Artificial Intelligence Policy Tracker
International organisations (OECD, UNESCO, UN, G7, ISO) Standard Voluntary standard Non-binding

ISO/IEC 42001:2023 AI management system: requirements, deadlines and compliance actions

ISO/IEC 42001:2023 Information technology – Artificial intelligence – Management system

Verified against the official source 26 Sep 2026 · reviewed by Bhaskar Bhatt (a factual check against the official source, not a legal review or legal advice)
What this label means
Verified
— a named reviewer opened the official source and confirmed the record; the date and the reviewer are shown.
Pending review
— linked to the official source and in the queue for a reviewer to confirm.
Source-linked
— linked to the official source, not yet confirmed by a reviewer.
Verification policy and current standing · a factual check, not legal advice.
Download: JSON · Markdown
No change recorded as of 26 Sep 2026 · official source last checked
On this page 8 sections

In brief

ISO/IEC 42001:2023 AI management system is a non-binding standard of International organisations (OECD, UNESCO, UN, G7, ISO), issued by ISO/IEC JTC 1/SC 42. Its current status is voluntary standard. Voluntary; any organisation developing, providing or using AI systems. The first certifiable management-system standard for AI.

Instrument type
Standard
Status
Voluntary standard
Legal force
Non-binding (guidance, strategy or standard)
Issuing body
ISO/IEC JTC 1/SC 42
Adopted
18 December 2023
Official source
ISO/IEC 42001:2023
Verification
Verified against the official source 26 Sep 2026

What is ISO/IEC 42001:2023 AI management system?

The first certifiable management-system standard for AI. It specifies requirements for establishing, implementing, maintaining and improving an AI management system within an organisation: context and leadership, AI policy, risk and impact assessment, objectives, resources and competence, operational controls across the AI lifecycle, performance evaluation and improvement, with Annex A controls on data, transparency, human oversight, third parties and responsible use. Certification is voluntary but increasingly requested in procurement; regulators reference it as evidence of governance.

Who does it apply to?

Voluntary; any organisation developing, providing or using AI systems. This site does not reproduce the standard's text.

When do the requirements apply?

Dates are taken from the linked official source; a reviewer should confirm in-force and application dates before relying on them.

Official sources

  1. ISO/IEC 42001:2023
    International Organization for Standardization · 18 Dec 2023 · Tier 1 source

Cite this record

AIPolicyTracker (2026). “ISO/IEC 42001:2023 AI management system” [AIPT-POL-0102, record version 1, verified 26 September 2026 by Bhaskar Bhatt]. https://aipolicytracker.org/id/AIPT-POL-0102 (accessed 27 October 2026). Data licensed CC BY 4.0.

Permanent id AIPT-POL-0102: it never changes or gets reused, and its address keeps working if this page moves.

Cite the official text alongside it: ISO/IEC 42001:2023, International Organization for Standardization, https://www.iso.org/standard/42001.

BibTeX
@misc{aipolicytracker2026_isoiec420012023aimanagem,
  author       = {{AIPolicyTracker}},
  title        = {{ISO/IEC 42001:2023 AI management system}},
  year         = {2026},
  howpublished = {\url{https://aipolicytracker.org/policies/iso-iec-42001-2023-ai-management-system}},
  url          = {https://aipolicytracker.org/policies/iso-iec-42001-2023-ai-management-system},
  urldate      = {2026-10-27},
  note         = {Data licensed CC BY 4.0. Accessed 27 October 2026}
}

Using this in a product? Commercial use is allowed under CC BY 4.0, with attribution. Ask about an SLA-backed feed or a white-label licence.

Add a status badge to your site or README

It shows the status and review state as recorded here and updates when the record does.

AIPolicyTracker: ISO/IEC 42001:2023 Information technology – Artificial intelligence – Management system, Voluntary standard · verified 26 Sep 2026

Markdown

[![AIPolicyTracker: ISO/IEC 42001:2023 Information technology – Artificial intelligence – Management system, Voluntary standard · verified 26 Sep 2026](https://aipolicytracker.org/badges/iso-iec-42001-2023-ai-management-system.svg)](https://aipolicytracker.org/id/AIPT-POL-0102)

HTML

<a href="https://aipolicytracker.org/id/AIPT-POL-0102"><img src="https://aipolicytracker.org/badges/iso-iec-42001-2023-ai-management-system.svg" alt="AIPolicyTracker: ISO/IEC 42001:2023 Information technology – Artificial intelligence – Management system, Voluntary standard · verified 26 Sep 2026" height="20"></a>

Change history

All updates for International · RSS · Updates hub

Record history

No change to this record's tracked fields has been recorded since 15 October 2026, when field-level history began.

Record version 1: Added in the September 2026 global coverage expansion from the official source listed; reviewer to confirm dates, status and scope against the source text. Every earlier wording is in the GitHub repository.

Frequently asked questions

Is ISO/IEC 42001:2023 AI management system in force?

ISO/IEC 42001:2023 AI management system has the status "voluntary standard"; it is not a binding law in force.

Is ISO/IEC 42001:2023 AI management system legally binding?

No. ISO/IEC 42001:2023 AI management system is a standard; it sets expectations rather than legal requirements, unless another instrument gives it force.

Who does ISO/IEC 42001:2023 AI management system apply to?

Voluntary; any organisation developing, providing or using AI systems. This site does not reproduce the standard's text.

Where is the official text of ISO/IEC 42001:2023 AI management system?

The official text is published by International Organization for Standardization at https://www.iso.org/standard/42001 (ISO/IEC 42001:2023). This record links to it and is checked against it.

Disclaimer: informational only, not legal advice. Verify every claim against the linked official sources and consult a qualified lawyer before acting.