The short answer
ISO 9001:2026 was published on 16 September 2026. It is the sixth edition of the quality management standard, and it supersedes ISO 9001:2015. If your organisation holds an accredited certificate to the 2015 edition, one date matters more than everything else on this page: 30 September 2029, by which organisations already certified to ISO 9001:2015 must complete their transition. Three years, from the day the standard was published.
The second thing worth knowing early is that the deadline is not ISO's. ISO writes standards and does not certify anybody, so transition arrangements come from the accreditation community instead. Since 1 January 2026 that means Global Accreditation Cooperation Incorporated — Global ACI — which succeeded the International Accreditation Forum. The requirements sit in a document called Global ACI-TECH-3-TR 2029-09-30 (M), published on 16 September 2026, the same day as the standard itself.
The third is that this is an evolution, not a rewrite. Global ACI describes the new edition as one that "builds on the established ISO 9001 framework, with updates intended to improve clarity and usability", and the top-level clause structure is unchanged. The system you already run is the system the 2026 edition expects. The work is finding where the wording moved and being able to show an auditor that you caught up.
How this page is sourced — and what it deliberately does not contain
Two primary sources, both read in September 2026: ISO's catalogue entry for ISO 9001 at iso.org, for the publication date, edition and status; and Global ACI's published transition requirements and announcement at global-aci.org, for every date below and every quoted description of what changed. What you will not find here is a clause-by-clause comparison of the 2015 and 2026 texts. ISO does not publish one, the standard is sold rather than given away, and we are not going to invent one.
The dates that matter
The transition period runs for three years and contains five dates. Two of them are about you. The other three are milestones for accreditation bodies and certification bodies, and they are worth reading anyway, because they tell you when your certification body will actually be in a position to audit you against the new edition — which is not the same as when you would like it to.
No later than 31 March 2027 — accreditation bodies are ready to assess against and support ISO 9001:2026.
By 30 June 2027 — accredited certification bodies submit their transition declaration and supporting information.
By 30 September 2027 — accreditation body transition decisions are completed.
From 31 March 2028 — new and initial accredited certifications may only be issued to ISO 9001:2026.
By 30 September 2029 — organisations already certified to ISO 9001:2015 must complete their transition.
Three years sounds generous until you work backwards. The earliest most organisations can book an accredited transition audit is after their certification body has been through its own accreditation body's transition decision, and the outside limit for those decisions is 30 September 2027. Individual bodies will get there sooner. On the cautious reading the audit window is October 2027 to September 2029 — and the gap analysis, the document changes and the internal audit all come before it opens.
The 31 March 2028 date catches a different group, and it is easy to miss because it is not addressed to anyone already certified. From that date a new or initial accredited certification can only be issued to ISO 9001:2026. So if you are working towards a first certificate, build to the 2026 edition now. A 2015 certificate issued in 2027 has to be transitioned again before September 2029: two projects and two sets of audit fees for one outcome.
Scale is the other reason not to leave it. Global ACI notes that more than one million accredited ISO 9001 certificates are in scope, and all of them need an audit against the new edition inside the same three-year window, from the same pool of auditors. The last six months of a transition period is its crowded end.
One qualification: these requirements are mandatory for Global ACI MRA accreditation-body signatories and the certification bodies they accredit. If your certificate is not accredited — some are not — none of this is enforced on you, and equally the certificate does not carry the weight that made certifying worth doing. Check for the accreditation mark before deciding which category you are in.
What actually changed
Global ACI summarises the revision as building on the established ISO 9001 framework with updates intended to improve clarity and usability, then names five areas. These are their words, and they are the most authoritative public description of the changes that exists:
- Clearer wording. The change that affects the most sentences and the fewest systems.
- A stronger focus on leadership, quality culture and accountability. Named as a theme in its own right, and the one most likely to change what an auditor asks your senior managers.
- Greater clarity around risks and opportunities. Not a new concept — risk-based thinking arrived in 2015 — but clarity is what that part of the text was most criticised for lacking.
- A new Annex A clarifying key terms and the intent of requirements. The only new structural element in the list.
- Closer alignment with other ISO management system standards. Which matters most if you run an integrated system.
Read the list whole and a pattern shows: four of the five changes are about being understood. Nothing in the public description suggests a new requirement that a competent 2015-based system would fail — but that is a reading of a summary, not a reading of the standard.
