AI Compliance Vendors

Buying the standard

ISO 42001 PDF: where to get the standard legally, and what it costs

There is no legal free download of the full ISO/IEC 42001 PDF. The standard is copyrighted and sold by ISO for CHF 225, and by national standards bodies, some of which sell identical adoptions for far less, such as Estonia’s EVS at €32.24 [1][9][13]. This guide lists where to buy it and what each seller charged on November 5, 2026, what you can read free and legally, the risks of pirated copies, what you actually need the text for, and the free ISO 42001 tools on this site.

Reviewed 5 Nov 2026 · next review by 3 Feb 2027 · 28 sources · report an error

Is there a free ISO 42001 PDF?

No. ISO/IEC 42001:2023 was published in December 2023 by ISO and the IEC through their joint AI committee, ISO/IEC JTC 1/SC 42, and ISO sells it for CHF 225 [1]. ISO says it owns the copyright in its publications, and that “any unauthorized use such as copying, scanning or distribution is prohibited” without permission [13]. So a free full-text “ISO 42001 PDF” on a file-sharing site, a document library or a vendor blog is not licensed by ISO.

Two things are free and legal: a preview of the front of the standard, and plenty of plain-language material about it. You can browse the foreword, introduction, scope, normative references and terms on ISO’s Online Browsing Platform [11], and an official sample PDF runs from the cover to clause 4.4 [12]. The rest of this guide covers both, and the cheapest legal ways to get the whole text.

Where to buy the ISO 42001 PDF, and what it costs

You can buy the ISO edition from ISO or the IEC, or a national adoption from a national standards body. A national adoption reproduces the international text with a national cover and foreword. BSI, for example, says its 2026 European adoption has no technical differences from the 2023 text and no changes to requirements or guidance [5]. These are the prices each seller showed on its own page on November 5, 2026.

Where to buy ISO/IEC 42001, by seller (checked November 5, 2026)
SellerEdition soldFormat and pagesPrice shown
ISO (iso.org)ISO/IEC 42001:2023, edition 1 [1]PDF or paperCHF 225 [1]
IEC WebstoreISO/IEC 42001:2023, edition 1.0, published December 18, 2023 [2]Electronic or hardcopy; English or French; 51 pages [2]CHF 225 for one user; tiers for 2 to 20 users [2]
ANSI Webstore (US)INCITS/ISO/IEC 42001:2023 (2024), an identical national adoption [3]Price not displayed to us [3]NSAI’s shop lists the same document at €163.66 excl. VAT, 64 pages [4]
BSI (UK)BS EN ISO/IEC 42001:2026, published March 31, 2026; replaces BS ISO/IEC 42001:2023 [5][24]Digital [6]£322 [6]
NSAI (Ireland)I.S. EN ISO/IEC 42001:2026, identical to ISO/IEC 42001:2023 [7]51 pages [7]€82.00 excl. VAT [7]; the ISO edition is €217.00 excl. VAT [8]
EVS (Estonia)EVS-EN ISO/IEC 42001:2026, valid from April 1, 2026 [9]PDF or paper, English [9]€32.24 incl. tax; online browsing from €2.48 [9]
Standards Australia (via Intertek Inform)AS ISO/IEC 42001:2023, published February 16, 2024; “identically adopts” the ISO text [10]Hardcopy, or PDF for 1, 3, 5 or 9 users [10]£113.81 excl. VAT [10]
Prices are for a single-user licence unless stated and change often; convert at the day’s rate. National adoptions carry the same requirements as the ISO edition [5][7][10]. We have no commercial relationship with any seller.

Two points before you pay. First, the EU edition is an adoption, not a new version: EN ISO/IEC 42001:2026 still reproduces ISO/IEC 42001:2023 [5][9], and it carries no annex linking it to the EU AI Act [25]. Second, check the licence. The IEC’s CHF 225 price is for one user, and it sells multi-user licences in tiers from 2 to 20 users [2], and Standards Australia’s PDF is sold in 1, 3, 5 and 9-user versions [10]. If several people will work from the text, buy the licence that covers them.

