ISO 42001 - The Certificate That Changed Nothing for Us. That Was the Point
Your AI supplier audit just became shorter
A compliance team assessing an AI system provider must answer the questions posed by the EU AI Act, DORA and NIS2: who controls the system lifecycle, how risks are managed and where the human sits in the decision loop. From today, in the case of allclouds.pl, a significant part of these answers is confirmed by an independent body.
Bureau Veritas Polska awarded us an ISO/IEC 42001:2023 certificate for our Artificial Intelligence Management System — the first certificate of its kind issued by this body in Poland. The certification covers TWIN:DESK, PROXY:AI and the CDF methodology.
There are two types of certification: one in which a management system is created for an audit, and another in which the audit confirms a system that already exists. We know from our clients' experience what the first approach looks like. We wanted the second — the auditor found AI working principles that had been operating here long before the standard. In our new article, we explain exactly what was verified and what it changes for organizations that hold their suppliers accountable under the EU AI Act, DORA and NIS2.