ISO 14064

10 best solutions for ISO 14064 sustainability audit

Dcycle Team avatar Dcycle Team · · 23 min read
10 best solutions for ISO 14064 sustainability audit

Photo by Michael Pointner on Unsplash

An ISO 14064 auditor reviews the methodology, boundaries, calculations and evidence supporting a greenhouse gas statement. If a company needs third-party verification of its inventory, it should appoint a competent, independent verification body and check that its accreditation or recognition covers the intended use. A data platform and a training course serve different purposes.

The decision starts with a specific question. Does the company need to train its team, prepare its inventory or arrange external verification? For a business that already calculates emissions and needs an independent conclusion, the priorities are choosing the right verifier, defining the engagement and providing reproducible information. A course attendance certificate does not, by itself, accredit an organisation to issue that conclusion.

This guide focuses on choosing an ISO 14064 verifier and preparing technical evidence. It explains the relevant standards, how to check competence and impartiality, what to request in a quotation and how to organise the preparation. Dcycle provides the environmental data foundation for that work; the appointed verification body remains responsible for the independent assessment and its conclusion.

Need ISO 14064-ready GHG data connected to CSRD, EINF, and supplier reporting from one platform? Book a demo with the Dcycle team.

Request a demo

What an ISO 14064 auditor does and which service you need

The term “ISO 14064 auditor” is used for different professionals and services. In external verification, the subject of the assessment is a GHG statement with a defined reporting period, boundaries and criteria. The verification body evaluates whether that information is materially correct and conforms to the agreed criteria. It does not prepare all the invoices, estimates and methodological decisions that the company needs to provide for review.

A carbon footprint is the inventory being quantified and communicated; verification provides an independent assessment of the corresponding statement. Before requesting quotations, distinguish these functions:

NeedAppropriate service or roleOutcome to check
Learn to calculate or review inventoriesTraining for auditors and technical teamsSyllabus, assessment, teaching experience and scope of the training certificate
Prepare the methodology and inventoryInternal team or specialist consultancyDocumented inventory, methods, evidence and controls
Find problems before external verificationInternal review or auditFindings, assigned owners and internally checked corrections
Obtain an independent conclusionCompetent verification bodyVerification statement identifying criteria, period, boundaries and conclusion
Maintain reusable data and referencesEnvironmental data platformOrganised records, calculation references and documentation

SGS auditor training illustrates the intent of someone seeking to learn GHG accounting and verification. A company appointing a verifier needs different selection criteria: the legal entity accepting the engagement, its competence for that work and whether the intended recipient will accept the result. Staff training contributes to competence but does not replace those checks.

Which standards the verifier should understand

For a corporate inventory, the main distinction is between quantification and reporting under ISO 14064-1 and verification or validation of statements under ISO 14064-3. An emissions-reduction project uses different criteria from an organisation-wide inventory. This introduction to ISO 14064-1 helps establish that starting point.

ReferencePurposeWhat to ask the provider
ISO 14064-1:2018Quantification and reporting of an organisation’s emissions and removalsWhich boundaries, categories and criteria will apply to the inventory
ISO 14064-2:2019Quantification, monitoring and reporting of reductions or removal enhancements at project levelWhether the engagement concerns a project or a corporate inventory
ISO 14064-3:2019Verification and validation of GHG statementsHow testing, risk assessment and the conclusion will be planned
ISO/TS 14064-4:2025Guidance on applying ISO 14064-1How boundaries, indirect emissions and methodological transparency are addressed
ISO 14064-5:2026Guidance on activities and techniques conducted remotelyWhich tests can be remote and which site visits remain necessary

These references were checked against ISO’s catalogue in October 2026. Parts 4 and 5 provide additional guidance; they do not replace the functions of parts 1, 2 and 3. Descriptions that limit the current series to three documents should therefore be avoided. BSI’s ISO 14064-3 summary explains the purpose of verification and validation and the need to consider additional requirements from applicable programmes.

Verifying historical information and validating assumptions about future outcomes are also different activities. An annual emissions inventory and a project’s forecast reductions require different questions and tests. A product footprint has its own calculation boundaries; organisational verification should not be presented as automatically covering every product sold.

How to choose an ISO 14064 auditor using verifiable criteria

Define the purpose and scope of the engagement

Specify the reporting period, entities and sites, activities, direct and indirect emissions, and intended recipient of the statement. A customer review may have different conditions from registration in an official scheme or corporate disclosure. Requesting an “ISO certificate” without explaining which information it must cover is insufficient.

