Services
EU AI Act and ISO/IEC 42001 readiness
Selling AI into the EU, or serving EU customers from Singapore? Epiphyte runs EU AI Act and ISO/IEC 42001 readiness and gap assessments.
EU AI Act dates
The EU moved its high-risk AI deadline. It did not cancel it. Regulation (EU) 2026/1744, in force since 27 July 2026, set the dates:
2 February 2025. Prohibited practices (already apply).
2 August 2025. General-purpose AI model obligations (already apply).
2 August 2026. Article 50 transparency obligations (already apply).
2 December 2027. Annex III high-risk systems, including creditworthiness and credit scoring, and risk assessment and pricing in life and health insurance.
2 August 2028. Annex I high-risk systems in regulated products.
ISO/IEC 42001
ISO/IEC 42001:2023 is the international standard for an AI management system, and organisations can be certified against it. It follows the same management-system structure as ISO/IEC 27001, with 38 Annex A controls across nine areas. Holding ISO/IEC 27001 does not cover it.
AI policies
Internal organisation
Resources
Impact assessment
The AI system life cycle
Data
Information for interested parties
Use of AI systems
Third-party and customer relationships
What we do
EU AI Act. Readiness and gap assessment for the AI you sell into the EU or use to serve EU customers.
ISO/IEC 42001. Gap assessment against all 38 Annex A controls.
Epiphyte assesses readiness. Certification against ISO/IEC 42001 is issued by a certification body.