All 38 controls
ISO/IEC 42001:2023 Annex A · 3 controls
Suppliers and customers
The controls about AI you did not build and AI you supply to others: what you require of a provider, and what your own customers are entitled to know.
- A.10.2Who is responsible for what across the AI supply chain
- A.10.3Assessing suppliers that provide or run AI for you
- A.10.4What you owe customers who use your AI system
Every control here needs an applicability decision and a justification in your Statement of Applicability, including the ones you exclude. See which clauses StandardOS covers.
Decide all 3 in one pass
StandardOS pre-fills applicability and a draft justification for every Annex A control from a seven-question profile, keeps each draft marked as unreviewed until you have made it yours, and tracks implementation against each one.