ISO 42001
What an ISO 42001 certification costs
- StandardOS, a monthEvery framework, flat per organisation, any number of people. Ours.
- €249/mo
- The standard itselfISO/IEC 42001:2023, one single-user PDF, excluding VAT at a national standards body. ISO sells the same document for CHF 225. ISO and Austrian Standards, read 25 September 2026.
- €200.81
- The rules your auditor works toISO/IEC 42006:2025 sets what a certification body must do to audit an AI management system, on top of ISO/IEC 17021-1. It is where the audit-time method lives, and it is a document you buy. We have not read it, so this page does not restate it. ISO, read 25 September 2026.
- CHF 159
- The certification auditNo accredited body publishes a price, and ISO/IEC 42006:2025 is not open, so there is no arithmetic to show you. The figures circulating are sterling: Tempo Audits, in the United Kingdom, gives £3,500 to £20,000 plus VAT for initial certification and prints euro equivalents beside them, which are its own conversion and not a European price. Tempo Audits, read 25 September 2026.
- not published
- Conformity with the AI ActThe Commission's index of harmonised standards names no entry for artificial intelligence, so no standard has been cited in the Official Journal under the AI Act and none carries the presumption of conformity of Article 40. That includes the European adoption of this standard. A certificate is evidence of a managed system, not of legal conformity. European Commission, read 25 September 2026.
- not included
Every figure here is what its publisher printed, in the currency they printed it in, with the day we read it. Nothing on this page is converted, because a conversion is our arithmetic wearing somebody else's authority.
Who can actually issue the certificate
We read all 27 national accreditation registers on 25 September 2026. 12 bodies in 3 countries hold ISO 42001 in their accredited scope. 12 registers answer none, and 12 cannot answer the question.
Every number was checked twice. A count is only listed when the body's own scope document or scope table names the standard, not when a search matched its page. A zero is only listed when the same query returns bodies for ISO/IEC 27001; where it does not, the row says the register could not answer instead. Two registers would have given a confident zero from a field that returns zero for ISO/IEC 27001 as well.
| Member state | Bodies |
|---|---|
| ItalyACCREDIAACM Cert, Bureau Veritas Italy, CERTIQUALITY, CSQA Certificazioni, RINA Services. scope field in the accredited-bodies database; the same query returns 34 for 27001 | 5 |
| GreeceESYDAXIA CERT, Theodynamiki, TUV HELLAS (TÜV NORD), QMSCERT (Q-CERT). each body's own scope table, read one by one; a nonsense query returns nothing | 4 |
| NetherlandsRvADNV Business Assurance, TÜV NORD Nederland, BSI Group The Netherlands. the register indexes the scope documents; all three read in the PDF itself | 3 |
| AustriaAkkreditierung Austriasearch over accreditation documents; 27001 returns three bodies | 0 |
| BelgiumBELACthe register lists the schemes it accredits, and there is no AI management system scheme | 0 |
| CroatiaHAAsite search; 27001 matches and 42001 returns nothing found | 0 |
| CyprusCYS-CYSABthe published table has no management system certification body at all, only product and inspection | 0 |
| CzechiaCAIfulltext search in scopes; 27001 returns bodies | 0 |
| FinlandFINASfree text over competence areas; 27001 returns six bodies | 0 |
| IrelandINABthe directory prints each body's standards inline; 27001 appears and 42001 does not | 0 |
| PolandPCAa search over the scope files that answers as data; 27001 returns rows | 0 |
| PortugalIPACthe directory is organised by scheme and has a section for 27001; there is no 42001 section | 0 |
| RomaniaRENARadvanced search over accreditation records; 27001 returns eight bodies | 0 |
| SpainENACkeyword search over scopes; 27001 returns the information security bodies | 0 |
| SwedenSwedacregister search, published as an API too; 27001 returns seven bodies | 0 |
| BulgariaBASfilters by field, certificate number, city and name, not by standard | no answer |
| DenmarkDANAKfree text returns nothing for a standard number, though its business areas include information security and no AI area | no answer |
| EstoniaEAKthe keyword search returns no rows for 27001 either | no answer |
| FranceCOFRACthe site search reaches news and documents rather than the register | no answer |
| GermanyDAkkSsearches bodies rather than scopes; the scope is a PDF per body | no answer |
| HungaryNAHthe accredited-organisations section is an application whose links carry no address | no answer |
| LatviaLATAKthe site search returns no rows for 27001 either | no answer |
| LithuaniaLAthe register sits behind a bot check, and we do not bypass bot detection | no answer |
| LuxembourgOLASlists bodies by accreditation standard rather than scheme; the country has one ISO/IEC 17021-1 body | no answer |
| MaltaNAB-Maltathe site search returns nothing for 27001 either | no answer |
| SlovakiaSNASthe register is an application that renders nothing to a reader | no answer |
| SloveniaSlovenska akreditacijathe site search returns no register rows for 27001 either | no answer |
Read on 25 September 2026. Each register is the authority for its own country and this is a reading of it, so check the register itself before you act on a row. A certificate issued by a body without accredited scope for this standard is not an accredited certificate.
What you are buying, even without a price
ISO/IEC 42006:2025 builds on ISO/IEC 17021-1, the standard behind every accredited management system certificate, so an AI management system audit has the shape a reader of our ISO 27001 pages already knows.
Stage 1
The review of your documented system and whether it is ready to be audited.
Stage 2
The audit of the running system against the standard, on site or remote.
Surveillance
Shorter audits in the years after, and a recertification at the end of the cycle.
Where the numbers do exist, we show the arithmetic: what an ISO 27001 certification costs, by headcount.