Case studies

Siili Solutions builds trust in AI with the international ISO 42001 standard

02.20.26

Siili Solutions is a Finnish, internationally operating software and digital services company specializing in AI‑assisted software development, data analytics, and the design and implementation of digital services. Artificial intelligence plays a central role in Siili’s operations, as it accelerates development work, supports decision‑making, and enables entirely new kinds of digital solutions.

Siili Solutions adopted the ISO 42001 standard early on, demonstrating that innovation and responsibility go hand in hand. Bureau Veritas granted the company the ISO 42001 certificate in autumn 2025. This is the world’s first standard for AI management systems, defining clear requirements for the ethical, safe, and transparent use of artificial intelligence.

What motivated Siili to invest early in the standardization of AI management systems? We asked Marko Jaanu (Head of AI‑Powered Technology) and Seppo Takanen (CIO, CISO) why certification was an important step for them, what benefits it brought, and how the collaboration with Bureau Veritas has worked.

Viewing this video may result in cookies being placed by the vendor of the video platform to which you will be directed. Given the refusal of the deposit of cookies that you have expressed, in order to respect your choice, we have blocked the playback of this video. If you want to continue and play the video, you must give us your consent by clicking on the button below.
I accept - Launch the video
c:youtube

The journey toward ISO 42001 certification

“We began building our AI management system in 2023, soon after ISO 42001 was published. Since we already had certified quality, environmental, and information security systems, we expanded our existing Integrated Management System to also cover the responsible management of AI,” Jaanu explains.

According to Jaanu, they wanted to demonstrate that their use of AI is guided by a responsible, transparent, and auditable system. “Our customers increasingly ask how AI is used safely and ethically. ISO 42001 provides an internationally recognized framework for this,” he continues.

What benefits did the certification bring?

“The certification has made our use of AI even more systematic and transparent. Now every AI project has clear responsibilities, documentation, risk and impact assessments, and an audit trail. This has increased customer trust, improved internal collaboration, and enhanced the quality and safety of AI processes,” Takanen explains.

Collaboration with Bureau Veritas

“We have worked with Bureau Veritas for a long time through our other ISO certifications—9001, 14001, and 27001. The audit progressed very professionally and constructively. We appreciated that the auditors focused on practical evidence: how AI is managed in real projects, not just what is written in documents,” Takanen says.

Juha Hytönen, Lead Auditor at Bureau Veritas, served as the audit team leader for Siili. Hytönen emphasizes that the audit begins by understanding the client: their operating context, role, and objectives. In ISO 42001, the role—whether AI provider, user, or another stakeholder—is particularly central. Once this foundation is clear, three aspects are evaluated: how the AI management system has been designed relative to the role and context, how the plans have been implemented, and whether the desired outcomes were achieved.

“The assessment does not focus solely on documentation but includes discussions with operational teams and, where necessary, system samples, such as demonstrations of verification settings and results. This ensures that the management system works in practice and supports the organization’s objectives,” Hytönen continues.

What should be considered when planning for ISO 42001 certification?

“The first piece of advice is: do not build a separate system. ISO 42001 fits naturally as part of existing quality and information security systems. Second, make AI governance visible—record risks, impacts, and decisions systematically. And third, engage people. The responsible use of AI is not an IT question but a cultural issue for the entire organization,” Takanen summarizes.

Siili’s future priorities

“In the future, we will focus even more strongly on data quality, AI ethics, and the security of supply chains. We also want to develop the monitoring of the environmental impacts and energy efficiency of AI systems. Our goal is that all Siili solutions, with or without AI, support human‑centric, safe, and sustainable digital development,” Jaanu concludes.