ISO 42001 certification readiness
A complete, fixed-scope implementation of your AI management system (AIMS). We do the heavy lifting on documentation and design, your team owns the decisions, and you walk into the certification audit with evidence already in place.
Who it is for
- You have decided to pursue ISO 42001 certification and want a predictable path
- You do not have a dedicated compliance team, or they are already stretched
- You want an implementation that fits how your engineers actually ship AI, not a binder nobody reads
What you get
- AIMS scope statement, context analysis and interested-party register
- AI policy and supporting procedures, aligned with your existing policies
- AI system inventory, AI risk assessment and risk treatment plan
- AI system impact assessments for in-scope systems
- Final Statement of Applicability covering all 38 Annex A controls
- Roles, responsibilities and governance committee charter
- Awareness training for staff and role-based training for AI owners
- Internal audit of the AIMS by an independent member of our team
- Management review pack and facilitation
- Certification body selection support and Stage 1 / Stage 2 audit support
How it works
- Design (weeks 1–3)Confirm scope, build the inventory, set AI objectives and draft the policy set.
- Build (weeks 3–8)Run risk and impact assessments, finalize the Statement of Applicability and put the controls into your real workflows.
- Operate (weeks 8–12)Generate records: training, monitoring, supplier reviews. Then run the internal audit and management review.
- CertifyWe prepare you for Stage 1 and Stage 2 and help you respond to findings. The certification body makes the decision.
Not included
- Certification body fees, which are paid directly to the certification body
- Engineering changes to your AI systems, although we will specify what is needed
Questions
How long until we are certified?
For a typical B2B SaaS company, three to six months from kickoff to certificate. The certification body’s scheduling is often the longest single wait.
Can you guarantee certification?
No one honestly can, because the certification decision belongs to the accredited certification body. What we can do is make sure there are no surprises at Stage 1 or Stage 2.
Why can’t you certify us yourselves?
Accreditation rules require certification bodies to be independent of the consultants who implemented the system. That separation is what makes the certificate meaningful to your customers.
What tools do you work with?
We work in whatever you already use, whether that is a GRC platform such as Vanta or Drata, or your own wiki and ticketing system.
Read first
Get a fixed quote in one call
Thirty minutes to understand your AI systems and your customer’s deadline. You’ll leave with a scope and a price.
Book a scoping call