Registry / ISO 42001

Which AI providers hold ISO 42001?

As of 4 October 2026, of 16 AI model offerings tracked, 7 have clear public evidence, 6 are conditional or gated, and 3 have no public evidence.

Clear public evidence: OpenAI API, Azure OpenAI Service, Anthropic API, Claude via AWS Bedrock, Claude via Google Vertex AI, Gemini via Vertex AI, AWS Bedrock (platform)
Conditional, sales-gated, or partial: Mistral via Azure AI, Cohere API, Cohere via AWS Bedrock, Llama via AWS Bedrock, Llama via Azure AI, DeepSeek via Fireworks AI
No public evidence: Mistral La Plateforme, xAI API, DeepSeek API (first-party)

ISO/IEC 42001 (AI management system) certification status across major AI model offerings. The cell answers: Is there an ISO/IEC 42001 (AI management system) certification? Statuses below are evidence grades, not endorsements, “no public evidence” means we could not verify it from public sources, not that the answer is no.

OpenAI API first-party API

●Yes, public confidence: high · verified 2026-10-04

The OpenAI security and privacy page publicly states the ISO/IEC 42001:2023 AI Management System certification, confirming the yes_public claim.

source · full cell

Azure OpenAI Service OpenAI model, served by Microsoft Azure

●Yes, public confidence: high · verified 2026-10-03

The Microsoft Azure blog publicly states that the ISO/IEC 42001:2023 certification covers Azure OpenAI models, providing verifiable evidence without any access gate.

source · full cell

Anthropic API first-party API

●Yes, public confidence: high · verified 2026-10-01

Anthropic's own news page publicly confirms ISO/IEC 42001 certification for its AI management system, which includes the API offering.

source · full cell

Claude via AWS Bedrock Anthropic model, served by AWS Bedrock

●Yes, public confidence: high · verified 2026-10-01

Anthropic, the developer of Claude, publicly confirms ISO/IEC 42001 certification for its AI management system, which by policy covers Claude on all platforms including AWS Bedrock.

source · full cell

Claude via Google Vertex AI Anthropic model, served by Google Cloud Vertex AI

●Yes, public confidence: high · verified 2026-10-01

Anthropic's public ISO/IEC 42001 certification for its AI management system covers Claude, so the model on Google Vertex AI is certified.

source · full cell

Gemini via Vertex AI Google model, served by Google Cloud Vertex AI

●Yes, public confidence: high · verified 2026-10-02

The provider’s own compliance page explicitly states Gemini (the Google AI model) is ISO/IEC 42001 certified, confirming a publicly verifiable certification.

source · full cell

AWS Bedrock (platform) platform row

●Yes, public confidence: high · verified 2026-10-01

The AWS blog publicly states that the ISO/IEC 42001 certification explicitly includes Amazon Bedrock.

source · full cell

Mistral La Plateforme first-party API

○No public evidence confidence: high · verified 2026-10-02

The trust center lists ISO 27001 and ISO 27701 but does not mention ISO/IEC 42001, and no other authoritative page shows such a certificate.

source · full cell

Mistral via Azure AI Mistral AI model, served by Microsoft Azure

◔Partial confidence: high · verified 2026-09-30

Verified on Microsoft's own compliance page that its ISO/IEC 42001 certification scope lists only Microsoft's own AI services (Copilot family, Foundry, Security Copilot) and not Mistral, and Mistral's Trust Center/Help Center shows no ISO 42001 for the model developer, so partial (platform certified

source · full cell

Cohere API Cohere model, served by Cohere (first-party)

◐Yes, sales-gated confidence: high · verified 2026-10-01

Cohere’s Trust Center lists ISO 42001 certification but provides only a request link to obtain the official certificate, matching the definition of a sales‑gated certification.

source · full cell

Cohere via AWS Bedrock Cohere model, served by AWS Bedrock

◐Yes, sales-gated confidence: high · verified 2026-09-28

Cohere's own trust center (https://trustcenter.cohere.com/) lists "### ISO 42001 Certification — Official Certificate" with a Request action and no public download, so the certificate artifact is gated; per the registry's certifications rule a certificate obtainable only through a request/sales proc

source · full cell

Llama via AWS Bedrock Meta model, served by AWS Bedrock

◔Partial confidence: high · verified 2026-09-28

AWS’s ISO/IEC 42001 accreditation applies to Bedrock, and there is no publicly available ISO/IEC 42001 certification for Meta, the Llama developer, making the model’s certification partial.

source · full cell

Llama via Azure AI Meta model, served by Microsoft Azure (Azure AI Foundry / Models-as-a-Service)

◔Partial confidence: high · verified 2026-09-28

Azure’s blog confirms ISO IEC 42001 certification for the Foundry service, and no public evidence shows Meta’s Llama itself holds the certification, so coverage is partial.

source · full cell

xAI API xAI model, served by xAI (first-party)

○No public evidence confidence: high · verified 2026-10-01

The recorded quote itself attributes the ISO/IEC 42001 certificate to Anysphere for Grok Bot (https://docs.x.ai/grok-bot/security-faq: "Anysphere holds ISO/IEC 27001 and ISO/IEC 42001 certifications, issued by Schellman, and Grok Bot is included in the current ISO scope."; trust.cursor.com: "Cursor

source · full cell

DeepSeek API (first-party) first-party API

○No public evidence confidence: low · verified 2026-10-01

Search of DeepSeek's official domains (deepseek.com, cdn.deepseek.com, api-docs.deepseek.com) shows no public statement or certificate for ISO/IEC 42001, so evidence is absent

source · full cell

DeepSeek via Fireworks AI DeepSeek model, served by Fireworks AI

◔Partial confidence: high · verified 2026-09-29

Fireworks AI publicly confirms ISO 42001, but no authoritative DeepSeek source shows the model developer has its own ISO 42001, so the offering is only partially covered

source · full cell