For the record, this was a full revision rather than an amendment. ISO's catalogue entry records the FDIS registered on 20 April 2026, the ballot closed on 10 July, and publication on 16 September. Nothing about the content is provisional.
What that list does not tell you
It does not tell you which sentences changed, or whether anything you do now falls short. There is no published clause-by-clause diff — ISO does not produce one and the standard is paywalled — so anyone publishing a definitive comparison has either reproduced material they are not licensed to reproduce, or is guessing and hoping you will not check.
We are doing neither. What we can do honestly is say where those five themes live, which narrows the reading from a whole document to a few clauses. That is a map rather than an answer.
The new Annex A
The one genuinely new structural element Global ACI names is Annex A, described as clarifying key terms and the intent of requirements. We have not read it — the standard is sold rather than made freely available — and we will not pretend otherwise. But that description is the language of an informative annex: one that explains what the requirements are getting at, rather than adding requirements of its own. If that is what it proves to be, it is the most useful thing in the revision for a small organisation without a consultant on retainer.
Here is why. The hard part of ISO 9001 has never been the requirements; it is the intent behind them. A clause can be complied with word by word and still miss the point, and an auditor's next question is almost always "why" rather than "where". Phrases like documented information and risk-based thinking carry meaning the 2015 text left implicit, and closing that gap is what advisers have been paid for. An annex stating the intent in ISO's own voice gives a small team an answer that costs nothing and cannot be waved away as one consultant's opinion.
Two suggestions. Read Annex A before the requirements rather than after — they make more sense in that order. And give it to whoever has to explain the system to a sceptical manager, because intent is a better argument than a clause number.
Where the changes land, clause by clause
Read this section for what it is: a map of where to look. We are taking Global ACI's five themes and saying which clauses those themes sit in, using the structure ISO 9001 shares with every other modern management system standard. That is reasoning from the public record, not a reading of the 2026 text. Anything below could be right about the clause and wrong about the sentence.
The structure itself is public. Its current official name is the Harmonized Structure, defined in the ISO/IEC Directives Part 1, Consolidated ISO Supplement, Annex SL, Appendix 2 — "Harmonized structure for MSS with guidance for use". The seven management clauses, in ISO's own spelling, are:
- 4 Context of the organization
- 5 Leadership
- 6 Planning
- 7 Support
- 8 Operation
- 9 Performance evaluation
- 10 Improvement
Mapping the five themes onto those clauses gives this — the clauses with a named theme first.
Clause 5, Leadership. Home of the leadership, quality culture and accountability theme. Clause 5 is where top management's own obligations sit. Expect the evidence wanted here to be what leaders demonstrably did, not what the policy says they will do.
Clause 6, Planning — and within it the 6.1 requirements on risks and opportunities. The clarity-around-risks-and-opportunities theme lands here. If your risk register was built to satisfy the 2015 wording rather than to be useful, a clearer text is what exposes the difference.
Clause 4, Context of the organization. Two reasons to look: it holds the climate-change wording added to the harmonised structure, at 4.1 and 4.2, covered below; and context is the clause most often written once and never revisited.
Clauses 7 to 10 — Support, Operation, Performance evaluation, Improvement. No theme named at them specifically, which suggests changes of expression rather than substance, plus whatever the closer alignment with other standards brought. Read them second.
Annex A, across all of the above. An annex on key terms and the intent of requirements does not belong to a clause; it changes how you read every one of them.
That is as far as honest reasoning gets you from the public record. The remaining distance — which requirement, which sentence, which of your documents — is closed by a gap analysis against the actual text and nothing else.
What a transition project actually involves
Five pieces of work and one phone call. The pieces are the same for a fifteen-person business and a fifteen-hundred-person one; only the volume differs.
- Get the text. Somebody needs a licensed copy of ISO 9001:2026. Everything below depends on it, and no summary substitutes.
- Gap analysis against the new text. Clause by clause, against what your organisation actually does rather than what the manual says. Record each gap and its owner.
- Update your documented information. Only the documents the gaps touch — each with a new version, an approval, and evidence that the affected people acknowledged it.
- Re-run an internal audit against the revised requirements. Your checklists were written against the 2015 text. Revise them, audit against them, and treat what comes back as findings with owners and closure dates.
- Train and brief. The detail for whoever maintains the system; for everyone else, the parts that changed how they work, and a record that they were told.