What you can read for free, legally

  • ISO’s Online Browsing Platform (OBP). ISO lets anyone preview parts of a standard, such as the foreword, introduction, scope, normative references and terms and definitions, to decide whether it is the one they need [11]. ISO’s catalog page for 42001 links to it [1].
  • The official sample PDF. The sample published through iTeh Standards covers the front matter, the table of contents and the body from clause 1 to clause 4.4. It shows that Annexes A and B are normative and Annexes C and D informative [12].
  • ISO’s own explainer. ISO’s “ISO/IEC 42001 explained” page, dated August 31, 2026, covers what an AI management system is, who uses the standard and first steps. It says certification is voluntary and that ISO does not certify organizations [15].
  • Paid browsing for a few euros. EVS offers online browsing of its adoption from €2.48, a cheap way to check one clause before you buy [9].
  • The NIST-hosted crosswalk. NIST’s AI Resource Center lists a free crosswalk from the NIST AI RMF to ISO/IEC 42001, provided by Microsoft; NIST notes that listing a crosswalk does not mean it endorses the mapped resource [26].
  • Our free tools. A paraphrased ISO 42001 checklist, a certification cost calculator and the ISO 42001 guide with all 38 Annex A control titles. See what each one does.

What is not free: there is no amendment or corrigendum to download. The IEC Webstore’s history table for 42001 is empty, and ISO’s catalog lists edition 1 at the published stage with no amendment or revision [1][2]. Compare ISO/IEC 27001, whose 2024 climate-action amendment ISO lists at CHF 0 [21].

Is there a newer edition or an amendment of ISO 42001?

Not as of November 5, 2026. ISO’s catalog shows ISO/IEC 42001:2023 as edition 1 at stage 60.60, “International Standard published”, with no amendment, revision or replacement listed [1], and the IEC lists no amendment or corrigendum [2].

Two things can look like a new edition and are not. The European adoptions dated 2026 (EN, BS EN, I.S. EN and EVS-EN ISO/IEC 42001:2026) all reproduce the 2023 text [5][7][9]. And ISO lists a separate new SC 42 project, at stage 20.00, for guidance on implementing ISO/IEC 42001, including the competencies of AI management system professionals; it is a new document, not a change to 42001 [16]. If you already own the 2023 text, you don’t need to buy a 2026 adoption. BSI offers refunds to customers who bought its 2026 version in error after already holding the 2023 one [5].

What are the risks of a pirated ISO 42001 PDF?

Risks of an unlicensed ISO 42001 PDF
RiskWhat happensSource
CopyrightISO prohibits unauthorized copying, scanning or distribution, and posting its content elsewhere needs its written permission [13].ISO
Malware and phishingNetskope Threat Labs found 5,000 phishing PDFs on 260 domains, pushed up search results for PDF documents. Some led to card theft, others to the Lumma Stealer malware. More than 7,000 users at about 1,150 organizations were affected from the second half of 2024 [14].Netskope Threat Labs, reported by The Hacker News, February 2025
Wrong textA file you can’t trace may be the final draft (FDIS) rather than the published standard; ISO and the IEC released samples of both [12][27]. Even reputable mappings, such as the NIST-hosted crosswalk, were prepared on the FDIS text [26][28].ISO/IEC sample, NIST AI Resource Center
Nothing to showYour licence is the proof you can use the text internally and quote it in your own policies; a leaked file gives you none. Our view, not a rule from a certification body.Our analysis

The malware risk applies to anyone searching for free copies of paid documents, not only to standards. The Netskope research found attackers also uploaded PDFs to legitimate document repositories [14]. Treat any download page that asks you to complete a CAPTCHA and then run a command as hostile.

What do you actually need the full text for?

Not every reader needs to buy the standard. This table is our view of when the full text is worth the money and when the free material is enough.

When you need the full ISO/IEC 42001 text
Your taskNeed the full text?Start with
Deciding whether to pursue ISO 42001NoThe OBP preview [11], ISO’s explainer [15] and our ISO 42001 guide
Assessing an AI vendor that claims certificationNoThe vendor’s certificate scope and our certified companies list
Budgeting for certificationNoThe cost calculator and the certification guide
Gap analysisHelpfulOur checklist, then check open items against the text
Writing the AI policy, risk method and Statement of ApplicabilityYesThe full text, including the Annex B implementation guidance, which is normative [12]
Internal audit and preparing for Stage 1 and Stage 2YesThe full text; auditors work from the published requirements
Building an AI impact assessment processYes, plus ISO/IEC 42005ISO/IEC 42005:2025, CHF 181 [17], and our impact assessment template

One copy for the person who owns the AI management system is usually enough to start. Buy more seats when internal auditors and control owners begin working from the text.

