Glossary

AI Certification Processes

What is AI Certification Processes?

AI certification processes are procedures in which an independent body checks whether an organisation or an AI system meets defined requirements. A widely used example is certification to ISO/IEC 42001 (published 2023), which describes a management system for responsible AI use; requirements for the certifying bodies are set out in ISO/IEC 42006 (2025). Such a certificate is voluntary and does not replace the conformity assessment the EU AI Act requires for high-risk systems (as of October 2026).

Topics

Certification
ISO/IEC 42001
Governance

Try KI.ordo

Agents, flows and templates in one workspace – free 24-hour demo.

Start demo

← All terms

Related terms

AI Regulatory Framework

An AI regulatory framework comprises the laws, standards and oversight structures governing how AI is developed and used. In the EU, the central law is the AI Act (Regulation (EU) 2024/1689), which takes a risk-based approach: prohibitions have applied since February 2025, obligations for general-purpose AI models since August 2025 and transparency duties since August 2026. Following the “Digital Omnibus” (Regulation (EU) 2026/1744), high-risk obligations apply from 2 December 2027 or 2 August 2028 (as of October 2026; not legal advice).

Regulation
EU AI Act
+1

Data governance

Data governance comprises the rules, roles and processes by which an organisation determines who may collect, use, change and delete which data. It covers responsibility for data quality, access rights, retention periods and compliance with data protection requirements. It matters especially for AI projects, because models and agents are only as reliable as the data they draw on.

data management
compliance
+1

Compliance reporting

Compliance reporting is the regular, traceable documentation of whether an organisation meets legal requirements, standards and internal policies. A typical report sets out the period and scope, the status of each requirement, deviations, and measures with owners and deadlines. It serves management, supervisory boards, auditors or authorities as evidence, for example on data protection or information security.

compliance
report
+1

Template

AI Supervisory Authorities

AI supervisory authorities are public bodies that monitor compliance with AI rules. At EU level, the European Commission's AI Office coordinates implementation of the AI Act and supervises general-purpose AI models. In Germany, the implementing act KI-MIG (in force since 29 July 2026) makes the Federal Network Agency (Bundesnetzagentur) the central market surveillance authority, while sector regulators such as BaFin remain responsible. Under the Digital Omnibus, high-risk obligations apply only from December 2027 or August 2028 (as of October 2026; not legal advice).

Regulation
EU AI Act
+2