ISO 42001 Certified Companies
A verified, publicly sourced list of organisations that have announced ISO/IEC 42001 certification with a primary source. Every entry below links to the company press release, the certification body announcement, or the certificate document itself. LinkedIn posts and analyst commentary alone do not qualify.
Last reviewed October 15, 2026 · 37 verified entries · Maintained editorially. To suggest an addition, see the methodology page.
How to read this list
A certificate is only as strong as the certification body and the accreditation behind it. Where the CB is publicly disclosed we name it. Where it is not, we say so rather than guessing. The scope column reflects the AIMS scope as published. ISO 42001 scopes are almost always narrower than the whole company, so read the certificate scope statement rather than the marketing summary.
New to the standard? Start with our ISO 42001 guide. For the accreditation framework that governs which CBs can issue a valid certificate, see our ISO 42006 explainer.
Cloud and AI platform
Amazon Web Services (AWS)
2024-11-25- Certification body
- Schellman Compliance, LLC (ANAB-accredited)
- Scope
- Amazon Bedrock, Amazon Q Business, Amazon Textract, Amazon Transcribe
- Primary source
- aws.amazon.com · aws.amazon.com
- Notes
- First major cloud service provider to achieve accredited ISO 42001 certification. Completed first surveillance audit in November 2025 with no findings.
Anthropic
2025-01-13- Certification body
- Schellman Compliance, LLC (ANAB-accredited)
- Scope
- Anthropic AI management system
- Primary source
- anthropic.com
- Notes
- Accredited certification announced by Anthropic on 2025-01-13. Certificate available via the Anthropic Trust Center.
Cohere
2025-06-27- Certification body
- Not publicly disclosed
- Scope
- Cohere AI management system (formal scope not published)
- Primary source
- cohere.com
- Notes
- Announced together with ISO 27001 certification.
Google Cloud
2024-12-19- Certification body
- Not publicly disclosed
- Scope
- Google Cloud AI management system. In-scope services listed include Gemini Enterprise Agent Platform (formerly Vertex AI), Gemini for Google Cloud, Google Workspace with Gemini, the Gemini app, Gemini Enterprise, Document AI, Cloud Translation, Speech-to-Text and Text-to-Speech
- Primary source
- cloud.google.com · cloud.google.com
- Notes
- Announced as an accredited ISO/IEC 42001:2023 certification. Certificates can be requested through the Compliance Reports Manager.
IBM
2025-10-01- Certification body
- Schellman Compliance, LLC (ANAB-accredited)
- Scope
- AIMS supporting IBM Granite services (AI producer / model developer role). Certificate 1102257-2.
- Primary source
- ibm.com · ibm.com
- Notes
- Scope is limited to Granite models, not all IBM products. Original registration 2025-09-16; certificate version 2 issued 2026-08-12, valid through 2028-09-15.
Microsoft
Multiple, ongoing- Certification body
- Not publicly disclosed
- Scope
- GitHub Copilot, Microsoft Copilot, Microsoft Copilot Chat, Microsoft Copilot Health, Microsoft Copilot Studio, Microsoft Dragon Copilot (including Radiologist), Microsoft Foundry and Microsoft Security Copilot
- Primary source
- learn.microsoft.com
- Notes
- In-scope services per the Microsoft Learn ISO/IEC 42001 page (last updated 2026-09-11). Certificates and audit reports are accessible through the Service Trust Portal.
Red Hat
2025-09-10- Certification body
- Not publicly disclosed
- Scope
- Red Hat OpenShift AI
- Primary source
- redhat.com
- Notes
- Formal scope statement not published. The post says a third-party audit validated it.
ServiceNow
2025-12-18- Certification body
- Not publicly disclosed
- Scope
- AIMS supporting ServiceNow AI, including agents, tools, and utilities
- Primary source
- servicenow.com
- Notes
- Announced 2025-12-18. Scope per statement of applicability v1.0 dated 2025-08-22.
Snowflake
2025-04-23- Certification body
- Schellman Compliance, LLC
- Scope
- AIMS supporting the Snowflake AI Data Cloud Services (AI producer, AI developer and AI product/service provider roles). Certificate 1698444-1, valid through 2028-04-22.
- Primary source
- snowflake.com · snowflake.com
- Notes
- Certificate issued 2025-04-23; publicly announced on the Snowflake blog on 2025-06-12.
Big Four professional services
EY Greece (Consulting Services)
2026-02-18- Certification body
- TÜV NORD Hellas
- Scope
- Use, development and management of AI systems within EY Greece Consulting Services, including AI for internal operations and client engagements, AI model monitoring and audit, and design, development and deployment of AI models by the AI & Data team
- Primary source
- ey.com
- Notes
- Greek-language press release. EY Greece says it is the first company in Greece certified to ISO/IEC 42001 by TÜV NORD Hellas.
