hello@sterling-grc.com +1 201 263 4443 New York ISO & GRC consulting in 60+ countries
SterlingInternational Consulting Talk to a consultantTalk to us

ISO 20387 · General requirements for biobanking

ISO 20387 accreditation consulting for biobank collections that researchers can trust.

Show that your biobank is competent, impartial and consistent, with samples and data of known quality, and have that recognised by an accreditation body. Sterling's expert and experienced consultants build the quality system and the technical evidence with your biobank staff and stay with you through the assessment and afterwards, in 60+ countries. We ensure successful accreditation for our clients.

  • One all-inclusive proposal for a defined scope: consulting, Effivity software, Sterling Academy access and internal auditor training, as applicable to your standard, in one proposal
  • A team of expert and experienced consultants in laboratory and conformity assessment standards, working with organisations across sectors and countries since 2003
  • The Sterling Promise: 100% on-time completion, 100% success, 8,100+ client engagements. Sterling does not accredit; the accreditation body assesses and decides

8,100+ client engagements in 60+ countries.

ISO 20387 client experience
  • Allianz
  • Emirates Flight Catering
  • Etihad Rail
  • Haier
  • Whirlpool
  • Emerson
  • Olam
  • Piramal Pharma Solutions

What it is

What is ISO 20387 and what is it used for?

ISO 20387 is the international standard that sets general requirements for biobanking. In ISO's own summary, it covers the competence, impartiality and consistent operation of biobanks, including quality control so that collections of biological material and their associated data are of appropriate quality. It was developed by ISO's biotechnology committee, ISO/TC 276, and applies to any organisation that performs biobanking, whether the material comes from humans, animals, plants, fungi or microorganisms.

The point of the standard is confidence in what leaves the freezer. A researcher who receives an aliquot, or a dataset linked to it, needs to know how it was collected, processed, stored and tracked, and that the same thing will happen next time. ISO names biobank users, regulators, peer-assessment schemes and accreditation bodies among those who can use the standard to confirm or recognise a biobank's competence. That recognition is what accreditation provides; it is not a certificate issued by a certification body.

Current edition. ISO 20387:2018, the first edition, published in August 2018. After its systematic review, ISO decided on 15 December 2023 to revise it, and ISO/FDIS 20387, a second edition titled "General requirements for biobanks", was registered for formal approval on 22 June 2026. ISO's summary of the draft extends coverage to biological material and associated data derived from environmental samples such as soil, sediment, water and air. No publication date or transition period has been announced; until then, assessments are made against the 2018 edition.

Who it is for

Who needs ISO 20387 accreditation?

ISO 20387 fits any biobank that wants its collections trusted beyond its own walls: university and hospital research biobanks, population cohorts, commercial sample providers, microbial culture collections and plant or environmental repositories. The scope should name the collections and activities you want recognised. Biobanks usually come to Sterling from one of four starting points:

  • Research partners and sponsors ask for proof. Pharmaceutical companies, consortia and funders want evidence that samples and data are fit for their studies before they commit to a collaboration or a supply agreement.
  • A funding call or tender sets a quality expectation. Infrastructure programmes and tenders increasingly ask how a biobank controls quality. Accreditation gives a recognised answer, rather than a self-declaration.
  • Regulators and ethics bodies look closely. National rules on human tissue, consent and data protection still apply alongside the standard. A system built to ISO 20387 makes it easier to show how those obligations are met day to day.
  • A group or network wants one way of working. Hospital groups, university networks and multi-site biobanks use the standard to align processes and data across locations and share material with confidence.

Clinical laboratories working with human material for diagnosis and treatment should look first at ISO 15189, which ISO says applies first and foremost to that work.

Requirements

What are the main ISO 20387 requirements?

The requirement areas below follow ISO's own description of the standard and its scope. The list is a plain-language map, not the standard itself; your biobank's implementation is checked against the full text of the applicable edition during the programme.