If the inventory uses GHG Protocol scopes, document their correspondence with the ISO classification. ISO 14064-1 distinguishes direct emissions and several categories of indirect emissions; its presentation should not be assumed to match the three scopes word for word. An assessment of Scope 3 emissions helps identify value-chain activities that need attention before the engagement is finalised.

Check accreditation and its scope

Request the verification body’s legal name, accreditation reference and scope annex. Cross-check the information in the relevant accreditation body’s directory. Examine the programme, activities, sectors and any limitations; a logo or accreditation for another service does not establish coverage for the proposed work.

In Spain, ENAC explains that verification-body competence is assessed against ISO/IEC 17029, supplemented by ISO 14065 for environmental information. The specific accreditation or recognition needed depends on the programme and intended use. For MITECO registration, check RD 214/2025 and the current instructions. An external review should not automatically be presented as verification accepted by that procedure.

Assess the assigned team’s competence

Ask who will review the inventory and what experience they have with comparable sources. A facility with process emissions or refrigerants requires different expertise from a service business with electricity consumption and travel. Request a description of relevant experience, the planned technical review and how specialist areas will be covered.

Manufacturing emissions may require material balances and process knowledge; logistics emissions may require controls over fuel, contracted transport and allocations. Assess that specific competence rather than assuming that the provider’s commercial size guarantees a suitable team.

Review independence and impartiality

Clarify which services the provider has performed on the inventory and how it identifies and addresses self-review threats. Preparing a calculation and subsequently issuing an independent conclusion on the same work can create conflicts that must be assessed under the applicable rules. Changing the person within a team is not, by itself, enough to resolve the issue.

The company should also identify who is responsible for the data and for approving corrections. A consultant can support preparation, and a platform can organise information; the verification body retains responsibility for its testing and conclusion. Record these roles in the contract and the process for responding to questions.

Agree assurance level and materiality

Define the assurance level required and how materiality will be addressed. Limited and reasonable assurance involve different depths of work; neither provides an absolute guarantee that information is error-free. Avoid comparing quotations as equivalent when these conditions differ.

Materiality guides the assessment of misstatements and verification work. It does not permit unexplained omissions of emissions sources and should not be set to obtain a favourable result. Ask how estimates and uncertainty will be evaluated and how limitations affecting use of the statement will be communicated.

Compare deliverables, conditions and fees

Request an offer identifying criteria, period, boundaries, remote or on-site work, questions, review of findings and final documents. AENOR’s organisational verification service illustrates the independent assessment that should be distinguished from inventory preparation. The offer should explain the outcome issued and its conditions of use.

Fees depend on scope, site numbers, source complexity, documentation quality and the work required. Compare verification fees separately from software, technical preparation, travel and additional work. There is no universal tariff or standard duration for every company; ask which assumptions could change the quotation.

Technical evidence to prepare before appointing a verifier

The company should be able to trace a figure from the final statement back to the activity data and its source. A folder of invoices with no connection to calculations does not meet that need. Evidence preparation helps explain which document supports a record, what adjustments were made and which version was submitted for review.

Evidence areaWhat it should containUseful preparation check
Boundaries and periodEntities, sites, consolidation approach, reporting year and exclusionsReconcile sites and corporate changes with the inventory
ActivityConsumption, purchasing, transport or other records with units and datesCheck missing months, duplicates and estimated data
Factors and conversionsSource, version, year, geography, unit and gases includedReproduce selection and avoid repeated conversions
Calculations and allocationsFormulas, assumptions, allocation between entities and consolidationRecalculate a sample from original evidence
Quality controlOwners, reviews, corrections and changes against the base yearConfirm which version is approved
Report and statementResults, methods, uncertainty and relevant limitationsReconcile the report with calculation tables

For MITECO emission factors, retain the file used and the applied reference without silently replacing historical values. For electricity, document location-based and market-based methods where relevant; dual Scope 2 reporting requires distinct results and contractual evidence.

For purchasing and other indirect emissions, retain the method and coverage of supplier information. Purchasing emissions calculations can combine physical quantities, specific data and estimates; these results do not all have the same data quality. Supplier data collection should request period, unit, boundaries and method, rather than a CO₂e figure alone.

A simple internal test is to select one inventory line and ask someone who did not prepare the calculation to reproduce it. If they must search emails, guess a conversion or ask which version is correct, there is a documentation gap. Exporting factor references can help assemble the dossier, but does not replace sources or methodological explanations.

How Dcycle prepares data for ISO 14064 verification

Organises activity by site and period

Dcycle is an environmental data platform that can bring together consumption, purchasing and other records used in the inventory. Its role is to keep information identifiable and reusable so operations, finance, procurement and sustainability teams work from a shared foundation. The organisation remains responsible for documenting inventory boundaries and inclusion criteria.

