ISO 9001:2026
What changes, and what nobody has published yet.
ISO 9001 is being replaced. The sixth edition is under publication now, and most of what you will read about it online states a transition deadline that no accreditation body has actually set. This page separates the two.
Every fact below is attributed. Where something is inferred rather than published, it says so. Last verified 14 September 2026.
Where the standard actually is
ISO 9001:2026 is the sixth edition, ISO catalogue reference 88464, and it replaces ISO 9001:2015. The final draft was approved by ISO/TC 176/SC 2 on 7 August 2026, after the draft stage passed with a 97 per cent approval rate.
The ISO catalogue entry gives the publication date as September 2026, to the month. The specific date of 16 September comes from certification bodies including LRQA and SGS rather than from ISO itself, so it is worth treating as very likely rather than confirmed until the catalogue entry updates.
ISO describes the revision as clearer wording, a stronger focus on leadership and quality culture, greater clarity on risks and opportunities, a new guidance annex, and closer alignment with other management system standards. It does not state a transition period anywhere, because ISO does not set them.
The deadline
Nobody has published one.
As at 14 September 2026, UKAS has published transition bulletins for ISO 14001:2026 and for ISO/IEC 17020:2026. It has published nothing for ISO 9001:2026.
The body that would normally set a transition period no longer exists. The International Accreditation Forum ceased operations on 1 January 2026, merging with ILAC into Global Accreditation Cooperation Incorporated, which trades as Global ACI. UKAS has its own bulletin on the changeover to the Global ACI mark, dated 15 May 2026.
The unfinished technical work handed over in that merger explicitly included a document listed as transition requirements for ISO 9001. It was unnumbered and unpublished then, and it is still unpublished now. So there is no mandatory transition document for ISO 9001:2026 from any body, and there will not be an IAF one, because IAF is dissolved.
Global ACI is clearly working through the backlog: it published transition requirements for ISO/IEC 17024:2026 on 10 September 2026. A 9001 document may well appear within weeks of publication. It has not appeared yet.
Where the September 2029 figure comes from
Convention, and it is a well-founded one. UKAS stated in its ISO/IEC 17020:2026 bulletin that the transition deadline for that standard had been internationally agreed as three years from the date of publication. For ISO 14001:2026, published on 15 April 2026, UKAS set the deadline for certified organisations at 30 April 2029: three years, rounded to the end of the month rather than the anniversary day.
Apply that same pattern to a mid-September publication and you get 30 September 2029 rather than the 16 September 2029 that gets repeated. Both are inferences. Neither is published.
Past transition periods have not always been three years. They have ranged from eighteen months to three years depending on how substantial the revision was.
What certification bodies are telling clients
They do not agree with each other, which is the clearest available evidence that nothing has been set.
- BSI
- Names no deadline at all. Refers only to a certification transition period being triggered on publication.
- LRQA
- Three years anticipated, consistent with recent revisions, giving approximately September 2029. Explicitly flagged as extrapolation.
- SGS
- Expected three-year period to September 2029. Attributes the publication date to ISO.
- Intertek
- Approximately three years, by late 2029. Hedged throughout as expected and estimated.
- NQA
- States September 2029 as fact on one page, then softens it to likely on another.
- Amtivo
- Q2 2029, which is inconsistent with its own statement of three years from a September publication.
The practical consequence: the only deadline that governs you is the one your own certification body puts in writing, and the date it can start auditing to the new edition depends on UKAS extending its accredited scope first. Both are worth asking for in writing rather than reading off a blog.
Clause by clause
What changes, and what it actually demands.
The question worth asking about each change is not what it says but whether it creates a record you do not already keep. On the published analysis so far, almost none of them do.
| Clause | What changes | New record? | Source |
|---|---|---|---|
| 4.1, 4.2Context and interested parties | Climate change consideration is folded into the body of the standard. This has already applied since February 2024 through the climate action amendment to the 2015 edition, so for most organisations it is not new work. | No | CQI/IRCA; ISO 9001:2015/Amd 1:2024 |
| 5.1.1Leadership and commitment | A new requirement to promote a culture of quality and ethical behaviour. ISO's own factsheet leads on this. It is the change with the least obvious evidence trail, and the one auditors will probe. | No | ISO factsheet; BSI; DQS |
| 5.2.1Quality policy | The policy must now connect to the organisation's strategic direction rather than sitting apart from it. | No | DQS; Oxebridge FDIS review |
| 6.1.1, 6.1.2, 6.1.3Risks and opportunities | The single 6.1 clause is split three ways: determining risks and opportunities, then separate actions for each. ISO describes the intent as a clear separation of risks from opportunities for a more balanced approach. | No | ISO factsheet; DQS; Oxebridge; CQI/IRCA |
| 6.3, 8.5.6Planning of changes | The considerations under 6.3 are expanded and read alongside 8.5.6 as a more joined-up approach to change. Note that 6.3 remains a clause that says to consider, not one that says to retain evidence. | No | BSI; Oxebridge FDIS review |
| 7.3Awareness | Quality culture and ethical behaviour are added to the list of things people must be aware of, which is how the 5.1.1 change reaches the workforce. | No | DQS; BSI |
| 3Terms and definitions | More quality-management terms are defined inside the standard, so you need ISO 9000 open alongside it less often. ISO 9000 has also been revised for 2026. | No | BSI; ANSI |
| 8Operation | Minor only, largely terminology. 8.1 softens documentation to what is necessary and 8.2.1 clarifies contingency actions. Certification bodies are consistent that clause 8 is not where the work is. | No | BSI; SGS; Oxebridge |
| 9Performance evaluation | Essentially unchanged. Internal audit, management review and monitoring requirements carry over. | No | BSI |
| 10.1Continual improvement | Retitled from General to Continual improvement, and absorbs what was clause 10.3. Clause 10.3 is deleted. This is a renumbering, not a new obligation, and it is widely reported incorrectly as a brand new clause. | No | Oxebridge FDIS review; Mireaux |
| 10.2Nonconformity and corrective action | The requirement to route customer complaints through corrective action moves into a note. This is a reduction in obligation, which runs against the direction of most commentary. | Reduced | Oxebridge FDIS review |
| Annex ANew guidance annex | Around fifteen pages explaining terminology and the intent behind requirements, aimed partly at first-time users and small businesses. It is informative: it contains no requirements and cannot ground a nonconformity. | No | ISO factsheet; BSI; Oxebridge |
| Annex BRemoved | The old Annex B goes, with its useful references moved into Annex A and to ISO/TC 176 sources. | No | CQI/IRCA; ANSI |
Everything in this table comes from certification body and professional body analysis of the final draft, not from the published text, which nobody outside the committee has yet read. It needs re-checking against the published standard.
