State of ISO 42001
Certification
Who is certified to ISO/IEC 42001, who certified them, where they are, and how fast the market is moving. Built from the ISO42k directory and recomputed every time it changes.
- Publicly announced certifications
- 217
- Publicly announced certifications
- Certified in 2026 so far
- 110
- Certified in 2026 so far
- Countries
- 29
- Countries
- Certifying bodies observed
- 24
- Certifying bodies observed
01 · Key findings
What the data says
Announced certifications grew sharply after 2024
Announced certifications in the directory rose from 18 in 2024 to 88 in 2025. 2026 has 110 so far. The directory began in March 2026, so earlier years were collected retrospectively and may be undercounted.
Three certifiers lead disclosed certifications
Schellman, A-LIGN and SGS account for 56% of certifications where the certifying body is disclosed, among 24 bodies observed. Disclosure is uneven, so this is a share of disclosed certifications, not of the whole market.
The US leads, the field is global
65% of certified organizations are headquartered in the United States, with 29 countries represented in total.
Software vendors dominate public announcements
Enterprise Software is 44% of the directory. 20% fall outside the named categories; Professional Services is next at 14%. Vendors selling to enterprises have a commercial reason to publicize certification, which likely lifts their share.
02 · Growth
Certifications by quarter
- 40
- 33
Lighter bar: quarter in progress. Recent quarters fill in as announcements catch up.
View data table
| Quarter | Certifications |
|---|---|
| Q4 2023 | 0 |
| Q1 2024 | 0 |
| Q2 2024 | 2 |
| Q3 2024 | 4 |
| Q4 2024 | 12 |
| Q1 2025 | 13 |
| Q2 2025 | 18 |
| Q3 2025 | 20 |
| Q4 2025 | 35 |
| Q1 2026 | 40 |
| Q2 2026 | 33 |
| Q3 2026 | 33 |
| Q4 2026 (to date) | 1 |
03 · Certifiers
Who is issuing certificates
- Schellman52
- A-LIGN20
- SGS18
- BSI16
- Mastermind13
- DNV6
- Prescient Security5
- AENOR3
- 16 other certifiers28
View data table
| Certifying body | Organizations | Share of known certifiers |
|---|---|---|
| Schellman | 52 | 32% |
| A-LIGN | 20 | 12% |
| SGS | 18 | 11% |
| BSI | 16 | 10% |
| Mastermind | 13 | 8% |
| DNV | 6 | 4% |
| Prescient Security | 5 | 3% |
| AENOR | 3 | 2% |
| 16 other certifiers | 28 | 17% |
04 · Sectors
Who is getting certified
- Enterprise Software96
- Other43
- Professional Services30
- Cloud & AI Platforms19
- Cybersecurity17
- GRC & Compliance12
View data table
| Category | Organizations | Share of all organizations |
|---|---|---|
| Enterprise Software | 96 | 44% |
| Other | 43 | 20% |
| Professional Services | 30 | 14% |
| Cloud & AI Platforms | 19 | 9% |
| Cybersecurity | 17 | 8% |
| GRC & Compliance | 12 | 6% |
05 · Geography
Where certified organizations are based
- United States142
- India10
- United Kingdom8
- Australia6
- Canada5
- Spain5
- China4
- Israel4
- 21 other countries33
View data table
| Country | Organizations | Share of all organizations |
|---|---|---|
| United States | 142 | 65% |
| India | 10 | 5% |
| United Kingdom | 8 | 4% |
| Australia | 6 | 3% |
| Canada | 5 | 2% |
| Spain | 5 | 2% |
| China | 4 | 2% |
| Israel | 4 | 2% |
| 21 other countries | 33 | 15% |
06 · Methodology
How this report is built
Every figure is computed from the ISO42k certification directory, which lists organizations that have publicly announced ISO/IEC 42001 certification through a press release, trust center or certifying body announcement. Entries are reviewed daily and the report recomputes on every update.
Organizations are found through press releases, certification body announcements, company trust centers, a daily automated search, and submissions through the directory's Get listed form. Listings rely on public evidence; we do not independently verify certificates against accreditation registries. Member firms of a network that certify separately are listed separately. The directory began in March 2026; earlier certifications were collected retrospectively.
Dates are recorded to the month and reflect the certificate date where public, otherwise the announcement. 5 organizations with only a year on record count toward annual totals but not the quarterly chart. 1 certification was issued against the draft standard before ISO/IEC 42001 was published in December 2023 and is excluded from the growth figures.
Limits worth knowing
- The directory is not exhaustive. Only public certifications are counted, and many certified organizations never announce.
- Sources are predominantly English-language, which likely overstates the US share.
- Announcements lag certification, so the most recent quarters undercount.
- The certifying body is public for 74% of organizations, and disclosure has fallen over time. Certifier shares describe disclosed certifications, not the whole market.
- Category and headquarters reflect the organization, not the certified scope.
Cite this report
ISO42k. "State of ISO 42001 Certification." Data through October 4, 2026. https://iso42k.com/state-of-iso-42001
Certified and not listed?
Add your organization to the directory and it counts in the next update of this report.