EMAS
Regulation (EC) 1221/2009. It includes the ISO 14001 requirements and adds a public environmental statement validated by an accredited verifier.
ISO 14001:2026 · Environmental management system
Your ISO 14001, with every risk and non-conformity tied to its action
An ISO 14001 project in Dcycle with the register of risks and opportunities, the non-conformities, the objectives and the actions. You rate each risk by probability and impact, record the root cause of each non-conformity and see which actions fall due this week.
- Risks scored by probability and impact
- Residual risk after mitigation
- Non-conformities with root cause
- Overdue actions in plain sight
GDPR compliant. Your data stays in Europe.
2,000+ companies already run their sustainability data on Dcycle
What they ask for
Who reviews your environmental management system and where it gets stuck
An ISO 14001 EMS is audited every year. What usually fails is not the environmental policy but the follow-up: which risk has which action, who owns it and whether it was closed.
Certification auditor How you determine risks and opportunities (clause 6.1) and what you do about each one. The matrix lives in a spreadsheet last updated a year ago, linked to no action. Each risk carries its inherent and residual score, its ISO clause, its owner and the linked objectives and actions.
EMS manager The legal requirements of each facility identified (6.1.3) and their compliance evaluated (9.1.2). A list of laws inherited from a consultant, with no word on which site each one applies to or whether it is met. Dcycle proposes the laws that may affect each facility with the reason; you confirm them, create their actions and set the compliance status per site.
Internal audit A root cause, a corrective action and a verified close-out for every finding (clause 10.2). Findings stay in the audit report PDF and nobody tracks their status. Each non-conformity moves through open, analysis, in treatment, verification and closed, with its root cause, evidence and actions.
Top management For the management review (9.3): pending actions, open non-conformities and high risks. Someone merges three spreadsheets the night before the meeting. The project dashboard counts risks, opportunities, non-conformities, actions and overdue actions, next to the probability and impact matrix.
Site managers To know which action is theirs and when it is due. Actions arrive by email and nobody sees which ones are past their date. The follow-up tray groups overdue actions and those due in 7 days, with their owner and deadline.
Environment team Energy, water and fuel use at every facility to measure performance (9.1). Invoices typed in by hand and months with no data at some sites. Leia reads the invoices, and the Control tab of the footprint project shows which month is missing at each facility.
Show me with my data30 minutes with a specialist, no commitment
Product
From the risk you spot to the action you close
Legal requirements
The legislation that applies to each facility, proposed with the reason why
Clause 6.1.3 asks you to determine your compliance obligations and 9.1.2 to evaluate whether you meet them. You describe what your facilities do and Dcycle checks it against a regulatory catalogue to propose the laws that may affect you, with the reason for each one. You confirm or discard them, open the official text, turn the obligations into actions in the project plan and set the compliance status of each facility: pending, in progress, compliant or non-compliant, with the overall rate at a glance. These are AI-assisted suggestions that you validate: they do not replace legal advice.
- A reason for every law: territory, activity or semantic relevance
- Link to the official text and actions in the ISO 14001 plan
- Compliance status per facility (9.1.2)
Risks and opportunities
A risk register that works out the score for you
You add the risk with its source, ISO clause, facility and owner, and rate it from 1 to 5 for probability and impact. Dcycle calculates the score (probability × impact) and the level: low up to 4, medium up to 9, high up to 16 and critical above. The mitigation coefficients give you the residual risk.
- Risks and opportunities in separate tabs, coded R- and O-
- Inherent and residual risk on the same row
- Objectives and actions linked to each risk
Non-conformities
Every non-conformity with its root cause and action plan
You log non-conformities, incidents and observations with their severity (minor, major or critical), detection date, source and ISO clause. In the record you write the root cause, attach the evidence, add an immediate action and link objectives and actions, which inherit the code: NC-004-A01.
- NC-, INC- and OBS- codes by type
- Status editable straight from the table
- Owner and facility on every record
Environmental performance
The data you measure for clause 9.1, by facility and by month
ISO 14001 requires monitoring and measurement of environmental performance. In the footprint project, the Control tab shows how many consumption data points are processed or awaiting review and which facility has not uploaded a month. Before the audit you run a data pre-audit and download the report.
