How long does ISO 42001 certification take?

ISO 42001 is the international standard for AI management systems (AIMS). It helps organisations develop, implement and use artificial intelligence responsibly. The certificate shows that you manage AI risks systematically.

For an SME (10-50 employees), ISO 42001 certification usually costs €15,000 to €35,000 in the first year, including support. After that you pay €3,000 to €7,000 a year for surveillance audits. The exact price depends on your company size and AI complexity.

On average nine to eighteen months for most organisations. If you already have a working management system (such as ISO 9001 or ISO 27001), it can be done in six to nine months. The audit itself takes two to five days.

Yes, you can switch at any time. Your new certification body takes over your file and plans a transfer audit. Your certificate remains valid during the switch.

No, ISO 42001 is formally voluntary. But more and more clients, insurers and tenders require it. For high-risk AI under the EU AI Act a quality management system is mandatory, and ISO 42001 can help meet that requirement.

Yes. ISO 42001 and the EU AI Act overlap by 40-50%. The standard helps you meet requirements for risk management, data governance and documentation. It is no guarantee of full compliance, but it covers a large part of the requirements.

In the Netherlands, DNV and BSI have held Dutch accreditation for ISO 42001 since January 2025. Other certification bodies such as Kiwa and TÜV also offer it, but are still working on their Dutch accreditation.