nudge achieves ISO/IEC 42001 certification for responsible AI

September 2026, nudge has achieved ISO/IEC 42001 certification, independently recognizing the systems and controls it has put in place to govern the responsible use of artificial intelligence across its global financial health platform.

As AI becomes increasingly embedded in the technology people use every day, trust in how it is developed, managed, and governed matters more than ever.

ISO/IEC 42001 is the first international management system standard specifically for artificial intelligence. It sets out requirements for establishing, implementing, maintaining, and continually improving an AI management system, helping organizations manage AI responsibly through clear governance, risk management, and oversight.

For nudge, achieving certification marks an important milestone in its approach to using intelligent technology to make financial health more personal, proactive, and actionable, while ensuring AI is governed responsibly as its role across the platform grows.

Responsible AI, built in from the start

AI has significant potential to help people better understand their financial circumstances and identify actions that could improve their financial health. But with that opportunity comes responsibility.

As AI became a more central part of the nudge platform, most visibly through numa, nudge's AI, the company recognized the need for its use to be transparent, well governed, and aligned with users' best interests.

The technology is designed to support people, not replace their judgment. Across nudge, AI can help make financial health insights, personalized action plans, and support more relevant to each employee, while leaving financial decisions in their hands.

nudge already had strong foundations through ISO/IEC 27001 certification, GDPR compliance, and established security and privacy practices. ISO/IEC 42001 was the next step: turning responsible AI principles into a clearly defined and independently assessed management system that can be applied consistently across markets.

Peter J. Kovacs, Head of Information Security at nudge, said:

“Our AI work is no longer ‘trust us’; it’s a management system. We have defined roles, clear risk ownership, and controls that exist on paper and in practice. AI is becoming embedded everywhere. If governance is bolted on later, you pay for it twice. If it’s built in early, you can move faster with fewer surprises.”

Turning responsible AI into everyday practice

nudge began working toward ISO/IEC 42001 in mid-2025, following a structured process of gap analysis, internal audit, management review, and external assessment.

The scope of nudge’s Artificial Intelligence Management System focuses specifically on numa, covering the AI lifecycle from intended use and data lineage through to monitoring and human oversight.

As part of the process, nudge formalized AI governance policies alongside its existing information security and privacy controls; embedded AI-specific risk criteria and impact assessments; strengthened oversight of third-party models; adapted monitoring and incident management for AI-specific risks; and formalized senior leadership involvement through structured reviews and decision-making.

The result is a framework that makes responsible AI governance part of everyday operations, rather than something that exists only in policy.

Replacing reassurance with proof

The certification also responds to a growing priority for global employers.

As organizations introduce more AI-enabled technology, procurement, IT, and compliance teams increasingly need clear evidence of how suppliers develop, use, and govern AI.

ISO/IEC 42001 gives nudge an independently assessed framework to demonstrate how AI risk, oversight, lifecycle management, and impact assessments are managed in practice. Combined with ISO/IEC 27001, it provides clients with recognized assurance across both information security and responsible AI governance. Peter added:

“Earning ISO/IEC 42001 alongside our existing ISO/IEC 27001 certification gives our commitment to security and responsible AI a recognized, audited foundation, reinforcing trust with our clients, users, and partners.”

Intelligent technology, with human expertise at its heart

For nudge, responsible AI is not simply about meeting a standard. It is part of building technology that people and organizations can trust.

nudge combines intelligent technology, financial expertise, and behavioral science to create personalized financial experiences that help employees understand their financial health, identify what matters, and take relevant next steps.

As the platform evolves, its AI management system will evolve with it. AI risk management, supplier oversight, monitoring, and audit will continue to develop as the technology changes, regulation evolves, and expectations rise.

Because responsible AI isn't something to add later. It needs to be built in from the start.