Free ISO 42001 resources on this site

  • [ISO 42001 checklist](/tools/iso-42001-checklist). A gap-analysis checklist with 69 items: 31 requirement items for clauses 4 to 10 and all 38 Annex A controls in 9 areas, each with evidence examples. You can mark status and add notes; progress stays in your browser. It exports to Markdown, CSV or Excel, and the print view can be saved as a PDF from your browser. Every line is our paraphrase, not ISO’s text, so it does not replace the standard.
  • [ISO 42001 certification cost calculator](/tools/iso-42001-certification-cost). Estimates Stage 1 and Stage 2 audit fees, implementation consulting, internal labor and surveillance audits from your size and scope, as ranges rather than single figures.
  • [ISO 42001 guide](/frameworks/iso-iec-42001). What clauses 4 to 10 require, the titles of all 38 Annex A controls, how certification works and how the standard relates to the EU AI Act, with sources.
  • [AI risk register](/tools/ai-risk-register). An editable register of 14 AI risks mapped to ISO/IEC 42001, the NIST AI RMF, the OWASP LLM Top 10 and EU AI Act Article 9, exportable to XLSX, CSV or Markdown.

Related standards and what they cost

Most ISO 42001 programs end up needing one or two companion documents. These are the list prices on ISO’s catalog pages, checked November 5, 2026.

Companion standards to ISO/IEC 42001 (prices checked November 5, 2026)
StandardWhat it is forPagesPrice
ISO/IEC 42005:2025Guidance on AI system impact assessment; complements 42001 and 23894 [17]39 [17]CHF 181 [17]
ISO/IEC 42006:2025Requirements for bodies that audit and certify AI management systems; supplements ISO/IEC 17021-1 [18]31 [18]CHF 159 [18]
ISO/IEC 23894:2023Guidance on AI risk management [19]26 [19]CHF 155 at ISO [19]; €24.80 incl. tax as EVS-EN ISO/IEC 23894:2024 [20]
ISO/IEC 27001:2022Information security management system requirements [22]19 [22]€149.00 excl. VAT at NSAI [22]; its 2024 amendment is free [21]
ISO/IEC 27006-1:2024Requirements for bodies certifying information security management systems [23]47 [23]CHF 196 [23]
Most buyers need 42005 only if they want detailed impact assessment guidance, and 42006 only if they run or select a certification body. For 23894, see our ISO 23894 guide; for how 42001 fits an existing ISMS, see ISO 42001 vs ISO 27001.

How to buy the right copy

  1. 01

    Pick the edition your auditors and customers expect

    The ISO edition and the national adoptions carry the same requirements [5][7][10]. If you work mainly in one market, its local adoption may be cheaper; BSI recommends its adoption for organizations operating in or with the UK [5].

  2. 02

    Compare two or three sellers

    On November 5, 2026 prices ran from €32.24 incl. tax at EVS to £322 at BSI for the same content [6][9]. Check the currency, tax and licence terms before you compare.

  3. 03

    Buy the right number of seats

    Single-user licences are the default. The IEC sells 2 to 20-user tiers [2] and Standards Australia sells 3, 5 and 9-user PDFs [10].

  4. 04

    Add companion standards only when you need them

    ISO/IEC 42005 for impact assessments and ISO/IEC 23894 for risk method are the usual additions [17][19].

  5. 05

    Keep the receipt and watch for changes

    Store proof of purchase with your AIMS records. ISO’s catalog page will show any amendment or new edition [1].

Next reads

Advertise on this page

Frequently asked questions

+Is ISO 42001 free?

No. ISO/IEC 42001:2023 is sold by ISO for CHF 225 and by national standards bodies [1]. ISO prohibits unauthorized copying or distribution [13]. You can legally read a preview on ISO’s Online Browsing Platform and an official sample that runs to clause 4.4 [11][12].

+Where can I download the ISO 42001 PDF legally?

From ISO or the IEC Webstore (CHF 225), or as a national adoption from a body such as BSI, NSAI, EVS or Standards Australia [1][2][6][7][9][10]. Each sells a licensed PDF, and the prices differ widely for the same content.

+How much does the ISO 42001 standard cost?

CHF 225 from ISO and the IEC [1][2]. On November 5, 2026 national adoptions ranged from €32.24 including tax at EVS in Estonia to £322 at BSI [6][9]. The cost of certification itself is far higher; see our cost calculator.

+Is EN ISO/IEC 42001:2026 different from ISO/IEC 42001:2023?

No. The 2026 date is when the European bodies adopted it. BSI says its 2026 adoption has no technical differences from the 2023 text and no changes to requirements or guidance [5], and NSAI and EVS list ISO/IEC 42001:2023 as the base document [7][9].

+Is there an ISO 42001 amendment or corrigendum?

