International Standard

ISO 42001 · AI Governance

The international standard for the Artificial Intelligence Management System. Establishes the requirements for responsible AI governance.

Published: 2023 Applies to: Organizations that develop, provide or use AI Relationship: Aligned with the EU AI Act

What is ISO 42001?

ISO 42001 is the first international standard specific to artificial intelligence governance. It establishes the requirements for implementing, maintaining and improving a responsible AI Management System.

ISO/IEC 42001 provides a structured system for governing AI and can support the implementation of controls and evidence related to the AI Act, without replacing the specific analysis of applicable regulatory obligations.

Key change: ISO 42001 introduces a systematic approach to AI governance, addressing aspects such as risk management, transparency and human oversight.

Who does it apply to?

ISO 42001 applies to any organization that:

  • Develops AI systems: Technology companies, startups, R&D departments.
  • Provides AI systems: Software providers, system integrators.
  • Uses AI systems: Companies in any sector that use AI in their operations.

Structure of ISO 42001

The standard is organized into clauses similar to other ISO standards:

  • Clauses 1-10: AI Management System requirements.
  • Governance: AI policies, roles and responsibilities.
  • Risk management: Identification, assessment and mitigation of AI risks.
  • Lifecycle: Management of the AI system lifecycle.
  • Transparency and explainability: Documentation and communication of AI decisions.

Relationship with the EU AI Act

ISO 42001 is designed to complement the EU AI Act:

  • Risk classification: The standard helps identify and classify AI systems under the AI Act.
  • Risk management: Provides a management framework that can support the implementation of controls and evidence relevant to the AI Act.
  • Documentation: Facilitates the creation of required technical documentation.
  • Impact assessment: Includes impact assessment requirements when required or appropriate depending on the organization's role, the system and the context of use.

How can I help you with ISO 42001?

ISO 42001 Implementation

We implement your AI Management System, aligned with the AI Act and ISO 42001, preparing your organization for certification.

View service →

AI Act + ISO 42001 Gap Analysis

We analyze your AI systems and design an action plan that integrates applicable AI Act regulatory requirements with a management system aligned with ISO/IEC 42001.

View service →

Impact Assessment

We carry out impact assessments when required or appropriate depending on the organization's role and the AI system.

View service →

Do you need to implement an AI Management System?

Request an assessment meeting →

20–30 minutes · No commitment · We review context, need and next steps.