The ISO Survey 2025 adds AI and compliance management certification coverage. Here is how to interpret its scope, counts and December 2025 snapshot date.
Source published: 2026-10-12
Audience / jurisdiction: International; management-system practitioners, auditors and organizations using accredited-certification statistics.
AI and compliance certification enter the survey
The ISO Survey 2025 includes ISO/IEC 42001 and ISO 37301 for the first time, according to an October 12, 2026 announcement from Global Accreditation Cooperation Incorporated (Global ACI). The additions extend the survey’s coverage into artificial intelligence and compliance management system certification, giving practitioners two further categories to consider when reviewing the international certification landscape.
The announcement reports more than 3.28 million valid certificates and 5.25 million associated sites across the standards included in the survey. These are figures for the survey’s defined accredited-certification population, rather than a count of every organization using management-system standards. For managers and auditors, the useful news is the expanded coverage—not evidence, on its own, that certification has become more widespread or that management systems are performing better.
Sources: [1]
Read the figures against the snapshot date
The most important date for interpreting the results is December 31, 2025. Global ACI says the figures describe valid accredited certificates and associated sites at that point. Although the announcement was published in October 2026, the figures should not be presented as an October 2026 picture of certification.
That distinction matters when preparing a management-review presentation, market assessment or certification proposal. A useful label would be “ISO Survey 2025: certification snapshot at December 31, 2025, as reported by Global ACI in October 2026.” Keeping the snapshot and publication dates together helps prevent readers from mistaking newly published information for a measurement taken this month. The announcement is statistical news, not a new compliance deadline.
Sources: [1]
Keep the population and counting units visible
Global ACI describes the survey population as certificates issued by certification bodies accredited by its mutual recognition arrangement signatories. That boundary should remain visible whenever the totals are quoted. The announcement does not establish a count of all organizations implementing the relevant standards, including those that have not sought certification.
Certificates and associated sites are also separate measures in the announcement. For ISO 9001, Global ACI reports 1,611,729 certificates and 2,419,972 associated sites. These two figures should be retained under their respective labels rather than combined or treated as interchangeable counts of organizations.
For a briefing, a practical approach is to place the certificate count and site count in separate columns, with the snapshot date and source alongside them. This preserves the distinctions in the published announcement without adding assumptions about how many individual businesses the totals represent.
Sources: [1]
New coverage is not a growth or effectiveness finding
First-time inclusion creates a new reporting reference point for ISO/IEC 42001 and ISO 37301. It does not, by itself, show how quickly certification under either standard has grown. A claim about growth would need a suitable comparison, rather than simply the appearance of a category in this edition.
The same restraint applies to conclusions about effectiveness. The announcement reports certification counts; it does not provide evidence here about the quality of individual organizations’ AI governance, compliance controls or audit outcomes. Practitioners should therefore avoid turning the survey totals into performance rankings or assurances about a particular certificate holder.
For audit planning, the figures are best treated as background context. A suggested use is to identify questions for further investigation, while keeping judgments about an organization’s controls separate from aggregate certification statistics.
Sources: [1]
Use the announcement as a starting point
Teams using the announcement can take three straightforward editorial precautions: name Global ACI as the source, retain the December 31, 2025 snapshot date, and describe the figures as accredited certificates and associated sites within the stated survey population. These are suggested reporting practices, not mandatory requirements.
Before using the results for a detailed country, sector or trend comparison, check the relevant underlying tables and methodology. Those materials have not been independently examined for this article. The supported conclusion is narrower but useful: the 2025 survey now includes AI and compliance management system certification, expanding the subjects covered by this international certification snapshot.
Sources: [1]
Sources
Your experience
When your team uses certification statistics, do you make the snapshot date and the distinction between certificates and sites clear?
Originally published by AdviseISO, a knowledge-sharing initiative of W3 Solutionz.
