduled or not. The Complete Kit Certif provides the evidence template for all 32 indicators and the complaints register model kept current on an ongoing basis, so a report or a COFRAC check finds you ready rather than caught off guard (€297, 14-day guarantee, documents in French).