140
ISO 42001 requirements in the library
Seeded and linked to controls, many of them shared with ISO 27001.
Frameworks
Purplecop AIMS · ISO/IEC 42001
An AI management system you can show an auditor
ISO 42001 asks you to govern AI the way ISO 27001 governs security: inventory, risk, policy, evidence and audit. Purplecop keeps the standard on the same library as your security frameworks, so AI governance reuses the controls and evidence you already have, mapped across multiple AI frameworks.
The difference
From AI enthusiasm to AI governance
What changes when your AI programme runs on Purplecop.
Why Purplecop
What only Purplecop brings to ISO 42001
AI governance on the same library as security and privacy.
AI policies from the AI Policy Builder
Acceptable use, model lifecycle and oversight policies to start from, tagged to the AI frameworks they serve.
AI Policy Builder
One control, many frameworks
A control shared across frameworks is created once in the library, not rebuilt for each one. The work you do for ISO 42001 counts toward everything else you hold.
Map once, satisfy many
Every model on one register
Purplecop AIMS records each model with its owner, its purpose and its risk classification.
Model inventory
AI risk scored on autonomy
Model risk is scored on impact and autonomy, not likelihood alone, so an agent that acts by itself is weighed differently.
AI risk register
What you get
Built on one platform, with people who use it
Platform
Purplecop AIMS
The same shape as the GRC product, for the AI estate: model inventory, AI risk, AI controls and the evidence that an AI system is governed.
AI frameworksModel inventoryAI controlsAI policiesAI risk registerAI audit
Services
Practitioners beside the platform
The team that runs your engagement works inside the same system, so the work they do stays with you.
Also on the platform
TPRM
Onboard, assess, score and continuously monitor every vendor in one workflow.
Third-party risk
Asset Intelligence
Asset discovery, network monitoring and the audit log in one module, so every asset’s data lives in one place.
Asset Intelligence
Phishing Simulation
Live phishing campaigns with per-user risk scores, run entirely in-house.
Human layer
LMS
Role-based security awareness training for every employee, tracked to completion.
Human layer
People
A directory of the people in scope for training, policy sign-off and access reviews.
People
RBAC
Role-based access control with granular permissions, on a least-privilege model.
Access control
Questions
What teams ask us about ISO 42001
Does Purplecop certify our AI management system?
No. Certification comes from an accredited certification body. Purplecop holds the work they review.
We have ISO 27001. How much carries over?
Every control shared between the two standards is created once and counts for both.
Does it cover the EU AI Act too?
Yes. The EU AI Act's 279 requirements are in the same library.
How much faster is it?
It scales with how much you integrate: the more connectors you turn on, the more evidence is collected automatically, saving up to 70% of the time you used to spend preparing for each audit.
See it against your own scope
We will walk the product against your scope and show you what runs on day one and what needs configuring.