Do UK SMEs need ISO 42001?
Chris Duffy
Certified Chief AI Officer • • 2 Min Read
You're not legally required to have ISO 42001. It's the international management standard for AI, and it's voluntary. But it's becoming a credibility signal in tenders and gives you a practical checklist for running AI safely. For an SME bidding to larger clients or the public sector, it's worth the effort.
For a two-person shop not yet selling on trust, it can wait. The useful way to think about it: ISO 42001 is a structure to borrow more than a certificate to chase. Even without formal certification, aligning to it puts the right controls in place and gives you something concrete to point at.
If tenders keep asking how you govern AI, that's your sign it's time. ISO 42001 against the EU AI Act covers when you need each, and when you need both.
Read next: AI governance for UK SMEs · How to write an AI policy · Book a call