Best ISO 42001 auditors for enterprise
This ranking of the top ISO 42001 certification bodies gives extra weight to things which matter most for enterprise businesses: auditor reputation, accreditation and integration.
Our assessment criteria
The assessment criteria is weighed towards the requirements of an enterprise buyer: accreditation, auditor reputation and integration.
Accreditations
Which accreditations the body holds and who granted them. ISO/IEC 42001 accreditation from UKAS or another IAF signatory carries the most weight. Accreditation for related standards counts for less. We checked accreditation-body registers rather than relying on certification-body claims.
Reviews
What clients say about the audit itself. We read the reviews for relevance before counting them, then assessed their rating, volume and recency.
Pricing
Whether the body publishes its certification prices, explains how it sizes audit days to AI risk, and provides enough information to judge value where prices are available.
Responsiveness
How promptly the body replies and how quickly it can progress an engagement after you commit. Lead time can matter, but clear communication and a straightforward process usually matter more.
Leverage of software/tooling
Whether the body can work with the software, platforms and tools you already use, alongside the systems it runs itself. We looked for evidence that auditors can use existing records instead of asking teams to recreate them in spreadsheets or another format.
Auditor reputation
What the body can demonstrate about its certification work: how long it has audited management systems, which ISO/IEC 42001 certificates it has issued, and whether it identifies the people who may audit you.
Integrated audits
Whether the body can incorporate ISO/IEC 42001 into a management system you already run. Many buyers can give this criterion less attention. For organisations certified to ISO 27001 or ISO 9001, integrated auditing can reduce duplicated work and avoid maintaining a separate system.
ISO 42001 auditors compared
Every body marked against the 7 scoring criteria. For full evidence behind the scoring, visit the methodology page.
| # | Total/10 | Certification body | Accreditations27% | Reviews9% | Pricing4% | Responsiveness7% | Leverage of software/tooling9% | Auditor reputation24% | Integrated audits20% |
|---|---|---|---|---|---|---|---|---|---|
| 1 | 8.4 |  |
10 | 4 | 4 | 5 | 7 | 10 | 9 |
| 2 | 8.1 |  |
6 | 8 | 6 | 8 | 9 | 9 | 10 |
| 3 | 7.4 |  |
9 | 7 | 5 | 6 | 5 | 7 | 8 |
| 4 | 7.3 |  |
8 | 8 | 4 | 5 | 5 | 7 | 9 |
| 5 | 6.5 |  |
4 | 10 | 9 | 10 | 9 | 6 | 6 |
| 6 | 6.4 |  |
9 | 0 | 6 | 6 | 6 | 5 | 8 |
| 7 | 6.3 |  |
9 | 0 | 4 | 5 | 6 | 5 | 8 |
| 8 | 5.7 |  |
6 | 3 | 4 | 5 | 6 | 5 | 8 |
Detailed analysis of top ISO 42001 auditors
Each entry gives the verdict first, followed by the seven scores and the evidence behind them. Every scored claim has a numbered source listed at the foot of the entry. Research last checked 3 September 2026.
1
BSI Assurance UK
Visit website
8.4/10
BSI Assurance UK
Visit website8.4 overall, first place. BSI has the strongest accreditation and auditor-reputation scores in the study. Those strengths matter heavily on the enterprise page, where accreditation carries 27 per cent and auditor reputation carries 24 per cent.
Read more
The trade-off appears in the lower-weighted criteria. BSI is the only body scoring 10 on accreditation, then scores 4 on pricing and 5 on responsiveness because it publishes neither certification prices nor lead times. If your certificate must pass a formal enterprise procurement review, BSI is the clearest starting point. Buyers who need an early cost or timing indication will need to open an enquiry.
What they certify: ISO/IEC 42001 certification; pre-certification assessment, sold separately; ISO/IEC 27001 and ISO 9001; ISO 42001 training and the standard itself.
What to watch for: Ask for the named auditor and their relevant experience. BSI helped shape the standard, but that does not establish who will conduct your audit. Treat the pre-certification assessment as a separate purchase from certification.
BSI holds ISO/IEC 42001 accreditation from UKAS, RvA in the Netherlands and ANAB in the United States [2]. UKAS granted BSI the first accreditation in the world for ISO/IEC 42001 [1].
