Case Study
Digital Trust

Umony achieves ISO/IEC 42001 certification for responsible AI

The People

Umony records, archives and assesses communications for banks to meet regulatory obligations.

With AI, Umony can automatically review 100% of recorded interactions to detect behaviors of interest to institutions and regulators. To serve global, risk-sensitive clients, Umony prioritized a formal governance system for AI.

The Challenge

Financial institutions face significant penalties for failures in recording & monitoring communications and the manual screening can generate high false-positive rates.

Umony needed a credible framework to support development of an AI system that helped financial institutions & regulated industries move from ad-hoc monitoring to a comprehensive, AI-enabled assurance.

It was key for them to be able to reassure their clients that they could manage any AI risks (for example: bias, transparency and data quality) and provide evidence to clients and regulators that the AI is governed responsibly. They were also keen to establish repeatable processes, roles, and controls that scale across products and markets and demonstrate assurance at enterprise level.

The Solution

BSI audited Umony’s Artificial Intelligence Management System (AIMS) and achieved certification to ISO/IEC 42001.

The program included rigorous scoping with cross-functional teams to define AIMS objectives, scope, and interfaces, a specialist pre-assessment by AI-experienced auditors, identifying opportunities for improvements before formal audit, targeted training for operational controls and lifecycle governance, and a two-stage audit focused on risk assessment, impact assessment, controls, and evidence. The AIMS established clear policies, roles, controls, and KPIs to govern AI risk across the lifecycle.

Go to Certification

Why BSI?

Umony selected BSI based on our specialist AI auditing capability

BSI's global reputation and regional presence were also powerful factors

The partnership delivered structured methodology, accessible communication, and rigorous assurance - aligned to international standards and market expectations.

Go to Certification Read guidance

Contact Us