AI Standard

ISO 42001

The international standard for AI management systems.
ISO/IEC 42001:2023AI management systemAll AI-using organisationsGlobally emerging

The requirements

ISO 42001:2023 is the world's first AI management system standard. It helps organisations establish, implement, maintain, and continually improve an AI management system, ensuring AI is used responsibly, transparently, and with appropriate human oversight. As AI use accelerates, ISO 42001 is rapidly becoming a boardroom requirement.

AI Use Policy
Board-approved policy governing how AI is used, approved, monitored, and governed in the organisation
AI Risk Assessment
Identifying and assessing risks from AI systems, bias, accuracy, explainability, security, and societal impact
AI System Inventory
Register of all AI systems in use, their purpose, data inputs, decision outputs, and human oversight mechanisms
AI Impact Assessment
Assessing impacts of AI use on individuals and society, similar in concept to POPIA DPIAs
Human Oversight Requirements
Ensuring humans remain in appropriate control of AI-assisted decisions, especially high-stakes decisions
AI Transparency & Explainability
Communication to stakeholders about how AI is used in decisions that affect them

Mapped in Encircle

This framework contributes to the following governance domains in your Encircle score:

D09 AI & DataD08 TechnologyD03 RiskD04 Compliance
How Encircle maps this framework

Encircle maps ISO 42001 requirements specifically to D09 AI & Data, the domain most frequently scoring in Red. AI Use Policy, AI risk register, AI system inventory, and human oversight documentation are all tracked as specific evidence categories.

Your certification journey
Assessed. Ready. Certified.

Encircle scores every gap, generates your remediation tasks, and tells you when your evidence is complete. Your accredited ISO 42001 auditor then issues your certificate.

01
Score
Encircle maps every ISO 42001 requirement and scores your current readiness across all applicable domains.
02
Remediate
Auto-generated tasks close every gap. Provide evidence once, it satisfies multiple frameworks simultaneously.
03
Ready ✓
Encircle tells you when your evidence meets every requirement. Your readiness score hits the threshold.
04
Certify
An accredited ISO 42001 auditor conducts your formal audit and issues your certificate. Encircle gets you to the point where booking one is worth it.
← Encircle (steps 1–3)
Your accredited auditor (step 4) →

Your ISO 42001 readiness score

Encircle tells you when you are ISO 42001 Ready, demonstrating that your AI management system meets the standard's requirements. Given the rapid growth of AI use, being ISO 42001 ready is increasingly a commercial and regulatory expectation. Encircle connects you with an accredited ISO 42001 auditor from the Encircle Network when you're ready to pursue certification.

Ready to track your ISO 42001 readiness?

Request early access and get your ISO 42001 score in your first session.

Book a demo

Tell us about your organisation.

Tell us a little about your organisation and we’ll walk you through Encircle against the frameworks that actually apply to you.

Early sign-on offer
Early access clients get preferential launch pricing and priority onboarding. Applies to all requests submitted before platform launch.

Encircle Network

Are you a specialist in your industry?

Join the Encircle Network and help businesses get governance-ready. We connect consultants, auditors and legal advisors with organisations working through their Encircle score. Tell us about your practice and we’ll be in touch about becoming an Encircle partner.