ISO IRAQ (ISO-IRAQ.com)

SA8000:2026 is Social Accountability International’s current Standard for Decent Work. It gives organizations a framework for protecting workers’ rights, managing social and human-rights risks, involving workers, operating credible grievance mechanisms, and improving workplace practices. ISO IRAQ supports organizations in Iraq with gap assessment, implementation planning, evidence review, training, internal review, and preparation for an independent SA8000 certification audit.

SA8000 is owned by Social Accountability International and is not an ISO standard. ISO IRAQ does not issue SA8000 certificates. Organizations seeking recognized certification should verify the current program rules and work with a SAAS-accredited certification body.

What changed in SA8000:2026?

SAI published SA8000:2026 on 1 January 2026, replacing SA8000:2014. The revision uses a positive decent-work structure and strengthens areas such as human-rights due diligence, worker and stakeholder involvement, privacy, integrity, transparency, risk analysis, grievance mechanisms, and continual improvement. Organizations should not reuse a 2014 checklist without comparing it with the current standard and certification-program materials.

The certification transition is phased during 2026. According to SAI’s transition timeline updated in April 2026, approved certification bodies introduce SA8000:2026 audits on a staggered basis from June through October, while 2014 audits can still be available during 2026. An organization should confirm which version, self-assessment, training, and audit arrangements apply with its selected SAAS-accredited certification body before setting a deadline.

Who can use SA8000?

The framework can be used by organizations of different sizes and sectors, including manufacturers, contractors, service providers, warehouses, and suppliers responding to customer, supply-chain, ESG, or responsible-sourcing requirements. The implementation scope should identify the legal entity, sites, workforce categories, shifts, labor providers, contractors, and business relationships that can affect working conditions.

A credible project includes permanent, temporary, migrant, agency, young, remote, and contractor workers where applicable. It also considers how purchasing practices, production targets, recruitment fees, subcontracting, and short lead times can create risks beyond the HR department.

Decent-work principles to evaluate

SA8000:2026 organizes workplace expectations around interconnected principles. Implementation needs objective evidence and worker input rather than policy statements alone.

  • Protection of children and young workers, including age verification and safe remediation arrangements.
  • Freedom of association and the right to collective bargaining without retaliation or interference.
  • Free and fair recruitment, employment, and termination, including controls over fees, deposits, documents, and coercion.
  • Decent working hours, wages, and benefits supported by complete and accurate payroll and time records.
  • Freedom from discrimination across recruitment, pay, promotion, discipline, training, and termination.
  • Health and safety controls based on hazards, worker participation, incidents, competence, and emergency readiness.
  • Privacy and proportionate protection of worker information, monitoring, medical data, and grievance records.

Management-system evidence

The 2026 standard also expects leadership, worker involvement, stakeholder input, coherent policy, context and risk review, objectives, resources, awareness, transparent implementation, monitoring, grievance handling, strategic review, and continual improvement. Evidence should show how decisions are made and followed, not just that a procedure exists.

Typical records include workforce profiles, age and identity checks, contracts, recruitment-fee reviews, time and payroll data, wage calculations, health-and-safety assessments, training, worker interviews, committee records, grievances, investigation files, supplier or contractor due diligence, corrective actions, management review, and trend analysis. Personal and sensitive information should be protected throughout the project.

Worker involvement and grievance mechanisms

Workers need safe and understandable ways to participate, raise concerns, and receive follow-up without retaliation. Channels should reflect language, literacy, shift, location, disability, and access needs. A box that is never checked, a hotline controlled by the subject of a complaint, or a process workers do not trust will not demonstrate an effective mechanism.

The organization should define confidentiality, escalation, investigation, protection, response time, remedy, record retention, and trend review. Interviews and worker-representative input should be obtained without coaching or pressure. Significant concerns should connect to risk assessment, corrective action, leadership oversight, and—where applicable—appropriate external reporting or remedy.

Supply-chain and human-rights due diligence

Social risks can arise through labor agencies, security providers, transport, accommodation, homeworking, subcontracting, and material or service suppliers. Due diligence should prioritize risk and leverage rather than sending the same questionnaire to every supplier. Selection, contracting, monitoring, worker feedback, issue escalation, remediation, and purchasing decisions should be connected.

The organization should avoid practices that undermine its own requirements—for example, unrealistic production schedules or last-minute purchasing changes that drive excessive overtime. When a serious issue is found, immediate protection and remedy are considered alongside root cause and longer-term prevention.

Practical implementation stages

A phased plan makes ownership and evidence requirements clear.

  1. Confirm the applicable SA8000 version, certification route, scope, sites, workforce, business relationships, and customer requirements.
  2. Complete a gap and risk assessment using current SAI materials, worker input, records, and site observations.
  3. Assign leadership and worker responsibilities; update policies, controls, grievance routes, due-diligence processes, objectives, and resources.
  4. Train responsible teams, communicate with workers, operate the controls, and collect evidence through normal business cycles.
  5. Complete internal review, worker and stakeholder feedback, corrective action, management review, and the required SAI program steps.
  6. Select a SAAS-accredited certification body and prepare for its independent Stage 1 and Stage 2 process.

Common readiness gaps

The following gaps should be addressed with worker protection and effective remedy as the priority:

  • Policies have been translated, but workers do not know their rights or how to raise a concern.
  • Time and payroll records do not reconcile across attendance, production, overtime, deductions, and payslips.
  • Recruitment agencies are contracted without controls for fees, document retention, coercion, or worker communication.
  • Risk reviews exclude temporary, migrant, contractor, young, or other potentially vulnerable workers.
  • Grievances are logged, but confidentiality, protection, investigation quality, remedy, and trend analysis are weak.
  • Supplier monitoring is based only on questionnaires and does not respond to risk, worker evidence, or purchasing practices.
  • Corrective actions close documents without verifying working-condition improvements or recurrence prevention.

Independent certification and responsible claims

Certification audits and decisions are carried out independently by certification bodies accredited for the SA8000 program by Social Accountability Accreditation Services. Implementation support cannot guarantee certification, replace the certification body, or remove the organization’s responsibility for legal compliance and worker remedy.

Before using an SA8000 claim in a tender or customer submission, verify the certificate holder, scope, sites, version, validity, certification body, and status through the authorized route. Do not describe implementation work or a scheduled audit as completed certification.

Official SA8000 sources

Plan an SA8000:2026 gap review

Send the sites, workforce categories, shifts, labor providers, customer requirement, current SA8000 status, and target audit date. Do not send personal worker or grievance data through the initial inquiry.

Request an SA8000 Readiness Review