Services
ISO 42001 – certification for AI management systems
Evidence that your organisation governs AI systematically, with clear rules, responsibilities and accountable oversight.
Who needs this standard?
ISO/IEC 42001 is the first international management-system standard for artificial intelligence. It is relevant to organisations that develop AI and those that deploy third-party AI in their processes.
Customer expectations and the EU AI Act are increasing the need to demonstrate risk management, documentation, human oversight and operational monitoring.
Important context
ISO 42001 certification is not an official conformity declaration under the EU AI Act. It demonstrates a functioning management system that can support regulatory compliance.
What the audit covers
- AI policy and permitted uses
- Roles and responsibilities
- Risk assessment for AI systems
- Data quality and bias controls
- Transparency for affected people
- Human oversight and intervention
- Operational monitoring, incidents and corrective action
Process and audit days
The process follows Stage 1 readiness review and Stage 2 effectiveness assessment. For prepared organisations, certification typically takes two to four weeks. Audit time depends on company size and the number of AI systems.
- Stage 1: usually 0.5–1 auditor day
- Stage 2: usually 1–3 auditor days
- Independent report review and certification decision
- Annual surveillance and recertification in year three
Why Sertiva
We use AI in the quality assurance of our own audit reports, with documented role separation between preparation, review and the certification decision. We therefore audit AI management systems from practical experience, not theory alone.
Using AI without a clear governance system?
We will clarify which AI applications belong in scope and what is still needed for ISO 42001 certification.
Book a consultation