UK supplier guide
ISO 42001 AI tender evidence:
governance, scope and disclosure
ISO/IEC 42001:2023 specifies an AI management system; a tender may ask for certification, governance evidence or AI disclosure, and these are different requirements.
Find a notice and check its requirements →Checked against primary sources4 sources linked below
- Read the AI request
- Define the AI activity
- Check the management-system scope
- Disclose use accurately
What does ISO 42001 AI tender evidence establish?
ISO/IEC 42001:2023 specifies an AI management system; a tender may ask for certification, governance evidence or AI disclosure, and these are different requirements.
AI GOVERNANCE
- Policies and processes govern AI use.
- Identify and manage AI risks and opportunities.
- State the activities the system covers.
- Show the requested record or certificate.
How do certification and AI disclosure differ?
Read the requested evidence before deciding what your organisation can claim.
| Question | Evidence | Action |
|---|---|---|
| ISO/IEC 42001 | AI management system evidence | Check the requested scope and certificate |
| ISO/IEC 27001 | Information security management | It does not replace an AI-governance answer |
| PPN 017 disclosure | Information about AI use in bidding or delivery | Answer the actual disclosure questions |
How do you answer an AI-governance request without overstating certification?
Keep certification, governance evidence and AI-use disclosure as separate answers.
- Start with the source01
Read the AI request
Identify the certification, assurance and disclosure questions the buyer actually asks. - Define the scope02
Define the AI activity
Name the organisation, system and delivery activities to which the evidence relates. - Read the evidence03
Check the management-system scope
Read what ISO/IEC 42001 describes and what the certificate covers. - Make the decision04
Disclose use accurately
Follow the buyer's requirements for AI-assisted bid material and check the answers. - Name the next action05
Assign governance evidence
Keep an owner for the policy, controls, certificate and records supporting each claim.
A supplier’s review sequence, based on the primary sources below. It is not a measured outcome or a prescribed buyer timetable.
How would a supplier plan evidence for Northumbrian Water’s deadline?
Read the relevant lot documents and resolve the evidence question before the expression-of-interest deadline.
Northumbrian Water’s FA08-31 Commercial Services framework has an expression-of-interest deadline of 3 November 2026 at noon UK time.
For a relevant lot, a supplier proposing to use AI first checks the buyer’s documents for governance, certificate and disclosure questions.
The AI owner checks the scope of any certificate and verifies the proposed delivery claims before the response is authorised.
This is a worked planning example, not evidence that Northumbrian Water requires ISO 42001 or that the notice concerns an AI procurement.
- Say where AI supported the response when asked.
- Verify AI-assisted claims.
- Explain AI use in the proposed service when asked.
- Keep supporting evidence for clarification.
What will the evidence review cost your team?
Estimate internal bid preparation using your own hours and hourly cost.
ISO identifies ISO/IEC 42001:2023 as Edition 1, published in December 2023. The certificate reference alone cannot prove that a particular model output is accurate; the bid still needs checks and evidence for its claims. No measured UK tender requirement count is asserted here. Read the primary source ↗
Enter the team hours spent gathering and reviewing this evidence per bid.
This calculator excludes certification, membership and external audit fees; it is not a compliance verdict.
Your bid effort
Starting figures are an illustration, not a measured average or a saving promised by RFP Quest.
£4,000 and 80 team hours each month if you prepare every bid.
Use the estimate to decide how much work to authorise before drafting starts.
It excludes software fees and external costs.
- This bid£2,000
- Other bids this month£2,000
What should the evidence owner check before you answer?
Check the actual evidence against the buyer’s wording.
CHECK THE PACK
- Describe the governed AI activities.
- Name who is responsible for governance.
- Explain review and risk treatment.
- Provide the evidence the buyer requests.
What should the bid lead do first?
Resolve the requirement and evidence gaps before authorising the response.
- Before you start01
Use the current documents
Check the primary publication and later changes before using the sequence below. - Check 202
Classify the question
Is it certification, governance or disclosure? - Check 303
Check the system
Ask the responsible owner for scope and evidence. - Check 404
Verify each claim
Review any AI-assisted answer against source records. - Follow through05
Disclose accurately
Follow the buyer’s wording and retain the checked response.
An editorial order of work, not a buyer's fixed timetable. The current notice and documents determine participation and submission.
What must you avoid promising in this bid?
State only the status and controls your organisation can substantiate.
CLAIM LIMITS
- Do not call alignment certification.
- Do not use confidential tender material as training data.
- A certificate does not verify each answer.
- Do not assume every AI tender mandates ISO 42001.
Show how the AI is governed and prove the claims made in the bid.
Classify the question
Is it certification, governance or disclosure?Check the system
Ask the responsible owner for scope and evidence.Verify each claim
Review any AI-assisted answer against source records.
Read the official notice and the buyer’s current documents before allocating bid effort.
What else should you know about ISO 42001 AI tender?
Check these points before committing your team’s time.
Is ISO 42001 mandatory for UK AI tenders?
Is ISO 42001 the same as ISO 27001?
Does PPN 017 ban AI-written bids?
Can I say we are aligned with ISO 42001?
Does RFP Quest hold ISO 42001 certification?
Where can you check the evidence?
Read the primary publication and the buyer’s current documents before acting.
| Source | What it supports |
|---|---|
| Northumbrian Water FA08-31 ↗ | Expression-of-interest deadline; no ISO or personal-data requirement inferred. |
| ISO — 1 ↗ | AI management system scope and published edition. |
| Cabinet Office — 2 ↗ | Optional information-only disclosure examples and accuracy checks. |
| Cabinet Office — 3 ↗ | Proportionate participation conditions under the Procurement Act regime. |
Which guide answers your next question?
Follow the part of the bid you need to work on next.
