Insights

Two regulations are hitting SMEs at the same time – and many small and medium-sized businesses still don't know how to deal with them. On one side, the EU AI Act, which has been coming into force in stages since summer 2025 and requires companies that use or operate certain AI systems to conduct documented risk assessments and meet transparency obligations. On the other side, ISO 42001, the international standard for AI management systems, which establishes a structured governance framework for a company's entire use of AI. Those who treat these two requirements as separate projects are wasting resources. Those who approach them as a dual strategy stand to gain twice over.

Anyone who uses AI without having a structured framework for it is acting – whether consciously or not – without governance. ISO 42001 closes this gap.

The world's first standard for responsible AI development and use. What companies need to know now.