Home Certification ISO/IEC 42001
AI
ISO/IEC 42001 certification
An AI management system connects AI-related responsibilities with decisions across relevant use cases and lifecycle activities. Identify whether your organization develops, provides or uses AI, together with the supplier and customer interfaces in the proposed scope.
AT A GLANCE
STANDARD REFERENCE
ISO/IEC 42001:2023
Artificial Intelligence Management System
ASSESSMENT SUBJECT
Your management system
Certification applies to the agreed organizational scope.
Your application identifies the edition, activities and sites to be assessed.
UNDERSTAND THE STANDARD
What is ISO/IEC 42001 certification?
ISO/IEC 42001 addresses an organization’s AI management system. It concerns how AI-related activities are governed within an identified scope. Certification does not approve every AI model, guarantee the truth of generated outputs or provide blanket conformity with all AI legislation.
Identify the organization’s role in developing, providing or using AI and the activities intended for inclusion. A team procuring an AI-enabled service has different responsibilities from one building and operating a model. The system needs to make those roles and interfaces understandable.
START WITH THE BOUNDARY
Make the scope clear.
Describe relevant AI systems, organizational functions, use cases, lifecycle activities and suppliers. Explain which decisions remain with the organization and which are controlled by another party. Avoid a scope statement so broad that it suggests unrelated AI products have been individually certified.
FROM INTENT TO EVIDENCE
Show how your system works.
These are examples of relevant information, not a universal list of mandatory documents. The evidence depends on your activities and applicable requirements.
01
An account of relevant AI activities and assigned responsibilities.
02
Risk and impact assessment arrangements appropriate to the context.
03
Processes for lifecycle decisions, changes and relevant supplier interfaces.
04
Monitoring, evaluation and responses to issues within the management system.
A PRACTICAL EXAMPLE
Put the scope into context.
Suppose a service business adopts an AI tool to support customer-facing work. It should distinguish the supplier’s technical responsibilities from its own decisions about permitted use, oversight and handling problems. This application scenario helps frame a scope discussion; it is not an endorsement of a particular tool.
Use this example to prepare your own scope and evidence.
HOW CERTIFICATION WORKS
A clear route from enquiry to decision.
01
Scope & application
Describe the activities, sites and standard you want assessed.
02
Assessment planning
Agree arrangements based on the application and programme.
03
Audit & response
Demonstrate the system and address findings with evidence.
04
Decision & review
Certification follows a decision, with continuing assessment as applicable.
An application or completed audit does not guarantee certification.
EDITION & APPLICATION
Confirm the right basis for assessment.
The planning reference is ISO/IEC 42001:2023. Applicable amendments, transition arrangements and the edition for your application must be confirmed before assessment is agreed.
Check the official ISO publication information. Use the official publication record to check the edition and related amendments.
CONNECTED MANAGEMENT NEEDS
Considering several standards?
Shared processes can support a coordinated system. Explain the common boundaries and the differences.
FREQUENTLY ASKED QUESTIONS
ISO/IEC 42001: frequently asked questions
Clear answers before you take the next step.
Can a certificate be used to claim that an AI system is always safe?
No. A management-system certificate has a defined subject and scope. Describe that subject accurately and do not extend the claim to absolute model safety, absence of bias or universal regulatory approval.
Can organizations that use AI consider this standard?
The scope discussion should explain whether the organization develops, provides or uses AI, and identify the activities it controls. Different roles create different responsibilities and interfaces.
Does certification approve an individual AI model?
It concerns the AI management system within its defined scope. It should not be presented as blanket approval of a model, its outputs or compliance with every AI-related rule.
Can ISO/IEC 42001 be assessed with other standards?
Other systems may share responsibilities or processes with ISO/IEC 42001, but each retains its own requirements. Explain the intended standards, sites and boundaries when discussing an integrated assessment.
What affects the cost and timing of ISO/IEC 42001 certification?
The scope, activities, personnel, locations and applicable programme determine the proposed assessment work. Readiness and responses to findings also affect timing. Request a quotation based on your actual organization.
START WITH YOUR ORGANIZATION
Discuss ISO/IEC 42001 with EQRM.
Tell us your activities, locations and ISO/IEC 42001 requirements. We’ll review availability and the scope of the proposed engagement.