Factories selling to EU and US brands
ISO 9001 is often a condition of approved-supplier status; ISO 14001 increasingly so for sustainability programs.
Management systems · ISO 9001 · ISO 14001
ISO 9001 and 14001: systems that hold up at audit.
ISO 9001 certifies a quality management system and ISO 14001 an environmental management system; both are audited by an accredited certification body in two stages, then maintained through yearly surveillance audits on a three-year cycle. New editions are out, ISO 14001:2026 (15 April 2026) and ISO 9001:2026 (16 September 2026), so certified suppliers move to them over the coming years.
- 2 stages
- to initial certification
- 3 years
- certificate cycle, audited yearly
- 2026
- new editions of both standards
Status · checked 28 Sep 2026 New editions published 2026
- Climate change amendment to ISO management system standards
- ISO 14001:2026 published
- ISO 9001:2026 published
- 28 Sep 2026
- Digitally enhanced ISO 9001 content
The short answer
What you need to know.
Checked against official sources on 28 September 2026.
- 01
ISO 9001 sets requirements for a quality management system; ISO 14001 for an environmental management system. Both follow the ISO Harmonized Structure (clauses 4 to 10), so one integrated system can meet both.
- 02
Certification is by an accredited certification body: a stage 1 readiness review, then a stage 2 on-site audit. Certificates run for three years, with surveillance audits at least once a year (ISO/IEC 17021-1).
- 03
ISO 14001:2026 was published on 15 April 2026 and ISO 9001:2026 on 16 September 2026. Both carry forward the 2024 climate change amendment.
- 04
Certified suppliers move to the new editions during a transition period set for certification bodies, reported by AFNOR as three years from publication. Your certification body confirms the exact dates.
- 05
For buyers, a certificate is a starting point: check the legal entity, site and scope, the accreditation, and the latest surveillance report.
Who it applies to
Who asks for it, and who needs it.
Brands qualifying suppliers
Use certification as evidence of process control, then verify it with their own audits and inspections.
Holders of 2015 certificates
Plan the move to the 2026 editions with their certification body within the transition period.
Key dates
Every date, with its source.
Publication dates from ISO. Transition deadlines are set for certification bodies; confirm yours with your certification body.
-
Climate change amendment to ISO management system standards
Organisations consider whether climate change is a relevant issue in their context and for interested parties.
-
ISO 14001:2026 published
The revised environmental management system standard.
-
ISO 9001:2026 published
Latest Harmonized Structure; more emphasis on leadership, quality culture, ethics and risks and opportunities; a new section to help apply the requirements consistently.
- Today · 28 September 2026
-
Digitally enhanced ISO 9001 content
ISO’s first digitally enhanced offering, for ISO 9001, becomes available.
How certification works
One three-year cycle, audited every year.
The audit programme certification bodies follow under ISO/IEC 17021-1, and the clauses auditors walk through in both standards.
- Stage 1Readiness review
Documents, scope, site conditions and whether the system is ready for stage 2.
- Stage 2Certification audit
On site: is the system implemented and effective? Certificate issued once findings are resolved.
- Year 1Surveillance audit
Within twelve months of the certification decision.
- Year 2Surveillance audit
A sample of processes and the changes since the last visit.
- Year 3Recertification
A full audit before the certificate expires starts the next cycle.
Clause 4ContextIssues, interested parties, scope
Clause 5LeadershipPolicy, roles, commitment
Clause 6PlanningRisks, opportunities, objectives
Clause 7SupportPeople, competence, documents
Clause 8OperationProcesses, controls, suppliers
Clause 9EvaluationMonitoring, internal audit, review
Clause 10ImprovementNonconformity, corrective action
Clauses 4 to 10 follow the ISO Harmonized Structure shared by ISO 9001 and ISO 14001.
What you need from suppliers
What to ask a certified supplier for.
Five minutes with these documents tells you whether a certificate reflects a working system.
- Certificate with scope and siteThe legal entity, address and scope must match the factory and products you buy.
- Accreditation markIssued by a certification body accredited by a recognised accreditation body; many can be checked on IAF CertSearch.
- Latest surveillance audit reportShows the certificate is maintained, with findings and how they were closed.
- Internal audit and management reviewRecent records, with actions followed through.
