Elastic achieves ISO/IEC 42001 certification

Elastic has achieved ISO/IEC 42001:2023 certification for its Artificial Intelligence Management System (AIMS) following an independent third-party audit. The certification covers Elastic Agent Builder, Elastic AI Agent, the Elastic Inference Service (EIS), and Jina AI embedding and reranking models hosted on EIS. Elastic says the certification simplifies AI vendor assessments for customers and supports their compliance with regulations such as the EU AI Act, with certificates available through the Elastic Trust Center.

Elastic achieves ISO/IEC 42001 certification Establishing our commitment to responsible AI development and operation across search, security, and observability Summary - ISO/IEC 42001 certification validates Elastic's AI management system through an independent third-party audit. - The certification covers Elastic Agent Builder, Elastic AI Assistants, the Elastic Inference Service EIS , and Jina models hosted on EIS. - ISO/IEC 42001 simplifies AI vendor assessments and supports customer compliance with regulations, such as the EU AI Act. - Request a copy of the ISO/IEC 42001 certificate through the Elastic Trust Center https://assurance.elastic.co/ . We are proud to announce that Elastic has achieved ISO/IEC 42001:2023 certification for our Artificial Intelligence Management System AIMS . AI powers search, security, and observability workloads, and this certification provides independent, third-party assurance that Elastic’s AI systems and platforms are built and operated responsibly with accountability, integrated risk management, and ongoing oversight. Trusted AI for search, security, and observability ISO/IEC 42001 is the first international standard for AI management systems. It sets requirements for establishing, implementing, maintaining, and continually improving how an organization governs the AI it develops and provides. ISO 42001 covers concerns specific to AI, such as AI risk and impact assessment, data quality for AI systems, transparency, and human oversight across the full AI development lifecycle. Achieving this certification demonstrates that Elastic has implemented a governed and independently audited AIMS that builds on the security and privacy management systems we already maintain. Covering the AI at the core of the Elastic platform Our ISO/IEC 42001 certification covers how Elastic develops, deploys, and provides the following AI capabilities: - Elastic Agent Builder https://www.elastic.co/elasticsearch/agent-builder : Build context-aware AI agents grounded in your Elasticsearch data with best-in-class relevance. - Elastic AI Agent: https://www.elastic.co/docs/explore-analyze/ai-features/agent-builder/builtin-agents-reference Helps teams investigate alerts, analyze logs and errors, and generate queries in natural language. - Elastic Inference Service EIS https://www.elastic.co/docs/explore-analyze/elastic-inference/eis : Manages inference for search, embeddings, and chat that runs on Elastic infrastructure, so you don't need to deploy models in your own environment. - Jina models https://www.elastic.co/jina-search-models hosted on EIS: Jina AI embedding and reranking models are now part of Elastic and available as a managed service through EIS. How this supports your AI governance obligations For our customers, the ISO/IEC 42001 certification offers several benefits. - Confidence to adopt AI at scale: Responsible AI governance is built into how we develop and operate AI products. Your teams can put these capabilities to work on mission-critical search, security, and observability data with confidence. - Simplified vendor assessment: As AI becomes a standard part of security and procurement reviews, our certification gives your risk teams independent assurance of how Elastic develops, deploys, and governs our AI products. - Support for evolving regulation: Regulations, such as the EU AI Act, are raising expectations for how AI is governed. ISO 42001 is a globally recognized framework closely aligned to the EU AI Act that supports your own compliance efforts when you evaluate AI in your supply chain. - Ongoing commitment: Continuous improvement is a central tenant of every ISO management system. Our AI management system will continue to advance and evolve alongside our AI innovation. Learn more ISO/IEC 42001 joins Elastic's comprehensive portfolio of independently audited certifications, including ISO 27001, ISO 27017, ISO 27018, ISO 27701, CSA STAR, SOC 2, PCI-DSS, HIPAA, and more. This achievement demonstrates that our innovation in AI is matched by our dedication to governing it responsibly. To request a copy of our ISO/IEC 42001 certificate, visit the Elastic Trust Center https://www.elastic.co/trust . To learn more about how Elastic approaches AI, read our Product AI FAQ https://www.elastic.co/trust/faq product-ai and Data AI FAQ https://www.elastic.co/trust/faq data-ai . We will continue to maintain and expand our compliance portfolio, so Elastic remains the most trusted platform for search, security, and observability. The release and timing of any features or functionality described in this post remain at Elastic's sole discretion. Any features or functionality not currently available may not be delivered on time or at all. In this blog post, we may have used or referred to third party generative AI tools, which are owned and operated by their respective owners. Elastic does not have any control over the third party tools and we have no responsibility or liability for their content, operation or use, nor for any loss or damage that may arise from your use of such tools. Please exercise caution when using AI tools with personal, sensitive or confidential information. Any data you submit may be used for AI training or other purposes. There is no guarantee that information you provide will be kept secure or confidential. You should familiarize yourself with the privacy practices and terms of use of any generative AI tools prior to use. Elastic, Elasticsearch, and associated marks are trademarks, logos or registered trademarks of elasticsearch B.V. in the United States and other countries. All other company and product names are trademarks, logos or registered trademarks of their respective owners.