%20(19).png)
Are your customers, tenders, or regulatory authorities expecting proof of responsible AI management and a management system compliant with ISO/IEC 42001?
Certinova supports you from the initial status assessment to certification readiness: through gap analysis, the development and implementation of an AI Management System (AIMS), mandatory internal audits, and preparation for the certification audit.
Important distinction: We do not perform the certification ourselves. Certification is granted by an independent, accredited certification body of your choice. We prepare you for it, conduct the mandatory internal audits, and stand by your side during the certification audit.
Start now with a realistic picture of your maturity level.
Digital workflows and reusable evidence reduce manual effort – especially during re-certification.
Numerous completed audit and assessment projects form the basis of our methodology.
SaaS providers, cloud platforms, IT service providers, and regulated companies rely on Certinova
Regardless of where you are starting from, we provide the right service for your current maturity level—without detours and without overhead. The certificate itself is issued by your chosen certification body.
We assess your approach to AI against the requirements of ISO/IEC 42001 (Chapters 4 to 10 and Annex A), identify your AI systems and roles as a provider, developer, or user, uncover gaps, and prioritize measures. You start with a realistic overview, a clearly defined scope, and an actionable roadmap.
.svg)
We support you with AI policy, roles and responsibilities, risk assessment, impact assessments for AI systems, the statement of applicability, and processes for the entire AI lifecycle. You retain responsibility, while we provide structure, momentum, and audit-ready documentation.
.svg)
ISO 42001 requires internal audits at planned intervals as well as a management review. We conduct the internal audits, document findings, and track the implementation of corrective actions. This ensures you meet the mandatory requirements and are well-prepared for certification.
.svg)
We prepare you for the certification body's audits (Stage 1 and Stage 2), assist with the selection of the body, and act as your point of contact during the audit. Afterward, we support you through surveillance audits and recertification.
We combine professional assessment by experienced auditors with technology-driven processes.
The result: shorter audit cycles, less internal effort for you, and reports that meet your customers' requirements.
Evidence is collected in a structured manner and automatically validated – the professional assessment remains with our auditors.
Submit documents, answer questionnaires, track status—transparent instead of endless email chains.
A clear audit pattern from scope to report—fewer follow-up questions, predictable effort.
An experienced team supports you beyond the individual report—including follow-up audits and related frameworks.
From the distinction between consulting and certification to timelines and mandatory audits: find the most important answers here.
Can't find your question? Contact us directly.
No. Certificates are issued exclusively by accredited certification bodies. We do not provide certification; instead, we prepare you for certification readiness and support you during the certification audit. This separation ensures the independence and recognition of your certificate.
The standard requires internal audits at planned intervals (Chapter 9.2) and a management review (Chapter 9.3). We conduct the internal audits for you, including documenting findings and tracking follow-up actions. We prepare the management review with you, while the execution remains the responsibility of your management team.
For organizations that develop, provide, or use AI systems—from AI providers and SaaS companies to users in the SME sector and regulated industries. The standard is industry-agnostic and can be tailored to your specific role and scope.
Not automatically. ISO 42001 is a management system standard that supports systematic implementation, but it does not replace a legal conformity assessment under the AI Act. We use a joint control mapping to leverage overlaps and identify any outstanding requirements.
Let's get in touch to discuss your requirements.