KPMG Australia
2024-11- Certification body
- BSI (RvA-accredited)
- Scope
- KPMG Australia AI management system
- Primary source
- bsigroup.com
- Notes
- Cited by BSI as the first organisation globally to be certified under BSI's RvA-accredited ISO 42001 scheme.
KPMG International
2025-12- Certification body
- Schellman Compliance (ISO 42001-accredited)
- Scope
- KPMG International AI management system, covering tools such as KPMG Workbench and aIQ Chat; builds on prior member-firm certifications (Australia, Spain, India, USA)
- Primary source
- kpmg.com
- Notes
- First Big Four international entity to achieve accredited ISO 42001 certification.
KPMG LLP (US)
2025-11-18- Certification body
- Schellman Compliance
- Scope
- KPMG U.S. AI management system (formal scope not published)
- Primary source
- kpmg.com
- Notes
- US member firm; certified ahead of KPMG International (December 2025).
PwC Taiwan
2026-06-15- Certification body
- SGS
- Scope
- PwC Taiwan AI management system (formal scope not published)
- Primary source
- sgs.com
- Notes
- Certification-body announcement. SGS says it was the first ISO/IEC 42001 certificate it issued in Taiwan.
Enterprise AI software
Automation Anywhere
2025-11-10- Certification body
- Not publicly disclosed
- Scope
- All AI-based automation software products, service offerings and solutions, including prompt-engineering features, Process Discovery, custom models, AI agents and integrations with third-party LLMs
- Primary source
- prnewswire.com
- Notes
- Announced as among the first 100 companies worldwide to earn ISO 42001:2023.
Clario
2026-02-18- Certification body
- Schellman
- Scope
- Clario AI management system
- Primary source
- prnewswire.com
CrowdStrike
2026-01-22- Certification body
- Not publicly disclosed
- Scope
- AI management system spanning core Falcon platform capabilities, including Endpoint Security, Falcon Insight XDR and Charlotte AI
- Primary source
- crowdstrike.com
- Notes
- Release says the audit was conducted by "an independent, accredited certification body" without naming it.
Datadog
2026-03-26- Certification body
- Not publicly disclosed
- Scope
- AI features across the Datadog platform, including Bits AI, Watchdog, Agent Observability and AI Guard
- Primary source
- datadoghq.com
Dataiku
Not publicly dated- Certification body
- Not publicly disclosed
- Scope
- Implementation and governance of the Dataiku Artificial Intelligence Management System
- Primary source
- dataiku.com · downloads.dataiku.com
- Notes
- Dataiku’s trust page states ISO/IEC 42001:2023 certification and links its certificate of registration. The certification body and dates are not stated on the trust page.
Doppel
2026-04-13- Certification body
- Not publicly disclosed
- Scope
- Doppel AI management system
- Primary source
- prnewswire.com
- Notes
- Doppel also holds ISO 27001 and ISO 27701. The release quotes the CEO of Mastermind but does not state who issued the certificate.
KnowBe4
2026-04-17- Certification body
- A-LIGN (ANAB-accredited)
- Scope
- Management, development, acquisition, deployment and use of all AI systems (including models and supporting data) that power KnowBe4 cloud-hosted data platforms and related services
- Primary source
- knowbe4.com
Perforce Software
2026-02-09- Certification body
- Not publicly disclosed
- Scope
- Seven AI products and features: Delphix Data Control Tower, BlazeMeter Test Data Pro, BlazeMeter AI Log Analysis, Gliffy Diagrams for Confluence Cloud (Create with AI), Perfecto AI, Puppet Infra Assistant and Puppet Code Assist
- Primary source
- perforce.com
Salesforce
2025-10-08- Certification body
- Not publicly disclosed
- Scope
- Agentforce, Einstein (AI Platform) and Slack AI
- Primary source
- salesforce.com · compliance.salesforce.com
- Notes
- Salesforce Compliance Site lists "ISO 42001:2023 - Salesforce AI Platform, Agentforce and Slack AI" (certificate download requires login; listing shows a period of 2026-09-16 to 2028-09-29). BDO is quoted in the blog post but is not identified as the certification body.
SAP
2025 (Q3)- Certification body
- Not publicly disclosed
- Scope
- SAP internal AI governance and key SAP Business AI solutions, including Joule, SAP AI Core and SAP AI Launchpad
- Primary source
- sap.com · news.sap.com
- Notes
- SAP Business AI Q3 2025 release highlights state SAP received its ISO 42001 certification in Q3 2025. The certificate is available to customers via SAP for Me.
