Live report · Data through October 4, 2026

State of ISO 42001
Certification

Who is certified to ISO/IEC 42001, who certified them, where they are, and how fast the market is moving. Built from the ISO42k directory and recomputed every time it changes.

Publicly announced certifications
217
Publicly announced certifications
Certified in 2026 so far
110
Certified in 2026 so far
Countries
29
Countries
Certifying bodies observed
24
Certifying bodies observed

01 · Key findings

What the data says

1

Announced certifications grew sharply after 2024

Announced certifications in the directory rose from 18 in 2024 to 88 in 2025. 2026 has 110 so far. The directory began in March 2026, so earlier years were collected retrospectively and may be undercounted.

2

Three certifiers lead disclosed certifications

Schellman, A-LIGN and SGS account for 56% of certifications where the certifying body is disclosed, among 24 bodies observed. Disclosure is uneven, so this is a share of disclosed certifications, not of the whole market.

3

The US leads, the field is global

65% of certified organizations are headquartered in the United States, with 29 countries represented in total.

4

Software vendors dominate public announcements

Enterprise Software is 44% of the directory. 20% fall outside the named categories; Professional Services is next at 14%. Vendors selling to enterprises have a commercial reason to publicize certification, which likely lifts their share.

02 · Growth

Certifications by quarter

By the month of certification. The latest quarter is still filling in, and recent quarters tend to rise as announcements catch up.
ISO 42001 certifications per quarter, from the ISO42k directory
010203040
  1. 40
  2. 33

Lighter bar: quarter in progress. Recent quarters fill in as announcements catch up.

View data table
ISO 42001 certifications per quarter, from the ISO42k directory
QuarterCertifications
Q4 20230
Q1 20240
Q2 20242
Q3 20244
Q4 202412
Q1 202513
Q2 202518
Q3 202520
Q4 202535
Q1 202640
Q2 202633
Q3 202633
Q4 2026 (to date)1

03 · Certifiers

Who is issuing certificates

Based on the 161 organizations (74%) whose certifying body is public. Compare accreditation and focus areas in the certification bodies guide.
Certifications by certifying body
  • Schellman52
  • A-LIGN20
  • SGS18
  • BSI16
  • Mastermind13
  • DNV6
  • Prescient Security5
  • AENOR3
  • 16 other certifiers28
View data table
Certifications by certifying body
Certifying bodyOrganizationsShare of known certifiers
Schellman5232%
A-LIGN2012%
SGS1811%
BSI1610%
Mastermind138%
DNV64%
Prescient Security53%
AENOR32%
16 other certifiers2817%

04 · Sectors

Who is getting certified

Directory categories across all 217 organizations.
Certified organizations by category
  • Enterprise Software96
  • Other43
  • Professional Services30
  • Cloud & AI Platforms19
  • Cybersecurity17
  • GRC & Compliance12
View data table
Certified organizations by category
CategoryOrganizationsShare of all organizations
Enterprise Software9644%
Other4320%
Professional Services3014%
Cloud & AI Platforms199%
Cybersecurity178%
GRC & Compliance126%

05 · Geography

Where certified organizations are based

By headquarters country, 29 countries in total.
Certified organizations by headquarters country
  • United States142
  • India10
  • United Kingdom8
  • Australia6
  • Canada5
  • Spain5
  • China4
  • Israel4
  • 21 other countries33
View data table
Certified organizations by headquarters country
CountryOrganizationsShare of all organizations
United States14265%
India105%
United Kingdom84%
Australia63%
Canada52%
Spain52%
China42%
Israel42%
21 other countries3315%

06 · Methodology

How this report is built

Every figure is computed from the ISO42k certification directory, which lists organizations that have publicly announced ISO/IEC 42001 certification through a press release, trust center or certifying body announcement. Entries are reviewed daily and the report recomputes on every update.

Organizations are found through press releases, certification body announcements, company trust centers, a daily automated search, and submissions through the directory's Get listed form. Listings rely on public evidence; we do not independently verify certificates against accreditation registries. Member firms of a network that certify separately are listed separately. The directory began in March 2026; earlier certifications were collected retrospectively.

Dates are recorded to the month and reflect the certificate date where public, otherwise the announcement. 5 organizations with only a year on record count toward annual totals but not the quarterly chart. 1 certification was issued against the draft standard before ISO/IEC 42001 was published in December 2023 and is excluded from the growth figures.

Limits worth knowing

  • The directory is not exhaustive. Only public certifications are counted, and many certified organizations never announce.
  • Sources are predominantly English-language, which likely overstates the US share.
  • Announcements lag certification, so the most recent quarters undercount.
  • The certifying body is public for 74% of organizations, and disclosure has fallen over time. Certifier shares describe disclosed certifications, not the whole market.
  • Category and headquarters reflect the organization, not the certified scope.

Cite this report

ISO42k. "State of ISO 42001 Certification." Data through October 4, 2026. https://iso42k.com/state-of-iso-42001

Certified and not listed?

Add your organization to the directory and it counts in the next update of this report.