Business Core Solutions (BCS), the Chennai-based agentic system integrator behind the Symphony orchestration platform and ProxyN’s digital coworkers, has achieved ISO/IEC 42001:2023 certification following an independent audit by BSI. The company says it becomes one of an estimated 350 organisations worldwide to hold the standard, which covers how it designs, tests and oversees the AI agents and AI capabilities across its portfolio.
The announcement arrives as agentic AI moves from experiment to production. As AI agents begin to act — not just suggest — across finance, procurement, supply chain and customer service, boards, procurement teams and security functions want evidence of governance. A certification is one of the few externally verifiable answers to that question.
What the certification actually covers
ISO/IEC 42001 is real and specific. Published in December 2023, it is the first international standard for an AI management system: a structured set of policies, processes and controls for how an organisation develops, provides or uses AI. It follows the same Plan-Do-Check-Act logic as the better-known ISO/IEC 27001 for information security, and its Annex A lists controls for AI-specific risks such as bias, transparency, accountability and data governance.
The important nuance is what kind of assurance it provides. ISO/IEC 42001 is a management system standard: it certifies that an organisation governs AI through a defined system, not that any particular model, agent or output is accurate, safe or free of bias. Certification is voluntary and carried out by independent bodies — ISO itself does not certify — and BSI is one of several accredited certifiers, alongside Schellman, A-LIGN, SGS and DNV. For a buyer, the credential says the vendor has a governance process; it does not substitute for testing the AI itself.
BCS says the BSI audit assessed its governance across the full lifecycle, from policies and accountability through risk assessment before development, to testing, controls and human oversight once AI is in production, and that it confirmed these practices operate daily rather than on paper. Its platforms span Symphony for orchestration and ProxyN, its agentic arm, which delivers “digital coworkers” the company says keep every action authorised, logged and reversible.
A small but growing cohort
The certified population remains small and is rising fast. Independent trackers put it at roughly 350 organisations by spring 2026, with IAF CertSearch showing more than 500 active certificates by May 2026 as certifying bodies build audit capacity. The count varies by method and date, so BCS’s “estimated 350” is plausible but not precise. Early holders include KPMG Australia, which was first in 2024, along with AWS, Google and CrowdStrike.
For BCS, the certification is a credibility signal. Founded in 2014, the company describes itself as an agentic system integrator with more than 550 people and 60-plus enterprise clients, and it sells governed agentic AI to enterprises — a market where trust is the main obstacle. Its platforms include Anugal for identity governance and deKorvai for data quality.
What to watch
Two things will show how much the certification is worth. First, whether BCS publishes the certificate’s scope statement and audit details, which would let customers see exactly what the audit covered. Second, whether it converts the credential into deals, since a certification is a procurement signal rather than a product. The wider signal to watch is the certified population itself: if the count keeps rising, ISO/IEC 42001 will become a baseline expectation for AI vendors rather than a differentiator.
What the announcement does and doesn’t establish
It establishes that BCS’s AI management system has been independently audited against ISO/IEC 42001 by BSI, and that the standard addresses governance across the AI lifecycle. It does not establish that any BCS AI agent is accurate, safe or unbiased, nor does it disclose customer results, the certificate’s exact scope, or audit dates.
The honest summary is that BCS has earned a genuine and increasingly sought-after credential, and done so early. But the value of ISO/IEC 42001 lies in the process it certifies rather than the products it covers: it tells a buyer that a vendor governs AI with discipline, which is necessary and not sufficient. In a market where vendors sell agentic AI to boards that want assurance, that distinction is the one worth keeping in view.
Editor’s Note: This article draws on the BCS release and the company’s published materials, ISO’s explanation of ISO/IEC 42001, certifying bodies’ guidance, and independent certification trackers. The certification is as described by the company; the certified-population figures vary by source. The standard certifies an AI management system, not the safety or accuracy of specific AI systems. No interview was conducted.