AI Provider Trust Registry evidence verified as of 2026-07-05

Registry / ISO 42001

Which AI providers hold ISO 42001?

ISO/IEC 42001 (AI management system) certification status across major AI model offerings. The cell answers: Is there an ISO/IEC 42001 (AI management system) certification? Statuses below are evidence grades, not endorsements, “no public evidence” means we could not verify it from public sources, not that the answer is no.

OpenAI API first-party API
Yes, public confidence: high · verified 2026-07-05

ISO/IEC 42001:2023 (AI management system) is publicly listed on the trust portal among certifications applying to the API Platform. [human 2026-07-05] Dismissed: scrape artifact. OpenAI holds ISO/IEC 42001 (openai.com/security-and-privacy); trust.openai.com JS portal returned an incomplete cert list.

source · full cell

Azure OpenAI Service OpenAI model, served by Microsoft Azure
Yes, public confidence: high · verified 2026-07-05

Microsoft holds ISO/IEC 42001:2023 certification with "Microsoft Foundry" (the service that hosts Azure OpenAI models, per Microsoft's 2025 Azure blog announcement covering "Azure AI Foundry Models") on the public in-scope list. This is Microsoft's AIMS certification as deployer/platform, not an OpenAI certification. Certificates/audit reports are on the Service Trust Portal.

source · archived copy · full cell

Anthropic API first-party API
Yes, public confidence: high · verified 2026-07-05

Anthropic announced accredited ISO/IEC 42001:2023 certification on 2025-01-13, issued by Schellman (accredited by the ANSI National Accreditation Board), and states it is one of the first frontier AI labs to achieve it. The issued certificate is hosted on the Trust Center; also listed on the help-center certifications page.

source · full cell

Claude via AWS Bedrock Anthropic model, served by AWS Bedrock
Yes, public confidence: medium · verified 2026-07-05

AWS holds an accredited ISO/IEC 42001:2023 AI-management-system certification; AWS announced (Nov 2024) that the initial scope covered Amazon Bedrock, Amazon Q Business, Amazon Textract, and Amazon Transcribe, and reported a clean first surveillance audit (Nov 2025). The FAQ page confirms the certificate exists but the authoritative service-scope list is inside the certificate, accessed via AWS Artifact, hence medium confidence pending a human pull of the certificate.

source · full cell

Claude via Google Vertex AI Anthropic model, served by Google Cloud Vertex AI
Yes, public confidence: medium · verified 2026-07-05

Google has publicized ISO/IEC 42001:2023 certification of its AI management system covering Google Cloud Platform (announced via Google Cloud blog "Google Cloud's commitment to responsible AI is now ISO/IEC certified"). However, ISO 42001 does not appear in the per-service services-in-scope matrix, so explicit coverage of Vertex AI partner models (Claude) within the certificate scope could not be verified publicly; confirm certificate scope via Compliance Reports Manager. Anthropic separately holds its own ISO 42001 for first-party services, but that does not attach to this Vertex offering.

source · full cell

Gemini via Vertex AI Google model, served by Google Cloud Vertex AI
Yes, public confidence: high · verified 2026-07-05

Google Cloud Platform, Google Workspace, and Gemini (App) are certified ISO/IEC 42001:2023. The page's products-in-scope list explicitly includes "Gemini Enterprise Agent Platform" and "Generative AI on Gemini Enterprise Agent Platform" (i.e., Vertex AI under its 2026 name). Certificate verifiable at iafcertsearch.org.

source · archived copy · full cell

AWS Bedrock (platform) platform row
Yes, public confidence: medium · verified 2026-07-05

AWS holds an accredited ISO/IEC 42001:2023 (AI management system) certification. AWS publicly announced Amazon Bedrock among the certified services (with Amazon Q Business, Textract, Transcribe), but the FAQ page itself defers the authoritative service scope to the certificate, which is retrieved via AWS Artifact in the console. Confidence medium because the public compliance page does not itself enumerate Bedrock in scope; the named-service claim comes from AWS's own announcement and the Artifact certificate. Human reviewer with an AWS account should confirm Bedrock on the certificate.