Read more
That combination gives BSI accreditation recognised across the UK, EU and US procurement contexts. It is the only body in this study with three accreditations for the standard, which supports the maximum comparative score and is why the criterion carries 20 per cent.
(4.4 under the review method). Trustpilot lists 29 reviews, 26 of them rated one or two stars, with no replies from BSI [5].
Read more
Eleven reviews concern certification audits and average 1.45 stars. They include complaints about an audit report not being sent and extra audit days announced nine days before a certificate expired. The remaining reviews concern the shop, invoices, standards documents and training. Trustpilot places BSI in its Money & Insurance category.
BSI publishes no prices, ranges or audit-day guidance on its ISO 42001 pages. Every figure must come from an enquiry [3].
Read more
That makes early price comparison difficult. BSI does publish substantial free guidance on the standard, so a buyer can prepare an informed enquiry. The research did not find a published basis for judging value against other bodies.
BSI publishes no lead time or turnaround commitment.
Read more
We found no direct evidence about delivery for a specific ISO 42001 audit. The score therefore remains at the midpoint rather than treating the missing information as a poor result. Enterprise buyers should establish the available audit dates during the first enquiry.
BSI has substantial resources and proprietary portals, including BSI Connect. Its published approach remains highly standardised and formal, with less public evidence of continuous-compliance tooling or API-led evidence collection.
Read more
That may suit an AI system inside a regulated product. A SaaS company releasing changes every week should ask how BSI will use its existing compliance evidence during the audit.
BSI has the longest management-system certification record in this study and the strongest publicly named ISO 42001 record.
Read more
Its published certificates include KPMG Australia, the first organisation globally certified through BSI; NUWAVE, the first US organisation certified by BSI, awarded in May 2026; Darktrace and Miro.
No other body here has a comparable public record of named and dated certificates for this standard. The score measures that checkable record, rather than claiming that BSI delivers every audit better than its competitors.
BSI holds a broad range of UKAS accreditations, extending well beyond ISO 9001, ISO 27001 and ISO 42001. Its three accreditations also support integrated programmes across several markets.
Read more
It scores below Schellman because BSI does not provide SOC 2. An organisation with several management systems can still cover most of its likely requirements through one certification body.
Reporting, not scored
BSI publishes thorough material in formal standards language. It is accurate and useful for readers already familiar with certification, although enterprise stakeholders coming to ISO 42001 for the first time may need a plainer explanation.
2
Schellman
Visit website
8.1/10
Schellman
Visit website8.1 overall, second place. Schellman has the strongest ISO 42001 experience in this study. It gained accreditation in September 2024, eighteen months before UKAS granted its first accreditation for the standard.
Read more
Every other body here began auditing against ISO 42001 after securing accreditation in 2026.
The UK focus affects its position. Schellman scores 6 on accreditation because ANAB, rather than UKAS, granted its ISO 42001 accreditation. ANAB is IAF-recognised, so the certificate is internationally recognised. A UK procurement team that names UKAS may still ask you to explain the difference.
What they certify: ISO/IEC 42001 and ISO/IEC 27001; SOC 1, SOC 2 and SOC 3; PCI DSS, FedRAMP and HITRUST; AI red teaming.
What to watch for: Check whether UKAS has granted the accreditation before you commit, rather than assuming it has. If Schellman already runs your SOC 2, confirm that AI specialists will conduct the ISO 42001 audit. Your existing SOC 2 team may not be the right team for AI governance.
Schellman became the first certification body in the world accredited for ISO/IEC 42001. ANAB granted the accreditation in September 2024 [1].
Read more
UKAS named Schellman in its first tranche, although the grant remains unconfirmed [3].
ANAB is an IAF multilateral agreement signatory. Its certificate is therefore recognised internationally and is in no sense second-rate. The score is 6 rather than 9 because this is a UK-framed ranking: UK procurement teams often ask specifically for UKAS accreditation. Intertek receives the same score for its JAS-ANZ accreditation.
(7.8 under the review method). Gartner Peer Insights lists 33 reviews with an average rating of 5.0. The newest review dates from August 2025 [5].
