ISO 9001:2026: what changed for document control
Updated , 8 minute read. By Obel AI & Quality.
In short
ISO 9001:2026, published 16 September 2026, keeps the same clause 4–10 structure and keeps clause 7.5 for documented information, now worded as "available as documented information." It adds quality culture, integrates climate change, and splits risks and opportunities in clause 6.1. Your 2015 certificate stays valid for about three years, until around the end of September 2029.
What changed in ISO 9001:2026?
ISO published the sixth edition of ISO 9001 on 16 September 2026, after a Final Draft International Standard approved with strong international support in August 2026. Every review of it, from certification bodies to independent consultants, describes it the same way: an evolutionary, measured revision rather than a rebuild. The Harmonized Structure is untouched. Clause 4 is still context of the organisation, clause 8 is still operation, and the certification logic behind an ISO 9001 audit has not changed.
What has changed is language, emphasis and a handful of clauses. The two verbs "maintain" and "retain" that governed documented information are unified into a single phrase. Quality culture and ethical behaviour become explicit leadership and awareness requirements. The 2024 climate-change amendment is folded into the core text instead of standing apart from it. Clause 6.1 separates risk from opportunity. Clause 10 is restructured from three subclauses to two. None of this asks a small company to tear up its quality management system and start again. See the checklist below for what needs doing.
What is the ISO 9001:2026 transition period?
The transition period is three years from publication. ISO 9001:2015 certificates stay valid, and can continue to be audited and issued against, for about three years from the 16 September 2026 publication date, so by the end of September 2029, organisations are expected to have moved across to the 2026 edition. That figure is consistent across the standard’s own committee page and independent certification bodies, so treat it as the planning date to work back from.
Certification bodies themselves have to complete their own accreditation to audit against the 2026 edition before they can offer it to clients, which takes them time after publication. In practice that means most organisations will not be asked to move immediately: your existing surveillance and recertification cycle against ISO 9001:2015 continues to run, and your certification body will tell you when the 2026 edition becomes an option, and eventually the only option, for your audits.
Do I need to recertify to ISO 9001:2026?
Not immediately, and not on your own timetable. Your current ISO 9001:2015 certificate remains valid through the transition window described above, so there is no need to book a special recertification audit the moment the 2026 edition is published. The practical first step is to ask your certification body when they expect to be ready to audit against the new edition, and where that falls relative to your next scheduled audit.
What is worth doing now, well ahead of any deadline, is the gap assessment in the checklist further down this guide. Most of what changed is wording rather than new work, so a small company’s transition is usually a documentation and awareness exercise.
What changed for document control under clause 7.5?
Document control keeps its clause number and its three-part structure: 7.5.1 general, 7.5.2 creating and updating, 7.5.3 control of documented information. Nothing about that numbering or structure moves in ISO 9001:2026, and the substance of what you have to do is reported as largely unchanged from the 2015 edition. See our guide to ISO 9001 document control for the full clause 7.5 breakdown, which still applies.
The change that does run through 7.5, and through the rest of the standard with it, is terminology. ISO 9001:2015 asked you to maintain documents (keep them current as your process changes) and retain records (keep evidence of what happened, unchanged). ISO 9001:2026 replaces both verbs with one phrase: information must be "available as documented information", or "available as evidence of" a given activity. It is described as a clarity change.
In practice, that means two things for a small company. First, your document and record controls, such as version history, approvals, retention and protecting documents from unauthorised change, do not need to change, because the underlying requirement has not moved. Second, if your own document control procedure quotes the standard’s old "maintain" and "retain" wording directly, update that wording so it matches the current edition. Our document control procedure example shows what a procedure covering this looks like end to end.
What other changes matter for a small company?
Beyond document control, a handful of other changes are corroborated across multiple independent reviews of the standard. Each is a real change in emphasis, and each has a modest, practical response for a 20 to 200 person company rather than a large project.
| Change | What it means | What to do |
|---|---|---|
| Quality culture and ethical behaviour | Leadership commitment (5.1.1) and awareness (7.3) now name quality culture and ethical behaviour explicitly, rather than leaving them implied. | Add a line on quality culture to your induction and toolbox talks, and to leadership’s own commitments. |
| Climate change integrated | The 2024 climate-change amendment to clauses 4.1 and 4.2 is now built into the core text, so you must decide whether climate change is a relevant issue for your organisation and interested parties. | Add a short climate-change line to your context-of-the-organisation review, even if the answer is "not currently material." |
| Risks and opportunities split in 6.1 | Clause 6.1 separates the determination and evaluation of risks from the determination and evaluation of opportunities, instead of treating them as one combined exercise. | Split your risk register into two columns, or two short sections, so opportunities get their own space instead of trailing after risks. |
| Continual improvement merged into 10.1 | Clause 10 moves from three subclauses to two: continual improvement, previously 10.3, is now folded into 10.1. Nonconformity and corrective action (10.2) is reported as substantively unchanged. | Update the clause references in your procedures. The corrective action process itself does not need to change. |
| New management review input | Management review (9.3.2) gains an explicit input covering changes in the needs and expectations of interested parties. | Add a standing agenda item to management review that asks what has changed for customers, regulators and other interested parties. |
ISO 9001:2026 transition checklist
None of these steps need to happen before your next audit. They are worth starting now so the transition is a series of small updates rather than a scramble in 2029.
