AI brings new risks and new rules. ISO 42001 proves you have them under control.
Prefer to start on your own?
Not every organisation needs full guidance from day one. Our ready-to-use ISO/IEC 42001 template kit contains practical Word templates and an Excel self-assessment to build your AI management system yourself.
Ready-made template kit on 42001.app, instantly downloadable
Pragmatic experts based in Belgium
20+
years experience
1
single point of contact
BE
local, short lines
We work with
No sales pitch. No obligation. We reply within 1 business day.
Does your organisation use or build AI?
The EU AI Act applies in phases and affects every organisation that uses or develops AI systems. The ban on unacceptable practices and the AI literacy duty have applied since 2 February 2025, the rules for general-purpose AI since 2 August 2025, and since 2 August 2026 the transparency obligations and the enforcement regime of the national supervisory authorities apply. ISO 42001 provides the management framework to keep this under control — and proves to customers and supervisors that you use AI responsibly.
Transparency and enforcement apply since 2 August 2026. High-risk obligations: 2 December 2027.
What is ISO 42001 (ISO/IEC 42001)?
ISO/IEC 42001 is the first international standard for an AI management system (AIMS). The standard describes how an organisation manages the development, provision and use of artificial intelligence in a controlled, responsible way. Just as ISO 27001 does for information security, ISO 42001 gives you a recognised framework with policies, roles, risk assessment and controls — demonstrable to customers, auditors and regulators.
Which companies is ISO 42001 relevant for?
ISO 42001 is relevant for any company that uses, develops or offers AI systems under its own name. That goes beyond tech companies: manufacturing, pharma, healthcare, transport and local service providers increasingly use AI for decisions, customer contact or automation. As soon as AI affects people, processes or compliance, the standard helps you make that use controllable and explainable — including for an SME or family business, without enterprise overhead.
Implementing ISO 42001: how to approach it
Implementing ISO 42001 starts with an AI inventory: which AI systems do you use and what risk do they carry? You then build the management system — policies, responsibilities and controls — and align it with your operations. RGI works in four steps: a no-obligation intro call, a quickscan or gap analysis, a concrete roadmap with implementation (in phases, each with its own quote and fixed price), and optionally ongoing oversight or certification. Pragmatic, with a fixed price per phase and no 200-page reports.
ISO 42001 and AI systems under the EU AI Act
The EU AI Act applies in phases and affects every organisation that uses or develops AI systems. What already applies: the ban on unacceptable practices and the AI literacy duty (since 2 February 2025), the rules for general-purpose AI (since 2 August 2025) and, since 2 August 2026, the transparency obligations plus the enforcement regime of the national supervisory authorities. The obligations for high-risk systems have been postponed: Regulation (EU) 2026/1744 (Digital Omnibus on AI) entered into force on 27 July 2026 and moves the Annex III systems to 2 December 2027 and the product-embedded systems of Annex I to 2 August 2028. December 2027 is therefore your planning horizon; ISO 42001 provides the management framework to meet current obligations and prepare the next phase.
ISO 42001 and other ISO standards for AI
ISO 42001 does not stand alone. The standard connects to existing ISO standards for AI and information security, such as ISO 27001 (information security) and ISO 23894 (AI risk management). If you already run an ISO 27001 management system, you can pragmatically attach ISO 42001 to it without duplicating work. That way you build one coherent framework for both information security and responsible AI use.
How we help you
AI inventory
Which AI systems you use, and with what risk.
AI management system
Policies, roles and controls in line with ISO 42001.
AI Act alignment
Alignment with the European AI obligations.
Audit preparation
Ready for certification and customer requirements.
From question to result in 4 steps
- 1
Intro call
30 min, no obligation
- 2
Quickscan or gap analysis
clear report, planning tailored to your scope
- 3
Roadmap & implementation
in phases, each with its own quote and fixed price
- 4
Ongoing oversight or certification
optional via CISO-as-a-Service
Pragmatic experts, no consultancy theatre
Pragmatic, no bureaucracy
Concrete actions, no 200-page reports.
SME & mid-market focus
No big-4 overhead, no enterprise pricing for a 50-person company.
Local and accessible
Belgian firm, short lines, fast response.
One single point of contact
Twenty years of experience, from first call to result.
What a project costs
Every project is tailor-made. The price depends on your starting point and scope. Each phase gets its own quote with a fixed price, which you receive in concrete form after the free intro call. No surprises later.
No sales pitch. No obligation. We reply within 1 business day.
Answers upfront
Pick whatever works best for you
Book a 30-min slot directly, or reach us by phone, email, WhatsApp or Threema.
Call now
+32 484 111 022
info@rgi-bv.be
+32 484 111 022
Threema
end-to-end encrypted
Rob Gielen
Book a free 30-min call
No sales pitch. No obligation. We reply within 1 business day.
Book a free 30-min callGet your AI use demonstrably in order
No sales pitch. No obligation. We reply within 1 business day.