Read more
Gartner blocks automated reading, so the profile was read by hand. The review content was not assessed line by line, which limits what the profile can establish. Recency keeps Schellman below Tempo on this criterion.
Schellman publishes no price list. Its own literature describes a fixed-fee model, which gives buyers some certainty about how the quote will be structured without revealing the amount.
Read more
The available evidence places Schellman at the higher end of this list. Its work spans technical compliance, attestation and complex multi-framework engagements, often alongside SOC 2. The research did not find a comparable published price, so the actual cost still needs to be established by enquiry.
Schellman's SOC 2 work operates against contractual deadlines, and its reported 90 per cent client retention rate over five years is consistent with dependable delivery.
Read more
It publishes no lead time for booking an ISO 42001 audit. That missing commitment keeps the score below 9.
Schellman's client base includes cloud businesses, data centres, fintech companies and SaaS providers. It also conducts AI red teaming, so its published service range includes adversarial testing of AI systems alongside certification.
Read more
Schellman is the only body in this study to publish material on lessons from real ISO 42001 audits. That gives enterprise buyers more evidence of practical experience than a general explanation of the standard.
Schellman matches BSI on this criterion through a different record. Founded in 2002, it secured ISO 42001 accreditation eighteen months before the first UKAS grant and therefore has more time conducting audits against this standard than any other body here.
Read more
Three of the 17 publicly named ISO 42001 certificates are Schellman's, including Amazon Web Services. It is also the only body that publishes named practitioners writing about actual ISO 42001 engagements. The score remains comparative, not an assessment of individual audit quality.
Schellman has the broadest integrated offer in this study. ANAB accredits it for ISO/IEC 42001, ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 20000-1, ISO 9001 and ISO 22301.
Read more
UKAS also accredits it for ISO/IEC 27001.
The firm provides SOC 1, SOC 2, SOC 3, PCI DSS, FedRAMP and HITRUST services. For an organisation already buying SOC 2, one relationship can cover AI certification and several assurance requirements.
Reporting, not scored
Clear, practitioner-focused writing aimed at compliance and audit teams.
3
Alcumus ISOQAR
Visit website
7.4/10
Alcumus ISOQAR
Visit website7.4 overall, third place. Alcumus ISOQAR is a mid-market all-rounder with two useful features for enterprise buyers.
Read more
It names three people involved in ISO 42001 and offers separate gap analyses for the clauses and Annex A controls.
Its broad UKAS-accredited portfolio supports integrated audits, including the ISO 27001 combination many enterprise buyers already need. Price, lead time and combined-audit scoping remain largely private, so the engagement needs careful questioning before selection.
What they certify: ISO/IEC 42001:2023 certification, UKAS accredited; gap analysis against the clauses; gap analysis against the Annex A controls.
What to watch for: Ask how a combined ISO 27001 and ISO 42001 audit will be scoped, including the day count and saving. The gap analyses are separate preparation services, not certification. A body that prepares you cannot audit you under the accreditation rules.
Alcumus ISOQAR states on its website that it is "now UKAS accredited for ISO/IEC 42001" [1]. UKAS named Alcumus ISOQAR Limited in its first AIMS tranche [2].
Read more
The 9 reflects the same basis as NQA: one relevant accreditation, compared with BSI's three. No grant date appears in the published material, so the date remains unconfirmed and we have asked for clarification.
(6.6 under the review method). Reviews.io lists 26 reviews with an average rating of 4.4. Twelve concern training courses and four concern audits.
Read more
Three of those four audit reviews received five stars [4].
The only review in the study that names ISO 42001 concerns a one-star lead-auditor course. The research found no audit review from the last 12 months.
ISOQAR publishes no prices. Buyers must request a quote and wait for a callback.
Read more
The two separately described gap-analysis products give buyers a clearer view of the preparation work than most bodies provide. They also confirm that preparation and certification are separate purchases. Separating clause conformity from control selection is exactly how clause 6.1.3 works, which suggests a standard-led pre-audit structure rather than a generic checklist. The research found no published figures to support a direct value comparison.
ISOQAR publishes no lead time or turnaround commitment, and the research found no particular evidence of faster delivery.
