ISO 42001 consultants India should show live AI system work, not a reused ISO 27001 binder. Ask who writes, whether they will name your systems, and who attends Stage 2. A consultancy does not issue the certificate. A fixed scope and a sample Statement of Applicability tell you more than a logo slide.

People type best ISO 42001 consultant into a search box. That is the wrong question. There is no ranking that makes someone the best ISO 42001 consultant. A proposal from ISO 42001 consultants India should read like a scope, not a brochure. If the file is thin, ISO 42001 consultants India are being asked to build the inventory with you, and the calendar has to show that.

Seven Step Consulting is a consultancy in Gurugram. It is not a certification body. The firm prepares an AI management system, the AIMS. It does not grant a certificate, and it does not describe itself as the best ISO 42001 consultant.

What ISO 42001 consultants India should show before you sign

A page that calls its author the best ISO 42001 consultant is advertising, not evidence. Skip any firm that answers best ISO 42001 consultant with a trophy icon. The search best ISO 42001 consultant hides the useful test: live systems, named writers, a sample Statement of Applicability. If a proposal leads with best ISO 42001 consultant, ask for the last method they used to put a system into an inventory. You want a redacted shape of the work, not a client name invented for a slide.

Twelve questions a buyer should ask ISO 42001 consultants India before signing
Test Weak answer Useful answer
Who writes Your team, unpaid A named drafter
Certificate One firm does both A separate body
What you keep A slide Your records

1. Who does the writing?

Ask who holds the pen. ISO 42001 consultants India who say your team will draft everything are selling review, not a build. ISO 42001 consulting services should name the deliverables, not a vague program of support. If the proposal says “guidance” and never says “draft Statement of Applicability”, assume you will write it on a Sunday.

2. Have they built an AIMS, or only an ISO 27001 file?

Have they implemented an AIMS, or only an information-security binder? ISO 42001 consultants India should be able to walk a system from purpose to test record. ISO 27001 inventories assets. The AIMS inventories models, prompts, vendor tools and the people who can change them. A reused binder with the title swapped is not implementation.

3. Will they name the AI systems?

Will they name your AI systems in the scope? ISO 42001 consultants India who leave the scope as “the organization” are not ready to start. An AI governance consultant who has never named a production system is selling a policy workshop. A chatbot, a credit model and a copilot are three rows. A spreadsheet called Final_v7 with no owner is not a scope.

4. Do they sell the certificate?

Do they sell the certificate? ISO 42001 consultants India must not. A consultancy is not a certification body. Do not hire an AI governance consultant who offers to issue the certificate. If ISO 42001 consulting services include the audit decision, walk away. The same firm should not prepare the file and then certify it. NABCB accredits certification bodies. It does not turn a consultant into an auditor.

5. Can they show a sample Statement of Applicability?

Ask for a sample. ISO 42001 consultants India should show how an Annex A control is included or excluded, and the reason. Annex A has 38 controls, from A.2 to A.10. A good AI governance consultant will show a redacted Statement of Applicability, not a brochure. A one-line “not applicable” with no reason is a tell. You are allowed to ask for a sample before you sign. You are not asking them to leak a client.

6. Who attends Stage 2?

Who sits in the room? ISO 42001 consultants India should name the person, not the brand. Read the ISO 42001 consulting services line for who writes the Statement of Applicability and who attends Stage 2. Stage 1 is the documentation review. Stage 2 samples live controls. The partner who sold the work is not automatically the person who will explain a model to the auditor.

7. Is the fee fixed or hourly?

Fixed fee or hourly? ISO 42001 consultants India should say which, and what happens when a new system enters scope. Hourly ISO 42001 consulting services without a cap will drift. Fixed-fee ISO 42001 consulting services need a system cap or the scope is open. The three invoices, and the 2026 market ranges around them, belong in a separate cost note. They are not a Seven Step rate card.

8. What do you keep when they leave?

What do you keep? ISO 42001 consultants India should leave you the records, the ownership and access to the store. ISO 42001 consulting services end when you hold the records, not when a slide says complete. Policies, the Statement of Applicability, the AI risk assessment, the AI impact assessment and the system list should sit in your folders, with your names on the approval.

9. Can you call a reference?

References you can call matter more than a logo wall. ISO 42001 consultants India should offer a conversation you can actually have. Call. Ask what the person wrote, what slipped, and whether the firm stayed through Stage 2.

10. Is there a conflict if they also want to audit?

Conflict is a yes or no. ISO 42001 consultants India cannot also be the auditor on the same engagement. An AI governance consultant and a certification body are different firms. Impartiality is the point of the split. If a seller wants both fees, you do not have an independent Stage 2. Check the body’s scope on the NABCB or IAF directory yourself. This article does not name bodies as accredited.

11. Which India rules do they actually use?

Which rules do they open in the room? ISO 42001 consultants India should talk about the DPDP Act timeline, FREE-AI and the MeitY guidelines as they stand, not as a statute they invented. Ask the AI governance consultant which regulations they actually use in India. An AI governance consultant should be able to talk about FREE-AI, the DPDP Act timeline and the EU AI Act without inventing a circular.

As of 31 October 2026, DPDP Rules 1, 2 and 17 to 21 are in force. The main fiduciary duties commence on 13 May 2027. The FREE-AI report of 13 August 2025 does not make ISO/IEC 42001 mandatory. MeitY’s guidelines of 5 November 2025 are non-binding. The EU AI Act does not give the standard a presumption of conformity. If the seller cannot say which of these is in force, they are not ready for your sector.

12. Who is on the account after kickoff?

Who remains after the kickoff photo? ISO 42001 consultants India should name that person in the proposal. Compare ISO 42001 consulting services on the people named after kickoff, not on the partner who sold the work. The AI governance consultant in the sales meeting should not vanish after kickoff. Ask for the name, the days per week, and what happens if that person leaves.

What ISO 42001 consultants India must refuse to sell

ISO 42001 consultants India must refuse a certificate, a fake ranking, or a promised certificate date. A focused firm with a small inventory and leadership in the room can be ready for Stage 1 in about 90 days. That is readiness for a documentation review. Implementation often takes three to six months. A promise of the certificate on a date is a promise the certification body has not made.

After the certificate, ISO 42001 consultants India should have priced surveillance prep, then recertification around year three. A consultant who stops at the kickoff workshop has not priced the internal audit, the management review or Stage 2 attendance. Put those in the scope or expect a variation.

Schedule the questions, then the contract

Schedule a consultation. We will walk the twelve questions against your systems and say plainly where a proposal is thin. Write from the contact page: https://www.sevenstepconsulting.com/contact-us/

Before you sign

Bring the twelve questions to the call. Schedule a consultation. We will tell you, before any proposal, whether the work is a build of the AIMS or a review of a file you still have to write, which is the distinction ISO 42001 consultants India ought to make in the first meeting.