Comply · International standards
ISO/IEC 42001:2023 — AI management system
The certifiable AI management system standard.
ISO/IEC 42001:2023 is the international standard for an Artificial Intelligence Management System (AIMS). It follows the familiar management-system structure — leadership, planning, support, operation, performance evaluation, and improvement — with an Annex A set of AI-specific controls, and organizations can be certified against it.
Who it applies to
Organizations that want a certifiable, auditable management system for responsible AI.
Key obligations
- Establish AI policy, objectives, and leadership commitment
- Perform AI risk and impact assessments
- Implement Annex A controls across the AI lifecycle
- Monitor, audit, and continually improve the AIMS
How Maetra maps agents to ISO/IEC 42001
Maetra maps agents to the AIMS controls, tracks control assessments and evidence in Comply, and provides the audit trail internal and certification audits require. (Licensed standard — activated on demand for your workspace.)
In practice, Maetra:
- Scans and fingerprints each agent. Discover reads the agent’s code — its tools, data access and sensitivity, actions, model, and environment — into an evidence-backed profile tied to the exact file and commit.
- Decides what applies. That profile determines whether ISO/IEC 42001 is in scope for the agent and which of its requirements apply.
- Auto-detects controls and surfaces gaps. Controls your code already satisfies are detected automatically from the scan; the rest become a clear list of gaps, each tied to the requirement and the evidence it still needs.
- Proves it and keeps it current. Close gaps with linked evidence or generated documents — reused across every framework the same control supports — and Maetra re-checks on each rescan and flags evidence that has gone stale.
Related frameworks
Prove ISO/IEC 42001 compliance with Maetra
Classify your AI agents once and Maetra maps them to ISO/IEC 42001 and every other framework it supports — generating the evidence and documentation, tracking gaps and deadlines, and sealing every decision in an immutable audit trail.