FRAMEWORKS

ISO/IEC 42001

Artificial Intelligence Management System

THE DELIVERABLE

An accredited certificate valid for three years.

WHO NEEDS THIS?

Who needs this?

Startups building AI-native products, LLM wrappers, or integrating significant AI features that trigger enterprise procurement scrutiny.

OUR ENGAGEMENT

We perform the independent audit and issue the report or certificate.

We explicitly do not design controls, write policies, or provide remediation consulting.

BEFORE STARTING

You must have policies written, systems configured, and controls operational. If you are not there yet, you need a readiness consultant.

KEY DETAILS

Published December 2023. Roughly 38 Annex A controls covering data governance, model transparency, bias mitigation, and human oversight.

Covers specific AI risks that SOC 2 ignores: model governance, prompt injection, agent behaviour, and explainability.

While it represents best practice, ISO 42001 certification does not by itself discharge EU AI Act legal obligations.

An existing 27001 ISMS provides reusable controls (Clauses 4-10 are aligned). The audit cycles can be combined for significant savings.

TIMELINE / PRICE

Timeline

6-8 weeks for initial certification.

Price

Starts at $16,500.

REQUEST A FIXED-FEE QUOTE

SOC / 02

Fill out a short questionnaire with your company size and framework needs. We return a binding fixed-fee proposal within one business day.