ISO 42001 AI governance
Define the AI management system scope, review the AI controls and retain assessment and approval evidence for the systems you actually operate.
Define the AI scope
Enable ISO 42001 and record the AI management system's boundaries, responsibilities, intended uses and affected systems.
The free edition includes this framework. Its workspace provides 30 controls, policy drafts and scoped auditor packages. The same framework is included in the full edition.
Work through the controls
Assign accountable owners and review the policies against your AI systems. Keep assessment inputs, decisions, approvals, evaluation results and operating evidence specific to those systems.
Provider connections alone do not validate an AI system. OpenAI and Anthropic currently verify administrative access; they do not collect automated control evidence. TypeSafe report imports require human review.
Review and export
Review generated assessment starters before relying on them. A numerical evaluation threshold is not a universal safety or fairness standard.
Use policy drafts, evidence sources and audit packages to retain the review trail. Readiness does not establish ISO certification.
SOC 2 Type I and Type II
Choose the audit type and period so control evidence and exported system-description material fit the intended SOC 2 engagement.
GDPR operational records
Maintain private privacy-workflow records and their supporting decisions without treating the workspace as legal approval or automatic regulatory filing.