ISO 42001 for education: prove that your AI is under control

A school board, a public purchaser or the HR department of a corporate client now adds AI questions to its supplier questionnaire. Which tools use AI? Who approved them? What happens when a tool marks a learner wrongly? A provider without written answers loses time in every tender.

Education differs from most sectors in two ways. Many of the people affected are minors or learners whose results shape their careers. And the decisions, such as grades, admissions or study recommendations, are hard to reverse once they appear on a transcript. ISO 42001 responds with defined roles, a risk assessment and an impact assessment for the people affected.

Edtech vendors feel the pressure first, because schools want proof before they sign. A certificate with a QR code lets the purchasing department check your status on a public verification page, without a phone call.

Most providers use more AI than they have listed. The following uses come up most often, each with the risk the standard asks you to assess.

Automated marking and feedback

A tool scores essays or short answers. The risk is systematic bias against certain writing styles or language backgrounds, and scores nobody can explain.

Adaptive learning platforms

The software sets the difficulty of the next exercise. A learner can end up stuck in an easy track because of an early weak result.

Plagiarism and AI-text detection

A detector flags a submission. A false positive can lead to an accusation that the learner must then disprove.

Admissions screening

A model ranks or pre-sorts applications. Without human review, a biased ranking decides who is even considered.

Student chatbots and AI tutors

The bot answers questions about content or enrolment. Wrong answers sound confident, and learners may enter personal data into their prompts.

Learning analytics and dropout prediction

A model labels learners as at risk. The label can stick to a person and shape how staff treat them.

The standard follows the common structure of ISO management systems: context (clause 4), leadership (5), planning (6), support (7), operation (8), performance evaluation (9) and improvement (10). The table translates the key requirements into the daily work of a school or training company.

• ISO 42001 standard page

You do not need a project team. A director and one person responsible for digital tools can cover the first round in a few working sessions.

1. 01

   List every AI tool in use

   Include the tools in the learning platform, the grading software and the generative AI tools that teachers use on their own.

2. 02

   Write the policy

   State what staff and learners may do with AI, what they may not do and who decides in unclear cases.

3. 03

   Assess the risks per tool

   For grades and admissions, decide where a person must review the result before it reaches the learner.

4. 04

   Document the impact

   For every tool that affects learners directly, note who is affected, what could go wrong and how a learner can object.

5. 05

   Brief staff and keep records

   Show teachers the policy, store the decisions and review the tool list once a year.

The self-assessment has 40 yes/no questions. Of these, 13 are mandatory requirements of the standard and all must be answered yes. Among the other 27 questions, at least 18 need a yes. There is no on-site audit. The certificate is issued by G6 Agency AG under licence from SICE, and SICE reviews every assessment before the certificate is issued.

The price is CHF 849 (€849) in the first year, then CHF 569 (€569) per year including the yearly online re-audit. The certificate is valid for 3 years and confirmed each year by that short re-audit. Billing is an automatic yearly subscription. You can cancel at any time in your customer account, effective at the end of the current year, and the certificate then ends with the paid year.

Prices include 8.1% Swiss VAT for customers in Switzerland and Liechtenstein. If you certify a second or third standard, a discount of 20% or 30% applies, also on the yearly fee. You do not need an account to buy.

• Start the free self-assessment
• See pricing
• About ISO 42001

That depends on the buyer. Read the tender text. Some buyers ask for a certificate from the classic route with an on-site audit by a certification body, others only want proof that a management system exists and can be verified.

The Zertify certificate rests on a documented self-assessment, carries a number and a QR code, and can be checked by anyone on the public verification page. The yearly online re-audit shows that the status is current. For a first customer questionnaire or a framework agreement, this is often what the purchasing department needs. If you are unsure which route fits, compare them before you apply.

• Compare the certification routes
• Certification without an on-site audit