ISO 42001, made simple
Show customers you use AI responsibly. AI drafts your AI policy, risk and impact assessments from everything it knows about your organisation. You review, approve and get audit-ready.
ISO 42001 is the international standard for an AI management system (AIMS): the policies, risks and controls that keep your use of AI safe, fair and accountable. Certification proves it to your customers.
- Annex A controls
- 38
- control areas
- 9
- place for your whole AIMS
- 1
How it works
From scope to continuous compliance
Add your organisation
Tell us who you are, and upload any AI or security policies you already have so we can build on them.
Register your AI
List the AI systems you build, buy or use, with their owners, data sources and suppliers.
Assess risks and impacts
AI drafts a risk assessment and impact assessment for each system from what you’ve captured. You review, amend and confirm.
Build your AIMS
AI turns everything you’ve captured into your Statement of Applicability, AI policy and supporting procedures.
Stay compliant
Track staff training and policy sign-offs, run internal audits and management reviews, and log incidents as you go.
Everything,
in one place
Your existing documents
Upload what you have. We compare it against each requirement and flag conflicts and gaps.
AI system register
One record for every AI system you build, buy or use, from in-house models to everyday tools like chatbots and copilots.
Risk and impact assessments
AI-drafted assessments of the risks each system poses to your organisation, and its impact on people and society.
Statement of Applicability
A live register of all 38 Annex A controls, drafted with AI and exported to PDF whenever you need it.
Policy pack
Your AI policy and supporting procedures, written by AI for your organisation, with versioning and approval.
Continuous compliance
Training records, policy acknowledgements, internal audits, management reviews and incidents, with evidence attached, so your AIMS stays current between audits.
Common questions
- What is ISO 42001?
- ISO/IEC 42001 is the international standard for an AI management system (AIMS). It sets out how to use and develop AI responsibly: assess its risks and impacts, choose controls to manage them and keep improving over time. We support the current version, ISO/IEC 42001:2023.
- We only use AI tools. Does it apply to us?
- Yes. ISO 42001 covers organisations that use AI as well as those that build it, so the tools your team relies on every day are in scope.
- Already have ISO 27001?
- You’re well on the way. Both standards share the same management system structure, so your people, assets, suppliers, audits and reviews carry across.
- Does ComplySmart certify me for ISO 42001?
- No. ISO 42001 is certified by an accredited certification body after an external audit. We get you ready for that audit and keep your AIMS in shape afterwards.
Get audit-ready
and stay that way.
ISO 42001 is coming to ComplySmart. Book a call with our Sales Manager to hear what’s planned and get early access.
Book a call with our Sales Manager(opens in a new tab)