Keeps calculation references identifiable

The platform allows teams to inspect applied references, including the database, version and factor values. This helps explain a figure and review which records might be affected by a correction. The team must confirm that a factor suits the activity and retain its selection criteria; access to a library does not guarantee that every assignment is correct.

Retains attribution and record history

Dcycle’s documented data attribution identifies who created a record, how and when it was created, and subsequent edits. That context helps prepare responses when a verifier asks about a change. The company must also maintain the connection between each record, its evidence and the inventory version submitted for review.

Reuses information for management and disclosure

The same reviewed activity can support the annual inventory, a customer request and a consumption analysis, provided the boundaries of each use are checked. Information also helps investigate differences between sites or periods and assess measures with savings potential. Actual costs and operational results should accompany that assessment; a lower emissions figure alone does not demonstrate a financial saving.

Supports preparation for independent review

Dcycle helps organise data and references before the assessment, while the responsible team prepares the report and responds to findings. The appointed body determines the necessary tests and issues its own conclusion. The platform does not act as an auditor, award ISO 14064 accreditation or guarantee acceptance of the inventory by a registry, customer or regulator.

Want to see how Dcycle prepares ISO 14064 data alongside CSRD, carbon footprint, and supplier metrics?

See the platform

How verification works in 5 steps

1. Engagement acceptance and definition

The organisation and verification body agree the subject of the review, criteria, period, boundaries, assurance level and intended users. Available competence is checked, and potential threats to impartiality are reviewed. If a customer requests data, obtain its conditions before appointing a provider to avoid receiving a final document that does not answer the request.

2. Risk-based planning

The verifier assesses the organisation, sources and controls to plan tests and evidence selection. Areas with complex calculations, greater uncertainty or significant changes require specific attention. Remote and on-site work should be justified by risk and applicable requirements; access to digital files does not mean every verification can be completed remotely.

3. Documentary assessment and testing

Methods and records are reviewed, with checks, recalculations, interviews or visits where appropriate. The assessment may include samples of invoices, supplier data and reconciliations between systems. The company should provide sufficiently complete information for those tests and explain its estimates; removing unfavourable documents does not simplify the assessment legitimately.

4. Findings and corrections

The responsible team answers questions, supplies evidence and corrects identified misstatements. Each change should record its reason, owner and effect on results. If the base year changes, emissions intensity metrics and comparative totals should also be reviewed under the inventory’s criteria. Editing a file without communicating the change can create contradictory versions.

5. Review and final statement

The verification body completes its review and issues the appropriate conclusion. Check which information it covers, under which criteria and assurance level, and with which limitations. Some schemes include additional certificates or marks; read their conditions alongside the statement. A logo does not extend the verified period or activities or turn the assessment into general certification of the company’s environmental management.

5 Benefits of a competent review

1. Applies recognised criteria consistently

A shared methodological foundation helps address sources, boundaries and changes using documented criteria. Review allows their application to be assessed, especially when several sites contribute data. The benefit depends on maintaining that system between reporting periods; verification of one statement does not automatically demonstrate conformity with every other standard or law.

2. Strengthens the credibility of shared information

An independent statement helps third parties understand what was reviewed and under which conditions. It can provide useful information for commercial processes or green finance, although it does not guarantee better terms, approval of a transaction or success in a tender. Communicate the verified scope as precisely as the result.

3. Identifies errors and improves controls

Findings may reveal missing months, incompatible units, duplicates or insufficiently justified estimates. The organisation can use them to correct the process that produced the error. Maintaining ownership and review controls helps prevent the next inventory from repeating the same problems, even when staff or systems change.

4. Makes evidence reusable in other processes

The same invoice or activity record can support several disclosures, provided boundaries and requirements are checked. A company with EINF reporting obligations should check the verification required for that report. Verification of a GHG statement under ISO 14064 does not automatically replace assurance over all non-financial or sustainability information.

5. Provides a clearer basis for reduction decisions

A traceable inventory helps distinguish changes in activity, factors and boundaries before evaluating a measure. That information can support climate targets and SBTi goals, subject to their own requirements. To assess savings, compare consumption and economic data; verification improves the information available but does not implement or guarantee a reduction.

When to verify and how often

Frequency should reflect the programme, contract, reporting period or organisational commitment. ISO 14064 does not impose a universal requirement for every company to appoint an auditor annually or every two years. Before setting dates, establish which reporting period the recipient needs verified and which inventory changes affect the work.

In Spain’s carbon footprint register, Article 9 of RD 214/2025 defines verification requirements and exceptions. The same requirement should not be assumed for every SME, footprint or registration. AENOR’s explanation sets out those distinctions. Check the specific conditions against the legislation and official instructions applicable to the submission.

