ISO/IEC 42001
The international management-system standard for AI (ISO/IEC 42001:2023). The one AI framework you can be certified against by an accredited body — externally verified proof.
The AI standard you can actually be certified against.
Unlike a voluntary framework, ISO/IEC 42001:2023 is an auditable management-system standard: required clauses, Annex A controls, and a documented Statement of Applicability, certified through a two-stage external audit.
Certification is externally verified evidence a buyer or regulator can trust without taking your word for it — increasingly the proof enterprise procurement asks for first.
The files this framework actually requires.
ISO 42001 names the clauses and the 38 Annex A controls. Hael generates the Statement of Applicability and the control evidence behind it.
GRC tools tell you these are missing. Hael generates them — from each system's real configuration.
A checklist tells you what's missing. Hael puts it on record.
A checklist tracks which Annex A controls you're missing. Hael generates the Statement of Applicability and the evidence behind each one.
Discover, classify, produce — for ISO/IEC 42001.
Find the systems in ISO/IEC 42001 scope, including embedded third-party AI.
Assess each against ISO/IEC 42001's risk tiers and obligations.
Generate the ISO/IEC 42001 records, versioned and current.
Every obligation, mapped to the control that satisfies it.
Rows are the framework's clauses.
Columns are the controls and files that satisfy them.
Cells update as the underlying configuration changes.
Clause by clause.
Author once. Satisfy many.
The Statement of Applicability and control evidence you build for ISO 42001 map directly onto the EU AI Act's risk-management duties and the NIST functions — and feed your buyer-facing Trust Center.
On record before the audit, not assembled the week before it.
Hael generates the Statement of Applicability and Annex A control evidence — ready for the two-stage certification audit.