Path

I need ISO 42001 certification

Cited starting points for an organizational AI management-system certificate: what ISO says 42001 is, and what UKAS- and ANAB-accredited bodies publish about the audit. Sources last checked 15 October 2026.

Cited intro

ISO/IEC 42001:2023 specifies requirements for an organizational Artificial Intelligence Management System. ISO says organizations may choose certification when they want independent confirmation, and that certification is performed by independent certification bodies.

UKAS granted the first accreditation for certification of AIMS to ISO/IEC 42001:2023 on 15 January 2026. That is accreditation of a certification body, not a certificate for your AI product. What those bodies publish about Stage 1, Stage 2 and evidence is in What auditors ask for in an ISO/IEC 42001 certification audit. A defense-contractor reading of the same pair is ISO 42001 vs NIST AI RMF for defense contractors.

Frameworks

  • ISO/IEC 42001

    The first international management-system standard for AI. It governs how an organization manages AI risk, not how an individual AI product is certified.

  • NIST AI RMF

    A voluntary, sector-agnostic US framework that organizes AI risk work into four functions - Govern, Map, Measure and Manage.

  • ISO/IEC 23894

    International guidance on managing AI-specific risk for organizations that develop, produce, deploy or use AI products, systems and services.

Articles

Listed tools

  • 6clicks (ISO 42001)

    6clicks · Commercial · Compliance automation

    GRC with a pre-configured ISO/IEC 42001:2023 AIMS, Hailey AI mapping, SoA and Hub & Spoke. Cross-maps ISO 27001 and the EU AI Act. Homepage names SaaS, sovereign cloud or on-prem, and cloud, on-premises, air-gapped or hybrid.

  • AI Verify Testing Framework

    AI Verify Foundation / IMDA / PDPC · Government-published · Government-published resource

    Testing framework of 11 internationally recognised AI governance principles for Traditional and Generative AI. Mapped to NIST AI RMF (13 Oct 2023), NIST AI 600-1 (29 May 2025) and ISO/IEC 42001 (21 July 2025). IMDA/PDPC MVP 25 May 2022; GitHub 7 June 2023.

  • Apptega (ISO 42001)

    Apptega · Commercial · Compliance automation

    ISO 42001 compliance software with pre-built questionnaires, evidence collection, Audit Manager and harmonized multi-framework controls. Assigns tasks to internal teams and shares updates with auditors. The page names 12,000+ compliance programs and a Foresite Cybersecurity customer quote.

  • Arthur (Agent Security & Governance)

    Arthur · Commercial · AI governance platform

    Discovers agents across endpoints, cloud and private data centers; traces tool calls; enforces policies and guardrails. Official page names fully hosted SaaS, on-prem, or hybrid. An Arthur column maps product evidence to ISO 42001, the EU AI Act and NIST AI RMF.

  • Asenion AI Control System

    Asenion · Commercial · AI governance platform

    Asenion AI Control System turns EU AI Act, ISO/IEC 42001 and NIST AI RMF requirements into Assess, Verify and Witness controls with audit-grade evidence. Asenion is ISO/IEC 42001 certified for the Control System. A homepage quote names the former Fairly brand.

  • ControlMap (ISO 42001)

    ScalePad · Commercial · Compliance automation

    MSP-native GRC platform with ISO/IEC 42001 in a 63+ framework library: mapped controls, evidence and reporting. Partners import the framework to client tenants and cross-map against current frameworks. 2026 release notes add ISO 42001 Jump Start and an ISO 27001 crosswalk.

  • Credo AI

    Credo AI · Commercial · AI governance platform

    Enterprise AI governance with GAIA assistant, Agent Registry, 300+ integrations and ready-to-deploy policy packs for the EU AI Act, NIST AI RMF and ISO 42001. Named sectors: insurance, financial services, federal and healthcare.

  • Drata (ISO 42001)

    Drata · Commercial · Compliance automation

    Compliance automation that maps ISO 42001 AI-management-system controls, evidence, ownership and risk so enterprises can run an AIMS and stay audit-ready. Help Center also names an AIMS policy template and automated evidence collection. Not a model-assurance tool.

