233 organizations are certified to ISO 42001. Yours should be next.
Directory updated November 2, 2026
124 of them since the start of 2026. We track every one, check who certified them, and provide the education and resources to get your organization certified too.
- 202419
- 202589
- 2026to date124
Dated certifications in the directory. Recent periods keep rising as announcements catch up.
State of ISO 42001 Certification
The directory, read as a dataset
Every figure here is counted from the 233 public certifications we track, and recomputed whenever the directory changes. No survey, no panel, no estimates.
Certifications by quarter
232 dated- 43
- 36
Lighter bar: quarter in progress. Recent quarters fill in as announcements catch up.
View data table
| Quarter | Certifications |
|---|---|
| Q4 2023 | 0 |
| Q1 2024 | 0 |
| Q2 2024 | 2 |
| Q3 2024 | 4 |
| Q4 2024 | 13 |
| Q1 2025 | 13 |
| Q2 2025 | 18 |
| Q3 2025 | 22 |
| Q4 2025 | 34 |
| Q1 2026 | 43 |
| Q2 2026 | 34 |
| Q3 2026 | 36 |
| Q4 2026 (to date) | 8 |
Announced certifications grew sharply after 2024
Announced certifications in the directory rose from 19 in 2024 to 89 in 2025. 2026 has 124 so far. The directory began in March 2026, so earlier years were collected retrospectively and may be undercounted.
Three certifiers lead disclosed certifications
Schellman, A-LIGN and SGS account for 52% of certifications where the certifying body is disclosed, among 30 bodies observed. Disclosure is uneven, so this is a share of disclosed certifications, not of the whole market.
Certifier disclosure is patchy
Only 64% of certified organizations say publicly who audited them. The rest announce a certificate without naming the body that issued it.
Key principles
What the standard is actually about
5 themes recur across every clause and all 38 Annex A controls. They are the vocabulary an auditor will use.
Security
AI systems face unique security threats beyond traditional software: adversarial inputs that trick models, data poisoning during training, model extraction attacks, and prompt injection. ISO 42001 requires controls that protect not just the infrastructure, but the models themselves and the data pipelines that feed them.
A company deploying an LLM-powered chatbot implements input sanitization to prevent prompt injection, restricts model API access with role-based controls, encrypts model weights at rest, and monitors for unusual query patterns that might indicate model extraction attempts.
Learn
From never heard of it to audit-ready
The clauses, the business case, and a roadmap with the work broken out phase by phase.
Key facts
The shape of the standard
- 2023
- Year the standard was published
- ISO.org
- 38
- AI-specific controls defined in the standard
- ISO 42001 Annex A
- 3 years
- Certification cycle (with annual surveillance audits)
- ISO certification rules
- 6–12 mo
- Typical time to achieve certification
- Certification body guidance
Get certified
Seven phases to certification
From scoping to the certification audit. Pick a phase to see what it involves.
- Phase 12–4 weeks
Leadership buy-in & scoping
- Get stakeholder buy-in across legal, IT, product, and executive teams
- Define which business units, products, or AI systems the AIMS will cover
- Certification doesn't have to cover the entire organization; start focused
- Allocate budget, assign a project lead, and form a governance committee
Leadership buy-in & scoping
- Get stakeholder buy-in across legal, IT, product, and executive teams
- Define which business units, products, or AI systems the AIMS will cover
- Certification doesn't have to cover the entire organization; start focused
- Allocate budget, assign a project lead, and form a governance committee
Start here
Start with the question you came with
Everything on this site answers one of these. Pick the one that sounds like your week.
- Who can certify us, and is their accreditation real?80 bodies, who accredits each one, and what they have already audited.
- Is this organization's claim real?233 listings with scope, date, and the certifier where it is public.
- What will it cost, and how long?Audit days from ISO/IEC 42006 Annex A, by headcount and scope. Not a quote.
- Does the EU AI Act apply to us?Your role, your risk tier, and the dates that bind you.
- Does this count toward a framework we already report on?Five crosswalks, requirement by requirement, with the gaps marked.
- Where do we stand today?A clause-by-clause readiness check you can run before anyone audits you.