AIMS · AI management system
Run your AI governance programme in one system of record
AIMS brings your AI inventory, AI Act classification, risk and impact assessments, ISO/IEC 42001 controls and audits together, so the evidence exists before anyone asks for it.
Free Community plan for up to three AI systems. No credit card.
Statement of Applicability
- A.2 Policies related to AI100%
- A.4 Resources for AI systems80%
- A.5 Assessing impacts of AI systems65%
- A.6 AI system life cycle50%
- A.7 Data for AI systems40%
What is in AIMS
Everything an AI management system needs
Eight modules that cover the management system end to end, from the first inventory entry to the management review.
AI system inventory
One register of every AI system you build, buy or embed, with owners, intended purpose and lifecycle stage.AI Act classification
Guided workflows to determine your role and each system's risk class under Articles 5, 6 and 50 and Annex III.Risk management
Identify, assess and treat AI risks with a risk register, treatment plans and review dates.Impact assessments
AI impact assessments and fundamental rights impact assessments (FRIA) with stakeholder input and mitigations.Controls library
ISO/IEC 42001 Annex A controls with implementation status, owners and evidence, and your Statement of Applicability.Audit management
Plan internal audits, record findings and track corrective actions to closure.Objectives & KPIs
Set AI objectives, track indicators and prepare the management review.Roles & approvals
Role-based access, approval workflows and a full activity trail across the organisation.
Built around the requirements
Mapped to ISO/IEC 42001 and the EU AI Act
AIMS is organised around what auditors and regulators actually ask for. Here is where each requirement lives.
| Requirement | Where it lives in AIMS |
|---|---|
| Cl. 4Context, scope and AI systems in scope | AI system inventory |
| Cl. 5Leadership, AI policy, roles | Policies, roles & approvals |
| Cl. 6AI risk assessment, treatment, impact assessment | Risk management, impact assessments |
| Cl. 7–8Support, documented information, operation | Controls library, documentation |
| Cl. 9Monitoring, internal audit, management review | Audit management, objectives & KPIs |
| Cl. 10Nonconformity and corrective action | Audit findings & corrective actions |
| Annex A38 controls across A.2–A.10 | Controls library, Statement of Applicability |
| Requirement | Where it lives in AIMS |
|---|---|
| Art. 5, 6, 50Prohibited practices, high-risk and transparency classification | AI Act classification |
| Art. 9Risk management system | Risk management |
| Art. 10–12Data governance, technical documentation, record-keeping | Controls library, inventory |
| Art. 14Human oversight | Controls library |
| Art. 26–27Deployer obligations and FRIA | Impact assessments |
| Art. 49Registration of high-risk systems | AI system inventory |
Who uses AIMS
One workspace, four teams
Compliance & DPO
Own the programme, the Statement of Applicability and the audit calendar.
Risk
Run AI risk assessments and track treatments alongside the rest of your risk register.
Product & engineering
Register systems, record design decisions and attach technical evidence where it is created.
Leadership
See where the organisation stands against the AI Act and ISO 42001, and what is due next.
Pricing
Start free, pay per governed AI system
Every plan includes AI Act risk classification and ISO 42001 templates.
Community
€0
Up to 3 AI systems and 3 users.
Professional
€1,500/month
3 governance slots and up to 25 users, full assessments, audits and reporting.
Enterprise
Custom
Unlimited systems, SSO, custom frameworks and on-premise option.
Trust & security
Your governance records stay in Europe
- Primary data stored in the European Economic Area on Google Cloud
- Data processing agreement under Art. 28 GDPR
- TLS 1.3 in transit, AES-256 at rest
- Role-based access control and annual penetration tests
AIMS FAQ
Does AIMS certify us to ISO/IEC 42001?
Can we use AIMS for the EU AI Act if we are not pursuing ISO 42001?
What is a governance slot?
We already have a spreadsheet register and policies. Do we start over?
Does AIMS integrate with how we build AI?
See AIMS with your own AI systems
Bring two or three systems you are responsible for. In 30 minutes we will classify them and show you the evidence trail AIMS builds.
