A living system, not a model card.
ISO/IEC 42001 certifies a complete AI Management System — a risk-based, continuously improving framework that governs how AI systems are designed, developed, deployed, and monitored across your whole organization.
The standard pairs management-system requirements (Clauses 4–10) with a catalog of 38 Annex A controls. Verigo’s Compliance by Design approach embeds those controls into how you already build and operate AI — so evidence is generated by the process, not assembled in a panic before each audit.
38 controls, nine objectives.
Policy & Organization
AI policy, roles, resourcing, and the governance backbone of the AI management system.
Impact Assessment
Assessing effects of AI systems on individuals, groups, and society before deployment.
AI System Life Cycle
Requirements, design, verification, deployment, and monitoring across the AI lifecycle.
Data & Transparency
Data quality and provenance, plus disclosure to interested parties and third parties.
Use & Relationships
Responsible use objectives, supplier allocation of responsibility, and customer commitments.
Four service lines, mapped
to the ISO 42001 lifecycle.
Engage any single stage or move through the whole journey with one accountable, senior-led team — and a peer-review quality gate on every deliverable.
ISO 42001 Readiness Assessment
Know exactly where you stand against ISO/IEC 42001:2023.
We benchmark your current state against Clauses 4–10 and all 38 Annex A controls, score your gaps by risk and effort, and hand you an independent remediation roadmap — the foundation for everything that follows.
AIMS Implementation Toolkit
We build the AI Management System with you — not for a shelf.
A practitioner-led program that stands up the full AIMS: AI risk assessment methodology, Statement of Applicability, the complete policy set, impact assessments, and the internal audit and management-review machinery that keeps it alive.
Stage 1 & Stage 2 Pre-Audit Preparation
Walk into the certification audit knowing you will pass.
A mock Stage 1 documentation review and a full Stage 2 mock audit run by a lead auditor independent of your implementation team — surfacing nonconformities while there is still time to close them.
Certification & Surveillance Support
Get certified — and stay certified across the three-year cycle.
We support you through the certification body’s Stage 1 and Stage 2 audits, manage findings to closure, then keep the AIMS audit-ready through annual surveillance and three-year recertification.
From gap analysis to certified — and beyond.
Most clients reach certification in four to eight months. Here is the route, with indicative durations.
Implementation and audit, under one roof.
Senior-led, always
Every engagement is run by practitioners with deep AI governance and ISO Lead Auditor credentials — never junior consultants with templates.
Audit-ready by design
Controls are embedded into how you build and operate AI, so evidence accumulates continuously instead of being reconstructed before each audit.
Independence preserved
Our pre-audit lead auditor is kept separate from your implementation team, protecting the integrity of the certification.
ISO 42001 builds on what you already have.
Our cross-framework control mapping lets your existing certifications accelerate ISO 42001 — and lets ISO 42001 evidence support the frameworks you already hold. Build it once, reuse it across:
Good to know before we start.
Questions on scope, timeline, or how this relates to ISO 27001? A senior practitioner will walk you through it.
Ready to certify to ISO 42001?
Tell us where you are — standing up your first AI governance program, or extending an existing ISO 27001 ISMS to cover AI. We'll come back with a scoped plan, fixed pricing, and the fastest path to a certified AIMS.