AI Assurance Dossier
Enterprise buyers now ask about the AI systems in a product: purpose, data sources, model providers, evaluation results, human oversight, incident handling. The AI Assurance Dossier organises the evidence once, mapped to ISO 42001, the EU AI Act and NIST AI RMF.
What it contains
System inventory and purpose; training and input data sources and rights; model providers and versions; evaluation results and their methods; human oversight and escalation; logging, monitoring and incident handling; data protection and sub-processors; change management. Each item is a document or a statement with an owner and a date.
What it maps to
ISO/IEC 42001 clauses and controls, the EU AI Act obligations that may apply to the system's role and risk class, and the NIST AI RMF functions. The mapping is a working crosswalk, not a legal opinion on classification.
How it is delivered
A project of three to six weeks with your product, security and legal leads: inventory, evidence collection, gap list, dossier. US$5,000 to 15,000 depending on the number of systems; no certification or audit fees are included.
Who uses it
AI SaaS companies answering procurement; companies adopting AI who want the same dossier from their suppliers; AwePlus clients during implementation.
Questions
Is this ISO 42001 certification?
No. It is the evidence an ISO 42001 audit would ask for, organised. Certification is issued by an accredited certification body after its own audit; see certification readiness.
Does it classify my system under the EU AI Act?
It records the facts a classification depends on and shows the obligations that attach to each class. The classification itself is a legal judgement for counsel.
Start
One company, one brief, or claim your own profile.