Read more
The score uses the same mid-market inference as NQA and is recorded as inference rather than direct evidence from ISOQAR. Ask for a proposed schedule before treating the service as suitable for a fixed deadline.
ISOQAR provides internal customer portals for managing engagements. Public material gives less evidence of API integration or audit work conducted directly inside compliance software.
Read more
That describes the evidence available about its delivery model. It does not assess audit quality. If your AI is part of a software product, ask how the auditor will use your existing systems and evidence.
ISOQAR has held UKAS accreditation since February 1993. It is the only body in this study with a published ISO 42001 case study that names both the client and the person who conducted the work.
Read more
It also names three ISO 42001 practitioners. Their individual credentials do not appear alongside the names, which keeps the score below 8.
ISOQAR's UKAS-accredited range includes ISO 9001, ISO 14001, ISO 22000, ISO 22301, ISO/IEC 27001, ISO 45001, ISO 50001 and ISO 55001.
Read more
That covers the ISO 27001 combination common among enterprise technology organisations.
ISOQAR publishes no method for calculating a combined day count. It also does not provide SOC 2, which keeps the score below the top two.
Reporting, not scored
ISOQAR publishes clear, practical material for organisations preparing for an audit, including a free responsible-AI guide. The writing is more accessible than the standards-led material from some larger bodies, although NQA provides a clearer buyer-focused explanation.
4
LRQA
Visit website
7.3/10
LRQA
Visit website7.3 overall, fourth place. LRQA offers the established UK certification-body model, with a long management-system record and a broad integrated-audit service.
Read more
The evidence for its ISO 42001 accreditation is less complete than for the other UKAS-accredited bodies. UKAS named LRQA in the first tranche, and third-party reporting says UKAS granted the accreditation in February 2026. Public information on price, lead time, auditors and sector examples remains limited.
What they certify: ISO/IEC 42001 certification in two phases; optional gap analysis with an auditor; integrated audits across several management systems; one-day introduction, internal auditor and lead auditor conversion training.
What to watch for: Ask for the accreditation record, price, lead time, sector experience and auditor credentials. The two-phase process is described publicly, but the site gives no timescale for either phase.
UKAS named LRQA Limited in its first AIMS tranche [1]. Third-party reporting states that UKAS granted the accreditation in February 2026.
Read more
The grant has not been confirmed against a UKAS register in the available research. LRQA is therefore treated as a UKAS-accredited body on the reported evidence, with that limitation recorded.
(7.7 under the review method). LRQA's Trustpilot profile shows 323 reviews with an average rating of 4.9. The headline figure needs careful handling: of the newest 200 reviews, 171 are in Dutch and 190 concern training courses [4].
Read more
Only seven reviews concern an audit, with an average rating of 3.86. One of those seven is in English. LRQA is the only body in this study that has replied to a review. The public profile supports a traditional UKAS certification-body image, rather than providing a large body of direct ISO 42001 evidence.
LRQA publishes no prices, ranges or audit-day guidance.
Read more
Its service appears suited to large, multi-entity organisations and complex supply chains. The available evidence does not support a comparable price judgement, so buyers need to establish the day count, rates and scope during the enquiry.
LRQA publishes no lead time. Its two-phase audit description includes no timescale for either phase.
Read more
The research found no specific delivery evidence to move the score above or below the midpoint. Ask for available audit dates before treating the process as suitable for a fixed enterprise deadline.
LRQA publishes no specific evidence of API-led evidence collection, cloud infrastructure auditing or model-development expertise.
Read more
The available information suggests that the experience of the assigned auditor may shape the technology approach more than a standardised digital-audit model.
A buyer with a software or AI product should ask how LRQA will use existing engineering and compliance systems during the audit.
LRQA has certified management systems since 1985 and carries the Lloyd's Register name. It also has a named ISO 42001 certificate for Emirates Health Services, awarded in April 2024, among the earliest worldwide.
Read more
The public record is thinner than BSI's or Schellman's. The study found no named auditors, sector case studies or published auditor credentials for this service.
LRQA offers integrated audits across several management systems. Its training ladder includes internal auditor and lead auditor courses, which may help an enterprise develop the internal capability needed to maintain a combined system.
