Microsoft 365 Copilot Achieves ISO/IEC 42001:2023 Certification

We are pleased to announce that Microsoft 365 Copilot and Microsoft 365 Copilot Chat have successfully attained the ISO/IEC 42001:2023 certification. ISO/IEC 42001 is an internationally recognized Artificial Intelligence Management System (AIMS) standard that provides a framework for organizations to develop, deploy, and use AI systems responsibly.   

This certification represents a pivotal achievement in our dedication to responsible AI, embodied by our Responsible AI (RAI) program and practices. Microsoft's RAI program provides us with a comprehensive framework that guides the development and design of AI systems in accordance with our established RAI principles and policies. This framework has four essential components: Govern, Map, Measure, and Manage, all of which are aligned with the NIST AI risk management framework.  

The ISO 42001 certification confirms that an independent third party has validated Microsoft's application of the necessary framework and capabilities to effectively manage risks and opportunities associated with the continuous development, deployment, and operation of Microsoft 365 Copilot and Microsoft 365 Copilot Chat. This independent validation is intended to provide our customers with additional assurance over the application of our Responsible AI Standard for AI risk management throughout the AI lifecycle.  

This certification builds upon our existing work on responsible AI such as: 

1. Our AI Customer Commitments to assist our customers on their responsible AI journey  
2. Our inaugural Responsible AI Transparency Report that enables us to record and share our maturing practices, reflect on what we have learned, chart our goals, hold ourselves accountable, and earn the public’s trust 
3. Our Transparency Note for Microsoft 365 Copilot helps customers understand how our AI technology works, its capabilities and limitations, and the choices system owners can make that influence system performance and behavior  
4. Our Responsible AI Resources site which provides tools, practices, templates and information we believe will help many of our customers establish their responsible AI practices  

In addition to the items above, this certification will assist our customers with supporting their own compliance efforts by leveraging certified AI services and demonstrating their commitment to using AI technologies that have been developed responsibly.  

Since 2016, Microsoft has taken a principled, human-centered approach to its AI investments. We have dedicated hundreds of engineers, lawyers, and policy experts to the development of products aligned with our responsible AI principles. As a leader in AI research and technology, Microsoft actively contributes to global standards promoting effective AI risk management. Amid rapid AI advancements and widespread adoption, we remain steadfast in our commitment to the following: 

• Continually improving our AI management system  
• Understanding the needs and expectations of our customers  
• Building onto the Microsoft RAI program and AI risk management 
• Identifying and actioning upon opportunities that allow us to build and maintain trust in our AI products and services  
• Collaborating with the growing community of responsible AI practitioners, regulators, researchers on advancing our responsible AI approach  

The ISO/IEC 42001:2023 certification for Microsoft 365 Copilot and Microsoft 365 Business Chat was issued by Mastermind, an ISO certification body accredited by the International Accreditation Service (IAS). The certification and report are available on Microsoft Service Trust Portal.