Frequently asked questions.

No. For copyright reasons the standard text is never included. You buy the standard once from ISO or your national body (e.g. NBN); our kit gives you everything to implement it. Throughout the templates we reference the standard by clause and Annex A control number only.

A complete ISO/IEC 42001 documentation kit: 90 documents delivered as 11 numbered folders (00–10) that follow the implementation workflow. It covers the AI policy, scope & context, AI roles and RACI, risk and impact assessment methodology, the Statement of Applicability across all 38 Annex A controls, lifecycle and data governance, human oversight, incident response, supplier management, the internal audit kit, management review and continual improvement — plus Excel tools (risk register with SoA, maturity self-assessment, implementation tracker, EU AI Act mapping) and an installable AI assistant skill. Everything is validated by a CISO. View the full contents.

Every template and deliverable is generated with AI for speed, then reviewed and signed off by a qualified human expert before it ships. You get consultant-grade documents at a fraction of consultancy cost and time — without the risk of unreviewed AI output going into an audit.

Any organisation that develops, provides, deploys or procures AI — not just tech companies. Manufacturing, healthcare, finance, professional services and public-sector suppliers increasingly need it. It's built for SMEs and mid-market compliance officers, AI and data teams, and consultants who want to skip weeks of templating.

Full local consultancy typically runs well into five figures. With the toolkit you start at €199 for the complete document set, adding human-verified support (€1,200/year) or an internal audit (€3,600) only if you need them.

Roughly 6–10 weeks for a small organisation, 10–16 for medium and 16–24 for large. The AI risk & impact assessment usually takes the most time; starting from a ready-made toolkit shortens it significantly.

Stage 1 is a documentation and readiness review — the toolkit is built to satisfy it. Stage 2 audits whether the system actually operates: a completed SoA, a performed risk assessment, at least one impact assessment, records that controls run, an internal audit and a management review. Filling the templates makes you Stage 1 ready; running the system makes you Stage 2 ready. See the certification path.

A certified AIMS is operational evidence of the controls the AI Act expects, and the toolkit includes an EU AI Act mapping sheet. Note the timeline changed in 2026: high-risk obligations moved from August 2026 to 2 December 2027 (stand-alone) and 2 August 2028 (in products), while Article 50 transparency still applies from August 2026. The obligations didn't shrink — you have more runway to build the system. Read about ISO/IEC 42001 & the EU AI Act.

Yes. All three share the Annex SL / Harmonized Structure, so context, leadership, internal audit, management review and document control can be shared. Organisations that already hold ISO 27001 reach ISO/IEC 42001 readiness noticeably faster. Compare ISO/IEC 42001 vs ISO 27001.

No. The package is the documentation foundation that gets you audit-ready. Actual certification is awarded by an accredited certification body through a Stage 1 + Stage 2 audit.

Yes. They're designed to be tailored to your scope, roles and house style, with placeholders to replace. Unlimited internal use within your organisation is included.

Not from a single licence, no. The licence covers one customer organisation: one client, one licence, one branded copy. If you implement ISO/IEC 42001 for clients, that is the model rather than an obstacle, and we work with implementation partners on terms of their own. Tell us you implement and we will take it from there.

Order and payment are handled via an external sales platform; you're redirected when you click 'Order'. It automatically sends an invoice after successful payment, and you get instant download plus free updates.