  • Competence: show that the biobank has the people, facilities, equipment and methods to carry out the biobanking activities it claims.
  • Impartiality: identify pressures from funders, owners or users that could compromise decisions about material and data, and manage them.
  • Consistent operation: run activities such as collection, processing, storage and distribution the same way every time, with defined and controlled processes.
  • Quality control of biological material: confirm that samples are of appropriate quality for their intended use, and act when they are not.
  • Associated data: keep the data linked to each sample accurate, traceable and controlled, since users rely on it as much as on the material.
  • Scope of application: material from multicellular organisms and microorganisms; the draft second edition adds material derived from environmental samples.
  • Exclusions: biological material intended for therapeutic use; the 2018 edition also excludes food and feed production.
  • Regulation and clinical standards: international, national or regional rules can also apply, and ISO 15189 comes first for diagnostic and treatment material.

What does useful ISO 20387 evidence look like?

Sample records that trace each aliquot from donor or source to recipient, processing and storage conditions monitored and reviewed, equipment and freezer alarm records, competence records for the people who handle material, quality control results with the action taken on each deviation, and material transfer and access decisions made impartially. We help decide which records your biobank genuinely needs, and they sit in Effivity from the start so assessors see a system in use.

Accreditation process

How do you get ISO 20387 accreditation?

Your biobank builds and operates the system; an accreditation body then assesses it and decides. Sterling provides consulting and preparation. The decision stays with the accreditation body, and that independence is what gives the result its weight with users.

  1. 01
    Define the scope and choose the accreditation body.Agree the collections, activities and sites to be covered, and confirm that the chosen body offers ISO 20387 accreditation for them.
  2. 02
    Gap analysis against ISO 20387.Review current practice, keep what already works, and agree actions, owners, dates and resources for the rest.
  3. 03
    Implement and build a record of operation.Put processes and quality controls into daily use, train staff and let the system run long enough to produce real evidence.
  4. 04
    Internal audit and management review.Test the whole system, raise findings before the assessors do, close them with evidence and apply to the accreditation body.
  5. 05
    The accreditation assessment and after.Assessors review documents and visit the biobank; you address their findings, the body decides, and surveillance and reassessment follow on its cycle.

Check the route before you sign. Accreditation comes from an accreditation body, not from a certification body or a consultant, so an "ISO 20387 certificate" from anyone else is not accreditation. Ask the body whether ISO 20387 is within its accreditation services, and check its standing on the Global ACI list of recognised accreditation bodies. How to choose a credible ISO 20387 provider · The accreditation buyer's checklist

Cost

How much does ISO 20387 accreditation cost?

No single figure fits every biobank. A focused collection at one site with written procedures needs far less work than a multi-site network storing human, microbial and environmental material under different systems. What we commit to is a proposal in which every component is visible and nothing is added later.

Cost componentWhat affects it
Consulting and implementationCurrent maturity, the number of collections and activities, sites, deliverables, and whether you choose Design™ or Drive™
AccreditationThe accreditation body's application, assessment days, assessors, travel and the ongoing surveillance and reassessment arrangements
Internal resourcesStaff time, management involvement, training, corrective work and any changes to storage or monitoring
Software and learningIncluded in a Sterling engagement: Effivity for the system and Sterling Academy access for your people, with users and access period confirmed in the proposal
Continued supportInternal audits, system upkeep, refresher learning and moving to the new edition under Sustain™

What moves the price

  • Number of collections, sample types and biobanking activities in scope
  • Sites, storage locations and whether they share one system
  • How much of the current practice is written, controlled and recorded
  • Data systems and how well samples and data are linked today
  • The target date and how much of the work your staff can carry

What a Sterling proposal always shows

  • Deliverables, responsibilities, assumptions and exclusions, in writing
  • Accreditation-body fees identified separately, so the full cost is comparable
  • Effivity, training and Academy access itemised at no additional cost
  • Payment milestones linked to deliverables, not to the calendar
  • One all-inclusive proposal. No surprises, ever

Timeline

How long does ISO 20387 accreditation take?

Procedures can be written in weeks; a record of consistent operation cannot. Samples need to move through collection, storage and distribution under the new controls, and the accreditation body's schedule sits outside your control. As an estimate, a first accreditation takes six to twelve months.