Read more
Its range and integrated service place it level with BSI on this criterion. The research found no SOC 2 service to add to that programme.
Reporting, not scored
Clear and conventional.
5
Tempo Audits
Visit website
6.5/10
Tempo Audits
Visit website6.5 overall, fifth place. Tempo leads the study on pricing, responsiveness and reviews. Enterprise weighting gives more influence to accreditation and auditor reputation, where Tempo scores 4 and 6 respectively.
Read more
Tempo's UKAS accreditation covers ISO/IEC 27001 and SOC 2, not ISO/IEC 42001. It is progressing through the second UKAS tranche for ISO 42001. Until that accreditation appears on the relevant schedule, an enterprise customer requiring a UKAS-accredited ISO 42001 certificate should treat the gap as decisive.
What they certify: ISO/IEC 27001 certification, UKAS accredited; AICPA SOC 2 assurance; ISO 42001 certification; all three audited together.
What to watch for: Ask for the accreditation schedule in writing and check which standards it names. If UKAS grants ISO 42001 accreditation later, establish how that affects a certificate issued before the grant. A strong audit experience does not turn an unaccredited ISO 42001 certificate into an accredited one.
UKAS accredits Tempo for ISO/IEC 27001 [1]. Tempo is progressing through the second UKAS tranche for ISO/IEC 42001 and, based on its public confirmations, expects accreditation in late 2026 [3].
Read more
The score follows the standard named on the accreditation schedule. Tempo receives 4 rather than 0 because it already holds a UKAS relationship, has undergone the relevant impartiality assessment and operates audited certification processes. Those factors reduce the gap, but they do not establish ISO/IEC 42001 accreditation.
(9.5 under the review method). We read all 74 public reviews. Sixty-seven concern audits, all received five stars.
Read more
One concerns an ISO 42001 audit, 34 name ISO 27001, and every review dates from the last 12 months [4].
Reviewers repeatedly mention speed and clear communication. Tempo has not replied to a review, although the profile contains no low ratings requiring a response.
Tempo is the only body in this study that publishes certification prices. Initial certification costs £3,500 to £20,000, surveillance costs £1,600 to £9,000 a year, and recertification costs £3,500 to £14,000 [2].
Read more
Its pricing information identifies the cost drivers, explains what the quote includes and excludes, and says that roughly 70 to 75 per cent of quoted audit days involve time with an auditor. It also names the factors used to assess scope: headcount, AI roles in scope, sites, sector risk and the number of AI systems.
The day count still requires an enquiry, which keeps the score below 10. Every other body in the study quotes on request, so Tempo provides the clearest starting point for an enterprise budget.
Tempo positions speed as a core part of its service. Client statements support that position, describing an audit that moved quickly to meet a deadline, another that fitted into the client's work with little disruption, and a direct comparison that found Tempo faster than every other firm approached.
Read more
Tempo publishes no booking lead time. The score therefore relies on client evidence rather than a formal service commitment. The available reviews still show a stronger pattern on speed than any other body in this study.
Tempo focuses on software, SaaS and AI companies. It says it works with the tools clients already use and publishes material on ISO/IEC 42006 audit methodology rather than repeating the standard's requirements.
Read more
Tempo integrates with Vanta, Drata and Secureframe through APIs to collect continuous compliance evidence. That can reduce the manual document work required during an audit. The public evidence makes it the clearest match here for a company whose AI is part of its product.
Tempo has the shortest institutional record in the study. Founded in 2022, it has not yet issued an accredited ISO 42001 certificate and publishes no named AI case study.
Read more
Tempo does publish a clear public presence led by its founder and identifies the auditor assigned to an engagement. Clients name the same auditor across their work, which gives buyers more visibility into the individual involved. Review evidence is scored separately, so it does not count again here.
Tempo focuses on ISO 27001, SOC 2 and ISO 42001. That combination covers the main assurance requirements for many software companies.
Read more
Its range is narrower than the larger certification bodies in this study. An enterprise with several other management systems may need a second certification body.
Reporting, not scored
Tempo's stated position is "Less jargon, more clarity". Client statements support that description, including comments from an experienced buyer who had worked with several auditors and another who said the process was explained without confusion.
