# ISO 9001 and ISO 14001 for suppliers: certification and prep > How ISO 9001 and ISO 14001 certification works for factories supplying EU and US brands, what changed in the 2026 editions, and how we prepare suppliers. Source: https://sourcesquid.co/compliance/iso-9001-14001/ Management systems · ISO 9001 · ISO 14001 # ISO 9001 and 14001: systems that hold up at audit. ISO 9001 certifies a quality management system and ISO 14001 an environmental management system; both are audited by an accredited certification body in two stages, then maintained through yearly surveillance audits on a three-year cycle. New editions are out, ISO 14001:2026 (15 April 2026) and ISO 9001:2026 (16 September 2026), so certified suppliers move to them over the coming years. [Plan my supplier’s certification](https://sourcesquid.co/start/?from=compliance-iso-9001-14001) How certification works 2 stages to initial certification 3 years certificate cycle, audited yearly 2026 new editions of both standards Status · checked 28 Sep 2026 **New editions published 2026** 1. February 2024Climate change amendment to ISO management system standards 2. 15 Apr 2026ISO 14001:2026 published 3. 16 Sep 2026ISO 9001:2026 published 4. Today28 Sep 2026 5. 1 Oct 2026Digitally enhanced ISO 9001 content All dates and references ↓ The short answer ## What you need to know. Checked against official sources on 28 September 2026. 1. 01 **ISO 9001** sets requirements for a quality management system; **ISO 14001** for an environmental management system. Both follow the ISO **Harmonized Structure** (clauses 4 to 10), so one integrated system can meet both. 2. 02 Certification is by an **accredited certification body** : a **stage 1** readiness review, then a **stage 2** on-site audit. Certificates run for **three years** , with surveillance audits at least once a year (ISO/IEC 17021-1). 3. 03 **ISO 14001:2026** was published on **15 April 2026** and **ISO 9001:2026** on **16 September 2026**. Both carry forward the 2024 climate change amendment. 4. 04 Certified suppliers move to the new editions during a transition period set for certification bodies, reported by AFNOR as **three years** from publication. Your certification body confirms the exact dates. 5. 05 For buyers, a certificate is a starting point: check the **legal entity, site and scope** , the accreditation, and the latest surveillance report. Who it applies to ## Who asks for it, and who needs it. Suppliers ### Factories selling to EU and US brands ISO 9001 is often a condition of approved-supplier status; ISO 14001 increasingly so for sustainability programs. Buyers ### Brands qualifying suppliers Use certification as evidence of process control, then verify it with their own audits and inspections. Certified sites ### Holders of 2015 certificates Plan the move to the 2026 editions with their certification body within the transition period. Key dates ## Every date, with its source. Publication dates from ISO. Transition deadlines are set for certification bodies; confirm yours with your certification body. 1. February 2024 ### Climate change amendment to ISO management system standards Organisations consider whether climate change is a relevant issue in their context and for interested parties. ISO 9001:2015/Amd 1:2024Published 2. 15 Apr 2026 ### ISO 14001:2026 published The revised environmental management system standard. ISO 14001:2026Published 3. 16 Sep 2026 ### ISO 9001:2026 published Latest Harmonized Structure; more emphasis on leadership, quality culture, ethics and risks and opportunities; a new section to help apply the requirements consistently. ISO 9001:2026Published 4. Today · 28 September 2026 5. 1 Oct 2026 ### Digitally enhanced ISO 9001 content ISO’s first digitally enhanced offering, for ISO 9001, becomes available. ISO announcementUpcoming How certification works ## One three-year cycle, audited every year. The audit programme certification bodies follow under ISO/IEC 17021-1, and the clauses auditors walk through in both standards. 1. Stage 1**Readiness review** Documents, scope, site conditions and whether the system is ready for stage 2. 2. Stage 2**Certification audit** On site: is the system implemented and effective? Certificate issued once findings are resolved. 3. Year 1**Surveillance audit** Within twelve months of the certification decision. 4. Year 2**Surveillance audit** A sample of processes and the changes since the last visit. 5. Year 3**Recertification** A full audit before the certificate expires starts the next cycle. Clause 4**Context** _Issues, interested parties, scope_ Clause 5**Leadership** _Policy, roles, commitment_ Clause 6**Planning** _Risks, opportunities, objectives_ Clause 7**Support** _People, competence, documents_ Clause 8**Operation** _Processes, controls, suppliers_ Clause 9**Evaluation** _Monitoring, internal audit, review_ Clause 10**Improvement** _Nonconformity, corrective action_ Clauses 4 to 10 follow the ISO Harmonized Structure shared by ISO 9001 and ISO 14001. What you need from suppliers ## What to ask a certified supplier for. Five minutes with these documents tells you whether a certificate reflects a working system. * **Certificate with scope and site** The legal entity, address and scope must match the factory and products you buy. * **Accreditation mark** Issued by a certification body accredited by a recognised accreditation body; many can be checked on IAF CertSearch. * **Latest surveillance audit report** Shows the certificate is maintained, with findings and how they were closed. * **Internal audit and management review** Recent records, with actions followed through. * **Process controls for your product** Control plans, inspection records and calibration records for the gauges used on your parts. * **For ISO 14001: aspects and legal register** Significant environmental aspects and the compliance obligations the site tracks. How SourceSquid helps ## From your product list to an audit-ready file. Our teams in Bengaluru and Ningbo collect the evidence at the factory, in the supplier’s own language, while production runs. 1. 