Skip to main content

AIMS · AI management system

Run your AI governance programme in one system of record

AIMS brings your AI inventory, AI Act classification, risk and impact assessments, ISO/IEC 42001 controls and audits together, so the evidence exists before anyone asks for it.

Free Community plan for up to three AI systems. No credit card.

Statement of Applicability

  • A.2 Policies related to AI100%
  • A.4 Resources for AI systems80%
  • A.5 Assessing impacts of AI systems65%
  • A.6 AI system life cycle50%
  • A.7 Data for AI systems40%
Illustration of Annex A control coverage in AIMS. Each control links to its owner, policy and evidence.

What is in AIMS

Everything an AI management system needs

Eight modules that cover the management system end to end, from the first inventory entry to the management review.

  • AI system inventory

    One register of every AI system you build, buy or embed, with owners, intended purpose and lifecycle stage.
  • AI Act classification

    Guided workflows to determine your role and each system's risk class under Articles 5, 6 and 50 and Annex III.
  • Risk management

    Identify, assess and treat AI risks with a risk register, treatment plans and review dates.
  • Impact assessments

    AI impact assessments and fundamental rights impact assessments (FRIA) with stakeholder input and mitigations.
  • Controls library

    ISO/IEC 42001 Annex A controls with implementation status, owners and evidence, and your Statement of Applicability.
  • Audit management

    Plan internal audits, record findings and track corrective actions to closure.
  • Objectives & KPIs

    Set AI objectives, track indicators and prepare the management review.
  • Roles & approvals

    Role-based access, approval workflows and a full activity trail across the organisation.

See every feature

Built around the requirements

Mapped to ISO/IEC 42001 and the EU AI Act

AIMS is organised around what auditors and regulators actually ask for. Here is where each requirement lives.

ISO/IEC 42001:2023
RequirementWhere it lives in AIMS
Cl. 4Context, scope and AI systems in scopeAI system inventory
Cl. 5Leadership, AI policy, rolesPolicies, roles & approvals
Cl. 6AI risk assessment, treatment, impact assessmentRisk management, impact assessments
Cl. 7–8Support, documented information, operationControls library, documentation
Cl. 9Monitoring, internal audit, management reviewAudit management, objectives & KPIs
Cl. 10Nonconformity and corrective actionAudit findings & corrective actions
Annex A38 controls across A.2–A.10Controls library, Statement of Applicability
EU AI Act
RequirementWhere it lives in AIMS
Art. 5, 6, 50Prohibited practices, high-risk and transparency classificationAI Act classification
Art. 9Risk management systemRisk management
Art. 10–12Data governance, technical documentation, record-keepingControls library, inventory
Art. 14Human oversightControls library
Art. 26–27Deployer obligations and FRIAImpact assessments
Art. 49Registration of high-risk systemsAI system inventory

Who uses AIMS

One workspace, four teams

  • Compliance & DPO

    Own the programme, the Statement of Applicability and the audit calendar.

  • Risk

    Run AI risk assessments and track treatments alongside the rest of your risk register.

  • Product & engineering

    Register systems, record design decisions and attach technical evidence where it is created.

  • Leadership

    See where the organisation stands against the AI Act and ISO 42001, and what is due next.

Pricing

Start free, pay per governed AI system

Every plan includes AI Act risk classification and ISO 42001 templates.

Compare plans
  • Community

    €0

    Up to 3 AI systems and 3 users.

  • Professional

    €1,500/month

    3 governance slots and up to 25 users, full assessments, audits and reporting.

  • Enterprise

    Custom

    Unlimited systems, SSO, custom frameworks and on-premise option.

Trust & security

Your governance records stay in Europe

  • Primary data stored in the European Economic Area on Google Cloud
  • Data processing agreement under Art. 28 GDPR
  • TLS 1.3 in transit, AES-256 at rest
  • Role-based access control and annual penetration tests

Read about trust & security

AIMS FAQ

Does AIMS certify us to ISO/IEC 42001?
No. Certification is issued by an accredited certification body after an external audit. AIMS helps you build and operate the management system and keeps the records that audit will examine.
Can we use AIMS for the EU AI Act if we are not pursuing ISO 42001?
Yes. The inventory, classification, risk and impact assessment modules work on their own. Many teams start with AI Act scoping and adopt ISO 42001 controls later.
What is a governance slot?
A slot is one AI system under active governance in AIMS: registered, classified and tracked with its assessments and controls. You pay for the systems you govern, not for every user.
We already have a spreadsheet register and policies. Do we start over?
No. Register your systems in AIMS and attach the policies you already have as evidence against the relevant controls. If your register is large, talk to us about bringing it across.
Does AIMS integrate with how we build AI?
Systems built through Arelis Hub are recorded in AIMS automatically, including model usage and policy decisions. Other systems are registered directly in AIMS.

See AIMS with your own AI systems

Bring two or three systems you are responsible for. In 30 minutes we will classify them and show you the evidence trail AIMS builds.