source · full cell

Mistral La Plateforme first-party API
No public evidence confidence: medium · verified 2026-07-05

No ISO/IEC 42001 claim found on help.mistral.ai, trust.mistral.ai, or mistral.ai as of verification date. Only SOC 2 Type II and ISO 27001/27701 are claimed.

no public source · full cell

Mistral via Azure AI Mistral AI model, served by Microsoft Azure
Partial confidence: medium · verified 2026-07-05

Microsoft lists "Microsoft Foundry" among services in scope for its ISO/IEC 42001 certification, which covers the platform serving this offering. The certificate and exact scope statement are gated on the Service Trust Portal, and public docs do not state whether the certified AI-management-system scope extends to hosting of third-party (Mistral) models specifically. No public evidence of an ISO 42001 certification held by Mistral AI itself; this cell grades the serving platform.

source · archived copy · full cell

Cohere API Cohere model, served by Cohere (first-party)
Yes, public confidence: high · verified 2026-07-05

ISO/IEC 42001 (AI management system) certification listed on the trust center alongside ISO 27001; AIMS certificate requestable there. One of the earlier model developers to hold 42001.

source · full cell

Cohere via AWS Bedrock Cohere model, served by AWS Bedrock
Yes, public confidence: medium · verified 2026-07-05

Platform-level (AWS). AWS holds accredited ISO/IEC 42001:2023 certification; AWS announcements name Amazon Bedrock among the certified AI services (alongside Amazon Q Business, Textract, Transcribe), and AWS reports a clean first surveillance audit (Nov 2025). However, the public FAQ page does not enumerate in-scope services on-page, the service list is in the certificate, retrieved via AWS Artifact. Confidence medium until the certificate scope is confirmed from Artifact.

source · full cell

Llama via AWS Bedrock Meta model, served by AWS Bedrock
Yes, public confidence: medium · verified 2026-07-05

Grades AWS (serving platform). AWS holds an accredited ISO/IEC 42001:2023 AI-management-system certification (certifier Schellman, ANAB-accredited); AWS announced (Nov 2024) that the initial scope covered Amazon Bedrock, Amazon Q Business, Amazon Textract, and Amazon Transcribe, and reported a clean first surveillance audit (Nov 2025). The FAQ page confirms the certificate exists but the authoritative service-scope list is inside the certificate, accessed via AWS Artifact, hence medium confidence pending a human pull of the certificate. Note this is AWS's platform certification; it says nothing about Meta's own AI-management practices.

source · full cell

Llama via Azure AI Meta model, served by Microsoft Azure (Azure AI Foundry / Models-as-a-Service)
Yes, public confidence: medium · verified 2026-07-05

Platform-level: Microsoft's ISO/IEC 42001 page lists "Microsoft Foundry" among certified AI services (certificates on Service Trust Portal). The certification covers Microsoft's AI management system for the Foundry service; whether the certified scope statement explicitly covers third-party model catalog offerings such as Llama is not publicly documented, hence medium confidence. Meta itself publishes no ISO 42001 certification for Llama.

source · archived copy · full cell

xAI API xAI model, served by xAI (first-party)
No public evidence confidence: medium · verified 2026-07-05

No ISO/IEC 42001 (AI management system) claim found anywhere in xAI public materials as of 2026-07-05.

no public source · full cell

DeepSeek API (first-party) first-party API
No public evidence confidence: high · verified 2026-07-05

No ISO/IEC 42001 (AI management system) certification claim was found in any DeepSeek public material.

no public source · full cell

DeepSeek via Fireworks AI DeepSeek model, served by Fireworks AI
Yes, public confidence: high · verified 2026-07-05

Fireworks docs list ISO 42001 (AI management system) among its certifications, with certificate PDFs available via the Trust Center. Certifies Fireworks' AI management practices as the serving platform; it says nothing about DeepSeek's model development practices.

source · archived copy · full cell