ISO Certification for Education: ISO 21001, ISO 29993, ISO 9001, and Student Data Security
ISO certification for education shows learners, parents, employers, and regulators that teaching and services are planned around learners and measured honestly. Accredify Global certifies education management systems, from ISO 21001 and ISO 29993 to ISO 9001 and ISO 27001. We audit classrooms, admissions, and learner support, not just policies. You get a tailored proposal after a free scoping review.
What ISO Certification for Education Covers
ISO certification for education is an independent audit against ISO standards. It checks how a school, university, training provider, or edtech company manages teaching, learner services, and data. Institutions usually choose ISO 21001, the standard written for educational organizations. Training companies often add ISO 29993 for learning services. A successful audit leads to a certificate valid for three years, with yearly surveillance.
ISO certification does not replace academic accreditation, which recognized accreditors grant to programs and institutions. It shows something different: that the organization behind the teaching runs on a working management system.
Accredify Global is an accredited certification body. We talk to learners and staff, sample courses and records, and check that feedback leads to real changes.
Education Standards in 2026: ISO 21001:2025, ISO 29993, and the End of ISO 29990
ISO 21001:2025 is the new edition. ISO published it in July 2025 through ISO/TC 232, its education and learning services committee. It replaced the 2018 edition and its 2024 amendment. The update puts more weight on learner outcomes, inclusion, digital and hybrid learning, and sustainability.
ISO 29993:2017 still covers learning services. It applies to training outside formal education, such as vocational, corporate, and online courses. ISO reviewed and confirmed it in 2023.
ISO 29990 is gone. ISO split it into two standards: ISO 29993 for the learning service, and ISO 21001 for the management system. Providers still holding ISO 29990 claims should move to one or both.
Sources: ISO 21001:2025 (ISO) · ISO 29993:2017 (ISO) · Goodbye ISO 29990 (ISO) · ISO 21001:2025 changes (TÜV Austria)
Which Education Providers Need ISO Certification?
Anyone delivering learning whose students, sponsors, or partners want independent proof of quality.
Private schools and school networks, including international schools.
Higher education, including professional and continuing education units.
Vocational, professional, and certification training companies.
In-house learning teams training staff and partners.
Online course providers. See ISO for IT and software.
LMS, assessment, and student data platforms selling to schools.
ISO Certification for Education: Standards and What We Provide
Pick by what you deliver and who is asking for proof.
| Standard | What it covers | Who usually needs it | What Accredify Global provides |
|---|---|---|---|
| ISO 21001 | Management systems for educational organizations | Schools, universities, and training providers | Certification |
| ISO 29993 | Learning services outside formal education | Training companies and e-learning providers | Certification |
| ISO 9001 | Quality management | Administration and support services | Certification |
| ISO/IEC 27001 | Information security | Institutions and edtech holding student data | Certification |
| ISO/IEC 27701 | Privacy information management | Anyone processing learner personal data | Certification |
| ISO 45001 | Occupational health and safety | Campuses, labs, and workshops | Certification |
| ISO 14001 | Environmental management | Campuses with sustainability goals | Certification |
| SOC 2 | Service organization controls | Edtech vendors selling to U.S. schools | Readiness (reports issued by CPA firms) |
Your proposal names the certification body that will issue each certificate. We confirm it in writing before you commit to anything. ISO 10002, ISO 26000, and ISO 31000 are guidance standards and are not certifiable.
ISO 21001 vs ISO 29993 vs ISO 9001 for Education
Three standards that education providers often confuse. Here is how they differ.
| Aspect | ISO 9001 | ISO 21001 | ISO 29993 |
|---|---|---|---|
| Type | Management system | Management system | Service standard |
| Written for | Any organization | Educational organizations | Learning services outside formal education |
| Focus | Customers and quality | Learners, staff, and other beneficiaries | The learning service itself |
| Good for | Admin and support functions | Whole institutions and training businesses | Course-level quality for training providers |
| Current edition | 2026 | 2025 | 2017 |
A practical rule of thumb helps. A university or school group usually starts with ISO 21001, because it covers the whole institution. It also speaks the language of learners and staff, which makes it easier to roll out across departments. A short-course training company often starts with ISO 29993, because buyers judge it course by course. Larger training businesses frequently hold both, with ISO 27001 added once corporate clients start asking how learner data is protected.
What an Education Audit Checks
We follow a learner's journey from enquiry and admission through teaching, assessment, and support.
Areas we test
- Admissions, information to learners, and fair access
- Curriculum design, review, and approval
- Teaching staff competence and development
- Assessment, grading, and appeals
- Support for learners with special needs
- Learner and staff feedback, and how it is used
- Protection of student records and systems
Common gaps we find
- Surveys collected but results never shared or acted on
- Course reviews done only when a problem appears
- Teacher competence records out of date
- Appeals and complaints handled with no record
- Student data shared with vendors without checks
How ISO Certification for Education Works
Six stages from first call to a three-year certificate. Our ISO certification process guide has more detail.
