ISO/IEC 42001:2023 alignment
ISO/IEC 42001:2023 is the certifiable AI Management System standard. In 2026 procurement, it is increasingly listed as "required" rather than "preferred" in vendor questionnaires (Knowlee, isauditr 2026 surveys). Ujex provides the technical evidence side of an ISO 42001 audit — the policy + governance side is your AIMS implementation.
Control mapping
| ISO 42001 control | Ujex primitive | Evidence emitted |
|---|---|---|
| A.4 AI lifecycle | agents/{agentId} document with createdAt, disabled, model fields | Agent registry |
| A.5 Risk management | policies/{policyId} + Budgets inline caps | governor.preflight denied rows |
| A.6.2.4 Operations management | Hash-chained audit/{seq} | audit.exportAATBundle |
| A.6.2.5 Performance evaluation | Audit query: action_type=tool_call AND outcome=success ratio | ISO 42005 evidence pack counts |
| A.7 Resources / human oversight | Approvals + web/mobile decision path | audit.action_type=approval rows |
| A.8 Supplier relationships | Tools registry signed manifests | Tool manifest sha256 |
| A.9 System impact / data | ISO 42005 evidence pack | auditExportISO42005EvidencePack |
| A.10 Use of AI system | Inbox PI scoring + lethal_trifecta tagging | pi_score, session tags |
How to deliver ISO 42001 audit evidence
- Call
auditExportISO42005EvidencePackwith the audit window. - Combine with your AIMS policy documents.
- Hand to the certified body running your ISO 42001 audit.
Ujex's evidence pack is structured to map 1:1 to the Annex A controls so the auditor's working paper writes itself.
Disclaimer
ISO 42001 certification requires an accredited certification body. Ujex provides the technical artifacts; the AIMS policy + governance + management review are your responsibility.