Yandex became the first company in Russia to receive the international ISO/IEC 42001 certificate, confirming compliance with standards for the development and management of artificial intelligence. This was reported by the company's press service and confirmed by TÜV AUSTRIA Standards & Compliance, which conducted the audit.
The ISO/IEC 42001 standard, introduced in 2023, regulates the processes of creating and implementing AI solutions. It assesses not the technologies themselves, but the management system: protection of user data, error control, ethics of algorithms, and minimization of social risks. According to Anna Zinchuk, Head of Compliance and Information Security Training, the company began building AI security processes long before the launch of YandexGPT.
Yaroslav Seliverstov, a leading AI specialist at "University 2035," believes that certification according to ISO/IEC 42001 will help improve security, quality of interaction with AI tools, and increase the trust of end users.
First of all, this confirms that user data is protected at the level of international requirements. Automatic monitoring of errors and anomalies reduces the risk of receiving malicious or incorrect responses. Feedback systems allow for the prompt correction of AI behavioral errors and take into account real user feedback. The principles of ethics enshrined in the company ensure that AI does not issue offensive, discriminatory, or misleading responses.
Some companies, such as Rostelecom, have not yet been certified but are developing internal standards. Experts predict a growing interest in certification among Russian developers.
Such certificates are important, for example, from the point of view of investors: they provide an additional guarantee that nothing will happen to the AI that will collapse capitalization. Compliance with international standards is also of interest to potential partners and customers, in particular from friendly countries. Finally, this is also important for ordinary users, who are now often wary of AI products, not being sure of their safety.
In January 2025, Russia introduced a similar GOST, the text of which is identical to ISO/IEC 42001, which may accelerate the implementation of standards.
The appearance of a certificate of this level motivates companies to systematically build technological and production processes, identifies areas of risk and development.
Until now, only a few corporations have received the certificate, including Microsoft, Google Cloud, and Samsung SDS. According to TÜV AUSTRIA, no more than 50 such certificates have been issued worldwide.
Read more materials on the topic:
Deputy Dmitry Gusev proposed creating a tool for transferring data from WhatsApp and Telegram to MAX
