Free Checklist

The ISO 42001 Implementation Checklist for AI Deployers

Embedding a frontier or third-party model does not move ISO 42001's obligations onto the provider, it splits them, and the split is rarely where teams assume it is. This role-specific checklist works through the deployer's half: what to diligence, what to contract for, what to enforce at runtime, and what you still have to evidence yourself.

Provider due diligence questions to ask before a model reaches production
Data boundary requirements, including what must never leave your tenancy
Runtime guardrails and the monitoring evidence auditors look for
A clear split of responsibility between you and your model provider

Get the checklist

Enter your work email and we'll take you straight to the download.

PDF

Company name

Work email

First name

Role

Framework(s) you're working on

Compliance stage

We check that your email domain is real and can receive mail before sending. If we can't verify it, we don't send the resource — so please use a work address rather than a forwarding or temporary one.

We're sending this to you for free, and we'd like to know who we're sending it to. By submitting this form you agree that we may contact you about Konfirmity — no more than six emails a year, and we won't ask again each time. You can unsubscribe from any of them, and we'll stop. See our Privacy Policy.