Professional — $397

The documentation layer of an ISO/IEC 42001 management system.

Everything in Essentials plus the twelve documents that turn a set of policies into a management system you can put in front of procurement or an auditor: the AIMS manual, the Statement of Applicability, a gap assessment, an internal audit programme, management review and an evidence binder.

$397USD · one payment · perpetual licence · 24 months of updates · 30-day refund

Get Professional — $397 See a complete document free

Who this is for

A company that has decided to pursue ISO/IEC 42001 certification and needs the documented management system an auditor expects to read.
A company facing enterprise procurement that has moved past "do you have a policy" to "show us your control set, your risk process and your evidence".
A company that already runs ISO/IEC 27001 and needs the AI-specific layer on top — see what transfers and what does not.

What the twelve additions do

AI Management System Manual (AW-P01)The scope, context, interested parties, objectives and the clause-to-evidence map — the document that tells an auditor where everything lives.

Statement of Applicability (AW-P02)A workbook carrying 38 Annex A control rows from A.2.2 to A.10.4, each with a title, control objective group, purpose, an applicability decision and a justification column, plus a coverage dashboard. This is the document an auditor reads line by line.

Gap Assessment Workbook (AW-P04)65 requirements scored across clauses and controls, returning a readiness percentage, an effort estimate and a remediation roadmap. How a gap assessment actually works →

Audit and review (AW-P05, P05b, P06)Internal audit programme, checklist and report; a nonconformity and corrective action log; a management review pack with a minutes template — the records that only elapsed time can produce.

Lifecycle and measurement (AW-P03, P07, P08)An AI system lifecycle procedure with gates G0–G7, a KPI and reporting pack with 16 measures and a board report, and a resource, competence and communication plan.

Evidence and route (AW-P09, P10, P11)The four-way framework crosswalk, a 90-day certification roadmap, and an audit evidence binder with an auditor briefing pack.

What "certification ready" honestly means

Documentation is necessary and it is not sufficient. A certification audit looks for a management system that has been operating: a completed internal audit, a management review that actually happened, corrective actions with dates, records that accumulated over time. Professional gives you the documents and the structure to generate those records. It cannot give you the elapsed time, and no document set makes an organization certified.

What you still do. Annexwright supplies the documentation architecture. You decide which systems are in scope, who owns them, what your risk appetite is and what you will actually do; you fill the registers, adapt the wording, operate the controls and keep the records. Buying documentation does not make an organization compliant or certified.

Take a complete document first

The four-way crosswalk is a whole file from the paid set — ISO/IEC 42001 mapped to NIST AI RMF, the EU AI Act and ISO/IEC 27001, clause by clause, as an Excel workbook. No signup, no email gate.

Read the crosswalk Download the workbook

Common questions

Will this get us certified?

It gives you the documentation an auditor expects and the structure to produce the evidence. It cannot give you the records that only elapsed time produces. The 90-day roadmap plans exactly that sequence and is candid about why first attempts usually fail.

We already have ISO/IEC 27001 — is this redundant?

No, and you are the easiest case. The management-system clauses are structurally aligned, so much of what you already run carries over; what is genuinely new is AI-specific — impact assessment, data provenance, human oversight, transparency, intended-use control. The comparison page sets out what transfers, and the crosswalk workbook is free.

Is the Statement of Applicability really complete?

The workbook ships with 38 Annex A control rows spanning A.2.2 to A.10.4, each with a justification column and an applicability decision you make. The control text is summarised in our own words; you need a licensed copy of ISO/IEC 42001:2023 for the normative text.

Can I use it with clients?

No. Professional is licensed for one organization's internal use. Consultant is the client-delivery licence.

Get Professional — $397 Start with Essentials — $149

How this page was checked. Regulatory dates on this page were taken from the official texts and from the European Commission, the Illinois General Assembly, Texas Legislature Online, the Colorado General Assembly, the California Privacy Protection Agency, the New York State Senate and NYC DCWP, and were last reviewed on 2026-09-23. Where a date is an applicability or compliance deadline rather than an entry-into-force date, the page says so. Regulation changes; check the primary text before relying on any date for a decision. Nothing here is legal advice.