ISO 42001 Certification Bodies: Who Is Actually Accredited (and Who Is Not)

 

Byline: Mahrukh Fatima Last reviewed: 30 August 2026. This list is refreshed quarterly against the accreditation bodies’ own registers.

As of 07-08-2026, 15 verified certification bodies hold a tier-1-verifiable accreditation to certify organisations against ISO/IEC 42001, across six accreditation bodies: ANAB (United States), UKAS (United Kingdom), RvA (Netherlands), JAS-ANZ (Australia and New Zealand), SAC (Singapore) and IAS (United States). Every entry names its accreditation body, published date and a source you can check yourself. Ireland’s accreditation body, INAB, has no certification body with ISO 42001 in scope as of 07-08-2026, Irish buyers should read the dedicated section below. Anything not traceable to a tier-1 source is flagged unverified, not repeated as fact.

Who is this list for, and who wrote it?

This list is for CTOs, founders and compliance leads choosing an accredited certification body (CB) for an ISO/IEC 42001 AI management system audit.

Selection criteria. A body appears only if its ISO 42001 accreditation traces to a tier-1 source: the accreditation body’s own register or news page, an accreditation-body-issued scope document, an IAF CertSearch entry, or the CB’s own published announcement. Bodies are grouped by accreditation body, ordered by published date. No body paid to appear, and nothing is ranked “best”, accreditation is a binary state, not a league table.

Our interest, stated openly. Atoro is an Irish AI governance and cyber compliance consultancy. We implement ISO 42001; we do not certify it, and no consultancy can. The ISO/IEC 17021-1 independence rule prohibits any firm from certifying a management system it helped build, so Atoro appears nowhere on this list, by design and by rule. We published it because buyers kept asking “who can actually certify us?”, and the register-backed answer was harder to find than it should be.

Which certification bodies are accredited for ISO 42001?

ANAB (ANSI National Accreditation Board, US/global)

ANAB launched its ISO/IEC 42001 accreditation programme in early 2024. Eight bodies were verifiable as of 07-08-2026:

Certification bodyAccreditation announcedSource
Schellman Compliance LLC24 September 2024, first ANAB-accredited ISO 42001 CBSchellman announcement
Coalfire (Coalfire Certification)April 2025Coalfire announcement
SGS29 April 2025SGS announcement
A-LIGNBy April 2025, exact grant date not published (date unverified)A-LIGN site
TÜV Rheinland of North America4 September 2025, per its ANAB scope-of-accreditation certificateANAB scope certificate (PDF)
DEKRA Certification, Inc.November 2025DEKRA announcementIAF CertSearch entry
DQS (DQS Inc. / DQS Global)26 February 2026DQS announcement
BSIMarch 2026, completing triple ANAB + UKAS + RvA accreditationBSI announcement

Flagged but unverified under ANAB: Zertia (self-declared; no independent register confirmation found) and Sensiba (named only by a tier-2/3 aggregator). Secureframe appears on ANAB’s applicants page, an applicant is not an accredited body.

UKAS (United Kingdom Accreditation Service, UK)

UKAS ran a pilot programme through 2024–2025 with seven first-tranche bodies. Pilot membership is not accreditation. Four grants were confirmed as of 07-08-2026:

Certification bodyAccreditation announcedSource
BSI Assurance UK LtdFirst UKAS accreditation, BSI press release 17 November 2025; UKAS official news 15 January 2026. BSI’s UKAS schedule (customer 0015) includes “ISO/IEC 42001:2023 Certification”UKAS newsBSI press releaseUKAS schedule PDF
NQA CertificationJanuary 2026NQA announcement
LRQA Limited6 February 2026LRQA announcement
TÜV NORDFebruary 2026 (joint UKAS + RvA assessment)TÜV NORD announcement (German)

Flagged but unverified as separate UKAS grants: Alcumus ISOQAR, Intertek Certification and Schellman (pilot members without a confirmed 42001 grant), and TUV UK (the TÜV NORD release suggests the accreditation may sit with a TÜV NORD group entity rather than TUV UK separately).

