ISO/IEC 42001: which SaaS and AI vendors say they are certified
31 of the 148 vendors whose certification pages we read list ISO/IEC 42001. Here is what each one states: the standard as it writes it, the scope, whether a certificate or report can be seen, and where and when we read it. Last read on 2026-11-09.
Vendor by vendor
| Vendor | As listed | What can be seen | Scope, as written | Valid until | Read |
|---|---|---|---|---|---|
| Grammarly | ISO/IEC 42001:2023 | Certificate published | responsible AI development and use | — | 2026-11-09 |
| KnowBe4 | ISO/IEC 42001:2023 | Certificate published | AI management systems | — | 2026-10-08 |
| Slack | ISO/IEC 42001 | Certificate published | Information technology — Artificial intelligence — Management system | — | 2026-10-04 |
| Workday | ISO 42001 | Certificate published | Workday Human Capital Management, Workday Financial Management, Workday Student, Workday Spend Management, Workday Adaptive Planning, Workday Peakon Employee Voice, Workday Payroll, Workday Workforce Management, Workday Talent Management, Workday Analytics and Reporting, Workday Platform, Product Extensions, Contract Management and Document Intelligence | — | 2026-10-08 |
| Anthropic | ISO/IEC 42001:2023 | Report on request | AI Management Systems; article covers commercial products such as Claude for Work and the Anthropic API | — | 2026-10-05 |
| Atlassian | ISO/IEC 42001:2023 | Report on request | Rovo; Artificial Intelligence Management System (AIMS) supporting the design, development, deployment, operation, and continual improvement of Rovo | — | 2026-10-19 |
| Clay | ISO 42001:2023 | Report on request | not stated | — | 2026-11-09 |
| Cursor | ISO/IEC 42001:2023 | Report on request | not stated | — | 2026-10-08 |
| Drata | ISO/IEC 42001:2023 | Report on request | not stated | — | 2026-11-09 |
| ElevenLabs | ISO 42001; ISO/IEC 42001:2023 | Report on request | AI Management Systems | — | 2026-10-25 |
| Miro | ISO 42001; ISO 42001:2023; ISO/IEC 42001; ISO/IEC 42001:2023 | Report on request | AI management systems standard; The artificial intelligence management system; production and continuous improvement of AI-enabled SaaS across EMEA, USA and other key regions | — | 2026-10-26 |
| Rippling | ISO 42001 | Report on request | not stated | — | 2026-11-09 |
| Snowflake | ISO/IEC 42001:2023 | Report on request | not stated | — | 2026-10-04 |
| Typeform | ISO/IEC 42001:2023 | Report on request | not stated | — | 2026-10-05 |
| Amazon Web Services | ISO 42001 | Stated | not stated | — | 2026-11-09 |
| ClickUp | ISO 42001 | Stated | secure, transparent, and ethical AI practices across all our solutions | — | 2026-10-08 |
| CrowdStrike | ISO/IEC 42001:2023 | Stated | not stated | — | 2026-10-08 |
| Datadog | ISO/IEC 42001:2023 | Stated | not stated | — | 2026-10-05 |
| Figma | ISO 42001; ISO/IEC 42001:2023 | Stated | its AI management system | — | 2026-10-04 |
| Gong | ISO/IEC 42001:2023 | Stated | not stated | — | 2026-10-25 |
| Google Cloud | ISO/IEC 42001 | Stated | not stated | — | 2026-10-05 |
| Intercom | ISO 42001 | Stated | AI management system governance across the business | — | 2026-10-12 |
| Lusha | ISO/IEC 42001 | Stated | Certified for our AI Management System (AIMS), ensuring responsible development and governance of AI capabilities. | — | 2026-11-09 |
| Microsoft | ISO 42001 | Stated | not stated | — | 2026-10-05 |
| Mural | ISO 42001 | Stated | not stated | — | 2026-11-09 |
| New Relic | ISO 42001 | Stated | not stated | — | 2026-10-08 |
| OpenAI | ISO/IEC 42001:2023 | Stated | not stated | — | 2026-10-05 |
| Oracle Cloud | ISO/IEC 42001:2023 | Stated | not stated | — | 2026-10-08 |
| Smartsheet | ISO 42001 | Stated | not stated | — | 2026-11-09 |
| Webflow | ISO 42001 | Stated | not stated | — | 2026-10-09 |
| ZoomInfo | ISO/IEC 42001; ISO/IEC 42001:2023 | Stated | Artificial Intelligence Management System (AIMS) | — | 2026-10-25 |
"Certificate published": the vendor links the certificate itself. "Report on request": the vendor offers the certificate or audit report to customers or under NDA, usually through its trust centre. "Stated": the vendor names the standard and links nothing behind it.
