The ISO 42001 certification platform built for AI startups

ISO 42001 is the first international standard for AI management systems. ComplyJet helps AI startups build the governance, risk controls, and documentation needed to get certified — and demonstrate responsible AI to enterprise customers.

IconIcon

Book a Demo

Book a Demo

Trusted by hundreds of startups

Built for AI startups

Everything your startup needs to achieve ISO 42001

ISO 42001 is new territory. ComplyJet maps the AI management system requirements to your tech stack, builds your documentation, and guides your startup through certification — even if you have never done it before.

Automated compliance

A platform that automates your ISO 42001 controls

ComplyJet connects to your AI systems, cloud infrastructure, and identity tools — and monitors the governance and risk controls required by ISO 42001. Your AI management system documentation is built automatically and kept current as your stack evolves.

350+ integrations - connects to AWS, GCP, GitHub, Okta, Google Workspace, and every tool in your stack
Continuous monitoring - controls checked around the clock, issues flagged before they become audit findings
Always-current evidence - every check timestamped and stored, so your audit trail builds itself
World-class guidance

A team that owns the certification process with you

ISO 42001 is new enough that most teams have never done it before. ComplyJet's team understands the standard, maps it to your specific AI use cases, and guides you through every control — from AI impact assessments to supply chain obligations.

Guided onboarding - your program is configured to your specific tech stack on day one
Proactive gap reviews - we flag what needs fixing before your auditor does
End-to-end ownership - from initial scoping to the day your report is signed, ComplyJet drives the process
Streamlined audits

By the time your auditor shows up, you are already ready

ISO 42001 certification requires an AIMS (AI Management System) with documented controls, risk assessments, and evidence of operation. ComplyJet structures your AIMS from day one and keeps your evidence current so your Stage 2 auditor has everything they need.

Dedicated audit workspace - a clean, pre-populated environment your auditor accesses directly
Vetted auditor network - access to trusted, independent ISO 42001 auditors if you don't already have one
Faster turnaround - teams using ComplyJet consistently report shorter audit cycles and fewer auditor queries
Complete coverage

Everything you need to achieve ISO 42001 certification

Every capability a first-time ISO 42001 requires, built into the platform from day one.

AIMS policy & procedure templates
ISO 42001-specific policies covering AI governance, risk management, transparency, and accountability — ready on day one.
AI risk assessment framework
Structured AI risk assessment workflow covering the harms, impacts, and mitigations required by ISO 42001.
AI impact assessments
Templates and workflows for the AI impact assessments required by ISO 42001 — covering bias, transparency, and fairness.
Automated evidence collection
350+ integrations track your infrastructure controls — access, encryption, audit logging — across your AI stack.
Continuous control monitoring
Always-on checks across security and governance controls — issues flagged before they become audit findings.
AI supply chain management
Document and monitor your AI model providers, datasets, and third-party AI components — an ISO 42001 requirement.
Employee training & awareness
Automated AI governance training and acknowledgement tracking — required for responsible AI management.
Certification body workspace
A dedicated workspace for your Stage 1 and Stage 2 auditors — controls, evidence, and AIMS documentation in one place.
Transparent & predictable pricing

One price. No surprises as your team grows.

ComplyJet is built for startups — and priced to match. As you grow from a 5-person founding team to a 30 or 40-person company, your price stays exactly the same. One flat fee per company, not per seat, for the full startup journey up to 50 employees.

For startups up to 50 employees — no per-seat pricing, no surprises as you grow.

Single framework
$5,000/year
ISO 42001 — full platform access, guided onboarding, audit support, and Trust Center.
Two frameworks
$8,000/year
e.g. ISO 42001 + SOC 2 — same price regardless of how many people are on your team.
See it in action — book a 30-minute demo
We'll walk through your specific stack, scope the program, and give you a clear timeline and cost. No commitment required.
Book a Demo →
Beyond ISO 42001

ISO 42001 is the foundation. Add more without starting over.

Once your ISO 42001 controls are in place, most of the work for other frameworks is already done. ComplyJet maps your existing evidence to new frameworks, shows exactly what's missing, and closes the gaps - in weeks, not quarters.

ISO 27001
ISO 42001 builds on ISO 27001's ISMS framework — if you have ISO 27001, you have a significant head start on ISO 42001.
Learn more →
SOC 2
SOC 2 security controls map to ISO 42001's information security requirements — build both without duplicating work.
Learn more →
GDPR
ISO 42001's transparency and accountability principles align closely with GDPR requirements for automated decision-making.
Learn more →
FAQ

Common questions about ISO 42001

What is ISO 42001 and who needs it?

ISO 42001 is the first international standard for AI Management Systems (AIMS) — published in December 2023. It provides a framework for organisations developing or using AI to manage AI-related risks responsibly. Enterprise buyers, regulated industries, and EU AI Act compliance requirements are increasingly driving demand for ISO 42001 certification among AI-powered startups.

How does ISO 42001 relate to the EU AI Act?

ISO 42001 is not legally required by the EU AI Act, but it is widely expected to become an accepted standard for demonstrating AI Act compliance — particularly for high-risk AI systems. Having ISO 42001 certification signals to enterprise customers and regulators that your AI governance meets an internationally recognised benchmark.

How long does ISO 42001 certification take?

ISO 42001 is relatively new, but based on similar management system certifications, most startups can achieve certification in 3-6 months. The process involves building your AIMS, completing AI impact assessments, implementing controls, and completing a two-stage certification audit. ComplyJet compresses timelines with pre-built templates and guided workflows.

How much does ISO 42001 certification cost with ComplyJet?

ComplyJet's platform is $5,000/year for ISO 42001 — one flat price for startups up to 50 employees — as you grow from a founding team to 30 or 40 people, your cost stays the same. Certification audit fees are separate, paid to your accredited certification body (typically $8,000–$18,000 depending on scope and body). Many customers add ISO 42001 to an existing ISO 27001 program for $3,000/year incremental.

Do I need ISO 27001 before ISO 42001?

No — ISO 42001 does not require ISO 27001 as a prerequisite. However, ISO 42001 builds on the same management system principles as ISO 27001, and if you already have ISO 27001, a significant portion of your AIMS foundation is already in place. ComplyJet can run both programs simultaneously or help you build ISO 42001 from scratch.

What is an AI impact assessment?

An AI impact assessment evaluates the potential harms and benefits of an AI system — covering bias risks, transparency to affected individuals, explainability, and accountability measures. ISO 42001 requires documented impact assessments for AI systems in scope. ComplyJet includes structured templates and workflows to complete these correctly.

See how ComplyJet gets AI startups to ISO 42001 certification
30 minutes. We'll scope your ISO 42001 program, walk through your AI management system requirements, and give you a clear timeline and cost — no commitment required.
Book a Demo →