Certification · ISO/IEC 42001

ISO 42001 certification: what it is and how to get it

ISO/IEC 42001 is the first international standard for managing artificial intelligence. What it is, who needs it and how to get it: we help you build a certifiable AI Management System, aligned with the principles of the EU AI Act.

Request an assessment

Aligned with the principles of the AI Act · dedicated advisor

In short

What ISO 42001 is

ISO/IEC 42001 is the international standard that sets out the requirements for an Artificial Intelligence Management System (AIMS). It helps organisations develop and use AI responsibly, managing risk, bias, transparency and governance, in a way an accredited body can verify.

The first certifiable international standard on AI
Governance and risk management for AI systems
Aligned with the principles of the EU AI Act
Shows customers and regulators that your AI is responsible

Who needs it

Who ISO 42001 is for

Companies building AI products

Software houses and companies that build machine learning or generative AI into their products and services.

Companies that need to show trustworthy AI

With the AI Act and customer requests, you need to prove that your AI systems are governed, transparent and secure.

Companies using AI in critical processes

Where automated decisions affect people or the business, governance and risk control become essential.

How we help

From gap to AI Management System

We build AI governance and manage model risk, through to a certifiable system you can maintain over time.

Gap Analysis and AIMS

We map your AI systems and the gaps against the standard, then build the AI Management System: policies, roles, controls.

AI risk governance

We define processes to assess risk, bias, data quality and model transparency across the whole lifecycle.

Accredited audit

Internal pre-audit with your advisor, then the audit by an accredited body. The result: the ISO/IEC 42001 certificate.

How it works

The path to certification

Gap Analysis

Inventory of AI systems and analysis against the requirements of the standard. A report with the priorities for action.

AIMS implementation

We build governance, policies and controls on AI risk, integrating them into your development and operational processes.

Audit and certification

Internal pre-audit, then the accredited body's audit. You get the certificate and keep the system running over time.

FAQ

Questions about ISO 42001

What is an AI Management System (AIMS)?

It is the set of policies, roles and controls through which an organisation governs the development and use of AI: risk management, data quality, transparency and human oversight across the model lifecycle.

Does ISO 42001 make me compliant with the AI Act?

No, and today no certification does. The presumption of conformity under Article 40 of the AI Act applies only to harmonised standards whose references are published in the Official Journal of the European Union, and ISO 42001 is not one of them. What an ISO 42001 AIMS gives you is the governance backbone the regulation's obligations rest on: roles, an inventory of AI uses, risk and impact assessment, supplier oversight, evidence.

Who really needs ISO 42001?

Companies that develop or integrate AI in their products and processes and need to show customers, partners and regulators that they do so responsibly and under control.

Does it integrate with ISO 27001 and ISO 9001?

Yes. They share the same ISO management system structure, so if you already have an ISMS or a QMS much of the framework can be reused.

Using AI and want to govern it properly?

A 30-minute call to understand your starting point and map the path to a certifiable AI Management System. No commitment.

Book a call