RvA (Raad voor Accreditatie, Netherlands)

Certification bodyAccreditation announcedSource
BSI17 November 2025 (dual with UKAS)BSI press release
DNV Business AssuranceConfirmed RvA accreditation; exact grant date not published (date unverified)DNV siteIAF CertSearch entry
TÜV NORDFebruary 2026 (joint with UKAS)TÜV NORD announcement (German)

JAS-ANZ (Australia and New Zealand)

Certification bodyAccreditation announcedSource
Intertek SAI GlobalJuly 2025, first CB accredited under the JAS-ANZ AI schemeJAS-ANZ announcementJAS-ANZ register entry

No other JAS-ANZ-accredited ISO 42001 body was confirmed in tier-1 sources as of 07-08-2026.

SAC (Singapore Accreditation Council)

SAC launched a dedicated ISO/IEC 42001 accreditation programme in February 2025. One body was confirmed as of 07-08-2026:

Certification bodyAccreditation announcedSource
TÜV SÜD PSB Pte LtdNovember 2025TÜV SÜD announcementIAF CertSearch entry

A claim that SGS also holds SAC accreditation appears only on a tier-2/3 source and is unverified (SGS’s ANAB accreditation is verified above).

IAS (International Accreditation Service, US)

Certification bodyAccreditation announcedSource
Mastermind (Mastermind Assurance)Own site states IAS accreditation; claims to have been the first CB accredited to issue ISO/IEC 42001 certificates (July 2024), the “world’s first” claim is self-declared and unverifiedMastermind siteMastermind claim page

Accreditation bodies with no confirmed grants

No tier-1 confirmation of any accredited ISO 42001 CB was found as of 07-08-2026 under DAkkS (Germany), ENAC (Spain), NABCB (India), KAB (Korea), JAB (Japan), COFRAC (France), SAS (Switzerland) or CNAS (China). Treat any body claiming accreditation under them as unverified until its scope appears on the register.

Editor’s note (NEEDS-MANUAL): CSQA’s own press release (tier-1 self-announcement, per research file R12f) claims CSQA as the first Accredia-accredited ISO 42001 certification body in Italy. Accredia register verification remains pending, so the count above excludes CSQA from the 15 verified bodies and excludes Accredia from the six accreditation bodies. Confirm on Accredia’s own register before publication; if confirmed, the count and framing here change.

How do I verify a certification body’s accreditation myself?

Ask two questions, then check one register, about five minutes’ work that defeats every conflation trick in the market.

  1. Ask the body: “Which accreditation body has accredited you, and is ISO/IEC 42001 in your accredited scope?” A legitimate CB answers instantly, with a certificate or schedule number. Evasion here is your answer.
  2. Search the CB’s name on that accreditation body’s own register. ANAB and UKAS maintain searchable directories; IAF CertSearch (iafcertsearch.org) aggregates accredited CBs globally. The entry must show ISO/IEC 42001 (or “AIMS”) in scope, not just ISO 27001 or ISO 9001. Accreditation bodies grant accreditation per standard: accrediting a body for information security does not accredit it for AI management systems.
  3. Check the criteria behind the certificate. Accredited ISO 42001 certification sits under ISO/IEC 17021-1 with ISO/IEC 42006:2025 (published 7 July 2025) as the supplementary criteria document.

If a body sells you a certificate but its 42001 scope appears on no register, you hold an unaccredited certificate, no standing under the IAF multilateral recognition arrangement and, increasingly, no value in enterprise procurement.

What about Ireland? The INAB gap

As of 07-08-2026, no INAB-accredited certification body lists ISO/IEC 42001 in scope. INAB’s directory lists Amtivo (Ireland), Business Quality Assurance International, Hartford Steam Boiler Ireland and NSAI, none with 42001, and a site-scoped search for “42001” on inab.ie returned zero results on 07-08-2026. (The directory renders partially in JavaScript; we verified via indexed snapshots of INAB’s own pages, re-check at publication.)

One trap deserves naming: Amtivo markets “ISO 42001 Certification” on its Irish site, yet its INAB accredited scope excludes ISO 42001. Marketing a standard and holding accreditation for it are different things, exactly the body-versus-scope distinction the steps above catch.

Irish organisations seeking accredited certification currently use UKAS-, ANAB- or RvA-accredited bodies. Large CBs such as BSI, NQA, LRQA and Schellman market to Irish clients on their own sites, but we have not verified ISO 42001-specific delivery in Ireland for any of them, confirm scope and Irish delivery directly. The IAF MLA fully recognises cross-border accreditation.

