Regulatory / ISO 42001
Meridian and ISO/IEC 42001 — operating evidence for an AIMS
Meridian supplies the AI-estate records and operating evidence auditors sample. Certification bodies determine conformity; tools do not.
What it expects
As of August 2026
- •Establish, operate, and continually improve an AI management system (AIMS)
- •Depending on scope and risk treatment: documented resources, defined responsibilities, operational controls, monitoring, and evidence for internal or third-party conformity audits
How Meridian supports it
| Expectation | Meridian capability | Evidence artifact |
|---|---|---|
| Documented AI resources and estate | AI systems and AI-related vendors detected in connected billing and usage sources | Agent estate report; ledger export |
| Defined responsibilities / owner accountability | Owner and department attribution with provenance | Audit Evidence Export |
| Operational measurement and monitoring | Spend, usage, and cost-per-outcome as operational evidence | Board Pack; Risk & Anomaly report |
| Evidence for internal or third-party conformity audits | Exportable operating records and report history | Audit Evidence Export; QBR pack |
Why billing-derived records hold up
A billing-derived inventory is a high-confidence view of the AI services visible in your connected billing and usage sources. It surfaces attributable and unattributed spend with evidence — and helps teams identify what sits outside it: bundled SaaS features, free tools, centrally contracted services, or unmanaged use.
See it in your environment
Free two-week read-only assessment, or Zero-Access Assessment (file-based, no credentials).
FAQ
- Does using Meridian mean we hold ISO 42001?
- No. Certification bodies determine conformity; Meridian supplies operating evidence your auditor samples.
- Does this replace our AIMS documentation?
- No — it supplies AI-estate and operating evidence your AIMS documentation and audits draw on.