You probably do not need to rewrite your manual.
Two things are worth separating here. ISO 9001 has not required a quality manual since the 2015 edition. Clause 7.5 requires documented information, not a manual. Nothing in the published analysis suggests 2026 brings one back. So if you hold a manual, it is your document, not a requirement, and what happens to it is your decision.
On the substance, no new documented-information requirement has been identified anywhere in the final draft. DQS puts it directly: if your quality management system is effectively implemented and actually used, no fundamental changes to your documented information are necessary.
The work is therefore mostly in three places. Showing that your risk process distinguishes risks from opportunities. Connecting your quality policy to your strategic direction. And evidencing a quality culture, which is the genuinely hard one.
Evidencing a quality culture
Clause 5.1.1 asks top management to promote a culture of quality and ethical behaviour, and 7.3 puts it into what people must be aware of. Neither attaches a record, which is exactly why it is the hardest change in the revision to prepare for.
The most common answer offered is a signed policy with nothing downstream showing it is used. It is the weakest evidence available and the easiest to mistake for strong evidence, because it looks exactly like compliance: approved, controlled, current, and signed by someone senior. It demonstrates that a document exists. An auditor is testing whether the system runs, not whether the prose is good.
What holds up is evidence that quality changed something. Management review minutes where quality data altered an outcome, rather than being tabled and noted. A record of someone stopping or escalating work, and what the organisation did next, which is how you show the authority to halt is real. A speak-up route with evidence it has actually been used, since the existence of the channel proves nothing on its own. And survey data on whether people feel able to raise a problem, paired with the action that followed the result.
The pattern across all four is the same. None of them is a document about culture. Each is a record of a decision that went differently because of it.
If you have read that 9001:2026 requires Ai governance, it does not
There is content circulating claiming the new edition will require cryptographic signatures on documents, multi-factor authentication, real-time telemetry from connected machinery, and formal bias testing and drift records for Ai models. None of it appears in any certification body, professional body or independent analysis of the final draft. It is not in the standard.
It is worth knowing how that happens, because it will happen again with ISO 45001. Machine-generated content extrapolates from what sounds plausible for a 2026 standard rather than from what the committee wrote, and it ranks well because it is thorough, confident and well structured. Those are not accuracy signals.
The test that works: does the page name the clause, and does a second independent source say the same thing about that clause? On this revision, the claims that survive that test are modest. Most of the standard has not changed.
Practical next steps
What to do between now and whenever the deadline lands.
- 1
Ask your certification body for its deadline in writing.
Not a blog date. The only date that governs your certificate is the one your CB commits to, and you want it on record.
- 2
Ask when its UKAS scope extension covers the 2026 edition.
A certification body cannot issue accredited certificates to a new edition until UKAS has extended its accredited scope. If you want to transition early, that is the constraint, not your own readiness.
- 3
Ask whether transition can ride an existing audit.
At least one UK body offers transition as standalone, combined with surveillance, or at recertification. Combining is normally the cheaper route, but no published rule requires any body to offer it.
- 4
Re-cut your risk register to separate risks from opportunities.
No new record is required, but the split in 6.1 is the change most likely to be probed, and a register that already reads that way answers it without argument.
- 5
If you audit, check your own certification.
IRCA-certificated quality management auditors need to update their certification for the new edition, typically through a transition course.
What this page is not
Nobody writing publicly about ISO 9001:2026 today has read the published standard, including us. Every clause-level statement above traces to analysis of the final draft by certification bodies, professional bodies and independent reviewers. The published text can differ from the draft.
This page will be corrected against the published standard, and updated when Global ACI or UKAS publish a transition requirement. The verification date at the top is the one to check.
Primary sources used: the ISO catalogue entries for ISO 9001 and its 2015 predecessor, ISO's own revision factsheet, ISO/TC 176/SC 2 committee news, the UKAS technical bulletin index and its ISO 14001:2026 and ISO/IEC 17020:2026 bulletins, IAF resolutions on the transfer to Global ACI, and Global ACI's document library. Certification body guidance is attributed by name in the table above.
Tracking a transition across several standards?
Certiqa holds clause libraries per edition, so evidence stays attached to the edition it was gathered against and a transition becomes a mapping exercise rather than a rebuild.