- Book the audit route. A scheduled surveillance audit, a recertification audit, or a separate transition audit — Global ACI's requirements allow all three.
The phone call to make first
Before any of the work, call your certification body, because their answers change your plan. Ask when they expect to be able to audit against ISO 9001:2026, since that depends on their accreditation transition rather than on your readiness. Ask which route they recommend given where you sit in your cycle, how much extra audit time it adds, and what it costs. Some bodies also want the gap analysis in advance. And ask for a date in writing rather than a promise to be in touch.
Global ACI's requirements state that the transition audit "may take place during a scheduled surveillance or recertification audit, or through a separate transition audit". A recertification audit falling inside the window is usually the cheapest route, since it already covers the whole system; a separate transition audit costs more and buys control of the timing.
Where the time actually goes
Not in reading the standard — that is a day or two for someone who knows the system, and Annex A should make it less. The time goes into the two steps in the middle: changing documents properly, and running an internal audit that produces real findings instead of a clean sheet. Both involve other people, so both punish being compressed.
One thing worth designing in from the start is the word "when". A transition audit is partly a question about sequence: did the documents change before the work did, did the people who follow a procedure see the new version, was the internal audit against the revised requirements or the old ones. Approval dates, version history and acknowledgement records answer that; a folder of current documents does not.
A note on integrated systems. ISO 14001:2026 has its own transition on an earlier timetable, and ISO 45001 is listed on iso.org as a standard to be revised — expected to be replaced within the coming months, with no date given. If you run an integrated quality, environment and safety system, plan this transition knowing two more are coming, and build the audit checklists so the next revision is an edit rather than a rewrite.
The climate-change wording
One change often attributed to the 2026 edition is older than it, and separating the two saves confusion. In February 2024 the harmonised structure was amended to add climate change in two places. At clause 4.1: "The organization shall determine whether climate change is a relevant issue". At clause 4.2, a note: "Relevant interested parties can have requirements related to climate change."
That wording is now part of the baseline harmonised structure text, so it is carried inside the 2026 edition rather than sitting alongside it as a separate amendment. If your 2015-based system already took the 2024 amendment on board — and it should have, since the amendment applied to the 2015 edition too — there is nothing new here for you.
What the wording asks for is narrower than it sounds. The requirement is to determine whether climate change is a relevant issue, and a determination can reasonably conclude that it is not, for your organisation, in your context — provided you can show the question was considered rather than skipped. The note at 4.2 pushes the same question outwards: do your customers, regulators and insurers have requirements related to climate change? For a growing number of organisations some do.
Neither addition requires an emissions programme or a target. Both require a record that the question was asked, when, and what was concluded — which belongs in your context analysis and your management review minutes, where an auditor will look for it.
Where we come in
Teammate App is our own product, so read this section as what it is. It does not do your gap analysis, it cannot tell you what the 2026 text says, and we are not a certification body — no software company is. What a system like ours does is hold the evidence a transition audit samples, in a form where the auditor can see not just the current state but when it changed and who acknowledged it.
Four things in particular, out of the fifteen modules in the platform:
- Controlled documents with approval and version history, plus acknowledgement by person. The revised procedure, who approved it, when it replaced the old one, and which named people confirmed they read it — document management.
- An internal audit programme whose findings raise corrective actions tracked to closure. The audit against the revised requirements, what it found, and the evidence each finding was closed — audits and inspections.
- Training and competency records, with expiry dates. Who was briefed on what changed and when, and which competencies lapse before the audit.
- Reporting and export by site and date range. So preparing an audit pack is a filter and an export rather than three weeks of collecting.
The reason those four matter for a transition is the sequencing point above: a system that records a change as an event, with a date, an approver and an acknowledgement, answers what changed and when in a way a shared drive of current files cannot. For how the platform maps to the standard overall, our ISO 9001 page goes clause area by clause area.
The honest limit is the one at the top of this section. Software makes the evidence easy to produce and hard to lose. The reading, the judgement about what your gaps are, and the decision about how to close them stay with you.
Questions we get asked
Does my certificate become invalid on 1 October 2029?
