Services
ISO/IEC 42001 AIMS as a Service
We implement and operate an ISO/IEC 42001 AIMS — hub, clause-level processes, and system inventory — so each AI system has PDCA-gated records and certification-ready evidence.
The service
AIMS as a Service is implementation plus operation of an ISO/IEC 42001:2023 Artificial Intelligence Management System. We configure the hub-and-spoke suite, populate the AI system inventory, and stay with you through PDCA gates, management review, and certification-ready evidence — not a software licence dropped on the team.
The same evidence base also supports EU AI Act QMS themes, so certification work and regulatory files are not two disconnected programmes.
What we stand up and run
- AIMS Hub — one PDCA-aligned record per AI system, with phase gates, completeness scoring, and certification-readiness views.
- Operational spokes — clause-level registers for context, risk, operation, data, design, support, audit, management review, CAPA, suppliers, and change (clauses 4–10 and Annex A).
- AI System Inventory spine — every risk, control, and evidence item stays linked to system identity, version, and intended purpose.
- Audit-ready packages — one-click evidence roll-up, optional Merkle signing, Statement of Applicability support, and KPI dashboards for top management.
- Supply-chain and agentic use — GPAI/LLM vendor due diligence and AIMS operation for agentic systems where that is in scope.
How we deliver
- Scope and inventory — agree certification and regulatory scope; create inventory entries so each system gets a hub.
- Process execution — your teams work in the clause workflows; we facilitate risk, impact, supplier, and design records so evidence flows to the hub.
- Governance and review — we run management-review and internal-audit cadences with named owners and gates.
- Readiness — completeness scoring, gap closure, and evidence packages for the certification body or authority.
Who it is for
- Organisations implementing or certifying an ISO/IEC 42001 AIMS
- Providers and deployers that need system-level evidence for high-impact AI
- GRC teams that want operational registers, not only policy manuals
Further reading on the platform: implementation with confidence, unlocking value, and AIMS for agentic AI.
