Biometric access control maker Suprema has obtained ISO/IEC 42001 certification, an international standard for managing artificial intelligence, covering the AI it applies to fingerprint and facial authentication in its access control products.
ISO/IEC 42001 defines requirements for an Artificial Intelligence Management System (AIMS), the policies, accountability structures, risk controls, and oversight through which an organization develops and operates AI responsibly. Unlike a benchmark that scores how accurately a device matches a face or fingerprint, the certification assesses the governance framework around the AI, and it requires an independent audit by an accredited body. Suprema was certified as an AI Producer within a defined scope covering its BioStation and BioEntry authentication terminals and the BioStar platform that processes their biometric data.
The company was explicit about the limits of what the certification does and does not mean. It is not a performance certification for individual devices, and it does not by itself guarantee compliance with any regulation. Suprema noted that operational authority in all cases remains with human operators and the deploying organization, a distinction that matters as AI systems take on more of the authentication decision.
Where the certification is designed to pay off is procurement. Suprema pointed to the European Union’s AI Act, which classifies AI systems by risk and imposes stricter obligations on sensitive uses including biometric identification, and argued that a recognized AIMS can serve as evidence that a vendor has the internal controls regulators increasingly expect. As AI governance review becomes routine in regulated industries and public sector buying, the company said, an independent certificate substitutes for self-reported assurances during due diligence, before any device is switched on.
Suprema framed the credential as an addition to the ISO/IEC 27001 and 27701 certifications it already holds for information security and privacy management, letting buyers review security, privacy, and AI governance together rather than in isolation. The move tracks a broader turn toward AI governance credentials in the biometrics sector, echoing the same standard reached when Facewatch gained ISO/IEC 42001 certification for its facial recognition AI governance.
Sources: Suprema
–
By the ID Tech Editorial Team