Synthesia
2024-09-25- Certification body
- A-LIGN
- Scope
- Synthesia AI management system
- Primary source
- synthesia.io · a-lign.com
- Notes
- Certified by A-LIGN on an unaccredited basis while A-LIGN was undergoing ANAB accreditation for ISO 42001; Synthesia stated the certificate would become accredited once A-LIGN was accredited.
Talkdesk
2026-01-22- Certification body
- Not publicly disclosed
- Scope
- AI governance framework and management practices underpinning the Talkdesk CXA platform
- Primary source
- talkdesk.com
Thomson Reuters
2025-03-12- Certification body
- MSECB
- Scope
- AI-based solutions (model design, development, test, deployment and monitoring as AI provider and producer) for Westlaw (Edge, Precision, Advantage), CoCounsel Essentials, CoCounsel Tax, Audit & Accounting, CLEAR Investigate and Practical Law
- Primary source
- thomsonreuters.com · thomsonreuters.com
- Notes
- Current public certificate CERT-002034 (despite the file name), certified since 2025-03-12 and valid 2026-08-27 to 2028-03-11, per SoA v3.0 dated 2026-02-12. Initial scope was Westlaw Edge and Westlaw Precision; CoCounsel was added June 2025 and the scope has since expanded.
UiPath
2025-10-27- Certification body
- Schellman
- Scope
- UiPath AI management system governing AI across the UiPath Platform for agentic automation and orchestration, including the AI Trust Layer
- Primary source
- uipath.com
Workday
2025-06-12- Certification body
- Schellman
- Scope
- Workday AI governance program and AI development practices (formal scope not published)
- Primary source
- newsroom.workday.com
- Notes
- Release names Schellman and Coalfire as assessors. Schellman is quoted as Workday's partner "in achieving ISO 42001 certification". Announced alongside an independent attestation of alignment with the NIST AI RMF.
Zendesk
2025- Certification body
- Not publicly disclosed
- Scope
- All core Zendesk AI features, excluding recent acquisitions Local Measure and HyperArc
- Primary source
- zendesk.com · zendesk.com
- Notes
- Zendesk does not date the announcement; its Trust Center lists ISO 42001:2023.
European AI specialist
GMV (Secure e-Solutions division)
2026-04-14- Certification body
- AENOR (Spain)
- Scope
- GMV Secure e-Solutions AI management system, certified to ISO 42001:2024
- Primary source
- gmv.com
Unique AG
2025-03-07- Certification body
- TÜV SÜD South Asia
- Scope
- Development and deployment of SaaS for financial services clients based on pre-trained AI foundation models (Microsoft Azure OpenAI Services or client-provided models). Certificate registration number 99 420 00001. Valid through 2028-03-06.
- Primary source
- unique.ai
GRC and compliance
Anecdotes.ai
2025-10- Certification body
- Mastermind
- Scope
- Anecdotes AI management system
- Primary source
- anecdotes.ai
- Notes
- One of roughly 30 organisations worldwide holding ISO 42001 + ISO 27001 + ISO 27701 simultaneously (per Anecdotes). Anecdotes notes its scope is not published and accreditation is not stated for the certificates.
Drata
2025-12-02- Certification body
- Not publicly disclosed
- Scope
- Drata AI capabilities (formal scope not published)
- Primary source
- drata.com
Scrut Automation
2025-02-05- Certification body
- Intercert
- Scope
- Scrut AI governance and AI risk management system (formal scope not published)
- Primary source
- scrut.io
- Notes
- Scrut names Intercert as the external auditor for the certification. Accreditation not stated.
Thoropass
2024-09-17- Certification body
- Mastermind Assurance, LLC
- Scope
- Integrated management system supporting the operations underlying the Thoropass platform; Engineering and Operations teams; AI Developer role. Certificate MMIND-24091702, valid through 2027-09-16.
- Primary source
- thoropass.com · info.thoropass.com
- Notes
- Certificate issued 2024-09-17; press release dated 2024-10-23.
Vanta
2025-04-24- Certification body
- Not publicly disclosed
- Scope
- Vanta AI management system, combined with its ISO 27001/27017/27018 management system; AI impact assessment covered Vanta AI features such as Vendor AI, Trust Center chatbots and Questionnaire Automation
- Primary source
- vanta.com
- Notes
- Vanta says the certification came from an ANAB-accredited ISO 42001 assessor but does not name it.
Why a company might not appear
We list a company only when a primary source confirms the certificate: its own announcement, the certification body’s announcement or the certificate itself. Where the source does not name the certification body or its accreditation, we say so; ask for both before relying on a certificate. If you can supply a primary source for a missing company, contact our editorial team via the contact page.
Related reading: best ISO 42001 software · top AI audit firms · NIST AI RMF vs ISO 42001.