Artificial Intelligence

ISO/IEC 42001 Certification

Independent third-party ISO/IEC 42001 certification for organizations that develop, provide, or use artificial intelligence. Show customers your AI is governed, risk-assessed, and accountable.

The Standard

What Is ISO/IEC 42001?

ISO/IEC 42001:2023 is the first international management system standard for artificial intelligence. It sets requirements for an AI management system (AIMS) covering AI policy, risk and impact assessment, data quality, transparency, human oversight, and the lifecycle of AI systems.

It applies to organizations of any size that build AI products, provide AI-enabled services, or use AI in their own operations. Certification means an independent auditor has evaluated your AI management system in operation.

Why Certify

Why Organizations Get ISO/IEC 42001 Certified

Answer AI Due Diligence

Enterprise buyers now ask vendors how they govern AI. A certificate answers that question with independent evidence.

Manage AI Risk

Structured risk and impact assessments address bias, data quality, security, and misuse before they become incidents.

Prepare for Regulation

An AIMS gives you documented governance to build on as AI rules and customer contract terms tighten.

  • For AI developers, AI-enabled service providers, and organizations using AI internally
  • Shares its management system structure with ISO/IEC 27001 for an integrated audit
  • Covers the full AI lifecycle, from design and data to deployment and monitoring
The Process

How ISO/IEC 42001 Certification Works

GMCS runs a defined, two-stage certification audit. You always know where you are in the process and what comes next.

1. Quote and applicationTell us your size, sites, and timeline. We scope the audit program and send a proposal.
2. Optional pre-assessmentA readiness audit that finds gaps before the certification audit. Recommended for first-time certifications.
3. Stage 1 auditReview of your documented AI management system and confirmation you are ready for Stage 2.
4. Stage 2 auditThe certification audit: your system evaluated in operation against ISO/IEC 42001 requirements.
5. CertificationCertificate issued once any audit findings are closed.
6. Surveillance and recertificationAnnual surveillance audits maintain the certificate; recertification renews it at year three.
Cost

What Determines ISO/IEC 42001 Certification Cost

There is no one-size price. Your quote is scoped from audit time, which is driven by four factors. Organizations with fewer than 100 employees qualify for the GMCS Small Organization Program's discounted pricing.

Get a Scoped Quote
Employee countTotal headcount including part-time and contractors sets baseline audit time
Number of sitesEach location in scope adds audit activity
Process complexityScope, risk, and regulated work take longer to audit
Certification pathNew certification, transfer, or recertification each scope differently
Transfers

Already ISO/IEC 42001 Certified? Transfer to GMCS.

If your current certification body is slow to schedule, slow to answer, or priced for someone else's overhead, transfer your certificate to GMCS. Your certification cycle and surveillance schedule continue, and in most cases there is no repeat of Stage 1 and Stage 2.

Start a Transfer

Why GMCS for ISO/IEC 42001

  • Certification body accredited by IAS to ISO/IEC 17021-1
  • Auditors from commercial, government, and regulated environments
  • Direct access to decision makers, no layers of process
  • Independent certification only, never a consulting upsell
FAQ

ISO/IEC 42001 Certification Questions

Who should get ISO/IEC 42001 certified?
Any organization that develops AI, offers products or services that use AI, or relies on AI in its own decisions. The standard scales to your role and the risk of your AI systems.
How does ISO/IEC 42001 relate to ISO/IEC 27001?
ISO/IEC 27001 protects information. ISO/IEC 42001 governs how AI systems are designed, used, and overseen. They share the same management system structure, so organizations with ISO/IEC 27001 can extend it to cover AI.
Does ISO/IEC 42001 certification mean we comply with AI laws?
No certificate equals legal compliance. ISO/IEC 42001 gives you documented AI governance and independent evidence of it, which supports compliance work under emerging AI regulations.
How long does ISO/IEC 42001 certification take?
Timing depends on how much AI governance you already have in place. Once your AI policy, risk assessments, and controls are in operation, certification is a two-stage audit.
How much does ISO/IEC 42001 certification cost?
Cost is driven by organization size, number of sites, and the number and risk level of AI systems in scope. GMCS maintains discounted pricing for organizations with fewer than 100 employees.
Does GMCS provide AI governance consulting?
No. GMCS is an independent certification body. Certification body rules prohibit certifying a system we helped build, and that independence keeps your certificate credible with customers.

Get Your ISO/IEC 42001 Certification Quote

Tell us your organization size, sites, and timeline. We'll scope the audit program and send a proposal, with no consulting upsell.

Request a Certification Quote
Accreditation & Recognition

Credentials You Can Verify

Verify GMCS’s accreditation, scope, and the status of any certificate we issue.

IAS Accredited Management Systems Certification Body GSA Contract Holder, Contract #47QRAA18D002C IAF CertSearch, Status: Active IAF Member of Multilateral Recognition Arrangement