All 65 ISO 42001 controls
The full standard, clauses 4-10 for the AI management system itself, plus the 38 Annex A reference controls (A.2 through A.10), scored as a single AIMS conformity assessment.
See it in the demoYou are shipping AI systemsWith no management system behind them
Scores your AI governance against all 65 controls of ISO/IEC 42001, clauses 4-10 and the Annex A reference controls, grounded in real cloud and AI-platform evidence, with a readiness percentage and assessor-grade observations on every gap.
Try it
Interactive demo with a scored AIMS readiness assessment, no signup
How It Works
Collect, score, explain, request.
01
Collect
Evidence is pulled from cloud and AI-platform sources, the model registry, IAM, drift metrics, the data catalog, into a raw evidence store.
02
Score
Every control across clauses 4-10 and Annex A is scored to a verdict against what the evidence actually shows, producing an overall readiness percentage.
03
Explain
Each control carries assessor-grade observations, a severity and a named remediation, and the auditor chat reasons over the whole assessment on demand.
04
Request
Controls with no evidence become one-click requests to the customer, so the assessment drives the next round of collection.
What You Can Do
Everything the assessment does.
A readiness score with the working shown
A colour-banded readiness percentage over the in-scope controls, backed by a verdict summary of In Place, Partial and Not In Place, not a green tick that hides the partials.
See it in the demoAssessor-grade observations
Every control opens to the observations behind its verdict, a severity, and a named remediation, “ad hoc for 1 of 5 systems, no lifecycle triggers, nothing retained”, not “needs improvement”.
See it in the demoGrounded in raw evidence
Verdicts cite real evidence collected from cloud and AI-platform sources, so a control is judged against what the evidence shows, “drift metrics missing on 3 of 5 models”, not on whether a document was uploaded.
See it in the demoThe impact-assessment spine
The assessment knows that impact assessment (6.1.4, A.5) is the control ISO 42001 hangs responsible-AI on, and cascades a missing process into every control that depends on it.
See it in the demoAn evidence-grounded auditor chat
Ask where the biggest gap is or whether you are certification-ready, and get an answer reasoned over the scored controls and the raw evidence, citing the controls it draws from.
See it in the demoApplicability scoping
A scoping questionnaire marks controls Not Applicable by your role, provider, developer, deployer or user, so you are not scored against controls that do not apply to you.
See it in the demoMissing-evidence requests
Controls with no supporting evidence become one-click requests to the customer, turning the readiness assessment into the driver of the next collection cycle.
See it in the demoA VAPT-styled readiness report
The assessment exports to a formatted readiness and gap report and to CSV and JSON, ready for the board and the certification body.
See it in the demoBusiness Outcomes
What it changes.
Grounded
Verdicts come from real cloud and AI-platform evidence, so the readiness number survives scrutiny from a certification body.
Specific
Every gap carries an observation and a named fix, so the remediation plan writes itself instead of starting from “improve governance”.
Prioritised
The blockers that actually stop a Stage 1 review, impact assessment, internal audit, the SoA, are surfaced ahead of the noise.
Know your ISO 42001 readiness in a number.
Score your AI management system against all 65 controls, grounded in evidence, with every gap carrying its fix.