What AI assurance certification means
How AI assurance certification works at AI Assured: the standards, the assessment method for each tier, and the public register behind every badge.
What the AI Assured certification means
AI Assured is an independent third-party assurance programme for small and medium-sized companies that build or use AI. We publish our framework, assessment method and public register openly, so buyers, procurement teams and regulators can judge the mark on the evidence.
Our controls trace back to recognised standards
The AI Assured framework is a plain-English operating layer that consolidates controls from recognised standards and regimes, so an SME can implement one governance system and evidence multiple frameworks at once. ISO/IEC 42001 supplies the AI management system requirements, and our policies, roles and evidence pack are structured so an accredited certification body can pick them up directly. The NIST AI RMF forms the backbone for our questionnaire and scorecard. ISO/IEC 42001 and quality management practice inform our evidence requirements for higher-risk use. FCA SS1/23 model risk management expectations are referenced for financial services, and NYC Local Law 144 bias-testing and candidate-notice requirements are referenced for automated employment decisions.
Who signs each tier
Essential is structured self-attestation with automated evidence checks and verification by AI Assured platform logic. Professional adds an independent desk-based review of the full evidence pack, signed by a credentialed assessor holding recognised AI governance qualifications, typically IAPP AIGP and ISO/IEC 42001 Lead Auditor. Enterprise is a scoped engagement with interviews, control walkthroughs and regime-specific evidence mapping across the EU AI Act, FCA, FDA and others. Those credentials are individual professional qualifications held by our assessors.
What we certify, and what we do not
AI Assured certifies governance: your policies, roles, training, evidence pack and an independently signed scorecard, all published on a live public register. The same evidence pack is structured so you can carry it into any formal certification or statutory process you need next.
Every badge resolves to a live public record
Every AI Assured badge resolves to a live, time-stamped certificate on our public register, showing issue date, tier, jurisdiction and verification method. When a certificate expires or is revoked, every embedded badge updates automatically.
AI assurance certification, answered
AI assurance certification is independent confirmation that your AI governance, policies, roles, training and evidence meet a published standard, backed by a certificate and a public register entry buyers can verify. Essential is usually completed in days as a structured self-attestation with automated evidence checks; Professional adds an independent desk-based review of the full evidence pack, typically a few weeks; Enterprise is a scoped engagement. AI Assured prepares your company for formal certification, cutting the time, cost and fine risk of getting there, and the evidence pack is structured so an accredited ISO/IEC 42001 body or a statutory process can pick it up directly. The evidence expected includes an AI use policy, system inventory, risk register, roles and accountability records, training records, incident response procedures and monitoring logs.