ISO/IEC 42001
ISO/IEC 42001 is the first international standard for AI management systems. It doesn't test a single product. It sets requirements for how an organization governs AI across its lifecycle, including how it assesses risk and impact, assigns accountability for AI decisions, oversees suppliers, and documents controls from design through everyday use. An accredited third-party auditor evaluates that system before certifying it, and the certification is maintained through ongoing surveillance audits.
For customers, it's independent evidence that AI at Smartsheet is built and run under a formal, repeatable discipline, not ad hoc practices. It adds to the certifications you already rely on us for, including SOC 2 Type II and ISO/IEC 27001, 27017, 27018, 27701 and 22301.
Questions about ISO/IEC 42001
ISO/IEC 42001:2023 is the international standard for establishing, running, and continually improving an AI management system (AIMS). It covers risk management, AI impact assessment, lifecycle management, supplier oversight, and human accountability. More information is available from ISO.
Our certification covers Smartsheet's practices as an AI provider. Your organization remains responsible for how it deploys AI, including its own policies, risk assessments, and oversight. Smartsheet can provide documentation that supports your own assessment, but each customer needs to make its own determination.
Our certification covers Smartsheet's practices as an AI provider. Your organization remains responsible for how it deploys AI, including its own policies, risk assessments, and oversight. Smartsheet can provide documentation that supports your own assessment, but each customer needs to make its own determination.
