FAQ

Frequently asked questions.

Everything about the toolkit, ISO/IEC 42001 and the road to certification. Didn't find your answer? Get in touch.

What's not included: the ISO/IEC 42001 standard itself

This package contains implementation templates and tools only. The ISO/IEC 42001 standard is copyrighted by ISO/IEC and must be purchased separately under licence from ISO or your national standards body (in Belgium: NBN). Our documents reference the standard by clause and Annex A control number only — they do not reproduce its text.

Does the package include the ISO/IEC 42001 standard itself?+

No. For copyright reasons the standard text is never included. You buy the standard once from ISO or your national body (e.g. NBN); our kit gives you everything to implement it. Throughout the templates we reference the standard by clause and Annex A control number only.

What exactly do I get when I buy?+

A complete ISO/IEC 42001 documentation kit: 82 documents delivered as 11 numbered folders (00–10) that follow the implementation workflow. It covers the AI policy, scope & context, AI roles and RACI, risk and impact assessment methodology, the Statement of Applicability across all 38 Annex A controls, lifecycle and data governance, human oversight, incident response, supplier management, the internal audit kit, management review and continual improvement — plus Excel tools (risk register with SoA, maturity self-assessment, implementation tracker, EU AI Act mapping) and an installable AI assistant skill. Everything is validated by a CISO. View the full contents.

How is "AI-built, human-verified" different from just using ChatGPT?+

Every template and deliverable is generated with AI for speed, then reviewed and signed off by a qualified human expert before it ships. You get consultant-grade documents at a fraction of consultancy cost and time — without the risk of unreviewed AI output going into an audit.

Who is this package for?+

Any organisation that develops, provides, deploys or procures AI — not just tech companies. Manufacturing, healthcare, finance, professional services and public-sector suppliers increasingly need it. It's built for SMEs and mid-market compliance officers, AI and data teams, and consultants who want to skip weeks of templating.

How much does ISO/IEC 42001 cost compared to a consultant?+

Full local consultancy typically runs well into five figures. With the toolkit you start at €199 for the complete document set, adding human-verified support (€1,200/year) or an internal audit (€3,600) only if you need them.

How long does implementation and certification take?+

Roughly 6–10 weeks for a small organisation, 10–16 for medium and 16–24 for large. The AI risk & impact assessment usually takes the most time; starting from a ready-made toolkit shortens it significantly.

What's the difference between Stage 1 and Stage 2 certification?+

Stage 1 is a documentation and readiness review — the toolkit is built to satisfy it. Stage 2 audits whether the system actually operates: a completed SoA, a performed risk assessment, at least one impact assessment, records that controls run, an internal audit and a management review. Filling the templates makes you Stage 1 ready; running the system makes you Stage 2 ready. See the certification path.

How does ISO/IEC 42001 relate to the EU AI Act?+

A certified AIMS is operational evidence of the controls the AI Act expects, and the toolkit includes an EU AI Act mapping sheet. Note the timeline changed in 2026: high-risk obligations moved from August 2026 to 2 December 2027 (stand-alone) and 2 August 2028 (in products), while Article 50 transparency still applies from August 2026. The obligations didn't shrink — you have more runway to build the system. Read about ISO/IEC 42001 & the EU AI Act.

Can ISO/IEC 42001 integrate with our existing ISO 27001 or 9001?+

Yes. All three share the Annex SL / Harmonized Structure, so context, leadership, internal audit, management review and document control can be shared. Organisations that already hold ISO 27001 reach ISO/IEC 42001 readiness noticeably faster. Compare ISO/IEC 42001 vs ISO 27001.

Is this a replacement for an audit or certification?+

No. The package is the documentation foundation that gets you audit-ready. Actual certification is awarded by an accredited certification body through a Stage 1 + Stage 2 audit.

Can I adapt the templates?+

Yes. They're designed to be tailored to your scope, roles and house style, with placeholders to replace. Unlimited internal use within your organisation is included.

Can I resell or share the templates?+

No. The licence is limited to internal use within your organisation. Reselling or distributing to third parties is not allowed.

How do payment and invoicing work?+

Order and payment are handled via an external sales platform; you're redirected when you click 'Order'. It automatically sends an invoice after successful payment, and you get instant download plus free updates.

Another question about the package?

Contact us