  • Holistic AI

    Holistic AI · Commercial · AI governance platform

    Identify, Protect and Enforce platform: shadow-AI discovery, agentic red-teaming and framework assessments for the EU AI Act, NIST AI RMF and ISO 42001. Guardian Agents (Sentinel watch/detect; Operative act/enforce) via the HAI Guardian SDK. 15+ read-only integrations.

  • Hyperproof (ISO 42001)

    Hyperproof · Commercial · Compliance automation

    Compliance operations platform with an out-of-the-box ISO 42001 AIMS template (Annex A) in a 160+ framework library. Guide covers Clauses 4–10, Annexes A–D and AI risk vs impact assessments. Crosswalks name NIST AI RMF. Audit Module for inviting the auditor.

  • ISMS.online (ISO 42001)

    ISMS.online · Commercial · Compliance automation

    ISMS.online ISO 42001 page (Updated 14 July 2026): pre-configured templates and frameworks, dynamic risk management and document management. Certification described as valid three years with annual surveillance. ARM path from gap analysis to certification.

  • OneTrust AI Governance

    OneTrust · Commercial · AI governance platform

    AI governance that inventories systems, agents, models, datasets and vendors; applies EU AI Act, NIST AI RMF and ISO 42001 templates; and describes runtime guardrails plus a Python AI Guard SDK on Amazon Bedrock, Microsoft Foundry, Databricks and Gemini.

  • Optro AI Governance

    Optro · Commercial · AI governance platform

    Enterprise AI governance that inventories models, agents and third-party apps and automates 25+ frameworks including the EU AI Act, ISO 42001 and NIST AI RMF. Shadow AI; agents draft and recommend, the team decides. fairnow.ai currently serves this product.

  • Saidot

    Saidot Ltd. · Commercial · AI governance platform

    Graph-based AI governance platform: 260+ risks, 620+ controls, 110+ policies and 170+ third-party models. Product page: meet 110+ policies including ISO/IEC 42001 and NIST AI RMF, plus the EU AI Act workflow. Homepage names Azure Marketplace; ISO 27001 is the vendor ISMS.

  • Scytale (ISO 42001)

    Scytale · Commercial · Compliance automation

    Compliance hub for an ISO 42001 AIMS: automated evidence collection, 24/7 continuous control monitoring, auditor-approved policy templates, vendor risk management and an audit dashboard. Cross-maps common controls with ISO 27001.

  • Sprinto (ISO 42001)

    Sprinto · Commercial · Compliance automation

    Autonomous trust platform for an audit-ready ISO/IEC 42001 AIMS. Heading: Get ISO 42001 ready, minus the grunt work. 4,000+ customers; AI discovery across extensions, devices, integrations and SSO; real-time policy-drift reviews; one-click Trust Centre.

  • Strike Graph (ISO 42001)

    Strike Graph · Commercial · Compliance automation

    Compliance platform for ISO 42001 AIMS: pre-loaded mapped controls, 100% pre-built AIMS policy and procedure templates, Verify AI documentation checks, gap analysis, evidence dashboards and export to an external assessor.

  • Thoropass (ISO 42001)

    Thoropass · Commercial · Compliance automation

    ISO 42001 compliance and audit platform with pre-built policy templates, an AI System Impact Assessment, automated evidence collection, a Risk Register, continuous monitoring, and one-audit-multiple-frameworks evidence reuse from a single platform.

Also on this site

Questions

Does ISO/IEC 42001 certify an AI product?

No. ISO describes an organizational AI management system. Certification is performed by independent certification bodies when an organization chooses it.

Does 42001 certification confer EU AI Act conformity?

This site has not found an official source stating that, so we make no such claim.

Is ISO/IEC 23894 or ISO/IEC 5338 a certifiable AI management system?

No official ISO catalog page we cite says that. 23894 is guidance on managing AI-specific risk. 5338 defines AI system life cycle processes. ISO/IEC 42001 is the management-system requirements standard organizations may choose to certify.

Sources for this intro

These official pages support the intro above. They are not endorsements.

Sources last checked on 15 October 2026.

  1. ISO/IEC 42001:2023 — AI management systems - ISO
  2. ISO 42001 explained: what it is - ISO
  3. UKAS grants first accreditation for ISO/IEC 42001 - UKAS

Free next step: take the AI assurance readiness self-check or create a free account. Quoted evidence stays on Pro.