I assume this is ISO certification or something like that.
A specific assessment is required as to whether outsourcing will prevent certification.

That is how I understand it, i.e. that it depends on the circumstances of each case.

In practice it probably depends on how much control the outsourcer has over the subcontractor or supplier, and whether the outsourced product is manufactured under conditions that meet the requirements for certification.