| Step | What it involves |
|---|---|
| Gap assessment | Compare your current documented information and procedures against the 2026 clause wording, and list what needs to change versus what is only a terminology update. |
| Update documented-information wording | Replace "maintain" and "retain" in your own procedures with the standard’s new "available as documented information" phrasing, where you have copied the old wording directly. |
| Awareness and quality culture | Brief your team that quality culture and ethical behaviour are now an explicit expectation, and record that the briefing happened. |
| Management review agenda | Add interested parties’ changing needs and expectations, and climate change where relevant, as standing agenda items. |
| Talk to your certification body | Ask when they expect to be accredited to audit against the 2026 edition, and when your own recertification or surveillance audit is likely to move to it. |
What are the seven quality management principles behind ISO 9001?
ISO’s companion brochure to the ISO 9000 family, "Quality management principles: your foundation for success," sets out seven principles that underpin ISO 9001 in both the 2015 and 2026 editions. They predate ISO 9001:2026, and give useful context for why clauses like leadership, improvement and evidence-based decision-making exist in the standard at all.
- Customer focus. Understand what customers and other interested parties value, and let that shape decisions.
- Leadership. Leaders set a clear purpose and align people around shared objectives.
- Engagement of people. People at every level are competent, resourced and supported to contribute.
- Process approach. Activities are managed as connected processes.
- Improvement. Improvement is an ongoing habit.
- Evidence-based decision-making. Decisions are informed by reliable data and feedback.
- Relationship management. Long-term success depends on strong relationships with suppliers, partners and other interested parties.
How does Obel-MS help with ISO 9001:2026 document control?
External Document Control is built around clause 7.5 of ISO 9001, in both the 2015 and 2026 editions, since the underlying document control requirement is unchanged in substance. Every supplier certificate you upload is auto-filed by supplier, manufacturer and product, its status is worked out automatically as Active, Expiring soon, Expired or No expiry set, and every upload, approval and new version is recorded in a full audit trail you can hand an auditor directly.
For the corrective action side of a quality management system, Workflow Manager gives you a standard Nonconformance template with built-in effectiveness verification, so a nonconformance is logged, closed out and checked, with every stage of that process recorded in the same audit trail. Internal Document Control, for the SOPs and policies you write yourself, is coming soon. See the ISO 9001 clause map for how the rest of clause 7.5 lines up against what Obel-MS supports today.
Frequently asked questions
What changed in ISO 9001:2026?
ISO 9001:2026 is the sixth edition of the standard, published 16 September 2026. It keeps the same clauses 4 to 10 and the same certification logic, but unifies "maintain" and "retain" into a single "available as documented information" wording, makes quality culture and ethical behaviour explicit, integrates the 2024 climate-change amendment, splits risks and opportunities in clause 6.1, and adds a management review input on interested parties’ changing needs.
What is the ISO 9001:2026 transition period?
The transition period is three years from publication. ISO 9001:2015 certificates stay valid for audits and certification for about three years after the 16 September 2026 publication date, so by the end of September 2029 organisations are expected to have moved to the 2026 edition.
Do I need to recertify to ISO 9001:2026 right now?
No. Your existing ISO 9001:2015 certificate remains valid through the transition window. Your certification body needs its own accreditation to the 2026 edition before it can audit against it, so ask them when they expect to be ready and when your next surveillance or recertification audit is likely to move over.
What changed for document control in ISO 9001:2026?
Document control keeps its clause number, 7.5, and its three-part structure. The main change is wording: the separate verbs "maintain documented information" and "retain documented information" are unified into "available as documented information" throughout the standard. This is described as a clarity change, so your document and record controls do not need to be rebuilt.
Is ISO 9001:2026 a completely new standard?
No. Every source that has reviewed it describes it as an evolutionary, measured revision. The Harmonized Structure, the process approach and the core requirements are retained. The changes are targeted refinements to language, emphasis and a handful of clauses, rather than a wholesale restructuring like the 2000 or 2008 revisions.
Does software need to be ISO 9001:2026 certified?
No. Certification applies to an organisation’s quality management system. A document control or workflow tool can be built around the requirements of clause 7.5, in both the 2015 and 2026 editions, but it is your organisation that holds the certificate.
Sources
- ISO 9001:2026 (Quality management systems, Requirements) (ISO)
- ISO/TC 176/SC 2, committee news on the FDIS approval and publication
- Quality management principles: your foundation for success (ISO, PUB100080)
- BSI, ISO 9001:2026 key changes and guidance
- DNV, ISO 9001 revision and transition
- LRQA, ISO 9001:2026 FDIS update