ISO 42001

ISO 42001:2023 AI Governance

The world's first international standard for AI Management Systems. AWS, Google Cloud, and Microsoft are already certified. EU AI Act enforcement begins August 2026. One of the few boutique firms offering this at mid-market pricing.

Schedule a scoping call →Take the EU AI Act checklist →Read the EU AI Act reference →See the AI + Security Bundle →

The missing layer

ISO 42001 sits on top of your existing compliance stack.

Your SOC 2 covers security. Your GDPR program covers personal data. ISO 42001 is the governance layer for the AI systems that now connect them. It doesn't replace any of your existing work, it ties it together.

ISO 42001

AI Management System layer

SOC 2

Security base

ISO 27001

International ISMS

GDPR

Personal data in AI

HIPAA

PHI in AI systems

EU AI Act

Presumption of conformity

NIST AI RMF

US voluntary framework

Compare these frameworks side-by-side →