Verification can also be useful before a significant customer communication or when establishing a baseline for tracking improvements, even without a universal legal obligation. In those cases, define the decision the engagement should support and the evidence level needed. A major boundary change or acquisition may affect the planned work; inform the verification body before finalising the budget and timetable.

5 Mistakes to avoid when appointing an ISO 14064 auditor

1. Confusing training, preparation and verification

A course develops knowledge, a consultancy can prepare the inventory, and a platform organises data. None of those functions, by itself, is equivalent to issuing an independent conclusion. Appoint each service according to the outcome required and establish who is responsible for that outcome.

2. Accepting accreditation without checking its scope

A certificate or commercial logo may refer to a different activity. Verify the legal entity, validity, programme and technical coverage in the appropriate directory. If a procedure requires specific recognition, confirm acceptance before appointing the provider, rather than after receiving a statement that may not be usable.

3. Submitting an inventory without sufficient evidence

A consolidated total alone does not allow boundaries, sources and methods to be assessed. Prepare the breakdown and a clear connection to evidence, identifying estimates and exclusions. If a relevant source remains unresolved, explain its proposed treatment; hiding the limitation does not resolve it.

4. Confusing verification with climate neutrality

Verifying an emissions statement does not, by itself, establish company-wide carbon neutrality, demonstrate reductions or confirm that any offsets are appropriate. Those claims require their own boundaries, criteria and evidence. Communicate exactly what was assessed, for which period and with which conclusion.

5. Changing data during closure without controls

Necessary changes should be incorporated into an identified version and communicated to the verification team. Retain the previous calculation, correction and effect on the report. A controlled dataset allows the engagement to conclude on the same statement the organisation ultimately publishes or provides.

Conclusion

Choosing an ISO 14064 auditor starts with identifying whether the company needs training, preparation or independent verification. For the latter, check competence, impartiality, accreditation scope where relevant and acceptance by the intended recipient. The quotation should identify the statement being assessed and the conclusion or documents to be delivered.

Technical preparation is equally specific. Define boundaries and period, document methods and factors, reconcile results and retain evidence that allows a sample to be reproduced. Registry, customer or disclosure requirements may add conditions; reusing data does not mean every engagement is equivalent.

Dcycle can help keep environmental data organised, identifiable and reusable for disclosures, cost analysis and operational decisions. The independent body retains responsibility for verification. That separation supports an inventory the company can explain and use throughout the year, as well as prepare for external review.

Start with a platform that unifies GHG inventory, multi-framework reporting, and supplier data with transparent audit trails.

Talk to the team

Tip: Before engaging auditors, confirm your GHG inventory is traceable and connected to your ESG platform. Standalone spreadsheets rarely support ISO 14064 verification without costly rework.

Frequently asked questions (FAQs)

What is the difference between ISO 14064 and other sustainability standards?

ISO 14064 focuses exclusively on greenhouse gas emissions: how much you emit, how you calculate it, and how you verify it. It does not replace CSRD, SBTi, or ISO 14001, but complements them when data is well organised.

How long does it take to complete an ISO 14064 audit?

If ESG data is already organised, the process can take weeks. Starting from scratch takes longer because you must collect, clean, and validate information first. Centralised data dramatically shortens timelines.

What types of companies should do this audit?

Any company that takes emissions management seriously, regardless of sector or size. It supports reporting, tenders, investment, and decarbonisation planning with a validated baseline.

Can data collection for this audit be automated?

Yes, and it should be. Manual collection is slow and error-prone. Dcycle centralises and automates ESG data so information stays ready for ISO 14064 verification and other frameworks.

How do you validate that the report meets ISO requirements?

An external verifier checks that you followed ISO 14064, calculated data accurately, and maintained sufficient evidence. Order and traceability determine whether verification proceeds smoothly or stalls.

How does ISO 14064 connect to CSRD and carbon footprint reporting?

CSRD environmental disclosures require robust emissions data with traceable evidence. ISO 14064 verification strengthens the same GHG inventory used for carbon footprint audits and regulatory reporting.

ISO 14064Sustainability AuditingCarbon FootprintCompliance
30-minute demo

See it with your own data.

Thirty minutes with our team. We show you how your data would come in, and what you would get out.

See Dcycle in action
  • No commitment
  • With your data
  • In your language

What your session looks like

  1. 01 You tell us what you’re being asked forCustomers, auditors or banks: what data and by when. 0–5 min
  2. 02 We show how your data comes inInvoices, ERP, suppliers: on an example close to yours. 5–20 min
  3. 03 You leave with a planWhat to automate first and how much time you save. 20–30 min
With someone from the team who then supports you