PhaseWhat sets the pace
Scope and gap analysisHow quickly collections, activities, sites and the accreditation body are agreed
Build and implementationThe extent of process change, validation work, staff training and approvals
Evidence and reviewEnough operating history to show consistency, then internal audit and management review
Accreditation assessmentThe body's availability, the assessment visit and the time needed to close findings

If a partner agreement or funding deadline depends on accreditation, tell us at the start. We will say plainly what is achievable, and which decisions need to be made early to get there.

Your engagement

What your ISO 20387 engagement includes

Sterling OS™ runs every engagement, adapted to the way a biobank works. Sterling does not accredit: the accreditation body assesses your biobank and makes the accreditation decision. You choose the level of support that suits your team.

  • Design™: guided support

    Your biobank staff write the procedures and records; a Sterling consultant sets the method, reviews each output and coaches the process owners.

  • Drive™: managed support

    The alternative to Design™ for teams short of time: Sterling drafts the quality system with your people and runs the programme through to the assessment.

  • Sustain™: after accreditation

    Internal audits, competence reviews, preparation for surveillance and reassessment, and support when you add collections or move to the new edition.

  • Automate™: Effivity

    Your biobank's quality system runs in Effivity, included with the engagement at no additional cost.

  • Training for your people

    Internal auditor training, as applicable to your standard, and preferential Sterling Academy access, including complimentary awareness training for your people as part of the engagement.

Accreditation decisions remain with the accreditation body.

How Sterling implements ISO and GRC standards

Effivity · ISO and GRC software, included in every engagement

How Effivity helps your biobank meet, automate and simplify the requirements of ISO 20387.

Every Sterling ISO 20387 engagement includes Effivity, the ISO and GRC automation platform built by the Sterling group and used in 50+ countries. Your consultant configures the workspace within the agreed scope, so documents, risks, audits, nonconformities, complaints, suppliers, equipment, training records and management review sit in one place, the system runs in daily biobank work and assessors see it operating. Sterling consulting clients get their Effivity subscription included with the engagement, at no additional cost.

Effivity: Context of the Organisation dashboard with issues, interested parties and scope
Effivity · Context of the Organisation dashboard
Context

Scope, collections and interested parties

The biobank's scope, its collections and the parties who rely on them, from donors and funders to research users, are recorded once and reviewed as collections grow.

Leadership

Policy, roles and impartiality

Quality policy, responsibilities and the impartiality risks you have identified, each with an owner and a review date, visible to the people accountable for them.

Planning

Risks and opportunities

Risks to samples, data and continuity, such as storage failure, sit in one register with actions tracked to closure and reported to management review.

Support

Competence, equipment and documents

Training and authorisation records for staff who handle material, equipment and monitoring records, and controlled procedures so only the current version is used.

Operation

Biobanking processes and suppliers

Processing, storage, distribution and supplier records configured around your own workflows, with each record created as the work happens.

Performance evaluation

Quality control, internal audit and review

Quality control results and indicators on dashboards, an audit programme with findings and follow-up, and a management review that records its decisions.

Improvement

Deviations, complaints and corrective action

Sample deviations and user complaints raised, investigated and closed with root cause and proof that the action worked.

Across the system

Your own forms, workflows and reports

Forms, fields and reports adapted to your collections without code, with legal and ethical requirements linked to the processes they affect.

What this means at the assessment

Assessors ask for competence records, quality control results, deviations and their corrective actions, the internal audit programme and the last management review. In Effivity each is a screen with dates, owners and evidence attached, ready without a last-minute search. After accreditation, Sustain™ runs in the same workspace, so surveillance finds a system that kept running.

In your engagement

  • Subscription included with the engagement, at no additional cost
  • Configured by your Sterling consultant within the agreed scope
  • Your existing documents, records and registers migrated, not retyped
  • Admin and user training for your team
  • Modules for QMS, ISMS and more when you integrate other standards

Sterling Academy · laboratory and biobank e-learning

Train every member of the biobank team, not just the quality lead.

