The ISO 42001 AI system inventory, written: every system with its purpose, role, dependencies, impact assessment and AI Act reading

An auditor's first question under ISO 42001 is which AI systems the company has, and the second is which of them have an impact assessment; the inventory answers both in one table, so this page writes it: every system with its purpose, the company's role, its status and owner, the data, tooling, hosting and people it depends on, the date of its assessment and the company's AI Act reading.

CompanyInventory owner

The systems

One entry per AI system the company builds, buys, embeds or relies on, the third-party models included; the names, roles, statuses, readings and assessment dates go in the link, the descriptions stay on this page.

The inventory

A summary table, then one section per system in the order entered; an empty field is written as a gap to fill, not skipped.

# AI system inventory: [company]

Inventory owner: [to be completed]. Systems listed: 0. Written on .

This inventory lists every AI system the company builds, buys, embeds or relies on, with its purpose, the company's role for it, its status and owner, the resources it depends on, the date of its impact assessment and the company's reading of it under the AI Act. It is the register the impact assessments, the resource controls and the life-cycle records hang from, and it is kept as documented information of the AI management system.

[No system listed yet. Add every AI system the company builds, buys, embeds or relies on, the third-party models included.]

## Upkeep

A system enters this inventory before it is built, bought or first used, and leaves it only as retired, with the date; the entry is updated when the purpose, the data, the model, the hosting or the owner changes, and the inventory is read at every internal audit and every management review.

This inventory is retained as documented information of the AI management system, versioned, and available to the certification body.

This inventory is written from the entries given. It is not certification or legal advice; the certification body reads the inventory for its completeness against what the company actually runs, and the AI Act readings recorded here are the company's own, to be checked against the Regulation.

In StandardOS the inventory is the spine of the AI system

Each AI system in StandardOS carries its impact assessment, its dependencies, its AI Act reading and its owner, the assessments come due on the calendar, and the Annex A controls on resources and on impact assessment are evidenced by the inventory itself rather than by a spreadsheet kept beside it.

Start 14-day free trial What ISO 42001 asks for

The AI system inventory, written system by system

The inventory