Client Journey: Responsible AI with Evisort and ISO 42001
As one of the largest cybersecurity assessment firms in the world, Schellman provides services like ISO, FedRAMP, SOC, and PCI. In parallel with the compliance and technology space that continues to evolve, we've adapted our ISO services, including acquiring dual accreditation from ANAB and UKAS to meet the ever-evolving needs of our clients.
Being leaders in the AI governance space is important to us, and we knew that adding ISO 42001 certification to our services would instill confidence in the market as it relates to the trustworthy use of AI. Once ISO 42001 was published, Evisort was one of the first calls that we received.
Through their AI native contract intelligence platform, Evisort helps customers unlock data and insights from their documents across different types of contracts and order forms. They do that using AI while also assisting customers in contract drafting and negotiation to help expedite deals and reduce costs and risks.
"Part of our commitment to responsible AI is that we implement strict guardrails to protect our customer data against malicious intent and to ensure that the answers we deliver are based only on information that users have access to," said Xinying Yu, Head of AI and Data Science at Evisort.
Because the ISO 42001 standard was brand new, the team at Evisort started by referring back to their existing ISO 27001 and 27701 and identified any potential gaps we had.
"The meetings we had with Evisort were well attended by members of their upper management team. They were well prepared," confirmed Danny Manimbo, ISO & AI Assessment Leader at Schellman. "It was clear that this was not one person running their AI management system, and that management buy-in is vital for success in a project like this."
"We chose Schellman [as our ISO 42001 partner] because of the perfect mix between brand recognition, that not only we can trust, but our customers can also have full confidence in the auditing firm and the agility and flexibility they provided in helping us navigate a very aggressive timeline," explained Amine Anoun, Chief Technology Officer at Evisort.
"Having the ISO 42001 certification will help solidify our positioning in the market as a secure AI provider. Oftentimes, we have to go through model risk management committees with, our customer base, and having the certification will expedite that and make it easier for our customers to adopt AI."
About Schellman
Schellman is a leading provider of attestation and compliance services. We are the only company in the world that is a CPA firm, a globally licensed PCI Qualified Security Assessor, an ISO Certification Body, HITRUST CSF Assessor, a FedRAMP 3PAO, and most recently, an APEC Accountability Agent. Renowned for expertise tempered by practical experience, Schellman's professionals provide superior client service balanced by steadfast independence. Our approach builds successful, long-term relationships and allows our clients to achieve multiple compliance objectives through a single third-party assessor.