Timing around the academic year matters. Tell us your term dates and we will plan audits that avoid exams and holidays.
Book a free scoping reviewWhat Drives the Cost of ISO Certification for Education
There is no list price. The cost follows the audit man-days your scope needs, and a free scoping review gives you a tailored proposal.
What sets the audit time
- People: teaching and support staff in scope
- Campuses: sites and online delivery centers
- Programs: range of courses and levels
- Delivery: face-to-face, online, or blended
- Standards: one standard, or an integrated audit
Ways to keep it efficient
- Use one certificate across all campuses
- Combine ISO 21001 and ISO 27001 in one audit
- Reuse accreditation self-assessments as evidence
- Run internal audits before Stage 1
- Schedule audits outside exam periods
How to Choose a Certification Body for Education
Checks worth making before you sign.
| What to check | Why it matters |
|---|---|
| Accreditation for each standard | Ask which accreditation covers each certificate. You can verify ours in the UAF directory. |
| Current edition | New certificates should be to ISO 21001:2025, not the withdrawn 2018 edition. |
| No ISO 29990 offers | That standard was replaced. Be wary of anyone still selling it. |
| Impartiality | Your certification body should not also write your system. |
| Verifiable certificates | Learners and partners should be able to check yours. Ours appear on our verification page. |
| Pricing | Ask for audit man-days in writing. Ours come in a tailored proposal. |
FAQ: ISO Certification for Education
Straight answers on ISO 21001, ISO 29993, student data, cost, and timeline.
Which ISO certification is best for schools and universities?
ISO 21001 is the management system standard written for educational organizations. Many institutions also hold ISO 9001 for administration and ISO 27001 to protect student data.
What is ISO 21001?
ISO 21001 sets requirements for an educational organization's management system. It focuses on learners, staff and other beneficiaries, and on aligning teaching and services with the institution's mission. The current edition is ISO 21001:2025.
What changed in ISO 21001:2025?
The second edition, published in July 2025, replaced the 2018 edition and its 2024 amendment. It puts more weight on learner outcomes, inclusion and accessibility, digital and hybrid delivery, and sustainability.
What happens to ISO 21001:2018 certificates?
They move to the 2025 edition through a transition. We confirm the timeline that applies to your certificate and plan the move into your next audit.
What is ISO 29993?
ISO 29993:2017 sets service requirements for learning services outside formal education, such as vocational training, corporate training and e-learning. ISO confirmed it in 2023.
What replaced ISO 29990?
ISO 29990 was replaced by two standards. ISO 29993 covers learning services, and ISO 21001 covers management systems for educational organizations. Providers can use either or both.
Can a training company get ISO 21001?
Yes. ISO 21001 applies to any organization that delivers education or training, including training companies, e-learning providers and corporate academies. Many training providers also use ISO 29993.
Is ISO certification the same as academic accreditation?
No. Academic accreditation is granted by recognized accreditors and covers programs and institutions. ISO certification audits the management system against an ISO standard. They complement each other.
Which ISO standard protects student data?
ISO/IEC 27001 covers information security, and ISO/IEC 27701 adds privacy management. They support compliance with laws such as FERPA in the U.S. and GDPR in Europe.
Do edtech companies need ISO 27001 or SOC 2?
Often both. School districts and universities ask vendors for security proof. ISO 27001 is recognized worldwide, while many U.S. buyers ask for a SOC 2 report.
Are ISO 10002 or ISO 26000 certifiable for schools?
No. ISO 10002 on complaints and ISO 26000 on social responsibility are guidance standards. They are useful references but cannot be certified.
Can one certificate cover several campuses?
Yes. Campuses that run the same management system can share one multi-site certificate. The certification body audits a sample of sites and the central function every time.
How long does ISO certification take for an education provider?
Most institutions with a working management system certify in 6 to 12 weeks from Stage 1 to the certificate. Several campuses or a new system take longer.
How much does ISO certification cost for schools?
The cost follows the audit man-days your scope needs. Staff numbers, campuses, programs and the standards in scope set the man-days. A free scoping review gives you a tailored proposal.
Does Accredify Global help write our policies?
No. As a certification body we must stay impartial, so we audit and certify but do not write your system. Your team, or a consultant you choose, closes any gaps.
Show Learners Your Quality Is Real
Tell us about your programs, campuses, and deadlines. We'll map the right ISO certification for education and send a tailored proposal.
Book your free scoping review →Last reviewed by the Accredify Global certification team.