The system of record for your AI governance.
HumanWox is an AI governance system of record aligned to ISO/IEC 42001, enabling organisations to implement, evidence, and maintain an audit-ready AI Management System.
Clause Progress
72%
AI Systems
0
3 fully governed
Evidence Items
0
2 reviews due
Implementation Progress
Updated todayBuilt for the standards that matter
ISO/IEC 42001
AI Management System
EU AI Act
AI Regulation Alignment
NIST AI RMF
AI Risk Management Framework
Governance as a chain of record, not a collection of documents.
Full compliance chains as linked records. Clauses connect to requirements, requirements to controls, controls to evidence, evidence to AI systems. Every link is auditable.
Implementation Tracker
Follow the standard step by step with clear guidance on what evidence to produce at each stage.
Learn morearrow_forwardAI System Registry
Register every AI system with purpose, risk classification, data categories, lifecycle stage, and ownership. Serves ISO audits and EU AI Act obligations alike.
Learn morearrow_forwardEvidence Lifecycle Management
Evidence has a shelf life. Track review cycles, surface stale artefacts, and ensure every piece links to specific controls and AI systems.
Learn morearrow_forwardIssues Tracker (CAPA)
Identify problems, track corrective and preventive actions, and close the loop with full audit history.
Learn morearrow_forwardReadiness Reporting
A real-time readiness score computed from control status, evidence completeness, review currency, and risk treatment. Know exactly where you stand before the auditor arrives.
Learn morearrow_forwardAudit Trail
Every action across the platform is logged and tamper-proof. Approvals, version changes, and access events are permanently recorded and available for auditor inspection.
Learn morearrow_forwardEvery action. Permanently recorded.
The HumanWox audit trail captures every approval, every version change, and every access event — tamper-proof and available for auditor inspection at any time.
Evidence approved — "AI Risk Assessment Policy v2" — S. Kenning — Clause 6.1.2
AI system registered — "Customer Churn Predictor" — Lifecycle: Active — Risk: Medium
Obligation triggered — Clause 8.4 evidence review overdue — Owner notified
CAPA closed — NC-004 — Root cause documented, corrective action verified
Evidence version created — "Data Governance Policy v3" — Supersedes v2
AI system review due — "Fraud Detection API" — 7 days remaining
Evidence submitted for review — "Supplier Risk Assessment" — Pending approval
Clause 9.1 — Performance evaluation evidence approved — 3 of 4 requirements met
CAPA opened — NC-007 — Severity: Medium — Assigned to J. Smith
AI system decommissioned — "Legacy Scoring Model" — Archive period: 30 days
Evidence expired — "Third Party AI Policy" — Owner notified for renewal
Audit package exported — 47 evidence items — Generated for certification review
Evidence approved — "AI Risk Assessment Policy v2" — S. Kenning — Clause 6.1.2
AI system registered — "Customer Churn Predictor" — Lifecycle: Active — Risk: Medium
Obligation triggered — Clause 8.4 evidence review overdue — Owner notified
CAPA closed — NC-004 — Root cause documented, corrective action verified
Evidence version created — "Data Governance Policy v3" — Supersedes v2
AI system review due — "Fraud Detection API" — 7 days remaining
Evidence submitted for review — "Supplier Risk Assessment" — Pending approval
Clause 9.1 — Performance evaluation evidence approved — 3 of 4 requirements met
CAPA opened — NC-007 — Severity: Medium — Assigned to J. Smith
AI system decommissioned — "Legacy Scoring Model" — Archive period: 30 days
Evidence expired — "Third Party AI Policy" — Owner notified for renewal
Audit package exported — 47 evidence items — Generated for certification review
Built on a compliance chain, not a document store.
Auditors want to trace a compliance chain: from the requirement, through your control, to the evidence, tied to the specific AI system it governs. HumanWox makes this the default.
- check_circle
Three-Layer Compliance Model
Organisational governance, system-level controls, and evidence management, all connected.
- check_circle
System-First Data Architecture
AI systems are the primary object. Clause compliance is computed from system governance state.
- check_circle
Framework Extensibility
ISO 42001 is the first overlay. EU AI Act and NIST AI RMF map onto the same registry.
Clause 6: Planning
Risk assessment and treatment planning
6.1.2 AI Risk Assessment
Organisation shall assess AI-related risks
Risk Assessment Procedure
Applied to: Customer Chatbot, Fraud Detection Model
Risk_Assessment_Q1_2026.pdf
Reviewed 14 Feb 2026 · Approved by J. Hartley
Built for Organisations That Take AI Governance Seriously
Whether pursuing certification or preparing for the EU AI Act, the question is the same: can you demonstrate responsible AI governance?
Compliance and Risk Leaders
Structured implementation without spreadsheets and shared drives. Audit-ready infrastructure from day one.
AI Project and Technical Leads
Connect your AI systems to governance requirements without adding overhead to your development workflow.
Implementers and Consultants
We partner with implementers, not compete. The structured environment your clients need, freeing you to focus on advisory.
Board and Leadership
Demonstrable, defensible AI governance posture. Readiness visibility that gives assurance with confidence.
Straightforward Pricing for AI Governance
One plan. Full platform access. No feature gating, no per-seat surprises. Implementation assurance should not require enterprise negotiations.
Founding Member
Everything you need to implement and maintain ISO/IEC 42001.
Billed monthly. Cancel anytime.
- check_circleFull ISO/IEC 42001 clause and requirement mapping
- check_circleUnlimited AI systems in the registry
- check_circleEvidence upload, versioning, and lifecycle tracking
- check_circleApproval workflows with role-based access
- check_circleReadiness scoring and audit reporting
- check_circleImmutable audit trail with full export
- check_circleUp to 10 team members
- check_circle50 GB encrypted evidence storage
No credit card required
ISO/IEC 42001 consultancy engagements typically cost £15,000 to £50,000. HumanWox provides the implementation infrastructure for a fraction of that investment.
Frequently Asked Questions
Everything you need to know about ISO/IEC 42001 and the HumanWox platform.
What is ISO/IEC 42001?expand_more
How long does implementation typically take?expand_more
Does HumanWox replace the need for a consultant?expand_more
What happens after we achieve certification?expand_more
Does HumanWox use AI to generate compliance documents?expand_more
How does HumanWox relate to the EU AI Act?expand_more
Is my data secure?expand_more
The record your AI governance needs.
14 days to explore the full platform. No credit card, no sales calls, no feature restrictions. Just the infrastructure your AI management system needs.
No credit card required. Full platform access for 14 days.