ISO 42001
ISO 42001 compliance software
Compliancy supports an ISO/IEC 42001 AI management system by holding AI risk assessments, model governance records, human oversight procedures, and the technical documentation EU AI Act high-risk obligations require.
What ISO 42001 is
- ISO/IEC 42001 is an international standard for an artificial intelligence management system (AIMS), published in late 2023.
- It provides a certifiable framework for establishing, implementing, maintaining and continually improving an AIMS.
- It is closely related to the EU AI Act, which requires risk management, documentation and oversight for high-risk AI systems.
What organisations need to manage
- An AI system inventory with intended use and context
- AI risk assessments and treatment decisions
- Model governance records: versioning, data, performance and monitoring
- Human oversight and accountability procedures
- Technical documentation for high-risk obligations
- Transparency, incident response and continual improvement records
How Compliancy helps
AI inventory
Keep a structured inventory of AI systems with their purpose, context and risk classification.
Risk treatment
Record AI risks with owners, treatment decisions and the controls that reduce them.
Model governance
Hold model versioning, training data, performance metrics and monitoring in connected records.
Oversight & documentation
Track human oversight procedures and the technical documentation auditors and regulators ask for.
ISO 42001 controls21John DoeAdministratorJD
ISO 42001 readiness
AC-04Quarterly user access reviewSarah L.ISO 42001Operating
EN-01Encryption in transit and at restMarcus T.ISO 42001Operating
VN-01Vendor security reviewPriya R.ISO 42001Needs review
Reporting
Readiness you can show, not assemble.
Reports21John DoeAdministratorJD
Compliance overview
Track your compliance performance over time.
Last 6 monthsExport
78%Overall▲ 6%
235Policies▲ 12%
48Risks▼ 4%
12Assessments▲ 2
92%Tasks done▲ 8%
Compliance trend
DecJanFebMarAprMay
Compliance by category
78%Compliant
- Compliant 78%
- In progress 15%
- Non-compliant 7%
How it connects to other frameworks
ISO 42001 builds on ISO 27001 controls for security and shares risk treatment and documentation practices with SOC 2. AI-specific duties sit alongside them in the same workspace, mapped once.
ISO 42001 questions
Does Compliancy certify our AIMS?
No. Certification is issued by an accredited certification body. Compliancy manages the AIMS information used during the audit.
Does ISO 42001 make us EU AI Act compliant?
No. ISO 42001 supports the risk management and documentation practices the EU AI Act expects, but legal compliance depends on your specific obligations. Take legal advice.
Can we manage ISO 42001 and ISO 27001 together?
Yes. Shared controls are mapped to both frameworks in one workspace.
Related resources
Run ISO 42001 in one place.
Compliancy does not issue reports, certificates or legal advice. It manages the program behind them.