6
NQA Certification
Visit website
6.4/10
NQA Certification
Visit website6.4 overall, sixth place. NQA offers a UKAS-accredited ISO 42001 service and integrated audits across its management-system range.
Read more
Its public review footprint is the main weakness in this comparison: no readable profile was found, so Reviews scores 0.
The absence of reviews says nothing about audit quality. It does mean buyers have less public customer evidence to examine. NQA also publishes little about price, lead time or the people who would conduct the audit, so most of the buying decision must be settled in conversation.
What they certify: ISO/IEC 42001 certification, UKAS accredited; the standard management-system set; integrated audits.
What to watch for: NQA's ISO 42001 page blocked automated access, so part of this entry relies on third-party reporting. Confirm the accreditation date directly. Ask for the audit day count, rates, named auditor and the experience of the person assessing your AI scope.
UKAS granted NQA accreditation for ISO/IEC 42001 in January 2026 [1], among the earliest grants after BSI.
Read more
UKAS also named NQA Certification in its first AIMS tranche [2].
The score is 9 rather than 10 because NQA holds one relevant accreditation, while BSI holds three. That distinction matters more to organisations selling across the EU or US than to a UK-only buyer.
The research found no readable NQA review profile on Trustpilot, reviews.io or Gartner.
Read more
That is a finding about public evidence. It does not establish poor audit quality, and it does not mean NQA has no satisfied clients. A buyer simply cannot assess customer comments that are not available to read.
NQA publishes no prices. Its available material explains the certification process in more detail than BSI's ISO 42001 pricing material, so a buyer can make a more informed enquiry.
Read more
The research found no published figures for comparing value. Ask NQA to separate the audit-day count, day rate, travel and any additional preparation or surveillance costs.
NQA publishes no lead time.
Read more
The score sits above the largest bodies because a mid-market provider may have more calendar flexibility. That is an inference from scale, not evidence of NQA's actual availability, which is why it is a 6 and not higher. Request proposed dates before relying on it for a customer or regulatory deadline.
NQA publishes experience working with remote-first and cloud-hosted systems and says it can accept evidence from automated compliance dashboards.
Read more
The research could not establish whether dedicated AI specialists or generalist auditors assess the AI scope. We have asked NQA for clarification. Until then, ask the same question before appointing it.
NQA was formed in 1988 and has certified management systems since then. UKAS granted its ISO 42001 accreditation in January 2026, but the research found no publicly named ISO 42001 certificate.
Read more
NQA publishes no AI case study, auditor names or relevant credentials. Its long management-system record is established. Its public record on ISO 42001 remains limited.
NQA offers integrated audits across its management-system range, including ISO 27001. That covers the combination many enterprise technology organisations already hold.
Read more
It provides no published method for calculating a combined day count and no SOC 2 service appears in the available evidence.
Reporting, not scored
NQA writes about ISO 42001 for prospective buyers rather than only for audit professionals. The material remains technically accurate without assuming that readers already understand every certification term.
7
TÜV UK
Visit website
6.3/10
TÜV UK
Visit website6.3 overall, seventh place. TÜV UK is TÜV NORD's UK arm and carries the trust associated with the wider German TÜV brand.
Read more
The main buying risk is identifying the correct legal entity. TÜV SÜD, TÜV NORD and TÜV Rheinland are separate companies with separate accreditations. TÜV UK Limited is the entity named in the UKAS programme. Confirm the legal entity on your quote and read the accreditation schedule before signing.
What they certify: ISO/IEC 42001 certification, UKAS and RvA accredited; a broad management-system and product-safety portfolio; integrated audits.
What to watch for: TÜV SÜD also sells ISO 42001 certification, but its certificates do not belong to TÜV UK. Ask for the relevant accreditation schedule, price, audit-day count and lead time. TÜV UK's published material does not provide those details.
TÜV UK is the UK arm of TÜV NORD. TÜV NORD holds UKAS and RvA accreditation for ISO/IEC 42001 [1]. UKAS named TÜV UK Limited in its first AIMS tranche [3].