Not as of November 5, 2026. ISO lists edition 1 at the published stage with no amendment or revision, and the IEC Webstore’s history table is empty [1][2]. A separate SC 42 project on implementation guidance is at the new-project stage and is not an amendment [16].

+Is the ISO 42001 FDIS the same as the published standard?

No. The FDIS is the final draft that national bodies vote on before publication, and ISO and the IEC publish separate samples for the FDIS and the published text [12][27]. Use the published edition for policies and audits.

+Can I share one ISO 42001 PDF with my whole team?

Not on a single-user licence. The IEC sells tiers for 2 to 20 users [2], and Standards Australia sells PDFs for 1, 3, 5 or 9 users [10]. ISO says copying or distribution without permission is prohibited [13].

+What languages is ISO 42001 available in?

ISO and the IEC Webstore sell the ISO edition in English and French [1][2]. National bodies sell their own adoptions; the NSAI and EVS editions we checked are in English [7][9].

Sources

  1. [1]ISO, ISO/IEC 42001:2023, Information technology — Artificial intelligence — Management system (catalog page) (2023-12).
  2. [2]IEC, IEC Webstore: ISO/IEC 42001:2023 (2023-12-18).
  3. [3]ANSI Webstore, INCITS/ISO/IEC 42001:2023 (2024), Identical National Adoption of ISO/IEC 42001:2023.
  4. [4]NSAI Standards Store (Intertek Inform), INCITS/ISO/IEC 42001:2023(2024) (2024-07-29).
  5. [5]BSI, BS EN ISO/IEC 42001:2026, Information technology. Artificial intelligence. Management system (2026-03-31).
  6. [6]BSI, BS EN ISO/IEC 42001:2026 (BSI checkout, digital).
  7. [7]NSAI, I.S. EN ISO/IEC 42001:2026 (2026-04-02).
  8. [8]NSAI Standards Store (Intertek Inform), ISO/IEC 42001:2023 (2023-12-18).
  9. [9]Estonian Centre for Standardisation and Accreditation (EVS), EVS-EN ISO/IEC 42001:2026 (2026-04-01).
  10. [10]Standards Australia (via Intertek Inform), AS ISO/IEC 42001:2023, Information technology - Artificial intelligence - Management system (2024-02-16).
  11. [11]ISO, What is the ISO Online Browsing Platform (OBP)?.
  12. [12]ISO/IEC via iTeh Standards, ISO/IEC 42001:2023 official sample (front matter to clause 4.4).
  13. [13]ISO, Copyright.
  14. [14]The Hacker News, Fake CAPTCHA PDFs spread Lumma Stealer via Webflow, GoDaddy, and other domains (reporting Netskope Threat Labs research) (2025-02-28).
  15. [15]ISO, ISO/IEC 42001 explained: what it is (2026-08-31).
  16. [16]ISO, New SC 42 project: guidance for implementing ISO/IEC 42001 (stage 20.00).
  17. [17]ISO, ISO/IEC 42005:2025, AI system impact assessment (2025-05).
  18. [18]ISO, ISO/IEC 42006:2025, Requirements for bodies providing audit and certification of AI management systems (2025-07).
  19. [19]ISO, ISO/IEC 23894:2023, Guidance on risk management (2023-02).
  20. [20]Estonian Centre for Standardisation and Accreditation (EVS), EVS-EN ISO/IEC 23894:2024 (2024-03-01).
  21. [21]ISO, ISO/IEC 27001:2022/Amd 1:2024, Climate action changes (2024-02).
  22. [22]NSAI Standards Store (Intertek Inform), ISO/IEC 27001:2022 (2022-10-25).
  23. [23]ISO, ISO/IEC 27006-1:2024, Requirements for bodies providing audit and certification of information security management systems, Part 1: General (2024-03).
  24. [24]BSI, BS ISO/IEC 42001:2023 (superseded by the 2026 edition) (2023-12-31).
  25. [25]LRQA, What ISO 42001 does and does not get you under the EU AI Act (2026-10-11).
  26. [26]NIST AI Resource Center, AI RMF crosswalk documents.
  27. [27]ISO/IEC via iTeh Standards, ISO/IEC FDIS 42001 sample (final draft).
  28. [28]Microsoft, hosted by NIST AI Resource Center, NIST AI RMF to ISO/IEC FDIS 42001 AI Management System Crosswalk.

How we keep this page current

Every claim links to its source. We re-check this page at least every 90 days, and sooner when a standard, law or vendor changes; vendor names, acquisitions and shutdowns update automatically from our directory. Vendors cannot pay to be included or ranked.