Hael
Sign inRequest a demo
ISO/IEC 42001

ISO/IEC 42001, certified from your live record.

The AI management system standard buyers ask for by name. Hael produces every artefact a certification body opens: the Statement of Applicability across all Annex A controls, the AI system register, the risk assessments, the training records, the vendor assessments, the internal audit pack and the management review — each one sealed, hash-verified and generated from how your systems actually run.

app.hael.ai / registry / AIMS-01
HAEL BANK · ISOLATED
ISO/IEC 42001 · classified from the record
IN SCOPE
Enterprise AI Management System
Owner · Head of AI Governance · S. Iqbal · System AIMS-01
SOURCED
Obligations
Cl. 6  Planning · AI risk & impact
MAPPED
Cl. 7  Support · resources & competence
MAPPED
Cl. 8.4  Operational · residual risk review
MAPPED
Cl. 9  Performance evaluation & audit
HELD OPEN
Cl. 10  Improvement & corrective action
PENDING
Annex A  Reference controls (38)
MAPPED
Generated · Statement of Applicability · v2SOURCED
Why buyers ask for it

The certificate that clears the AI review.

ISO/IEC 42001 is voluntary in law and mandatory in practice. Enterprise procurement teams screen for it before the first RFP round, and the largest AI providers — Anthropic, AWS, Snowflake, Salesforce, ServiceNow, CrowdStrike — have certified publicly. A vendor who holds it, or can evidence a documented AI management system on the way to it, clears the AI module of the questionnaire. A vendor who cannot, stalls.

What Hael produces

The full AI management system, generated.

Every artefact a certification body reads, produced from the record and sealed. Each row is a live output, owned, dated and hash-verified.

app.hael.ai / aims / production
AIMS-01 · v2
AI management system · generated
SEALED
Statement of Applicability
All Annex A controls · applicability, exclusion rationale, residual risk
SOURCED
AI system register
Annex A.7 · every system, agent and vendor tool, owned
CURRENT
Risk assessments
Clause 6.1.2 · per system, cited to obligations
SOURCED
Training and competence records
Clauses 7.2 / 7.3
MAPPED
Vendor assessments
Clause 8.3 · per supplier, sealed
SEALED
Internal audit pack and management review
Clauses 9.2 / 9.3 · board-ready
SOURCED
CLAUSE-MAPPED · SEALED · AUDIT-GATED
app.hael.ai / mapping / ISO/IEC 42001
ONE CONTROL SET
ISO/IEC 42001 · obligation → control → record
MAPPED
Cl. 6 · AI risk & impact
Control · Risk & impact assessment  ·  AIMS-01
MAPPED
Cl. 8.4 · Residual risk review
Control · Residual-risk attestation  ·  AGT-014
MAPPED
A.5 · Policies & responsibilities
Control · AI policy + RACI  ·  AIMS-01
MAPPED
A.6 · Internal organisation
Control · AI governance committee  ·  AIMS-01
MAPPED
Cl. 9 · Internal audit
Control · Internal-audit programme  ·  AIMS-01
HELD OPEN
Cl. 10 · Corrective action
Control · Nonconformity register  ·  AIMS-01
PENDING
One record · many regimes
The audit

Built for the certification body, not around it.

Hael gives your certification body a clause-by-clause coverage view: every Annex A control, its applicability decision, the record that evidences it, the owner who signed it, and the hash that proves it has not changed since it was sealed. The auditor reads the record you operate against. There is no parallel narrative to prepare.

Honest timing

How long it actually takes.

Certification typically takes three to six months and the certification-body audit fee is the main external cost. The bulk of the work is not the audit — it is building and operating the management system that the audit examines. Guides that promise two weeks are selling a subscription; guides that promise twelve months are selling billable hours. Hael shortens the part that can be shortened: the construction of the AIMS and the production of its records. The audit still has to happen, and it should.

Related frameworks

Govern this alongside everything else.

One system, one record, governed against every framework at the same time. Map an obligation once; satisfy it everywhere it recurs.

Free check

See where you stand on ISO/IEC 42001, free.

Answer a few questions and get an indicative view of what ISO/IEC 42001 expects of your AI systems and where you stand today — no sign-up to see your result.

Indicative, not legal advice.
ISO/IEC 42001 · indicative readiness
HAEL FREE TOOLLIVE
Applicability
Applies to your AI use
MAPPED
What's expected
Risk classification · governance · documentation · oversight
4 PILLARS
Where you stand
Banded result · pointed to the gaps that matter most
SOURCED
Result
On-screen, free · optional PDF
FREE
Effort
Pre-scoped to ISO/IEC 42001
~ 5 MIN
INDICATIVE · NOT LEGAL ADVICE
Implementing ISO/IEC 42001 for clients? See the partner programme →
See it on a real record

See the AIMS run end to end before the audit.