ISO/IEC 42001 AI Management System Consulting
Governance, risk and impact assessment, transparency and certification readiness for organisations that build or use AI.
What is ISO/IEC 42001?
ISO/IEC 42001 is the international standard for establishing, operating and continually improving an Artificial Intelligence Management System (AIMS). It applies to organisations that develop, provide or simply use AI systems, and brings the same management discipline to AI that ISO 27001 brings to information security.
Pedante Bilişim, the technology arm of Racoun, delivers this consulting under its cyber-security and managed-IT brand Racurity, from our office in Ataşehir, Istanbul.
What we cover
- AI inventory and scope: in-house models, AI features in purchased SaaS tools and generative AI used by staff.
- Policy and roles: an AI policy, acceptable-use rules, ownership and approval paths.
- Risk and impact assessment: organisational risk plus impacts on individuals and society, with a Statement of Applicability.
- Data governance and lifecycle controls: data quality, retention, access, change management and monitoring.
- Transparency, human oversight and supplier management.
- Integration with ISO 27001: shared internal audit, document control and management review.
- Certification readiness: internal audit and a pre-assessment before the accredited body’s audit.
Regulation
ISO 42001 is not compliance with the EU AI Act in itself, but it provides a structured basis for many of its expectations, such as risk management, documentation and human oversight. Personal data processing in Turkey remains subject to KVKK. We support your compliance process and recommend legal advice for legal interpretation.
Why us
AI governance touches access control, logging, data loss prevention and software development. With Pedante’s software team and Racurity’s security services under one roof, policy and technical implementation are handled by a single point of contact, working with expert solution partners where needed. We do not promise certification outcomes; we make sure the process is complete and evidenced.
Frequently asked questions
Do we need ISO 42001 if we only use off-the-shelf AI tools?
Yes, the standard also covers AI users. Controls then focus on supplier assessment, data transfers, acceptable use and human oversight.
Do you issue the certificate?
No. Certification is granted by independent accredited bodies. We prepare your organisation for their audit.
Contact
Head office: Ataşehir, Istanbul. We work in person across Istanbul and online with clients all over Türkiye and abroad. Message us on WhatsApp (+90 551 044 08 69) or email ekip@racoun.com.
