Audit

Internal Audit

An ISO-compliant review of your AI management system against all criteria

Ideal for internal audits or for preparing for certification

Duration
4–6 days
Price
On request
Format
On-site / Hybrid

What Is an Internal Audit?

An internal audit is an independent review of your AI management system against the requirements of ISO 42001. Unlike an external certification by bodies such as TÜV or DEKRA, we conduct the audit internally – with the aim of preparing you as well as possible for a later certification or of continuously improving your system.

An official ISO 42001 certification of an organization may only be issued by accredited bodies such as TÜV, DEKRA or comparable organizations. We are certified auditors and work to the same standards.

The decisive difference: We understand what we audit. While the conventional auditor certification process does not teach in-depth AI expertise, this is exactly the technical expertise we bring. We know what "AI systems" really means – technically and in practice.

Our Approach

We don't just check whether your documentation is formally correct. We look at whether your system also works in practice and delivers real value.

Because, as we like to say: "one audit does not make a summer".

Our goal is that after the audit you are not only audit-ready, but also have a genuinely functioning, transparent AI management system – one that you can continue to run on your own.

The Process

How an internal audit with ISO-Proof works

1–2 days

Phase 1: Preparation

Together, we lay the groundwork for a structured and purposeful audit.

  • Review of your AIMS documentation
  • Agreement on the audit scope
  • Clarification of responsibilities and points of contact
  • Planning of the audit interviews
2–3 days

Phase 2: Execution

The actual audit – we take a close look, ask questions and get to understand your processes.

  • Systematic review of all relevant processes and documents
  • Assessment of your AI inventory
  • Review of the 39 mandatory controls of ISO 42001
  • Interviews with the responsible persons
  • On-site insights into practical implementation
1 day

Phase 3: Follow-Up

We turn our findings into a clear roadmap for your next steps.

  • Summary of the results
  • Identification of gaps (gap analysis)
  • Prioritized recommendations for action
  • Assessment of certification readiness

What You Take Away

Concrete results for your next steps

Complete Audit Documentation

A detailed report in line with ISO 42001, with an assessment of all 39 controls. You know exactly where you stand and what was reviewed.

Gap Analysis

Concrete, prioritized recommendations for action on the gaps identified. No abstract advice, but steps you can actually implement.

Assessment of Your Certification Readiness

A clear roadmap to a successful external certification. You know what is still missing and how long it will take.

Practical Suggestions for Improvement

Recommendations for your AIMS that go beyond mere compliance and create real value – for a system that actually works.

Why ISO-Proof?

The auditor certification process does not teach in-depth AI expertise. We are not just certified auditors – we understand the technology we audit.

Technical Understanding

We understand machine learning, bias, robustness and monitoring – not just in theory, but from hands-on experience. That makes our audits more precise.

Practice over Paper

We don't just look at documents – we check whether your system really works. With real samples and operational insights.

Constructive, Not Strict

As your internal auditor, we are your partner. We help you get better – with concrete solutions, not just findings.

Ready for a Professional Audit?

Let's review together where your AI management system stands – with technical understanding and a constructive perspective. For a system that is not only compliant, but also works.