ISO 14019-1 was published in February 2026. It sets the principles for validating and verifying declared sustainability information, and it arrives just as assurance of sustainability reports becomes a regulatory requirement in Europe. One thing makes it unusual, and it is almost always misunderstood: it does not address the company publishing the report.
Who the standard actually addresses
The «shall» requirements of ISO 14019-1 target the body that validates or verifies, operating under ISO/IEC 17029. Clauses 4 and 5 set principles and definitions; the concrete obligations sit in clauses 6 and 7, and they tell the verifier how to run the engagement, not the company how to produce its report.
That does not make the standard useless to the company, quite the opposite. It describes, requirement by requirement, what a verifier will come looking for. Read backwards, it is the best readiness checklist available today.
Validation and verification are not the same thing
The distinction structures the whole series. Verification covers past or present information: it assesses whether it is truthful, against evidence. Validation covers forward-looking information: it assesses whether the assumptions, limitations and methods are plausible. It says nothing about the accuracy of the predicted result, and the standard states this explicitly.
A single engagement may combine both: that is a mixed engagement. In that case the elements belonging to each must be separated from the evidence-gathering plan through to the conclusion. A sustainability report holding both historical data and decarbonisation pathways almost always falls into this case.
The four possible conclusions
An assurance opinion concludes in one of four ways, and it is better to know them before committing: unmodified when no material misstatement is found; qualified when there are misstatements but none material; adverse when a material misstatement is found; and disclaimed when limitations prevent the planned work. On top of that sits the level of assurance, reasonable or limited, decided at engagement and changing the extent of the work.
The point nobody anticipates: raw data
The standard separates data from information. Data is raw; information is the result of processing that gives it meaning. Yet most published indicators are transformed information: aggregations, trend analysis, comparison against targets, visualisations.
ISO 14019-1 is clear here: transforming data does not remove the duty to account for the transformation. Access to the raw data and to the algorithms used must remain possible. This is where most organizations stumble, because the published figure often comes from a spreadsheet rebuilt each year, whose inputs nobody keeps.
Information produced by artificial intelligence
This is the least-discussed novelty. The standard covers the case where sustainability information is produced by a computer or artificial intelligence system, including prediction algorithms. It then requires confirmation that the software's functionality is correct and meets the intended purpose, and its Annex H is devoted to this.
In other words: a climate pathway produced by a model is not verified the way a meter reading is, and the burden of proof on the model falls to whoever publishes it. That is precisely the junction with ISO/IEC 42001, the AI management system standard.
Your adviser will not be able to verify you
Impartiality has its own clause, naming four threats: self-interest, self-review, over-familiarity and intimidation. Self-review is the one with immediate consequences for how a project is organised: a body cannot verify work it produced itself, which explicitly covers consultancy.
The consequence is simple and best budgeted for from the start: the firm that prepares you and the body that verifies you are two separate parties. This is not a commercial precaution, it is a requirement of the standard.
Where to start
Before choosing a body, it is more efficient to know where you stand. We have drawn from clauses 4 to 8 a grid of 31 points, turned around to the company's side: scope and boundaries of the information, traceability down to the raw data, criteria made available to users, evidence and sampling, the impartiality expected of the verifier, and deliverables.
The ISO 14019-1 verification readiness grid is freely available, in four languages, with automatic scoring per section. For a review of your own reporting, talk to our consultants.
This article is provided for information and does not constitute legal advice. The reference text prevails: see the official publication of ISO 14019-1:2026, along with ISO 14019-2 for the verification process and ISO 14019-4 for the requirements applying to bodies.