Can Governance AI certify us to ISO/IEC 42001?

No. A consultancy can help you align, prepare and evidence the system. Certification is issued by an accredited certification body.

Is this a full ISO/IEC 42001 audit?

No. It is a readiness check for board discussion. It highlights likely gaps and evidence needs before a formal audit or diagnostic.

What evidence matters most?

An AI inventory, risk and impact records, named responsibilities, supplier checks, incident handling, monitoring and management review evidence.

Free ISO 42001 tool

Check whether your AI management system is ready for ISO/IEC 42001

ISO/IEC 42001 is the international management-system standard for AI. This checker turns your current controls into a board-level readiness read: what exists, what evidence is missing, and what to do before talking about certification.

Your sector

Governance maturity

Organisation size (optional)

Anything specific about your AI estate?

Which ISO/IEC 42001 areas need checking? (choose at least one)

AI system inventory and scopeLeadership, accountability and AI policyRisk and impact assessmentOperational controls and human oversightSupplier and outsourced AI controlsMonitoring, incidents and continual improvementEvidence pack for assurance or certification

What data is involved? (optional)

Personal data of staff or customersSpecial-category data (health, beliefs, biometrics)Data about childrenFinancial or payment data

Choose at least one area to continue.

What the board needs to decide

Which AI systems are in scope, including vendor features and shadow AI?
Who owns the AI management system and reports evidence to the board?
Which claims are readiness claims, and which would require a certification body?

Frequently asked questions

Can Governance AI certify us to ISO/IEC 42001?: No. A consultancy can help you align, prepare and evidence the system. Certification is issued by an accredited certification body.
Is this a full ISO/IEC 42001 audit?: No. It is a readiness check for board discussion. It highlights likely gaps and evidence needs before a formal audit or diagnostic.
What evidence matters most?: An AI inventory, risk and impact records, named responsibilities, supplier checks, incident handling, monitoring and management review evidence.

Find out where your AI exposure sits.

We'll tell you plainly what's worth doing, what isn't, and what a board or regulator will expect to see. No pitch deck.

Book a 15-minute call See what we've built

No obligation · no pitch.