What Is ISO/IEC 42001? The AI Management System Standard Explained
ISO/IEC 42001:2023 explained: the world’s first certifiable AI management system standard.
ISO/IEC 42001:2023, published December 2023, is the world’s first certifiable AI management system standard. It specifies requirements for an Artificial Intelligence Management System (AIMS): an AI policy, risk assessment, objectives, controls (Annex A), performance evaluation, and continual improvement.
How certification works
An accredited certification body performs a Stage 1 audit (documentation and readiness) then a Stage 2 audit (effectiveness). Pass, remediate nonconformities, and you receive a certificate valid for three years with annual surveillance audits. Consultants can prepare you but cannot certify you.
Who has it
Published certificates include KPMG Australia (the first, via BSI), Paycom (via Schellman), and Automation Anywhere (via A-LIGN). An independent registry tracks named certified organizations.
- jarvis-registry/iso-42001 (independent registry)
Schellman reported first ANAB-accredited body (2024); named certified organizations incl. KPMG Australia, AWS, IBM Granite, BCG, CrowdStrike, CM.com, Swimlane, Meltwater, Vanta, Kandji, Mimecast (April 2026).
Get quotes from providers like this one
Tell us your AI governance goal once — we match you with the certification bodies and consultants that fit. Free, no obligation.