United States · AI companies
ISO/IEC 27001 for US AI Companies: Protect Models, Win Buyers
Why US AI companies are asked for ISO/IEC 27001: enterprise buyers, FTC and SEC vendor rules, federal AI contracts, and the route to certification.
Did you know ISO 27001 can cost less than US$10,000, all-inclusive? If you've been quoted more, talk to us before you sign.
100% success, on time: the Sterling Promise
We stay with you until your agreed outcome is achieved, through consulting, audit preparation and the resolution of audit findings. The engagement defines the standard, scope, outcome and responsibilities; your organization puts the agreed controls into use; an accredited certification body issues the certificate; a US-licensed CPA firm issues the SOC 2 report, and that decision stays independent.
Done for you, end to end
We write the policies, set up the controls and evidence, run the internal audit and coordinate the independent audit. You deal with one team from first call to final report.
Simple and quick
A free gap assessment, then one plan with dates from day one. Effivity, our GRC automation platform, is included to keep the evidence moving.
8,100+ client engagements
In 60+ countries over 20+ years, with experts who bring 30+ years of experience.
Under US$10,000, all-inclusive
For most start-ups and SMEs: SOC 2, ISO 27001, ISO 42001, HIPAA or ISO 9001, including the independent audit. A fixed quote follows a free gap assessment.
Included in every engagement
Every Sterling consulting engagement comes with the following, so you are not buying extras to get to the finish line:
- Effivity, Sterling's GRC automation platform, with a full-year subscription, to run your controls, evidence, tasks and audits in one place.
- Sterling Academy: preferential course access, with complimentary awareness training for your people.
- Internal auditor training for your audit team, as applicable to your standard.
- For information-security engagements, a vulnerability assessment.
These are part of the engagement, not a separate purchase. The details depend on the standard you are working toward, which we confirm during the free gap assessment.
Consulting and auditing are always separated: the people who consult never audit you. That keeps your internal audit objective and protects the independence of the CPA firm, Qualified Security Assessor or certification body that performs the final step.
Behind this are 8,100+ client engagements in 60+ countries over 20+ years, led by experts with 30+ years of experience.
All-inclusive pricing for start-ups and SMEs
Did you know SOC 2 or ISO 27001 can cost less than US$10,000, all-inclusive? If you've been quoted more, talk to us before you sign.
Sterling's all-inclusive fee for SOC 2, ISO 27001, ISO 42001, HIPAA or ISO 9001 is under US$10,000 for most start-ups and SMEs. It covers our done-for-you consulting and the independent audit: the SOC 2 report from a US-licensed CPA firm, as AICPA standards require, or the certification audit by an accredited certification body. For HIPAA, it covers HIPAA compliance consulting and an independent HIPAA assessment. Effivity, training and a vulnerability assessment are included. That's less than a month's cost of an in-house security hire: the US Bureau of Labor Statistics puts the national median annual wage for information security analysts at $129,180 (May 2025), about $10,765 a month in pay alone[1].
A fixed quote follows a free gap assessment.
What the fee covers, and what it doesn't:
- It is the fee for your first SOC 2 report or your first certification only.
- Annual work is always additional and billed the following year: later SOC 2 report periods, and ISO surveillance and recertification audits.
- It assumes a typical start-up or SME scope: one product or service and one main location.
- Larger or multi-site scopes get a fixed quote after the gap assessment.
- PCI DSS is quoted separately: a fixed quote follows a free gap assessment.
[1] Occupational Employment and Wage Statistics, May 2025: 15-1212 Information Security Analysts, national annual median wage. US Bureau of Labor Statistics. accessed October 23, 2026.
Why US AI companies are asked for ISO/IEC 27001
The outcome. An accredited ISO/IEC 27001 certificate that tells every US and overseas buyer, in one document, that your models, training data and customer content sit inside an audited security system. We do the heavy lifting; an accredited certification body audits and decides on the certificate.
No US law makes an AI company hold ISO/IEC 27001. It is a voluntary international standard for information security management systems[1]. It turns into a deal requirement in four US situations:
- Global enterprise buyers. In Sterling's experience, US multinationals that buy for their European or Asian arms often standardize suppliers on an ISO certificate rather than a US attestation report.
- Regulated US customers. Banks, lenders and public companies carry their own vendor-oversight duties (next section), and they pass them to you in the contract.
- Federal and public-sector tenders. Agencies buying AI write data-handling terms into contracts, and a certified system gives you the records behind your answers.
- US investors. In Sterling's experience, diligence on an AI company now asks how model weights and customer prompts are protected, not only how the code is.
The US rules your buyers pass down to you
The outcome. You see why the questionnaire reads the way it does, and you hold evidence that answers it.
- FTC Safeguards Rule. Covered financial institutions must take reasonable steps to select service providers capable of maintaining appropriate safeguards, require those safeguards by contract, and periodically assess providers based on risk[2]. If a lender or fintech uses your model, you are that provider.
- SEC Regulation S-K Item 106. Public companies describe whether they have processes to oversee and identify cybersecurity risks associated with their use of third-party service providers[3]. Their vendor teams turn that disclosure into questions for you.
