ISO 42001 certification bodies in India are the firms that audit and issue the certificate. Your consultant is a different firm. Check that ISO/IEC 42001 sits in the body’s current NABCB or IAF scope before you compare audit days, sites and who will sample your systems at Stage 2.

The split is consultant vs certification body, and it is not a style preference. Write consultant vs certification body at the top of the shortlist so finance does not merge the invoices. ISO 42001 certification bodies in India issue the certificate after Stage 1 and Stage 2. Your consultant drafts with you. The body samples. Seven Step Consulting is a consultancy in Gurugram. It does not issue ISO certificates.

How ISO 42001 certification bodies in India differ from your consultant

A proposal that blurs consultant vs certification body is asking you to pay one firm for both jobs. Impartiality is the reason consultant vs certification body stays as two contracts. If you remember one line from this page, remember consultant vs certification body. Your board pack should show consultant vs certification body as two names, even when one person introduces the other.

How to compare ISO 42001 certification bodies in India on scope, sites and audit days
Question Consultant Certification body
Writes the Statement of Applicability with you Yes No
Issues the certificate No Yes, if the audit supports it
Attends Stage 2 Can attend and explain Samples and decides
May design the controls it will later judge No No
What you verify The people and the scope of work Current NABCB or IAF scope for ISO/IEC 42001

Training firms sometimes sit beside consultant vs certification body as a third role. They still do not issue the certificate. Transfer of a certificate is a certification-body decision. It does not change consultant vs certification body. Do not ask ISO 42001 certification bodies in India to help you write the Statement of Applicability. Impartiality rules mean ISO 42001 certification bodies in India cannot consult on the system they will certify.

If your consultant names ISO 42001 certification bodies in India, you still check the directory yourself. A slide of logos is not a scope check. This article names no body as accredited. Scope changes, and a name that was in scope last year may not be the scope you need this quarter.

What the directory phrase actually means

Search the directory for NABCB accredited ISO 42001 before you book a date. NABCB accredited ISO 42001 means the scope line names ISO/IEC 42001, not only ISO 27001. A logo for another standard is not NABCB accredited ISO 42001. NABCB, under QCI, accredits management-system certification bodies in India. The public directory, and the IAF directory, are the places you look. Ask the salesperson to show the directory entry for NABCB accredited ISO 42001 while you are on the call.

IAF listings are the cross-check when you cannot find NABCB accredited ISO 42001 on the first page you open. Do not treat a proposal PDF as proof of NABCB accredited ISO 42001. Multi-site sampling still requires NABCB accredited ISO 42001 on the scope, or the visits are just meetings. If the scope was updated last month, recheck NABCB accredited ISO 42001 the week you sign.

An accredited mark is for the body’s certification activity. It is not a medal for your consultant, and it is not a medal for your AI system. ISO/IEC 42001:2023 is voluntary. A buyer, a bank board or a European customer may ask for it. The EU AI Act does not treat the certificate as a presumption of conformity. The certificate is evidence of a management system, an inventory and records an auditor sampled.

Competence of the person who will sample your systems

An ISO 42001 auditor India should be able to sample a model, not only a policy. Ask which files an ISO 42001 auditor India has opened: credit, claims, hiring, clinical, or a vendor copilot. Competence for an ISO 42001 auditor India includes the AIMS and enough AI practice to follow a test record. You may request the competence record for the ISO 42001 auditor India named on the plan.

A substitute ISO 42001 auditor India the week before Stage 2 is a question, not a courtesy. Language and sector matter. An ISO 42001 auditor India who cannot read your sector’s controls will burn the day on vocabulary. The ISO 42001 auditor India does not work for your consultant. If the ISO 42001 auditor India and the person who wrote your Statement of Applicability share an employer, stop.

