ISO/IEC 42001 certification
Independent certification of how your organization manages the development, provision or use of artificial intelligence.
Service from . Quotations by email; portal support after the holiday break.
Email for a quotationUnderstanding the standard
ISO/IEC 42001 sets requirements for an artificial intelligence management system (AIMS). It applies to organizations that develop or provide AI, use AI from other suppliers, or do both. The scope should reflect the organization’s actual role and AI activities.
The AI activities in your scope
An organization using an external AI tool still makes decisions about its purpose, oversight and acceptable risk. A developer or provider has further responsibilities across the AI lifecycle. The audit considers the requirements relevant to the role and scope, including risk and impact assessment, the selected controls and evidence that they operate.
Certification covers the management system within the stated scope. It does not approve an AI product or guarantee that its outputs are safe, accurate or free from bias. Applicable legal duties still need to be identified and addressed.
One organization, an integrated management system
ISO/IEC 27001 remains our core service. ISO/IEC 42001 and ISO/IEC 27701 also address AI and privacy risks, with requirements of their own. ISO 9001 addresses the quality of products and services. Each standard can be used on its own or integrated with the others.
It is the same organization and its context. Where activities overlap, governance and common information can be shared. One internal audit programme and a joint management review can cover the integrated system, provided the requirements, competence, results and decisions needed for every standard are addressed. The scopes may differ and must remain explicit.
Complade reviews the degree of integration before planning a combined audit. Required audit hours and competence remain specific to each standard. Your organization arranges its internal audits; Complade provides independent certification.
The certification engagement
The process includes application and scope review, Stage 1 and Stage 2 evaluation of the management system, action on nonconformities and a certification decision independent of the audit team. Delivery and scheduling are confirmed from the activities, available evidence and required competence.
Complade provides the independent assessment. Your organization implements the system and arranges its internal audits and management review. Complade does not provide implementation consulting or internal audits for its certification clients.
Read the audit processAudit hours and pricing
Pricing will follow the same method as ISO/IEC 27001 and CyberSecure Canada: the audit hours actually required for the scope, with administrative overhead kept to a minimum through the portal and a streamlined process. The hours depend on the standard’s own rules and the complexity of the activities.
Numeric prices have not yet been published. Email certification.info@complade.com with your scope, people in scope and sites, readiness and target dates.
Complade customers: 30% off each additional standard
Complade customers receive a 30% discount on the certification fees for each additional standard they add. The quotation shows the base fee and the discount. Required audit time is determined from the scope and applicable rules; the discount does not reduce that time. Taxes and travel are stated separately.
Accreditation and engagement terms
Complade’s accreditation for ISO/IEC 27001 and CyberSecure Canada does not automatically cover another standard. Your quotation will state the requested programme’s accreditation status and applicable terms before you commit. Required competence and certification arrangements will be confirmed for your scope.
Check Complade’s official SCC accreditation scopeAI management and audit resources
Complade’s detailed resources for this standard are being prepared.
Resources coming soon