All 65 ISO 42001 controls
The full standard, clauses 4-10 for the AI management system itself, plus the 38 Annex A reference controls (A.2 through A.10), scored as a single AIMS conformity assessment.
You are shipping AI systemsWith no management system behind them
Scores your AI governance against all 65 controls of ISO/IEC 42001, clauses 4-10 and the Annex A reference controls, grounded in real cloud and AI-platform evidence, with a readiness percentage and assessor-grade observations on every gap.
Try it
Interactive demo with a scored AIMS readiness assessment, no signup
How It Works
Collect, score, explain, request.
01
Collect
Evidence is pulled from cloud and AI-platform sources, the model registry, IAM, drift metrics, the data catalog, into a raw evidence store.
02
Score
Every control across clauses 4-10 and Annex A is scored to a verdict against what the evidence actually shows, producing an overall readiness percentage.
03
Explain
Each control carries assessor-grade observations, a severity and a named remediation, and the auditor chat reasons over the whole assessment on demand.
04
Request
Controls with no evidence become one-click requests to the customer, so the assessment drives the next round of collection.
What You Can Do
Everything the assessment does.
A readiness score with the working shown
A colour-banded readiness percentage over the in-scope controls, backed by a verdict summary of In Place, Partial and Not In Place, not a green tick that hides the partials.
Assessor-grade observations
Every control opens to the observations behind its verdict, a severity, and a named remediation, “ad hoc for 1 of 5 systems, no lifecycle triggers, nothing retained”, not “needs improvement”.
Grounded in raw evidence
Verdicts cite real evidence collected from cloud and AI-platform sources, so a control is judged against what the evidence shows, “drift metrics missing on 3 of 5 models”, not on whether a document was uploaded.
The impact-assessment spine
The assessment knows that impact assessment (6.1.4, A.5) is the control ISO 42001 hangs responsible-AI on, and cascades a missing process into every control that depends on it.
An evidence-grounded auditor chat
Ask where the biggest gap is or whether you are certification-ready, and get an answer reasoned over the scored controls and the raw evidence, citing the controls it draws from.
Applicability scoping
A scoping questionnaire marks controls Not Applicable by your role, provider, developer, deployer or user, so you are not scored against controls that do not apply to you.
Missing-evidence requests
Controls with no supporting evidence become one-click requests to the customer, turning the readiness assessment into the driver of the next collection cycle.
A VAPT-styled readiness report
The assessment exports to a formatted readiness and gap report and to CSV and JSON, ready for the board and the certification body.
Business Outcomes
What it changes.
Grounded
Verdicts come from real cloud and AI-platform evidence, so the readiness number survives scrutiny from a certification body.
Specific
Every gap carries an observation and a named fix, so the remediation plan writes itself instead of starting from “improve governance”.
Prioritised
The blockers that actually stop a Stage 1 review, impact assessment, internal audit, the SoA, are surfaced ahead of the noise.
Know your ISO 42001 readiness in a number.
Score your AI management system against all 65 controls, grounded in evidence, with every gap carrying its fix.