Governance and management systems that work in practice.
We help organizations establish and integrate AI governance and ISO/IEC 42001 into their business, while providing independent internal audits and assessments for ISO/IEC 42001, ISO/IEC 27001 and ISO 9001.
ISO/IEC 42001 · ISO/IEC 27001 · ISO 9001Services
Two ways we work: we establish or extend a management system with AI governance, or we audit and assess it independently.
ISO/IEC 42001, on the system you already run — or from the ground up
AI governance and an AI management system that reuse the ISMS or QMS you have, and add what is AI-specific.
- A scored gap register with evidence
- A system design: shared processes, AI-specific additions, roles, the risk and impact method
- Readiness before the certification body's own audit
Independent internal audits and assessments
ISO/IEC 42001, ISO/IEC 27001 and ISO 9001, following ISO 19011 by someone who knows the systems and processes underneath.
- An agreed audit plan, criteria and schedule
- Evidence-based findings, graded, with a clear report and a closing meeting
- Never of a system we designed or implemented
AI you can explain and account for — and a return you can show.
AI governance is an architecture discipline. Controls are designed where they can be enforced, inside the systems and processes that run the business, and integrated into the management system that already runs it. Four questions, four pages, and the longer arguments in Insights.
Standards & Expertise
Three standards, one discipline. We establish and integrate the first; we audit and assess all three.
ISO/IEC 42001
Artificial intelligenceImplementation · integration · internal audits · assessmentsAre the AI's risks and effects governed, and is someone accountable? The AI management system, on its own or built into the one you already run.
02ISO/IEC 27001
Information securityInternal audits · assessmentsIs the information your processes depend on protected, and do the controls operate in the systems rather than on paper?
03ISO 9001
Quality managementInternal audits · assessments · 2026 transitionDoes the process deliver what it should, every time, and does the organization learn when it doesn't?
Why Valment
We can tell whether a control works inside the system and the process, not only whether the policy exists. About Valment
As a PECB Authorized Partner, we offer PECB's certification courses in AI, information security, quality and risk. PECB sets the exams and awards the certificates.
Start a conversation
Tell us which standards you run, which you're adding, and when the next audit is. We'll come back with a clear read on where you stand and a sensible first step.