Certification bodies for ISO 42001
You have set up your AI management system according to ISO 42001 and are ready for the audit. Now you need to choose a certification body (CB) that is accredited by the Dutch Accreditation Council (Raad voor Accreditatie, RvA) . The Netherlands has several options. On this page we compare them and help you choose.
What is a certification body for ISO 42001?
A certification body is an organisation that carries out audits and issues certificates. It assesses whether your management system meets the standard.
To issue certificates, a CB must be accredited. In the Netherlands, the Dutch Accreditation Council (RvA) does this. Accreditation means the CB itself has been checked on competence, independence and quality. You can search the RvA database to check whether a CB is accredited.
Always choose an accredited CB. A certificate from an unaccredited party is worth less and may not be recognised by customers or regulators.
Accredited CBs for ISO 42001
ISO 42001 is new. Not all CBs are accredited for this specific standard yet. The situation is changing quickly. Always check the current status.
DNV
Status: Accredited by RvA for ISO 42001
DNV is a Norwegian organisation with a worldwide presence. They issued the first ISO 42001 certificate in the Netherlands to Metyis.
Strengths:
- First-mover experience with ISO 42001
- Strong presence in the Netherlands
- Good combination with ISO 27001 and ISO 9001
- Training and gap analysis available
Website: dnv.nl
BSI (British Standards Institution)
Status: Accredited by RvA and UKAS for ISO 42001
BSI is the British standards institution and also a major certifier. They were the first in the world to hold UKAS accreditation for ISO 42001.
Strengths:
- Dual accreditation (RvA and UKAS)
- Strong international recognition
- Extensive training offer
- Much experience with management systems
Website: bsigroup.com/nl-NL
TÜV (various organisations)
Status: Offers ISO 42001 certification. Check the accreditation status for the Netherlands with the RvA.
TÜV is the collective name for several German inspection organisations. TÜV NORD, TÜV SÜD and TÜV Rheinland are the best known. Each has its own Dutch branch.
Strengths:
- Strong brand, widely recognised
- Experience in technical sectors
- Good combination with product certification
Note: Check which TÜV organisation is accredited for ISO 42001 in the Netherlands.
Websites:
- tuv.nl (TÜV NORD)
- tuvsud.com/nl
- tuv.com/netherlands
SGS
Status: Offers ISO 42001, check accreditation status
SGS is a Swiss company and one of the largest inspection and certification companies in the world.
Strengths:
- Worldwide coverage
- Broad experience with management systems
- Strong presence in supply chain certification
Website: sgs.com/nl-nl
LRQA (Lloyd’s Register Quality Assurance)
Status: Offers ISO 42001, check accreditation status for the Netherlands
LRQA originates from Lloyd’s Register, known for maritime inspections.
Strengths:
- Strong reputation
- Good combination with ISO 27001
- International recognition
Website: lrqa.com/nl
Kiwa
Status: Check whether they offer ISO 42001 and their accreditation status
Kiwa is a Dutch CB with a strong presence in construction, healthcare and engineering.
Strengths:
- Dutch company
- Strong local presence
- Good reputation in specific sectors
Website: kiwa.com/nl
How do you choose a CB?
Accreditation comes first
First check whether the CB is accredited for ISO 42001. Without accreditation, the certificate is worth less.
Go to rva.nl and search the database of accredited organisations.
Experience with ISO 42001
ISO 42001 is new. Ask how many ISO 42001 audits the CB has carried out. Experience with the standard means smoother audits and better feedback.
Sector knowledge
A CB with experience in your sector understands the context better. An auditor who knows AI in healthcare asks different questions from someone without that background.
Combination with other certifications
Do you already have ISO 27001 or ISO 9001? Then it is useful to use the same CB. You can then carry out combined audits and save costs.
Availability
CBs have waiting lists. Ask when they can audit. If you have a deadline, availability is critical.
Cost
Request quotes from several CBs. Prices vary. But do not choose on price alone. The cheapest is not necessarily the best.
A good auditor adds value. You learn from the audit and improve your system. That is worth more than saving a few hundred euros.
How much does a certification audit cost?
The costs depend on:
- The number of audit days (determined by organisation size and complexity)
- The CB’s day rate
- Travel costs
Indicative day rates: €1,000 - €2,000 per audit day.
| Organisation size | Audit days (initial) | Indicative cost |
|---|---|---|
| Small (10-50 FTE) | 3-4 days | €4,000 - €8,000 |
| Medium (50-250 FTE) | 4-7 days | €6,000 - €14,000 |
| Large (250+ FTE) | 7-11 days | €10,000 - €22,000 |
Annual surveillance audits are shorter and cheaper.
Read more about costs and timeline.
The selection process
For help with setting up your system, rather than the audit itself, read guidance on ISO 42001.
Step 1: Make a shortlist
Select 2-4 CBs that:
- Are accredited for ISO 42001
- Have experience in your sector
- Fit with your other certifications
Step 2: Request quotes
When you request a quote, provide:
- The scope of your AIMS
- The number of employees
- The number of AI systems
- The number of locations
- Existing certifications
- The desired audit period
Step 3: Compare
Do not compare on price alone. Also look at:
- Experience and references
- Availability
- Good chemistry with the contact person
- Flexibility
Step 4: Choose and plan
Choose your CB and schedule the audit. Start early, as CBs have waiting lists.
After you choose
Once you have chosen a CB:
Sign the contract. You sign an agreement for the certification.
Plan the audit. You agree dates for stage 1 and stage 2.
Provide documentation. The CB often wants to see documentation in advance.
Prepare. Make sure you are ready. Read about the audit process and common mistakes.
Switching ISO 42001 certification body
You are not bound to your CB for ever. After the certification cycle (3 years) you can switch. Sometimes you can also switch in between, but then the new CB has to do extra work.
Reasons to switch:
- Dissatisfied with the quality of audits
- A better price elsewhere
- Combination with other certifications
- Availability problems
The Dutch Accreditation Council (RvA)
The RvA is the Dutch accreditation authority. It checks whether CBs are competent and independent.
If you are unsure whether a CB is accredited, check the RvA database . Search for the CB’s name and check whether ISO 42001 is in their scope.
Further reading
- The audit process - What to expect
- Costs and timeline - The investment
- Common mistakes - What to avoid
- Step-by-step plan - The route to certification