- Process controls for your productControl plans, inspection records and calibration records for the gauges used on your parts.
- For ISO 14001: aspects and legal registerSignificant environmental aspects and the compliance obligations the site tracks.
How SourceSquid helps
From your product list to an audit-ready file.
Our teams in Bengaluru and Ningbo collect the evidence at the factory, in the supplier’s own language, while production runs.
- 01
Gap assessment
The factory’s current practice checked against the 2026 editions, clause by clause, on site.
You receiveGap report and plan - 02
System design
Process maps, procedures and forms built with the factory team, in their language, sized to the business.
You receiveDocumented management system - 03
Training
Process owners and internal auditors trained on the requirements and on how audits run.
You receiveTrained internal auditors - 04
Run and record
The system runs long enough to produce real records: objectives, inspections, calibration, corrective actions.
You receiveImplementation records - 05
Internal audit and review
A full internal audit and management review, with findings closed before the certification audit.
You receiveInternal audit report - 06
Certification support
Accredited certification body selected, and our consultant present for stage 1 and stage 2 audits.
You receiveCertification achieved
Sources
Official texts behind this page
Checked on 28 September 2026. This page explains the rules in plain English; for a view on your own products, ask our team or your legal adviser.
- ISO: ISO 9001:2026 launched (16 September 2026)
- ISO: news, ISO 14001:2026 published (15 April 2026)
- AFNOR: transition from ISO 9001 and ISO 14001 to the 2026 versions (Q&A)Three-year transition period
- ISO/IEC 17021-1: requirements for bodies providing audit and certification of management systemsTwo-stage initial audit; three-year cycle; surveillance audits
- IAF CertSearch: global database of accredited certificates
Related compliance guides
Rules that often travel together.
EU · reportingCSRD and Scope 3Sustainability reporting after the 2026 Omnibus, and the value chain cap for suppliers.→EU · chemicalsREACHSVHC communication under Article 33, ECHA notifications and Annex XVII restrictions.→EU · packagingPPWRPackaging and Packaging Waste Regulation (EU) 2025/40: conformity, substances, labels and recyclability.→
ISO 9001 and 14001 questions
Straight answers.
Dates checked against official sources. We update this page when the rules move.
anirudh@sourcesquid.coWhat is the difference between ISO 9001 and ISO 14001?
ISO 9001 specifies requirements for a quality management system: how a company plans, controls and improves its processes so products consistently meet customer and regulatory requirements. ISO 14001 specifies requirements for an environmental management system: how a company identifies its environmental aspects, meets its compliance obligations and improves environmental performance. Both share the ISO Harmonized Structure, so they are often implemented and audited together.
How does ISO 9001 or ISO 14001 certification work?
An accredited certification body audits the management system in two stages. Stage 1 reviews documentation and readiness; stage 2 assesses implementation and effectiveness on site. Certificates run on a three-year cycle, with surveillance audits at least once a year and a recertification audit before expiry, following ISO/IEC 17021-1.
What changed with ISO 9001:2026 and ISO 14001:2026?
ISO 14001:2026 was published on 15 April 2026 and ISO 9001:2026 on 16 September 2026. ISO 9001:2026 adopts the latest Harmonized Structure and gives more weight to leadership, quality culture, ethical behaviour and risks and opportunities. Both editions carry forward the 2024 climate change amendment. Certified organisations move to the new editions during a transition period set for certification bodies, reported by AFNOR as three years.
How long does it take a supplier to get ISO 9001 certified?
It depends on the starting point. A factory with working controls but little documentation typically needs a few months to document processes, run them long enough to produce records, complete an internal audit and a management review, and then book stage 1 and stage 2 audits with a certification body. We plan the timeline after a gap assessment.
How can I check that a supplier’s ISO certificate is genuine?
Check that the certificate names the right legal entity, site and scope for the products you buy, and that it is issued by a certification body accredited by a recognised accreditation body. Many accredited certificates can be verified on IAF CertSearch. Ask for the latest surveillance audit report to confirm the certificate is being maintained.
Start here
Suppliers that pass audits because the system works.
Tell us which supplier needs ISO 9001 or 14001, or a move to the 2026 editions. We return a gap assessment plan and timeline.