ISO/IEC 42001 vendors for Retail & E-commerce
Vendors that support ISO/IEC 42001:2023 AI Management System and explicitly serve retail & e-commerce customers. Each vendor’s last-checked date is shown in the table.
| Vendor | HQ | Founded | Size | Pricing | Last checked |
|---|---|---|---|---|---|
| Collibra AI Governance | New York, United States | 2008 | 1000+ | Enterprise subscription; contact sales for custom quote based on users, assets, modules. | Sep 21, 2026 |
| OneTrust AI Governance | Atlanta, United States | 2016 | 1000+ | Enterprise platform; contact sales for quote, no public pricing listed | Sep 21, 2026 |
| ModelOp | Chicago, United States | 2018 | 11-50 | No public pricing listed; contact sales for enterprise quotes. | Sep 21, 2026 |
| 2021.AI | Copenhagen, Denmark | 2016 | 51-200 | Pricing is custom and tailored to use case, organization size, deployment model (on-prem or cloud), and selected modules. Contact sales required per their pricing page. | Sep 21, 2026 |
| Noma Security | New York, United States | 2023 | — | No prices on noma.security. AWS Marketplace lists the Noma Security Platform at $200,000 for a 12-month contract but doesn't say how many units that covers. | Oct 15, 2026 |
| WitnessAI | Mountain View, United States | 2023 | — | No prices on witness.ai. Its AWS Marketplace listing gives 12-month prices: WitnessAI for Enterprise at $180 per user (minimum 1,000 users, $180,000), WitnessAI Agentic Visibility at $24 per agent (minimum 2,500 agents, $60,000) and WitnessProtect model protection guardrail at $300,000. | Oct 15, 2026 |
About ISO/IEC 42001
ISO/IEC 42001:2023 is the first international management-system standard for artificial intelligence, published in December 2023 jointly by ISO and IEC. It specifies requirements for establishing, implementing, maintaining, and continually improving an AI management system (AIMS) within an organisation. The standard follows the harmonised high-level structure used by ISO 27001 and ISO 9001, making integration with existing management systems straightforward. ISO 42001 is voluntary but is the most credible signal a vendor or operator can provide that AI risk is governed at the management-system level. Certification is granted by accredited third-party certification bodies (the ISO/IEC body itself does not issue certificates) and follows a typical 3-year cycle with annual surveillance audits.
Read framework guide →About Retail & E-commerce
Recommendation systems, pricing, and fraud models. Touched by FTC UDAP, CCPA/CPRA, and EU AI Act transparency rules.
See all retail & e-commerce vendors →