- Monthly coverage by facility and by group company
- Data to review, one click from fixing it
- Data pre-audit with a downloadable report
Dashboard
The state of the system, ready for the management review
The ISO 14001 project dashboard counts risks, opportunities, non-conformities, actions and overdue actions. Below sit the follow-up tray, the probability by impact matrix with every risk in its cell, in inherent or residual view, and the non-conformities by severity, status and type.
- Follow-up: overdue and due in 7 days
- 5 × 5 matrix, inherent or residual
- Non-conformities by severity, status and type
Request a demo30 minutes with a specialist, no commitment
What ISO 14001 is
What ISO 14001:2026 is and what changes from 2015
ISO 14001 is the international standard that sets the requirements for a certifiable environmental management system (EMS). The 2026 edition was published on 15 April 2026 and replaces the 2015 one.
All ISO 14001 guides- 15 Apr 2026
ISO 14001:2026 published
It keeps the 10-clause structure shared by ISO management system standards (ISO 9001, ISO 45001, ISO 50001).
- 670,000+
Certified organisations
Worldwide, according to the ISO Survey. It is the most widely adopted environmental management standard.
- 3 years
Expected transition
The IAF sets the exact period. In past revisions it was about three years, after which 2015 certificates stop being valid.
ISO 14001:2015 vs ISO 14001:2026
| Clause | ISO 14001:2015 | ISO 14001:2026 |
|---|---|---|
| 4. Context | Internal and external issues | Climate change, biodiversity and resources, explicitly |
| 5. Leadership | Top management commitment | Demonstrable integration into strategy and risk management |
| 6. Planning | Life cycle perspective | Life cycle applied to significant aspects across the value chain |
| 7. Support | Documents and records | Digital tools and traceability within documented information |
| 8. Operation | Operational control | More weight on control of external processes and suppliers |
| 9. Performance evaluation | Monitoring and measurement | Indicators backed by traceable data |
| 10. Improvement | Non-conformity and corrective action | No substantive change |
I want to know more30 minutes with a specialist, no commitment
Requirements
ISO 14001 requirements, clause by clause
Clauses 4 to 10 are the auditable ones. This is what the auditor will ask for in each.
| Clause | What it requires |
|---|---|
| 4. Context of the organisation | Internal and external issues, interested parties and their requirements, and the EMS scope by facility and activity. |
| 5. Leadership | An approved environmental policy, assigned roles and responsibilities and management commitment of resources. |
| 6. Planning | Significant environmental aspects, compliance obligations, risks and opportunities, and measurable objectives with a plan to reach them. |
| 7. Support | Resources, competence and training, awareness, internal and external communication and documented information. |
| 8. Operation | Operational control with a life cycle perspective, outsourced processes and emergency response: spills, leaks or fires. |
| 9. Performance evaluation | Monitoring and measurement of indicators, evaluation of legal compliance, internal audit and management review. |
| 10. Improvement | Every non-conformity with its correction, cause analysis and corrective action, and continual improvement of environmental performance. |
I want to know more30 minutes with a specialist, no commitment
Certification
How to get ISO 14001 certified
An accredited certification body issues the certificate (in the UK, accredited by UKAS). It lasts three years, with yearly surveillance audits.
- 1Gap analysisYou compare current practice with each clause of ISO 14001:2026 and note what is missing, who fixes it and by when.
- 2Design and implement the EMSScope, policy, aspects register, legal requirements, risks and opportunities, objectives and operational controls.
- 3Training and awarenessTraining for process owners and for staff whose work has an environmental impact, with records.
- 4Internal audit and management reviewAt least one full cycle before certification. Findings are handled as non-conformities with a corrective action.
- 5Certification auditStage 1: documentation review. Stage 2: on-site check that the system works.
- 6Surveillance and renewalA surveillance audit every year and recertification in the third.
