A smart city framework is a structured checklist of indicators used to measure, compare and improve how smart, sustainable and resilient a city is. Instead of arguing about whether a city "feels" smart, a framework breaks the question into concrete, checkable items — does the city publish live transport data, monitor air quality, run digital services, track its emissions — and turns the answers into a score. The best-known smart city frameworks are the ISO 37120 family of international standards, the NIST IES-City framework from the United States, the United Nations' U4SSC key performance indicators, and capability frameworks such as DC20. Each measures something different, which is why cities can rank very differently from one list to the next.

This guide explains what each major framework actually measures, how they compare, and how to choose the right one — whether you run a city, invest in them, or study them.

What is a smart city framework?

Think of a framework as the marking scheme behind the exam. Every smart city ranking, index or certificate rests on one: a list of what was measured, how it was weighted, and what counts as good. The framework deserves more attention than the headline score, because two respectable rankings can rate the same city completely differently simply by measuring different things.

It helps to separate three words that get mixed up. A framework is the checklist itself — the indicators and rules. An index is the number produced when someone applies a framework to many cities and ranks them. And a certification is a formal audit against a framework, usually renewed annually. The IMD Smart City Index is an index; ISO 37120 is a framework you can be certified against; DC20 is a framework applied continuously to produce comparable scores.

ISO 37120, 37122 and 37123: the international standards

The most established smart city frameworks are three international standards from ISO, the International Organization for Standardization. ISO 37120, first published in 2014, defines roughly one hundred indicators for city services and quality of life — energy, transport, water, health, education, safety — and is the most widely adopted city-indicator standard in the world. ISO 37122, published in 2019, extends it with around eighty indicators specifically for smart cities: open data, connectivity, intelligent transport, digital services. ISO 37123, also from 2019, covers resilience — how well a city withstands shocks from floods to pandemics.

Their strength is rigour and comparability: an indicator means exactly the same thing in Toronto as in Taipei, and cities can be independently certified against them. Their weakness is cost and speed. Compiling the data takes a serious municipal effort, so only cities that opt in are measured, and results refresh slowly — typically annually at best.

The NIST IES-City framework

The United States' National Institute of Standards and Technology takes a different angle. Its IoT-Enabled Smart City Framework (IES-City) is not a scorecard but an architecture guide: it helps cities compare smart-city technologies and identify the "pivotal points of interoperability" where standards matter most, so a city doesn't buy a dozen systems that can't talk to each other. It's free, technology-neutral and aimed at the people who actually procure and integrate systems — less useful if what you want is a score, invaluable if you're designing the plumbing.

U4SSC KPIs (UN/ITU)

United for Smart Sustainable Cities (U4SSC) — a UN initiative coordinated by the ITU and UNECE — publishes a set of around ninety key performance indicators across three dimensions: economy, environment, and society and culture. The KPIs are explicitly aligned with the UN Sustainable Development Goals, above all SDG 11 (sustainable cities and communities), and have been implemented by well over a hundred cities worldwide. If your city needs to report progress in the language of the SDGs — common for development funding — U4SSC is the natural choice.

The IMD Smart City Index

Strictly an index rather than a framework, the IMD Smart City Index is the most quoted smart city ranking in the world, and its methodology is worth understanding. It ranks 148 cities based on surveys of roughly 120 residents per city, asking how people experience infrastructure and technology across health and safety, mobility, activities, opportunities and governance, blended over three years. It captures something none of the standards do — how a city feels to live in — but it covers only 148 of the world's thousands of cities, and perceptions can lag reality by years. We've written a full analysis of what the IMD Smart City Index misses.

DC20: a capability framework

DC20 is Data Corridor's capability framework: twenty areas covering transport, energy, environment, connectivity, digital services, open data and governance, each broken into concrete criteria that can be verified from the public record. Every criterion is marked present, partial or absent based on evidence gathered from official sources — and every finding links back to where it was found, so any score can be checked in seconds.

Because it doesn't depend on surveys or municipal self-reporting, DC20 can be applied to any city, not just those that opt in or make a shortlist — and refreshed continuously by AI agents rather than periodic studies. That makes it the practical complement to the standards: less exhaustive than a full ISO certification, but current, universal and comparable.

How do the frameworks compare?

The quickest way to see the differences is side by side:

• ISO 37120/37122/37123 (ISO) — outcome and smart-city indicators, ~100/80 indicators per standard; opt-in cities only; certified, refreshed roughly annually. Best for rigorous, auditable benchmarking.
• NIST IES-City (US NIST) — a technology and interoperability architecture, not a scoring system; free to use. Best for planning and procurement.
• U4SSC KPIs (UN/ITU/UNECE) — ~90 indicators aligned to the SDGs; implemented by 150+ cities. Best for SDG-aligned reporting.
• IMD Smart City Index (IMD business school) — perception survey of ~120 residents in each of 148 cities, blended over three years. Best for understanding resident experience.
• DC20 (Data Corridor) — 20 capability areas scored present/partial/absent from public evidence; any city, continuously refreshed. Best for broad, current, checkable comparison.

Which smart city framework should you choose?

It depends on the question you're answering. If you need an auditable certificate — for investors, national government or an international bid — go ISO 37120/37122, and budget for the data effort. If you're designing or procuring systems, use NIST IES-City to avoid interoperability dead-ends. If you report against the SDGs, U4SSC speaks that language natively. If you want to know how residents feel, read the IMD index — for the 148 cities it covers.

And if you want a current, evidence-backed picture of where a city stands and where the gaps are — especially a city that no ranking covers — a capability framework like DC20 is the fastest route to an honest answer. Many cities sensibly use more than one: a capability assessment to find the gaps, then a standard to certify the progress.

How Citymirror applies these frameworks

Citymirror, Data Corridor's platform, runs two of these lenses side by side across 213 cities — 75 in the UK and 138 worldwide. The DC20 capability model provides the broad, always-current view. A deeper standards-aligned model unifies ISO 37120, 37122 and 37123 with the U4SSC KPIs and the IMD index's pillars into roughly 120 evidence-based criteria across seven axes — so the international standards' rigour is applied to cities that never commissioned a certification, scored from what each city actually publishes and operates.

Every score is traceable to its source, and the methodology is open: you can read exactly what's measured, disagree with it, and build your own framework — describe what you want to measure in plain English, let the AI draft the checklist, run it against your cities, and publish it for others to improve. The frameworks that earn trust over the next decade won't be the ones with the flashiest launch; they'll be the ones anyone can check.