ISO/IEC 42001:2023 AI governance consulting.
We help organisations that build or use AI set up an ISO/IEC 42001 AI management system, from AI inventory and impact assessment to certification readiness.
Govern your AI responsibly, and show customers how.
Customers and partners ask how you govern AI, and emerging AI regulation such as the EU AI Act adds to those questions.
ISO/IEC 42001:2023 is the first international management system standard for artificial intelligence. It sets requirements for an AI management system (AIMS), with 38 reference controls in Annex A, and follows the same structure as ISO 27001, so both can run together.
Why ISO 42001 matters
- Responsible AI Documented controls for fairness, transparency and human oversight.
- Customer trust Answer AI governance questions from customers and partners.
- Regulatory readiness Groundwork for rules such as the EU AI Act.
- Integrated management Runs alongside an existing ISO 27001 ISMS.
How we deliver ISO 42001
-
Step 1: AI inventory
List AI systems, models, data sources and third-party AI services.
-
Step 2: Risk and impact assessment
Assess risks to individuals, groups and the organisation, including bias and misuse.
-
Step 3: Data and provenance
Document training data sources, quality checks and licensing.
-
Step 4: Controls and policies
Implement the AI policy, roles and Annex A controls.
-
Step 5: Monitoring
Set up performance, drift and incident monitoring for AI systems.
-
Step 6: Certification readiness
Run the internal audit and management review and prepare for the certification audit.
Trusted by
- Kavayah Cloud LLC.
- VirtueServe R&D Pvt. Ltd.
- Middleware Lab Inc.
- York IE Inc.
- Davinci Inc.
- Therapz Inc.
- Clouds Analytics Inc.
- RedKite Network LLP
- Yuva Infocare Pvt. Ltd.
- Fidelity Life Science
- Safebooks Global Pvt. Ltd.
- Xenett
- Cyfonix Pvt. Ltd.
- Interstride
- Symbion Coding Inc.