The requirement is that organisations already certified to ISO 9001:2015 complete their transition by 30 September 2029. What happens to a certificate that has not transitioned by then is administered by your certification body, not by ISO and not by Global ACI, so ask them in writing rather than relying on a guide. Two practical points. 'Complete' means the transition audit has been carried out and its findings closed out, not that it has been booked — an audit with open nonconformities is not a completed transition. And work backwards from the date rather than towards it: the audit needs a slot, findings need time to close, and the certificate needs reissuing. Organisations treating September 2029 as the month to act in will be competing for auditor time with a share of the million-plus certificates in scope.
Can I transition at my normal surveillance audit, or does it need a separate one?
Either works. Global ACI's transition requirements say the transition audit 'may take place during a scheduled surveillance or recertification audit, or through a separate transition audit'. Which suits you is a calendar question. If your recertification falls inside the transition window, that is the natural slot, because a recertification audit already covers the whole system. If it does not, a surveillance audit can carry the transition, though surveillance visits are shorter and your certification body may need extra audit time for the revised requirements. A separate transition audit is cleanest when you want the 2026 certificate on a date of your choosing rather than on the cycle's. Ask your certification body which route they recommend for your cycle, how much audit time it adds, and what it costs.
Do I have to buy the new standard?
In practice, yes — somebody needs the text. A gap analysis compares what the standard now says with what you actually do, and you cannot make that comparison from a summary. ISO standards are sold rather than published free: the current edition is listed on ISO's catalogue entry for ISO 9001, and copies come from ISO or from your national standards body. There is no authoritative free alternative, and no summary written by anyone else — including this page — is a substitute an auditor will accept as the basis of your gap analysis. One copy for whoever does the analysis is enough to start, but check the licence terms before circulating it internally, because single-user licences are the norm.
We are certifying for the first time. Which edition should we go for?
The 2026 edition, and the date that decides it for you is 31 March 2028. From then, new and initial accredited certifications may only be issued to ISO 9001:2026. Before that date it is technically possible to be certified to the 2015 edition, but a 2015 certificate issued in 2027 has to be transitioned again before 30 September 2029 — paying twice for one outcome and running two projects instead of one. If you are building a quality management system now, build it to the current edition, and ask any certification body you are quoting which edition they will certify you to, and from when. Their answer depends on their own accreditation transition.
Do we have to redo all our documentation?
Almost certainly not all of it. Global ACI describes the 2026 revision as building on the established ISO 9001 framework with updates intended to improve clarity and usability, which is not the description of a documentation rebuild. The honest answer to which documents need changing is that we cannot tell you without the text of the standard, and neither can anyone else who has not read it. What we can describe is the shape of the job: find where the revised requirements differ from the ones your documents were written against, change those documents, and record the change properly — new version, approval, and re-acknowledgement by the people it affects. Renumbering every document to mirror clause numbers buys you nothing.
Who set this deadline, and why is it not ISO?
ISO writes standards. It does not certify organisations or accredit certification bodies, so it has no mechanism for setting a transition deadline; those come from the accreditation community. The body is Global Accreditation Cooperation Incorporated — Global ACI — formed from the merger of the International Accreditation Forum and ILAC. IAF ceased operating on 1 January 2026, so any guidance citing current IAF transition requirements is citing a body that no longer exists, and iaf.nu is an archive. The document setting the ISO 9001:2026 dates is Global ACI-TECH-3-TR 2029-09-30 (M), published on 16 September 2026, and it is mandatory for Global ACI MRA accreditation-body signatories and the certification bodies they accredit. That chain is why your certification body's answer, rather than ISO's, governs your dates.
Written by the Teammate App team. This is general guidance on the transition from ISO 9001:2015 to ISO 9001:2026 and is not legal advice. The publication date, edition number and status of ISO 9001:2026, and the status of the other standards mentioned, are taken from ISO's catalogue entries at iso.org. Every transition date, the document reference Global ACI-TECH-3-TR 2029-09-30 (M), the audit-route wording and every quoted description of what changed are taken from Global ACI's published transition requirements and its announcement of them at global-aci.org. Both sources were read in September 2026. Transition arrangements are set by the accreditation community and administered by your own certification body, so confirm your dates and your audit route with them rather than with this page. The clause-area mapping above is our reasoning from those public sources, not a reading of the ISO 9001:2026 text, which is sold by ISO and its national member bodies. Teammate App has no affiliation with ISO or Global ACI and nothing here is endorsed by either. Teammate App is our own product and is identified as such above.