Read more
The two accreditations cover UK and EU procurement contexts, which is more useful than one for anyone selling across both. The score is below BSI's 10 because the research found no US accreditation for this service.
The research found no review profile for TÜV UK. The TÜV NORD group page contains one review, concerning India in 2022, while the German profile concerns vehicle inspection.
Read more
No readable review evidence relates to a UK ISO 42001 audit. That is a scoring finding about public evidence, rather than a warning about audit quality or the wider TÜV brand.
TÜV UK publishes no cost, audit-day or inclusions information for ISO 42001.
Read more
That leaves buyers with no early price basis for comparison. The available material also provides less buyer guidance than BSI's, so an enquiry will need to establish both the scope and the likely cost.
TÜV UK publishes no lead time or turnaround commitment. Its ISO 42001 material contains no timescale information.
Read more
The research found no direct delivery evidence to justify moving the score from the midpoint. Ask for available dates before assuming the wider group can meet your timetable.
TÜV UK's assessment heritage includes physical and regulated systems. That background may suit AI embedded in industrial or safety-critical products.
Read more
Public material provides less evidence of audits conducted inside a client's compliance tools. A software company shipping a model as a service should ask how TÜV UK will work with its existing evidence and development systems.
The TÜV group dates from 1869 and has a strong reputation in technical assessment. One ISO 42001 certificate, for Mentech Innovation, can be traced to the group, although the research could not confirm its date.
Read more
TÜV UK publishes no named auditors, relevant credentials or AI case study. TÜV SÜD is a separate company, and its ISO 42001 certificates do not belong to TÜV UK.
TÜV UK's broad portfolio supports integrated audits, including ISO 27001 and ISO 9001.
Read more
The research found no published method for calculating a combined day count and no SOC 2 service. Ask how shared evidence will be reused and how much an integrated programme will save.
Reporting, not scored
TÜV UK's material uses standards and engineering language. That suits its traditional client base, although software teams new to ISO 42001 may need a clearer buyer-focused explanation.
8
Intertek Certification
Visit website
5.7/10
Intertek Certification
Visit website5.7 overall, eighth place. Intertek holds valid ISO 42001 accreditation from JAS-ANZ, issued globally in 2025.
Read more
JAS-ANZ is an IAF multilateral agreement signatory, so Intertek's certificate is internationally recognised.
The UK weighting produces the lower position. On a UK-framed list, an accreditation a UK procurement team has never heard of scores 6 rather than 9. Intertek is not confirmed as UKAS-accredited for ISO 42001, while UK procurement teams may ask for UKAS by name. A business selling into Asia-Pacific markets may place greater value on JAS-ANZ. The accreditation requirement in your customer contracts should decide this point.
What they certify: ISO/IEC 42001 certification, JAS-ANZ accredited; a broad testing, inspection and certification portfolio; ISO 42001 AI Foundation training in the UK.
What to watch for: Ask whether UKAS has granted accreditation and how that would affect a certificate issued under JAS-ANZ. Confirm the legal entity, price, lead time and audit team. A JAS-ANZ certificate is recognised internationally, but it may fail a contract that specifically requires UKAS.
JAS-ANZ accredited Intertek to certify ISO/IEC 42001:2023 globally. Intertek announced the accreditation in 2025 [1], before the first UKAS grants.
Read more
UKAS named Intertek Certification Ltd in its first tranche, but the grant remains unconfirmed [2].
JAS-ANZ signs the IAF multilateral agreement, so the certificate is recognised and portable internationally. This UK-framed study gives it the same score as Schellman's ANAB accreditation because neither is the accreditation UK procurement teams most often name.
(2.5 under the review method). Intertek has an unclaimed Trustpilot profile with 17 reviews. Fifteen received one or two stars, and none received a reply [4].
Read more
Two reviews concern certification, both rated one star. The newer dates from January 2025. The remaining reviews concern calls and emails across Intertek's testing businesses. This is a group profile, not a profile for the UK certification arm, so its relevance is limited.
Intertek publishes no ISO 42001 price or audit-day information.
Read more
The group operates across testing, inspection and certification, so an enterprise buyer may be able to combine services. Intertek is a global FTSE 100 group, and buyers consolidating ISO 27001 with product testing, laboratory assurance or supply chain audits should ask for the separate and combined costs rather than relying on the group's scale.
