ISO/IEC 42001:2023 Certification

What is ISO/IEC 42001?

ISO/IEC 42001:2023 is the world's first international standard for an Artificial Intelligence Management System (AIMS). It gives organizations a structured, risk-based framework for governing the design, development and deployment of AI systems responsibly — covering AI risk management, ethics, transparency, stakeholder engagement, accountability and continual improvement.

Who needs ISO 42001 certification?

• Software firms and technology companies building or deploying AI-driven products
• Organizations in finance, healthcare and other regulated sectors using AI in decision-making
• Any organization wanting to demonstrate accountable AI governance to clients, regulators and partners

Certification requirements

Building an AIMS that meets ISO/IEC 42001:2023 requires an AI policy, AI risk assessment and treatment covering the AI system lifecycle, defined roles and accountability, and processes for monitoring AI system performance and impact. Your organization — or a consultant of your choosing — establishes and operates the AIMS; CCI's role is the independent assessment.

How certification works

Stage 1 audit

A documentation and readiness review of your AIMS.

Stage 2 audit

An audit of the AIMS in operation, on-site, remote, or blended.

Certification decision

A decision maker independent of the audit team decides whether to certify, in line with ISO/IEC 17021-1.

Annual surveillance and the three-year cycle

Certificates are valid three years, with annual surveillance audits and a full recertification audit at the end of the cycle.

What affects your quotation

Audit duration and fees depend on your employee count, number of sites, and the scope and risk profile of the AI systems in your AIMS — see certification cost and audit duration or request a quote using the form on this page.

Accreditation route

See our accreditation and recognition page for CCI's current scheme-specific accreditation status for ISO 42001, and for how our IAR and MRA-recognized (partner) certification routes compare.

Why certify with Company Certification International

Every certificate CCI issues is instantly verifiable via our certificate verification portal. CCI does not provide management-system consultancy, documentation drafting or implementation support. Engaging ISOXPERT Management & IT Consultants — an independent consulting and technology firm under common ownership with CCI — any other consultant, or no consultant has no bearing on any certification decision.

Frequently asked questions

Who needs ISO 42001? Any organization developing, deploying, or managing AI — including software firms, tech startups, finance, healthcare, and more.

How long does certification take? Typically 6–8 weeks from application to certification decision, subject to the organization's readiness.

What does ISO 42001 cover? AI risk management, ethics, transparency, stakeholder engagement, accountability, and continual improvement.

How much does it cost? See certification cost and audit duration or request a fixed quote using the form on this page.

Can we certify ISO 42001 alongside ISO 27001? Yes — AI governance and information security controls often overlap; see integrated management system certification.