- OMB Memorandum M-25-22 (April 3, 2025). For federal AI purchases, agencies must ensure contracts permanently prohibit using non-public inputted agency data and outputted results to further train publicly or commercially available AI algorithms, absent explicit agency consent[4]. It applies to contracts from solicitations issued 180 days or more after the memorandum[4]. An ISO 27001 system gives you classified data, controlled access and logs to show you keep that promise.
What a US AI company's certificate should protect
The outcome. A scope statement that covers the assets US buyers worry about, so the certificate carries weight in procurement.
- Model assets. Weights, checkpoints, system prompts and evaluation suites, often kept in registries and object storage with relaxed access.
- Data assets. Training and fine-tuning corpora, labeled sets, customer uploads, and logs holding prompts and outputs.
- Compute. Cloud accounts, GPU clusters, orchestration and any dedicated customer tenancy.
- People and tools. Researchers, annotators and contractors, plus notebooks, experiment trackers and labeling tools.
- Suppliers. Foundation-model providers, data vendors, annotation firms and hosting.
We tie each asset to the threats that matter for AI: leakage of customer content, theft of weights, poisoned training data, insider misuse and supplier failure. For a first certificate we usually scope the production service and the model assets behind it, and bring early research in once it touches real customer data.
Controls US reviewers test hardest at AI companies
The outcome. Controls your engineers can live with, written in their language, and evidence a reviewer accepts on first reading.
1. Access to weights and datasets. Segregated environments and time-limited, justified access to anything sensitive, so researchers keep their freedom without blanket permissions. 2. Data labels that mean something. Each source carries a classification that governs storage, sharing, retention and deletion; customer content gets the strictest one. 3. Release control for code and models. Review, testing, a recorded approval and a rollback path for every release. 4. Detection. Logging and alerts for unusual downloads or API patterns, and an incident drill that includes customer content leaking through the model interface. 5. Supplier terms. Contracts stating what each provider may do with your data, and a scheduled review of the providers your product depends on. 6. People. Confidentiality terms, awareness that covers prompt and data-sharing habits, and clean offboarding for contractors and annotators.
Where US AI teams lose time
The outcome. We remove these delays before the certification body arrives.
- Research scoped out, production data scoped in. Customer data quietly flows into the excluded environment.
- Weights in shared buckets. Broad read access to checkpoints is a common finding.
- Policies nobody has read. Auditors interview the people handling datasets.
- Over-documenting. A forty-page procedure for a six-person team will not be followed.
- A one-time risk assessment. It must move when the model supplier, data sources or product change.
- Expecting a security certificate to answer AI-governance questions. Model oversight and impact need ISO/IEC 42001 evidence.
The order we recommend for US AI companies (Sterling's recommendation)
The outcome. One control set that serves every framework your buyers name.
- Mainly US enterprise pipeline. SOC 2 often comes first; ISO/IEC 27001 follows when overseas or public-sector deals appear.
- A tender names the certificate. Start with ISO/IEC 27001.
- Buyers start asking about AI governance. Add ISO/IEC 42001 on the same management system, because both follow the same ISO structure.
The risk register, internal audit calendar and corrective-action log you build now carry forward, kept once in Effivity and mapped to each framework.
How we take US AI companies to ISO 27001 certification
The outcome. A certificate on schedule, with the work done for you. Sterling's record is 100% success and on-time completion across 8,100+ client engagements in 60+ countries over 20+ years, led by experts with 30+ years of experience. The people who consult never audit you, and Sterling does not certify.
1. Free gap assessment. Assets, architecture, policies and the buyer requests behind the decision, returned as a gap report with a proposed scope. 2. Risk work and design. A compact set of procedures built around your actual tooling. 3. Evidence. Effivity holds the asset and risk registers; the included vulnerability assessment feeds technical findings into the risk process. 4. Internal audit and management review. We test the system first and close what we find. 5. Certification audit. We coordinate the accredited body you select and support you to its decision.
Ready to protect your models and close the deal? Get started, and a Sterling expert will map your buyers' requests to a dated plan.
How Sterling delivers ISO certification
ISO management system standards such as ISO/IEC 27001, ISO/IEC 42001 and ISO 9001 are certified by an accredited certification body, not by a consultant[1]. Sterling never certifies. The certificate carries the name of the body that issued it, and that independence is what makes it credible to your buyers.
What Sterling does is prepare your company so that the certification body's audit goes smoothly. We coordinate:
- a gap assessment against the standard;
- the management system itself: scope, risk assessment, policies, procedures and records, sized for your company;
- training for your people and an internal audit before the certification audit;
- management review and corrective actions;
- the certification audit process, from choosing an accredited body to closing any findings.
Consulting and auditing are always separated. The people who consult never audit you, so the internal audit is a genuine test and the certification body's audit is independent.
Sterling has completed 8,100+ client engagements in 60+ countries over 20+ years, and our experts bring 30+ years of experience.
[1] About the IAF MLA (multilateral recognition arrangement). International Accreditation Forum (functions transferred to Global Accreditation Cooperation Inc., 1 Jan 2026). accessed October 23, 2026.