I want to know more30 minutes with a specialist, no commitment
Other frameworks
ISO 14001, EMAS, ISO 14064 and CSRD
ISO 14001 manages every environmental aspect. Other standards ask for specific parts of the same data.
ISO 14064-1
The standard for an organisation’s greenhouse gas inventory, its carbon footprint. ISO 14001 manages emissions as one environmental aspect among others.
CSRD and ESRS
The environmental standards (ESRS E1 to E5) ask for energy, emissions, water, waste and resources: the same data you measure for clause 9.1 of the EMS.
I want to know more30 minutes with a specialist, no commitment
Before and after
Your EMS in spreadsheets and email vs Dcycle
What changes in the day-to-day work of the system owner.
| Task | Spreadsheets and email | Dcycle |
|---|---|---|
| Scoring a risk | A formula copied by hand into every row | Score and level calculated when you create the risk |
| Residual risk | Another column almost nobody fills in | Mitigation coefficients for probability and impact |
| Corrective action | In the audit minutes, with no follow-up | Linked to the non-conformity, with code, owner and deadline |
| Overdue actions | Found out at the management review | Tray of overdue actions and those due in 7 days |
| Evidence | Scattered across shared folders | Attached to each non-conformity |
Show me with my data30 minutes with a specialist, no commitment
FAQ
Frequently asked questions about ISO 14001
What is ISO 14001?
It is the international standard that sets the requirements for an environmental management system. A certified organisation shows an accredited body that it identifies its environmental aspects, meets its legal requirements, sets measurable objectives and improves its environmental performance. The current edition is ISO 14001:2026.
What changes with ISO 14001:2026 compared to the 2015 version?
It keeps the 10-clause structure and strengthens several points: climate change, biodiversity and resources in the context analysis, the life cycle in significant aspects, the role of top management, control of suppliers and external processes, and traceable data to demonstrate performance. Non-conformity and corrective action do not change in substance.
When does ISO 14001:2026 come into force?
ISO published it on 15 April 2026. Organisations certified to the 2015 edition get a transition period set by the IAF; in past revisions it was about three years. At the end of that period, 2015 certificates that have not migrated stop being valid.
How long does an ISO 14001 certificate last?
Three years. The certification body runs a surveillance audit every year and a recertification audit in the third year.
How do I identify the environmental legislation that applies to me?
Start from what each facility does: the waste it generates, the packaging it places on the market, its emissions and discharges, its equipment with fluorinated gases. With that, you go through the EU, national, regional and local rules for each site and record why each law applies: that is clause 6.1.3, and 9.1.2 then asks you to evaluate compliance. In Dcycle you describe your facilities’ activity and the analysis proposes the laws that may affect you, with the reason and a link to the official text. You confirm, flag for review or discard each one and set its compliance status at each site. These are AI-assisted suggestions, not legal advice: validate them with your legal counsel.
How does Dcycle help organisations adapt to ISO 14001:2026?
The Dcycle ISO 14001 project brings together the register of risks and opportunities with inherent and residual scores, non-conformities with their root cause and evidence, objectives and actions, each with its ISO clause, owner and facility. The dashboard shows the state of the system and the overdue actions. Energy, water and emissions data come from the footprint project.
Can I use Dcycle to prepare for ISO 14001 audits?
Yes. You log internal audit findings as non-conformities or observations with their source and clause, and link the corrective actions to them. Before the external audit, the footprint project’s data pre-audit reviews consumption data and produces a downloadable report.
Does Dcycle work for organisations with multiple sites or subsidiaries?
Yes. Each risk, non-conformity and action states its facility or whether it is global, and the Control tab of the footprint project shows monthly data coverage by facility and by group company.
Does Dcycle certify ISO 14001?
No. An accredited certification body issues the certificate. Dcycle is the tool where you run the system and keep at hand what the auditor will ask for.
Demo with your data
We show you your ISO 14001 in Dcycle
30 minutes: the register of risks and opportunities, non-conformities with their action plan and the system dashboard, with examples from your sector.
- No commitment
- Data in Europe (GDPR)
- Dedicated specialist