Tier 3 · ISO/IEC 42001 services for UK SaaS

End-to-End AIMS Implementation

£10,000 · Founding rate · First client only

4–6 months · Deposit + monthly instalments · Workspace included

Build our full AI management system and get us ready for certification.

Standard from £12,500. Includes everything in Tier 2.

Services aligned with ISO/IEC 42001. Bhaviyo is not a certification body and does not guarantee certification.

Book a Discovery Call

Deliverables

What's included.

01

Everything in Tier 2

Gap assessment, risk methodology and core governance foundation, extended to the implementation scope.

02

AIMS scope and interested parties

Final scope statement and interested parties register.

03

Leadership and planning documents

AI policy, responsibilities matrix and AI objectives.

04

Risk and impact assessments

Risk register, treatment plan and impact assessments for up to 3 AI systems.

05

Final Statement of Applicability

The applicable Annex A controls and their rationale.

06

Operational procedures

AI lifecycle, data for AI, third-party/supplier AI, user transparency, AI incident handling, nonconformity and corrective action, and document control.

07

Competence and awareness

Awareness plan, training materials and one staff session.

08

Performance evaluation

Monitoring plan, independent internal audit programme design and first management review pack.

09

Stage 1 Readiness Pack

A document index and evidence map showing the certification auditor where each ISO/IEC 42001 requirement is addressed.

Tier 3 instalment plans

Founding · £10,000

First client only

  • £3,000 deposit before kickoff.
  • £1,500 at the start of months 2, 3, 4 and 5.
  • £1,000 on completion.

Standard · from £12,500

Up to 75 staff, 3 AI systems

  • £3,500 deposit before kickoff.
  • £1,950 at the start of months 2, 3, 4 and 5.
  • £1,200 on completion.

Payment terms

  • Tiers 1–2 paid in full before work starts.
  • Tier 3 instalments due at the start of each month in advance.
  • Client-side delays do not pause instalments.
  • Work pauses if payment is more than 7 days late.
  • Tier 3 is complete when the Stage 1 Readiness Pack (your document index and evidence map for the certification auditor) is delivered and the first management review is held.
  • A document index and evidence map that shows the certification auditor where each ISO/IEC 42001 requirement is addressed in your AIMS.

Organisations with 75–250 staff quoted after Tier 1. Extra AI system: £1,500. Tier 2 → Tier 3 upgrade within 60 days: £1,500 credited.

Scope limits

  • Everything in Tier 2.
  • Up to 75 staff and up to 3 AI systems.
  • Final AIMS scope, context and interested parties.
  • Roles, responsibilities and AI objectives.
  • Risk and impact assessments for up to 3 AI systems.
  • Final Statement of Applicability.
  • Procedures for AI lifecycle, data for AI, third-party/supplier AI, user transparency, AI incident handling, nonconformity and corrective action, and document control.
  • Staff awareness training (one session).
  • Monitoring plan.
  • Internal audit programme design (audit performed by an independent party).
  • First management review.
  • Stage 1 Readiness Pack with document index and evidence map.
  • Audit preparation session.

Timeline

  1. Weeks 1–2Kickoff and scoping.
  2. Weeks 2–4Gap assessment and context.
  3. Weeks 4–9Leadership and planning.
  4. Weeks 9–15Support and operation.
  5. Weeks 15–19Performance evaluation.
  6. Weeks 19–22Certification readiness.

Client contribution

A project owner, a technical contact who can explain your AI systems, and leadership time for approvals. We confirm this at kickoff.

Package exclusions

  • —Certification body audit fees (paid directly by the client).
  • —Any guarantee of certification.
  • —Legal advice or legal opinions.
  • —Penetration, bias or model testing.
  • —Performing the internal audit of an AIMS we implemented (must be independent).

Engagement conditions

  • Written scope, responsibilities, timeline and payment agreed before work begins.
  • Tiers 1–2 paid in full before work starts.
  • Workspace access continues for 90 calendar days after final handover.
  • Engagement data is deleted within 45 days after that unless agreed otherwise in writing.

Prices in GBP. Taxes, if any, are confirmed in your written quote.

Not sure where you stand on ISO 42001? Let's find out.

We reply within 1 business day to arrange a 30-minute discovery call.

Book a Discovery Call

Compare the three services