Intertek publishes no lead time or turnaround commitment.
Read more
The available research provides no specific delivery evidence. The score therefore remains at the midpoint by default.
Intertek uses standard remote-audit video tools and has substantial experience in physical engineering, manufacturing and supply-chain work.
Read more
Its public material provides less evidence of API-led evidence collection or continuous compliance processes.
Intertek runs an ISO 42001 AI Foundation course in the UK, showing investment in developing capability. A software company should still ask how the audit will use its existing technical and compliance systems.
Intertek has strong recognition across global supply chains, manufacturing and international corporate markets.
Read more
The public ISO 42001 record is limited. JAS-ANZ accredited Intertek in 2025, but the research found no publicly named certificate, AI case study, auditor name or relevant credential. The group reputation therefore provides more evidence than the ISO 42001 service itself.
Intertek's testing, inspection and certification portfolio could support combined programmes across several enterprise requirements.
Read more
The research found no published method for calculating a combined day count and no SOC 2 service. Ask which services can share audit evidence and how the programme would be scheduled.
Reporting, not scored
Intertek's material uses standards language throughout. It is written for readers already familiar with certification and offers less help to a buyer approaching ISO 42001 for the first time.
The same ranking, weighted by company size
What matters to a twenty-person startup is not what matters to a five-thousand-person group. Each cut re-weights the same scores.
Questions enterprise buyers ask when choosing an ISO 42001 auditor
Does an enterprise need a UKAS-accredited ISO 42001 certificate?
+
If your procurement specifies UKAS, then yes - and that rules out any certificate issued outside UKAS accreditation, which on this list affects the bodies accredited by ANAB and JAS-ANZ. Both are IAF multilateral signatories, so their certificates are internationally recognised and in no sense second-rate, but if your requirement names UKAS you will be explaining the IAF arrangement in a procurement call. It is the whole decision on two of these entries, and it is why accreditation carries more weight on this page than on any other.
Can an enterprise audit ISO 42001 alongside its existing ISO standards?
+
For a group already running an integrated management system this is frequently the criterion that settles the choice, which is why it carries 20% on this page against 4% for startups. Look for a body that maps ISO 42001 onto the controls, documents and risk work you already maintain rather than running it as a parallel exercise. The broadest accredited ranges on this list cover most combinations; none of them covers SOC 2.
Who can certify an enterprise to ISO 42001?
+
Only a certification body accredited for ISO/IEC 42001 can issue an enterprise an accredited certificate. A consultancy may help you prepare, and accreditation rules then prevent it from auditing a client it has prepared, so preparation and certification are two separate purchases.
How much does an ISO 42001 certification body's reputation matter to an enterprise buyer?
+
More here than anywhere else on this site: auditor reputation carries 24% on this page. What it measures is standing you can check - how long a body has certified management systems, which accredited ISO 42001 certificates it has actually issued, and what it publishes about who will conduct your audit. Institutional age on its own is deliberately not the measure, because it is the one thing a buyer cannot verify against anything.
How long does ISO 42001 certification take for a large organisation?
+
Six to twelve months from a standing start, shorter where an existing management system carries across. Two audit stages a few weeks apart, a three-year certificate and an annual surveillance visit. No body on this list publishes a lead time for a multi-site or multi-entity scope, so that has to be established by enquiry.
Can an ISO 42001 certification body pay to rank higher on this list?
+
No. A labelled listing can be bought and a score cannot. The criteria and weights are published so you can check any ranking against the method, corrections are reviewed within two working days, and payment affects what a body can tell us and what it is shown of the workings - never its position.
Sarah Rice
Editor
Sarah Rice is a PR specialist & digital marketing expert who has spent more than 30 years working with SEO & GEO agencies, PR agencies and brands across a huge range of sectors. She is Director of Rice PR and Director & Editor of The HR World. Earlier in her career, she was Head of Public Affairs and Press Manager at RAC and Head of Campaigns at JBP, and has also worked with DC Thomas and a number of charities.
- Director, Bristol Women in Business Charter
- Masters, Creative Writing