Registry / ISO 42001

Which AI providers hold ISO 42001?

As of 19 August 2026, of 16 AI model offerings tracked, 8 have clear public evidence, 5 are conditional or gated, and 3 have no public evidence.

Clear public evidence: OpenAI API, Azure OpenAI Service, Anthropic API, Claude via AWS Bedrock, Claude via Google Vertex AI, Gemini via Vertex AI, AWS Bedrock (platform), Cohere via AWS Bedrock
Conditional, sales-gated, or partial: Mistral via Azure AI, Cohere API, Llama via AWS Bedrock, Llama via Azure AI, DeepSeek via Fireworks AI
No public evidence: Mistral La Plateforme, xAI API, DeepSeek API (first-party)

ISO/IEC 42001 (AI management system) certification status across major AI model offerings. The cell answers: Is there an ISO/IEC 42001 (AI management system) certification? Statuses below are evidence grades, not endorsements, “no public evidence” means we could not verify it from public sources, not that the answer is no.

OpenAI API first-party API

●Yes, public confidence: high · verified 2026-08-15

The OpenAI security & privacy page publicly states the ISO/IEC 42001 certification, covering its AI products including the API.

source · full cell

Azure OpenAI Service OpenAI model, served by Microsoft Azure

●Yes, public confidence: high · verified 2026-08-15

The Microsoft Azure blog publicly announces ISO/IEC 42001:2023 certification for Azure AI Foundry Models and explicitly includes Azure OpenAI models, satisfying the question without access restrictions.

source · full cell

Anthropic API first-party API

●Yes, public confidence: high · verified 2026-08-18

Anthropic's own news page publicly confirms ISO/IEC 42001 certification for its AI management system, which encompasses the Anthropic API.

source · full cell

Claude via AWS Bedrock Anthropic model, served by AWS Bedrock

●Yes, public confidence: high · verified 2026-08-19

Anthropic’s own public announcement confirms ISO/IEC 42001 certification for its AI management system, which covers Claude on any platform including AWS Bedrock.

source · full cell

Claude via Google Vertex AI Anthropic model, served by Google Cloud Vertex AI

●Yes, public confidence: high · verified 2026-08-19

Anthropic’s own public announcement confirms ISO/IEC 42001 certification for its AI management system, which applies to Claude regardless of deployment.

source · full cell

Gemini via Vertex AI Google model, served by Google Cloud Vertex AI

●Yes, public confidence: high · verified 2026-08-19

The provider’s own compliance page publicly lists Gemini (App) as ISO/IEC 42001 certified, confirming the model’s certification.

source · full cell

AWS Bedrock (platform) platform row

●Yes, public confidence: high · verified 2026-08-18

The AWS official blog publicly states that ISO/IEC 42001 certification covers Amazon Bedrock, satisfying the yes_public criterion.

source · full cell

Mistral La Plateforme first-party API

○No public evidence confidence: low · verified 2026-08-16

The provider's public compliance page lists SOC 2 and ISO 27001 but makes no mention of ISO/IEC 42001, and no authoritative public document was found.

source · full cell

Mistral via Azure AI Mistral AI model, served by Microsoft Azure

◔Partial confidence: medium · verified 2026-08-17

Verified: Microsoft (platform) holds ISO 42001 on its own blog; the model developer Mistral holds only ISO 27001/27701 and SOC 2 (trust.mistral.ai), so the developer has no certificate and only the platform is certified, which per the rule is partial.

source · full cell

Cohere API Cohere model, served by Cohere (first-party)

◐Yes, sales-gated confidence: high · verified 2026-08-18

Cohere's Trust Center lists the ISO 42001 certification but provides it only through a request form, indicating a gated access

source · full cell

Cohere via AWS Bedrock Cohere model, served by AWS Bedrock

●Yes, public confidence: high · verified 2026-08-16

Cohere’s own Trust Center publicly lists an ISO/IEC 42001 AI Management System certification with an official certificate, confirming the developer holds the certification.

source · full cell

Llama via AWS Bedrock Meta model, served by AWS Bedrock

◔Partial confidence: high · verified 2026-08-16

The AWS blog confirms the platform's own accredited ISO/IEC 42001 certification covering Bedrock, but no public certificate exists for the model developer Meta, so per the platform-vs-model rule the value is partial, not yes_public.

source · full cell

Llama via Azure AI Meta model, served by Microsoft Azure (Azure AI Foundry / Models-as-a-Service)

◔Partial confidence: high · verified 2026-08-15

Microsoft’s ISO 42001 certification covers only the listed services and does not include Llama, and there is no public evidence that Meta (Llama’s developer) holds its own ISO 42001 certification.

source · full cell

xAI API xAI model, served by xAI (first-party)

○No public evidence confidence: high · verified 2026-08-17

The only public source only references ISO/IEC 42001 but does not claim xAI holds the certification, and no other authoritative page shows certification.

source · full cell

DeepSeek API (first-party) first-party API

○No public evidence confidence: high · verified 2026-08-17

Extensive search of DeepSeek's own domain and public pages found no authoritative statement of ISO/IEC 42001 certification.

source · full cell

DeepSeek via Fireworks AI DeepSeek model, served by Fireworks AI

◔Partial confidence: high · verified 2026-08-16

Fireworks Trust Center lists an ISO 42001 Certificate for the platform, and no authoritative DeepSeek page shows the model has its own ISO 42001 certification.

source · full cell