01 ### Gap assessment The factory’s current practice checked against the 2026 editions, clause by clause, on site. You receiveGap report and plan 2. 02 ### System design Process maps, procedures and forms built with the factory team, in their language, sized to the business. You receiveDocumented management system 3. 03 ### Training Process owners and internal auditors trained on the requirements and on how audits run. You receiveTrained internal auditors 4. 04 ### Run and record The system runs long enough to produce real records: objectives, inspections, calibration, corrective actions. You receiveImplementation records 5. 05 ### Internal audit and review A full internal audit and management review, with findings closed before the certification audit. You receiveInternal audit report 6. 06 ### Certification support Accredited certification body selected, and our consultant present for stage 1 and stage 2 audits. You receiveCertification achieved Sources ## Official texts behind this page Checked on 28 September 2026. This page explains the rules in plain English; for a view on your own products, ask our team or your legal adviser. 1. [ISO: ISO 9001:2026 launched (16 September 2026)](https://www.iso.org/news/2026/09/ISO9001-2026) 2. [ISO: news, ISO 14001:2026 published (15 April 2026)](https://www.iso.org/news/) 3. [AFNOR: transition from ISO 9001 and ISO 14001 to the 2026 versions (Q&A)](https://international.afnor.com/en/international-news/questions-and-answers-on-the-transition-from-iso-9001-and-iso-14001-to-the-2026-version/)Three-year transition period 4. [ISO/IEC 17021-1: requirements for bodies providing audit and certification of management systems](https://www.iso.org/standard/61651.html)Two-stage initial audit; three-year cycle; surveillance audits 5. [IAF CertSearch: global database of accredited certificates](https://iafcertsearch.org/) Related compliance guides ## Rules that often travel together. [EU · reporting**CSRD and Scope 3** Sustainability reporting after the 2026 Omnibus, and the value chain cap for suppliers.](https://sourcesquid.co/compliance/csrd/)[EU · chemicals**REACH** SVHC communication under Article 33, ECHA notifications and Annex XVII restrictions.](https://sourcesquid.co/compliance/reach/)[EU · packaging**PPWR** Packaging and Packaging Waste Regulation (EU) 2025/40: conformity, substances, labels and recyclability.](https://sourcesquid.co/compliance/ppwr/) ISO 9001 and 14001 questions ## Straight answers. Dates checked against official sources. We update this page when the rules move. [anirudh@sourcesquid.co](mailto:anirudh@sourcesquid.co) ### What is the difference between ISO 9001 and ISO 14001? ISO 9001 specifies requirements for a quality management system: how a company plans, controls and improves its processes so products consistently meet customer and regulatory requirements. ISO 14001 specifies requirements for an environmental management system: how a company identifies its environmental aspects, meets its compliance obligations and improves environmental performance. Both share the ISO Harmonized Structure, so they are often implemented and audited together. ### How does ISO 9001 or ISO 14001 certification work? An accredited certification body audits the management system in two stages. Stage 1 reviews documentation and readiness; stage 2 assesses implementation and effectiveness on site. Certificates run on a three-year cycle, with surveillance audits at least once a year and a recertification audit before expiry, following ISO/IEC 17021-1. ### What changed with ISO 9001:2026 and ISO 14001:2026? ISO 14001:2026 was published on 15 April 2026 and ISO 9001:2026 on 16 September 2026. ISO 9001:2026 adopts the latest Harmonized Structure and gives more weight to leadership, quality culture, ethical behaviour and risks and opportunities. Both editions carry forward the 2024 climate change amendment. Certified organisations move to the new editions during a transition period set for certification bodies, reported by AFNOR as three years. ### How long does it take a supplier to get ISO 9001 certified? It depends on the starting point. A factory with working controls but little documentation typically needs a few months to document processes, run them long enough to produce records, complete an internal audit and a management review, and then book stage 1 and stage 2 audits with a certification body. We plan the timeline after a gap assessment. ### How can I check that a supplier’s ISO certificate is genuine? Check that the certificate names the right legal entity, site and scope for the products you buy, and that it is issued by a certification body accredited by a recognised accreditation body. Many accredited certificates can be verified on IAF CertSearch. Ask for the latest surveillance audit report to confirm the certificate is being maintained. Start here ## Suppliers that pass audits because the system works. Tell us which supplier needs ISO 9001 or 14001, or a move to the 2026 editions. We return a gap assessment plan and timeline. [Plan my supplier’s certification](https://sourcesquid.co/start/?from=compliance-iso-9001-14001)[Talk to a principal](https://sourcesquid.co/contact/)