Identity verification provider Unico has obtained ISO/IEC 42001 certification for the artificial intelligence management system supporting its IDCloud platform. The company says the scope covers its operations in Brazil, Mexico and the United States, along with all IDCloud capabilities running on Google Cloud Platform.
TÜV Rheinland, which awarded the certification, separately confirmed that Unico completed the ISO/IEC 42001 process, including a gap analysis, implementation work and an effectiveness review in live operations.
ISO/IEC 42001 sets requirements for establishing, maintaining and continually improving an Artificial Intelligence Management System. The framework addresses organizational policies, accountability, risk assessment, monitoring and documentation around the development or use of AI.
The credential is a governance certification rather than a biometric accuracy or bias test. ISO describes the standard as a way to manage AI-related risks and opportunities across an organization, not an examination of the details of individual AI applications. It therefore provides evidence that defined management controls were audited, but does not by itself prove that every output from a biometric model is accurate or free of bias.
Unico said the framework applies to its proprietary AI models and biometric engine within IDCloud, requiring controls intended to support transparency, ethical use and continuing auditability as the systems change. The platform combines facial biometrics, liveness detection and other risk signals for identity verification and fraud prevention.
Leonardo Crivari, Unico’s head of risks, controls and internal audit, said the certification recognizes the maturity of the company’s approach to AI and supports its expansion as a provider of trust infrastructure.
The certification joins Unico’s ISO/IEC 27001 credential for information security management and ISO/IEC 27701 credential for privacy information management. Together, the three management systems give customers a common framework for reviewing security, privacy and AI governance during procurement and vendor oversight.
ISO/IEC 42001 adoption is expanding among biometric technology suppliers. Suprema recently certified the governance framework around its biometric access-control AI, illustrating how vendors are using the standard to respond to more formal scrutiny of algorithmic systems.
The governance work accompanies Unico’s effort to scale a network-based approach to identity security. A recent analysis of fraud observed across the company’s network found that injection attacks accounted for the largest share of classified attempts, underscoring the changing risks facing identity-verification systems.
Sources: Unico, TÜV Rheinland, International Organization for Standardization
–
By the ID Tech Editorial Team