What ISO/IEC 42001 is
ISO/IEC 42001:2023 is the international standard for an artificial intelligence management system: the policies, roles, risk and impact assessments and controls an organisation uses to develop, provide or use AI systems. ISO and IEC published it in December 2023. A certification body audits an organisation's management system against it, within a scope the organisation sets. (ISO)
A certificate says that the management system, within that scope, met the standard when it was audited. It says nothing about the accuracy or safety of a particular model, and the scope can be a single product, which is why the table gives the scope as each vendor writes it.
Vendors whose list does not include it
We read the certification pages of these 117 vendors and found no mention of ISO/IEC 42001. That is what their pages say, not proof that no certificate exists: 1Password, 3DS Outscale, AWS European Sovereign Cloud, ActiveCampaign, Adobe, Adyen, Aircall, Airtable, Amplitude, Apollo.io, Asana, Attio, Backblaze, Bitwarden, Bleu, Box, Brevo, Calendly, Canva, Cisco Webex, ClickHouse, Cloudflare, Contentsquare, DATEV, Databricks, DeepL, Deepgram, Delos Cloud, DigitalOcean, Docker, Docusign, Doodle, Dropbox, Elastic Cloud, Element, Eventbrite, Freshworks, GitHub, GitLab, Google Analytics, Google Workspace, Grafana Labs, Granola, Hetzner, Hostinger, HubSpot, IONOS Cloud, Infomaniak, JetBrains, Jotform, Kahoot!, Klaviyo, Langdock, Lovable, Mailchimp, Mailgun, Make, Mapbox, Mentimeter, Mistral AI, Mixpanel, Mollie, MongoDB, Netlify, Nextcloud, Notion, OVHcloud, Okta, OneTrust, OpenRouter, Optimizely, PayPal, Pennylane, Perplexity, Personio, Pipedrive, Piwik PRO, Pleo, PostHog, Proton, Qualtrics, Retool, S3NS, STACKIT, STRATO, Scaleway, Sentry, Shopify, Sinch, Spendesk, Squarespace, Stripe, Supabase, SurveyMonkey, T Cloud Public, TeamViewer, Tresorit, Twilio, Usercentrics, Vanta, Vercel, Vimeo, Vonage, WeTransfer, WhatsApp Business, Wire, Wix, Xero, Zapier, Zendesk, Zoho, Zoom, Zscaler, iubenda, monday.com, n8n, netcup.
Questions
Which SaaS vendors are ISO 42001 certified?
Of the 148 vendors whose certification pages this registry reads, 31 list ISO/IEC 42001: Grammarly, KnowBe4, Slack, Workday, Anthropic, Atlassian, Clay, Cursor, Drata, ElevenLabs, Miro, Rippling, Snowflake, Typeform, Amazon Web Services, ClickUp, CrowdStrike, Datadog, Figma, Gong, Google Cloud, Intercom, Lusha, Microsoft, Mural, New Relic, OpenAI, Oracle Cloud, Smartsheet, Webflow, ZoomInfo. 4 publish the certificate, 10 provide the audit report or certificate on request, and 17 state it without a public document.
How can I check a vendor's ISO 42001 claim?
Ask for the certificate and check three things on it: the certification body and whether it is accredited for ISO/IEC 42001, the scope (which products, sites and processing it covers), and the expiry date. A vendor that publishes its certificate lets you do this before you ask.
Download the data (CSV): every row with its source and the date it was read.Cite as: eucsoft, “ISO/IEC 42001: what SaaS vendors state”, https://eucsoft.com/en/certifications/iso-42001/, data read up to 2026-11-09.
How this was read
Each week the registry reads every vendor's certification or trust centre page and records each standard it lists, quoted as written, with the scope and any validity date it gives. A listing that changes waits for a person's review before it reaches this page. Other standards: ISO/IEC 27701, ISO/IEC 27017, ISO/IEC 27018, BSI C5, TISAX, SOC 2;SecNumCloud, from ANSSI's list; the other national cloud schemes (C5, ENS, HDS) are on the certifications page. Full method on the methodology page.