ISO/IEC 42001
ISO/IEC 42001 asks for an AI management system: an inventory, risk assessment, controls, roles and records. Fidempli gives you the records an auditor asks for, kept current by live data.
How Fidempli handles it
| Requirement | How Fidempli handles it | Capability |
|---|---|---|
| Scope and inventory of AI systems | One inventory of AI tools, models and agents across providers | AI inventory |
| Roles and responsibilities | Every AI system and agent has a named owner, with attestation | Agent governance |
| AI risk and impact assessment | Risk-based intake with classification and reviewer sign-off | Intake and approval |
| Annex A controls | Controls mapped to each AI system with status and evidence | Compliance mapping |
| Monitoring and nonconformity | Live checks behind accepted risks; failing conditions raise an alert | Exceptions and accepted risk |
| Documented information and management review | Evidence packs and a board report from the decision log | Evidence and reporting |
Every exception has an owner, an expiry date and a live check, so the risk you accepted is the risk you still have.
Related services
Consulting
Build an AI risk framework and an ISO/IEC 42001 management system that is ready for certification.
Learn moreProfessional services
Install, configure and connect the Fidempli platform to your AI providers, identity and data.
Learn moreManaged services
We run AI intake, monitoring, evidence and board reporting for you, ongoing.
Learn moreFidempli provides governance, risk and compliance advisory and works alongside your legal counsel. We do not provide legal advice.
Our consultants assess where you stand; the platform keeps it current.