Stage 1 is the documentation review: scope, policy, Statement of Applicability, AI risk assessment, AI impact assessment, internal audit. Stage 2 is the implementation audit. The auditor follows a control to a record. Annex A has 38 controls, from A.2 to A.10. A one-line exclusion with no reason will be tested. An AI system that is already in production needs an owner, a purpose, and a record of how it was tested. That is what the sample looks like when it is going well.

What to compare when shortlisting ISO 42001 certification bodies in India

Shortlist two or three ISO 42001 certification bodies in India only after the scope is stable enough to quote days. Audit days at ISO 42001 certification bodies in India follow headcount and sites. A single site in one city is not the same plan ISO 42001 certification bodies in India will use for three centers. Multi-site sampling is a decision ISO 42001 certification bodies in India document in the audit plan. Travel sits on the quotation ISO 42001 certification bodies in India send you. It is not a rounding error.

Quotes from ISO 42001 certification bodies in India for Stage 1 plus Stage 2 often fall in a 2026 market range of about ₹2 lakh to ₹8 lakh for one legal entity, driven by headcount and sites. That is a market range, not a Seven Step fee. Surveillance invoices from ISO 42001 certification bodies in India are often around 40 percent of the initial audit fee, for two years, as a market pattern, not a Seven Step fee. Recertification around year three goes back to ISO 42001 certification bodies in India as a fuller visit, especially if the system count has grown.

Transfer is allowed when ISO 42001 certification bodies in India accept the existing certificate and review the file. Ask what the transfer review covers, how many days it takes, and whether your surveillance cycle resets. A transfer is not a way to dodge an open nonconformity. Keep the same inventory, the same owners and the same Statement of Applicability unless the new scope says otherwise.

The DPDP Act timeline does not pick your body. As of 31 October 2026, Rules 1, 2 and 17 to 21 are in force, and the main fiduciary duties commence on 13 May 2027. The RBI FREE-AI report of 13 August 2025 does not make ISO/IEC 42001 mandatory for banks and NBFCs. MeitY’s guidelines of 5 November 2025 are non-binding. Insurers are still expected to govern AI in underwriting, pricing and claims. None of that is a directory listing. The directory listing is still the scope line you checked.

What to put in the application pack

A planner cannot price a visit from a slogan. Send the legal entity, the sites with headcount at each, and the AI systems you expect on the certificate. Mark which systems are in production. A pilot you hide until Stage 2 becomes a finding or a scope change, and either one moves the date.

Say when the internal audit will finish and whether management review is on the calendar. If you already hold ISO 27001, say what that scope covers and what it does not. The information-security asset list is not the model list. Annex A still has to be judged on the AI systems, not assumed from the older certificate.

Ask for days, not a single lump. You want Stage 1 days, Stage 2 days and report time. You want to know if a second site is sampled or visited in full, and whether travel assumes headquarters only. Two quotations that use different headcount are not a comparison. Send the same sheet to each firm.

Save the directory page on the day you read it. Scope lines move, and the PDF in your inbox will not update itself. If a European customer is why you started, say so, so the sample can include the evidence they will ask for. The certificate is still not a presumption of conformity under the EU AI Act.

A shortlist you can defend

Use four tests. The scope line is current. The audit days match headcount, sites and system count. The named auditor’s competence covers an AIMS, not only ISO 27001. The contract keeps preparation and the certification decision in different firms. If a test fails, you do not have a shortlist. You have a brochure.

A focused firm can be ready for Stage 1 in about 90 days when the inventory is small and leadership shows up. That readiness is your work with the consultant. The body still sets the audit dates. Implementation of the AIMS often takes three to six months. Do not let a proposal promise the certificate inside a fortnight of kickoff.

Put the two contracts on one page

We coordinate the audit for you. We will line up the scope, the days and the directory check, and we will keep the consulting contract separate from the body’s. Start from the contact page: https://www.sevenstepconsulting.com/contact-us/

Before you send the application

Keep the directory tab open while you read the quotation. We coordinate the audit for you, so the application you file matches a scope you have actually checked, and so ISO 42001 certification bodies in India are chosen on scope, days and competence.