mvdmio · Compliance
ISO 42001 compliance software for running your AI management system
Compliance by mvdmio is AI management system software for ISO 42001. It is for organisations that run their own AI management system, keep the evidence for it and prepare for an external auditor.
Run your AI management system against ISO 42001
Compliance has the ISO 42001:2023 catalog. It holds the management system requirements in clauses 4 to 10 and the Annex A controls A.2 to A.10.
Clause 5.2 asks for an AI policy, and Annex A control A.2.2 says what it must do. The catalog gives A.2.2 as "Document an AI policy that is approved by management, sets the organisation's approach to developing or using AI systems, and is aligned with business objectives and applicable obligations."
The catalog also includes the impact assessment requirements, clause 6.1.4 "AI system impact assessment" and Annex A controls A.5.2 and A.5.3. You link evidence, findings and register records to the requirements they meet.
The Annex A controls are optional requirements. On the Applicability page of ISO 42001 you mark which of them apply to your organisation. For ISO standards the page is labelled SoA, and it is your Statement of Applicability.
Your frameworks overlap. Your work doesn't have to.
Crosswalk mappings connect matching requirements across the frameworks you adopt, and Compliance crosswalks ISO 42001 to ISO 27001. Evidence, findings and register records can then meet requirements in both standards.
Awareness is one example. The crosswalk marks ISO 27001 clause 7.3 and ISO 42001 clause 7.3 as equivalent, so your awareness evidence can meet both. Policy is a partial match. ISO 42001 clause 5.2 asks for an AI policy, so it only partly matches ISO 27001 clause 5.2 on the information security policy.
If you also adopt the EU AI Act, shared crosswalk topics show where the frameworks overlap. Transparency is one of them, with ISO 42001 A.8.2 and EU AI Act Art. 50.
An audit still covers one standard, so ISO 42001 gets its own audit. A supplier review covers one supplier, and it does not span frameworks either.
Registers, risks and review tasks for every framework
Compliance has registers for policies, risks, assets, suppliers, evidence and findings, among others. The registers are shared between the frameworks you adopt, so ISO 42001 and ISO 27001 use the same records.
Compliance scores each risk on a 5×5 likelihood and impact matrix. Treatment actions lower the residual risk score.
Compliance creates recurring review tasks for policies, risks, assets and requirements on schedule. Every task has an owner and a due date, and all tasks appear in one inbox.
Compliance also has an AI assistant on every page. It runs on AI credits, billed in USD, and it is not part of the trial unless you buy AI credits.
An auditor certifies your organisation against ISO 42001. Compliance is where you run the AI management system and keep the evidence, findings and records the auditor asks to see.
Why Compliance exists
Michiel van der Meer built Compliance after taking over an ISMS at Jewel and seeing how much hand-work it took. He needed a better solution, so he built one.
Pricing and trial
ISO 42001 is €749 per framework per year, excl. VAT. Users in your organisation are unlimited. The price includes $10 of AI credit per year, billed in USD, and you can buy extra credits.
You pay for each framework you adopt separately. ISO 42001 and ISO 27001 together cost €749 plus €999 a year, excl. VAT.
Try Compliance for 30 days without a credit card. The trial gives you full access to every framework. The AI assistant is not part of the trial unless you buy AI credits.
Questions about ISO 42001 in Compliance
Does Compliance get my organisation ISO 42001 certified?
No. An auditor certifies your organisation. Compliance is where you run the AI management system and keep the records and evidence the auditor asks to see.
What does Compliance cost for ISO 42001?
ISO 42001 costs €749 per framework per year, excl. VAT, with unlimited users and $10 of AI credit per year, billed in USD. You pay for each other framework you adopt separately.
Is there a free trial?
Yes. You can try Compliance for 30 days without a credit card, with full access to every framework. The AI assistant is not part of the trial unless you buy AI credits.
Can I reuse my ISO 27001 work for ISO 42001?
Yes, where the requirements match. Compliance crosswalks ISO 42001 to ISO 27001. Awareness clause 7.3 is equivalent in both, so the same evidence can meet both. Each standard still has its own audit.
Does Compliance have a Statement of Applicability for ISO 42001?
Yes. On the Applicability page of ISO 42001 you mark which Annex A controls apply. For ISO standards that page is labelled SoA, and it is your Statement of Applicability.