Standards
ISO 42001: Govern AI, prove your control
The first certifiable artificial intelligence management standard. Show your clients that your AI usage is framed, documented and responsible.
What is ISO 42001?
The international standard for artificial intelligence management
Objective
Frame the development and use of AI: transparency, accountability, human oversight and risk management.
Scope
Any organization that develops, provides or uses AI systems — whatever its sector.
Structure
ISO harmonized structure (clauses 4 to 10) and 38 Annex A controls, covering the full AI system lifecycle.
ISO 42001 in figures
Your AI governance challenges
AI is entering your processes faster than your internal rules.
Uninventoried AI usage
Your teams already use AI tools — often without a framework, an inventory or validation.
Clients demanding guarantees
Buyers and enterprise accounts increasingly require proof of AI control before signing.
Tightening regulation
EU AI Act in Europe, Law 09-08 and CNDP in Morocco: transparency and data protection obligations are coming fast.
Blurred lines between IT, legal and business
Who owns AI risks? Without a management system, nobody — which means everybody.
How Betterfly helps you
A structured AI management system, without starting from scratch.
Built-in ISO 42001 framework
Track every requirement and every Annex A control with its status, owner and deadlines.
AI statement of applicability
Justify applicable and excluded controls, and link each control to its evidence.
Evidence linked to your documents and actions
Policies, impact assessments, corrective actions: every piece of compliance evidence is traced in your system.
An integrated multi-standard system
Combine ISO 42001 with ISO 27001 or ISO 9001 in a single management system — without duplicating documentation.
Your certification journey
5 key steps to achieve and maintain your ISO 42001
- 01
Diagnosis
Inventory of your AI systems and usage, gap analysis against the requirements.
- 02
Build
Responsible AI policy, impact assessments and implementation of Annex A controls.
- 03
Internal audit
Verification of control compliance and of the AI management system's effectiveness.
- 04
Certification
Two-stage audit by an accredited certification body.
- 05
Continuous improvement
AI regulatory watch (AI Act, CNDP) and ongoing adaptation of controls.
Case study
E-Quality Engineering
Consulting - Digital solutionsChallenge
Need to frame AI development and usage (governance, transparency, accountability) on top of information security, facing enterprise client requirements.
Solution
Implementation of the AI management system via Betterfly for dual ISO 27001 and ISO 42001 certification: AI policy, impact assessments, Annex A controls linked to evidence.
Result
Dual ISO 27001 and ISO 42001 certification achieved following the March 2026 audit. Operational and auditable responsible AI framework.
Ready to structure your AI governance?
Betterfly is published by E-Quality Engineering, certified ISO 27001 and ISO 42001 in March 2026: we live what we sell.