ISO 42001 · EU AI Act
One covers your company, the other covers each system
ISO 42001 certificate
Voluntary
What it covers
Your organisation
Judged on
How you govern AI: policy, roles, impact assessments, review cycle
Who asks for it
Customers and enterprise buyers
Legal shortcut
None
AI Act, Article 17
Mandatory
What it covers
Each high-risk AI system you provide
Judged on
Checks before release, monitoring, incident reporting, documentation
Who asks for it
Regulators
Legal shortcut
EN 18286
, cited October 2026