Sources
1. ISO/IEC 27001, Information security, cybersecurity and privacy protection, Information security management systems, Requirements. ISO. accessed October 23, 2026.
2. 16 CFR 314.4 Elements (Standards for Safeguarding Customer Information), paragraph (f). Electronic Code of Federal Regulations (FTC Safeguards Rule). accessed October 26, 2026.
3. 17 CFR 229.106 (Item 106 of Regulation S-K) Cybersecurity, paragraph (b)(1)(iii). Electronic Code of Federal Regulations (SEC). accessed October 26, 2026.
4. OMB Memorandum M-25-22, Driving Efficient Acquisition of Artificial Intelligence in Government (April 3, 2025). Executive Office of the President, OMB (whitehouse.gov). accessed October 26, 2026.
Information only
The information on this page is provided for general informational purposes only. It is not legal advice, and it is not a substitute for advice from a qualified attorney about your own situation.
Requirements depend on your scope, your customers' contracts, your industry and the regulations that apply to you. Two companies asking for the same standard can have very different obligations. We confirm yours during a gap assessment, and we update our content as standards change, but you should check the current text of any standard or rule that matters to you.
Sterling consults and prepares. It does not decide whether you meet a standard. That decision belongs to the independent party that performs the final step: the US-licensed CPA firm for a SOC 2 report, the Qualified Security Assessor or acquirer for PCI DSS, and the accredited certification body for ISO certificates. Timelines and outcomes depend on your readiness and on those parties.
Standards and marks named on this site belong to their respective owners.
FAQs
Frequently asked questions
Is ISO 27001 mandatory for AI companies in the US?
No. ISO/IEC 27001[1] is a voluntary international standard, and no US federal rule we cite requires it by name. It becomes a practical requirement when an enterprise buyer, tender or overseas customer makes the certificate a condition of the contract. That is why our gap assessment starts with the requests in your pipeline: you pursue the certificate only where it moves deals, and we tell you plainly when SOC 2 or another route would serve you better.
Should a US AI company choose ISO 27001 or SOC 2?
Follow your buyers. US enterprise security teams commonly request a SOC 2 report, issued by a US-licensed CPA firm, as AICPA standards require. International and public-sector buyers more often name an ISO/IEC 27001 certificate from an accredited certification body. Many AI companies end up holding both, and because access, change, supplier and incident controls overlap, one set of records can serve each. Our SOC 2 vs ISO 27001 guide sets out the decision in more detail.
Do model weights count as information assets?
Yes, and usually among the most valuable you hold. Weights, checkpoints and evaluation suites belong in the asset register with an owner, a classification, access rules and protection against theft or leakage. Treating them like ordinary source code, with broad read access in shared storage, is one of the most common gaps we find at AI companies, and one of the easiest to close before the audit.
Does the certificate prove our AI is safe or fair?
No. It shows that your information security management system conforms to the standard, as judged by an accredited certification body. It says nothing about model accuracy, bias or impact. Buyers who want evidence on those questions are looking for an AI management system, such as one certified to ISO/IEC 42001, which can sit on the same management-system base you build for ISO 27001.
How does the federal rule on training with agency data affect us?
If you sell AI to federal agencies under contracts covered by OMB Memorandum M-25-22, agencies must ensure contracts permanently prohibit using non-public agency inputs and outputs to further train publicly or commercially available AI algorithms, absent explicit agency consent[4]. The memorandum does not mention ISO/IEC 27001. A certified system helps you show the data classification, segregation and access logs behind that commitment.
Who audits us and who issues the certificate?
An accredited certification body audits your management system and decides whether to issue the certificate. Sterling prepares you, runs the internal audit, and coordinates the certification audit from booking to the final decision, but Sterling does not certify. Consulting and auditing are always kept apart: the people who consult never audit you, which protects the independence your buyers rely on when they read the certificate.
How do we handle contractors and annotators?
Bring them inside the system wherever they touch sensitive data. That means confidentiality terms, access limited to what the task needs, short security training covering data-sharing habits, and an offboarding step that removes access on the last day. Record these arrangements in your supplier and people controls, because auditors will ask how outside annotators are governed.
Can we start with one product line?
Yes. A focused first scope, such as your production API and the model assets behind it, is normal and keeps the first audit manageable. The scope can be widened at a later audit as research environments or new products start handling customer data. The wording must be accurate so that US buyers understand exactly what the certificate covers and what it does not.
Keep exploring
More in Compliance for AI companies in the US
Compliance for AI companies in the US
Free gap assessment
Start with a free gap assessment
Not sure where you stand? Start with a free gap assessment. In one conversation, a Sterling consultant looks at what your customers, investors or contracts are asking for, compares it with what you have in place today, and tells you what is missing, in what order to fix it and how long it is likely to take.
usa@sterling-grc.com+1 201 263 4443 (global headquarters) · A Sterling consultant replies within one working day
What would you like to achieve?
Choose a starting point. The enquiry form asks for your name, work email, phone with country code and company.
Book my free gap assessmentContinue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice