What an AI Certification Does and Doesn’t Tell a Buyer

← Back · ACT II · Chapter 7: Value Is Not Promised; It Is Proven

On July 29, Aprio announced it is accredited by the ANSI National Accreditation Board to certify organizations against ISO/IEC 42001, the international standard for artificial intelligence management systems. The announcement named where the certificate is meant to be used: RFP responses, security reviews, regulatory preparedness. Those are three moments when somebody outside the company is deciding whether to trust it, which makes this a distribution plan as much as a compliance milestone. The certificate is built to be handed to a buyer at the exact moment the buyer is deciding.

The supply side behind it is real. Schellman took the first ANAB accreditation for ISO/IEC 42001 in September 2024. BSI added ANAB accreditation in March 2026 and became the first certification body holding ANAB, UKAS and RvA together. ISO/IEC 42006:2025, which sets competence and audit requirements for the bodies doing the certifying, published in July 2025. The assurance market for AI governance is no longer a promise about itself. It is accredited, staffed, and selling.

This is progress, and it should be said plainly. An accredited third party attesting to something is categorically better than a vendor attesting to itself. The verification economy is arriving on schedule. The problem is not the standard, the accreditation, or the firms doing the work. The problem is what a certificate will be read to mean when it lands in a response packet next to a business case.

What The Certificate Attests

ISO/IEC 42001 certifies a management system. It attests that an organization has established, implemented, maintains and continually improves a defined set of processes and controls for governing AI. An auditor confirms the processes exist, that risks were identified, that monitoring happens, that management reviews occur.

What it does not do is attest that any AI system inside the certified scope produced a result. Performance sits outside its remit, and so does product-level conformity, which the EU AI Act requires separately and which a management-system certificate does not supply. The organization itself defines which systems, business units and processes fall inside the scope, and the certificate travels without that scope pinned to it in the buyer’s line of sight. A certificate earned on a governance function says nothing about the agent in the product being sold.

None of that is a contrarian reading, and the certifiers say it themselves. Their own published guidance now describes a certified management system as an organizational capability rather than a guarantee about any particular result, and says plainly that it does not stand in for the product-level conformity the EU AI Act requires separately. The agreement is useful, because it means a buyer is not in an argument about what the certificate means. The buyer’s difficulty begins after everybody has agreed.

The standard is doing precisely what it was built to do, and doing it well. What it was built to do is confirm that an organization runs a disciplined process. Everything that follows in this post is about a question that process was never designed to answer.

Two Different Questions

The certifier answers a governance question: does this organization operate a disciplined process for managing AI risk. The buyer is asking a value question: will the thing I am about to fund produce the outcome that was claimed, and will I be able to prove it did.

Those are different questions with different objects. One is about the seller’s internal machinery. The other is about the buyer’s result. A clean answer to the first tells you almost nothing about the second, and a buyer who accepts the first as an answer to the second has not verified anything. They have changed the subject and called it diligence.

The Substitution Is The Risk

Nobody decides to stop asking. An accredited document arrives where a hard question was due, it is credible, it is filed, and the asking quietly ends because something official-looking now occupies the space the answer was supposed to fill. A top-20 U.S. accounting and advisory firm positioning an accredited certificate for use in RFP responses is that mechanism being aimed, deliberately and openly, at the moment a buyer decides.

Substitution is not a fringe outcome here. It is the path of least resistance for every evaluation team already short on time. A procurement function with no method for verifying claimed value, and no post-signature jurisdiction to check it, will take an accredited certificate as sufficient. It is defensible, it is auditable, and it came from a real firm working under real accreditation. What it does not say is whether the value was ever delivered, and a silence that looks like evidence costs more than an open question, because nobody goes back to it.

Nobody in that sequence has done anything wrong. The vendor supplied a real certificate, the certifier audited what it was accredited to audit, and the buyer will still have accepted process conformance in place of outcome proof. The buyer finds that out at renewal.

Deeper Diligence Is Not The Answer Either

There is a well-established response to all of this, and it deserves to be taken seriously, because most buyers will reach for it first. Do not accept the certificate on its own, the argument runs. Go further. Ask which models are in use and what trained them. Ask what happens when the vendor swaps the underlying model mid-contract. Ask for live evidence rather than narrative claims, and put audit rights in the contract that survive a real dispute.

Every one of those is a genuine improvement, and a buyer who does all of it is better protected than one who does not. None of it changes the object being examined. A deeper interrogation of the seller’s machinery is still an interrogation of the seller’s machinery, and it still does not say what this buyer is trying to accomplish, what would count as having accomplished it, or who produces the record that settles the question.

That is the boundary. The certificate cannot cross it, and neither can a better questionnaire, because the missing information does not live on the seller’s side of the table at all.

What The Buyer Does With It

Treat the certificate as an admission ticket, not an answer. It establishes that the seller is serious enough to submit to an accredited audit of its governance. That is worth something and it belongs in the file. It does not close a single line of the value question.

The Request for Value asks what the certificate cannot. It asks for the outcome and how it will be measured, the baseline it gets measured from, who produces the record, and what happens when that record shows the outcome did not land. Those terms are set by the buyer before the seller responds, and no third party can supply them, because no third party knows what this buyer is trying to accomplish. A certifier can validate that a seller manages AI responsibly. Only the buyer can define what would count as value here, and only the buyer can hold the standard the result gets measured against.

Ask one question of every certificate that arrives: what is inside the scope, and does it include the system I am buying. That much is now standard advice from the certifiers themselves, and it is right as far as it goes. Then ask the question the certificate was never built to answer.

A certificate proves someone checked the process. Value is still something the buyer has to define, demand, and verify.

References: Aprio, “Aprio Accredited to Independently Certify Organizations Against the Leading International AI Governance Standard”, PR Newswire, 29 July 2026; BSI, “BSI secures ANAB accreditation to certify ISO/IEC 42001”, March 2026; Schellman, “Schellman Becomes First ISO 42001 ANAB Accredited Certification Body”, 25 September 2024; ISO/IEC 42006:2025, requirements for bodies providing audit and certification of AI management systems, published July 2025; ANAB, accredited ISO/IEC 42001 certification bodies.

Keep reading: ACT II · Chapter 7: Value Is Not Promised; It Is Proven