Who is deliberately NOT on this list

Three categories of seller use “ISO 42001 certification” language without holding accreditation as certification bodies:

  • Consultancies and implementers, firms like Atoro that build your AI management system and prepare you for audit. Under ISO/IEC 17021-1 they cannot certify you; be suspicious of any firm offering both. (Atoro’s lane is ISO 42001 implementation; certification is the CB’s.)
  • Personnel certifiers, organisations such as TRECCERT, ANAB-accredited under ISO/IEC 17024 to certify people (Lead Auditor and Lead Implementer certificates). A personnel credential certifies an individual, not your organisation’s management system.
  • Compliance automation and AI governance platforms, tooling that speeds up evidence collection but issues no certificates.

Certified organisations, companies holding ISO 42001 certificates, as Atoro itself does, are not certification bodies either.

What does ISO 42001 certification cost?

Accreditation tells you who is legitimate, not what they charge. Reported year-one costs (Stage 1 + Stage 2 audits) run roughly $15,000–$50,000, indicative figures from secondary sources, so treat them as a budgeting range and get quotes. See our dedicated guide: ISO 42001 certification cost.

Frequently asked questions

Which certification bodies offer ISO 42001 certification?

As of 07-08-2026, 15 verified bodies hold tier-1-verifiable ISO 42001 accreditation across six accreditation bodies: Schellman, Coalfire, SGS, A-LIGN, TÜV Rheinland, DEKRA, DQS and BSI under ANAB; BSI, NQA, LRQA and TÜV NORD under UKAS; BSI, DNV and TÜV NORD under RvA; Intertek SAI Global under JAS-ANZ; TÜV SÜD PSB under SAC; and Mastermind under IAS. The tables above link sources for each body.

Is there an official list of accredited ISO 42001 certification bodies?

No single canonical list exists. Each national accreditation body maintains its own searchable register, and IAF CertSearch aggregates accredited bodies globally, but none offers a clean, permalinkable “all ISO 42001 CBs” view. That gap is why this list exists and why we refresh it quarterly.

How do I check whether an ISO 42001 certification body is really accredited?

Ask which accreditation body accredited it and whether ISO/IEC 42001 is in its accredited scope, then verify the body’s name on that accreditation body’s own register (ANAB, UKAS, RvA, JAS-ANZ, SAC or IAS) or on IAF CertSearch. The accreditation scope must name ISO/IEC 42001 specifically, since accreditation bodies grant accreditation per standard.

Can the same firm implement and certify my AI management system?

No. ISO/IEC 17021-1, the standard governing certification bodies, requires impartiality and prohibits a body from certifying a management system it (or a related entity) designed or implemented. A firm offering to build your AIMS and then “certify” it is either issuing an unaccredited certificate or breaching the rule. Use a consultancy for implementation and an accredited CB for certification; Atoro works only on the implementation side, hence our absence from this list.

Does ISO certify organisations directly?

No. ISO publishes standards; it does not audit or certify anyone. Independent CBs perform certification under accreditation from national accreditation bodies, per ISO/IEC 17021-1 and ISO/IEC 42006:2025.

Is an unaccredited ISO 42001 certificate worth anything?

Very little, and the risk is asymmetric. No accreditation body backs it, the IAF multilateral arrangement doesn’t recognise it, and enterprise vendor assessments increasingly reject it. Buyers who purchased unaccredited certificates before accreditation schemes existed may need to re-certify with an accredited CB.

Can my ISO 27001 auditor also certify us to ISO 42001?

Only if ISO/IEC 42001 is explicitly on that body’s accreditation scope. Several large CBs hold both (BSI and Schellman, for example), but accreditation is per standard, an ISO 27001 scope alone does not authorise ISO 42001 certification. Check the register before signing.

Which accreditation do I need, ANAB, UKAS or RvA?

For most buyers, any IAF MLA-signatory accreditation is equivalent in standing. Choose by market: UKAS for UK buyers, ANAB for the US, RvA for EU-anchored procurement, JAS-ANZ for Australia/New Zealand, SAC for Singapore. Irish buyers currently rely on UKAS-, ANAB- or RvA-accredited bodies because INAB has no 42001-scoped body as of 07-08-2026.