Sterling Academy provides e-learning for everyone who works in the biobank and for the people who run its quality system: video lessons with practice checkpoints, a final exam and a numbered Certificate of Completion for each learner, verifiable online. Sterling consulting clients benefit from preferential Sterling Academy course access and special pricing through their Sterling consultant, including complimentary awareness training for their people as part of the engagement.

  • Awareness training for every staff member, as evidence of competence
  • Learning for process owners and the quality lead
  • Internal auditor training for the people who will audit the system, as applicable to your standard, as part of the engagement
  • Learner progress by team and a training status report for assessors
  • New starters trained on arrival, so records stay current
  • A Sterling consultant reachable when a learner needs one

Why Sterling

Want successful ISO 20387 accreditation? Come to Sterling.

Biobanks sit between research, clinical practice and regulation. Sterling helps you build one quality system that fits all three, with clear ownership in each team, so accreditation strengthens the science instead of slowing it down.

Accreditation standards in 60+ countries since 2003

Management systems and accreditation readiness for laboratories and conformity assessment organisations across every region we serve, with one engagement team accountable wherever you operate.

All-inclusive proposal

Consulting, Effivity, training and Academy access in one proposal, with accreditation-body fees shown separately. No surprises, ever.

A system your staff will use

Procedures and records shaped around the way your team actually handles samples and data, so the system supports the work rather than adding paperwork.

Expert and experienced consultants

Consultants who know laboratory and conformity assessment standards and build your system right the first time, so the assessment confirms what already works.

Sterling vs the rest: the full comparisonExplore ISO 20387 client experience

The Sterling Promise

What our ISO 20387 accreditation success guarantee means

100%on-time completion · success · 8,100+ client engagements

We stay with you until your agreed ISO 20387 accreditation outcome is achieved, supporting implementation, preparation and the resolution of assessment findings. Clear explanations, practical delivery, included software and staff learning turn the investment into lasting capability rather than a certificate on a wall.

The engagement identifies the standard, scope, outcome and responsibilities. Your organisation supplies accurate information and puts the agreed controls into use. The accreditation body assesses conformity and retains its accreditation decision. Our commitment concerns the agreed accreditation support, not a promise of every future partnership or error-free operation.

FAQs

Frequently asked questions about ISO 20387

Is ISO 20387 a certification or an accreditation standard?

It is used for accreditation. ISO lists accreditation bodies, along with biobank users, regulators and peer-assessment schemes, among those who can use ISO 20387 to recognise a biobank's competence. An accreditation body assesses the biobank for a defined scope; a certification body does not grant ISO 20387 accreditation, and neither does Sterling.

What is the difference between ISO 20387 and ISO/IEC 17025?

ISO 20387 covers biobanking as a whole, from collection through storage to distribution, while ISO/IEC 17025 covers testing and calibration. A biobank that also tests or characterises its material may need both, with one integrated quality system serving the two accreditations.

Should we wait for the new edition of ISO 20387?

No. The 2018 edition remains current until ISO publishes the second edition, which was registered for formal approval in June 2026. A system that already works to the 2018 edition is the starting point for any transition, and we review what changes as soon as the new text is published.

Does ISO 20387 apply to biobanks that are not human?

Yes. The 2018 edition covers material from multicellular organisms, including animals, plants and fungi, and from microorganisms. ISO's summary of the draft second edition adds material derived from environmental samples such as soil, water and air.

Does ISO 20387 accreditation replace ethics approval or data protection compliance?

No. ISO itself notes that international, national or regional regulations can also apply to topics the standard covers. Ethics approval, consent and data protection obligations remain; a well-run quality system simply makes it easier to show how you meet them, and we work alongside your legal and ethics advisers.

Keep exploring

More on ISO 20387 and related standards

More in Laboratories, inspection & accreditation

Talk to a consultant

Plan your biobank's ISO 20387 accreditation with confidence.

Tell us about your collections, sites and target date. We’ll help you define the accreditation scope, timeline and next steps.

hello@sterling-grc.com

+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page

What would you like to achieve?

Choose a starting point. The enquiry form takes about a minute.

Your goal
Book my free discovery call

Continue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice