# BSI (The British Standards Institution) - **Type:** Certification body - **Website:** https://www.bsigroup.com/en-GB/ - **Assessed by:** The Assurance Desk (Add-Venture Advisory Ltd) The UK's national standards body. Through its subsidiary BSI Assurance UK Limited it certifies organisations to ISO/IEC 42001, the AI management standard, under UKAS accreditation. ## BSI scores Scored 1 to 5 on six criteria. There is no overall score. ### Help when things go wrong: 5/5 Published complaints route and 21-day appeals process in its Certification Business Policy, plus a public searchable certificate directory for verification (both bsigroup.com pages checked 2026-07-16). ### Qualifications of the people who do the work: 5/5 UKAS schedule 0003, Issue 193 dated 15 September 2026, page 18, lists ISO/IEC 42001:2023 under ISO/IEC 17021-1:2015 and ISO/IEC 42006:2025 for Developer, Provider, User and Producer roles. Checked 2026-10-13. ### What it publishes about fees: 2/5 No prices or worked examples anywhere on the ISO 42001 pages; quote-only via forms with no published cost factors (bsigroup.com ISO 42001 page checked 2026-07-16). ### Knowledge of your sector: 5/5 Named ISO 42001 case studies and certifications across sectors, KPMG Australia (professional services), DeepEyeVision (healthcare AI), Miro (SaaS), published on BSI's ISO 42001 page and press releases, checked 2026-07-16. ### Independence from what it sells: 4/5 Clear published impartiality policy with independent impartiality committees and an explicit bar on certifying systems the BSI Group consulted on; one point withheld because the group actively sells AI consulting and training alongside certification (both pages checked 2026-07-16). ### Who carries the risk if the advice is wrong: 4/5 Complaints and appeals processes are published in the Certification Business Policy (checked 2026-07-16), but full certification terms and liability provisions were not located on the public pages checked, and BSI states complaints are not publicly disclosed. ## Sources for BSI Every line carries the page it was read on and the date it was checked. - UK parent legal entity is The British Standards Institution, recorded at Companies House as an active unregistered (chartered) company - Source: https://find-and-update.company-information.service.gov.uk/company/ZC000202 - Checked: 2026-07-16 - The UKAS-accredited certification subsidiary is BSI Assurance UK Limited - Source: https://find-and-update.company-information.service.gov.uk/company/07805321 - Checked: 2026-07-16 - BSI launched ISO/IEC 42001 certification as part of an AI assurance package including training and algorithm testing - Source: https://www.bsigroup.com/en-GB/insights-and-media/media-centre/press-releases/2024/january/bsi-supports-responsible-ai-management-with-new-package-of-measures/ - Checked: 2026-07-16 - UKAS schedule of accreditation for BSI Assurance UK Ltd (body 0003) includes Artificial Intelligence Management Systems to ISO/IEC 42001:2023, in accordance with ISO/IEC 17021-1:2015 and ISO/IEC 42006:2025, covering AI system roles Developer, Provider, User and Producer - Source: https://www.ukas.com/download-schedule/0003/ManagementSystems/ - Checked: 2026-10-13 - BSI announced it was the first certification body accredited by both UKAS and RvA to deliver ISO/IEC 42001 certification - Source: https://www.bsigroup.com/en-GB/insights-and-media/media-centre/press-releases/2025/november/bsi-becomes-the-first-certification-body-accredited-by-ukas-and-rva-to-deliver-certification-for-isoiec-42001/ - Checked: 2026-07-16 - BSI does not publish ISO 42001 certification prices on its public website as of 2026-07-16; all services on the ISO 42001 page direct to contact/request-a-quote forms - Source: https://www.bsigroup.com/en-GB/products-and-services/standards/iso-42001-ai-management-system/ - Checked: 2026-07-16 - BSI publishes a Certification Business Policy covering impartiality (independent impartiality committees, ISO/IEC 17021-1:2015), a rule that BSI Assurance cannot certify clients who received consultancy from another part of the BSI Group for the same management system, a complaints route (complaints@bsigroup.com) and an appeals process with a 21-calendar-day window (appeals@bsigroup.com) - Source: https://www.bsigroup.com/en-GB/about-bsi/certification-business-policy/ - Checked: 2026-07-16 - KPMG Australia was announced as the first organisation globally to achieve BSI's ISO/IEC 42001 certification - Source: https://www.bsigroup.com/en-GB/insights-and-media/media-centre/press-releases/2024/october/kpmg-australia-is-the-first-organization-globally-to-achieve-bsis-ai-management-system-certification/ - Checked: 2026-07-16 - BSI publishes a public searchable Certification and Verification directory allowing anyone to check company, site and product certificates by certificate number, company name or standard - Source: https://www.bsigroup.com/en-GB/validate-bsi-issued-certificates/ - Checked: 2026-07-16 - BSI does not publish a statement on its public AI expertise page about how BSI itself uses AI internally (no responsible-AI self-use policy found on the page) as of 2026-07-16; the page covers only AI services sold to clients - Source: https://www.bsigroup.com/en-GB/our-expertise/digital-trust/artificial-intelligence/ - Checked: 2026-07-16 ## What this provider publishes Not published means we did not find it on the firm's own pages. - Price: Not published - Indemnity cover: Not published - Credentials: Published - Independent accreditation: Published - Client results: Published - How it uses AI: Not published ## Strengths - First certification body accredited by UKAS (and RvA) for ISO/IEC 42001, per BSI's 17 November 2025 press release and UKAS's first-AIMS-accreditation announcement - UKAS accredits its ISO 42001 certification for four AI roles: developer, provider, user and producer. - Published named ISO 42001 client outcomes, including the world-first KPMG Australia certification (16 October 2024) and Miro, Umony and DeepEyeVision on its ISO 42001 page - Public searchable certificate directory lets buyers verify any BSI-issued certificate ## Things to check Each one carries the factual basis it rests on. - No certification pricing is published, quote-only via contact forms. - Basis: BSI's ISO 42001 page (bsigroup.com/en-GB/products-and-services/standards/iso-42001-ai-management-system/) contains no fees and directs to request-a-quote, checked 2026-07-16. - BSI Group sells AI consulting and training alongside certification; independence rests on its published policy that BSI Assurance cannot certify systems the group consulted on. - Basis: Certification Business Policy (bsigroup.com/en-GB/about-bsi/certification-business-policy/) and AI services listing including consulting (bsigroup.com/en-GB/our-expertise/digital-trust/artificial-intelligence/), both checked 2026-07-16. - Trustpilot profile shows a low 1.6 TrustScore from a small number of reviews (29), with no company responses. - Basis: Trustpilot listing for bsigroup.com (uk.trustpilot.com/review/bsigroup.com), checked via Trustpilot's indexed listing data 2026-07-16. - BSI states it will not publicly disclose complaints unless legally required, so complaint outcomes are not transparent. - Basis: Certification Business Policy page (bsigroup.com/en-GB/about-bsi/certification-business-policy/), checked 2026-07-16. ## Where this firm appears - [Can the firm that prepares you also certify you?](https://theassurancedesk.com/best/certification-seeking) - [Does the EU AI Act apply to a UK firm?](https://theassurancedesk.com/best/eu-ai-act-exposed) - [Your sector adds its own rules to UK data protection law](https://theassurancedesk.com/best/sector-regulated) - [Compare providers](https://theassurancedesk.com/compare) --- **Scope.** The Assurance Desk covers data protection, AI governance and cyber security in the United Kingdom and the United States. It scores providers in both: UK-facing firms, and firms based in the United States. Every provider scored so far was selected for data-protection, AI-governance or security-assurance work. Where a page describes law, it names the country that law applies in. **Who publishes this.** The Assurance Desk is published by Add-Venture Advisory Ltd, company number 11854524, registered in England and Wales. The same owner runs Avouch, a marketing agency that sells AI visibility services to firms of the kind this site covers. That is a conflict of interest, and it is disclosed here. **Corrections.** If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.