For the CISO, the ISMS manager and the consultant who certifies them
Find the privacy risk in the AI you already run.
ISO/IEC FDIS 27091 is the first draft on privacy protection in AI systems. It is not published, it is not certifiable, and it is close enough to plan for. This site reads the 38 ISO/IEC 42001:2023 controls that apply today, writes the draft's privacy direction against each one, and gives you a dated plan. The records and the check are free. The kit is USD 799 one off. The watch is USD 49 a month.
Every line links to the control it comes from. The requirement is the published ISO/IEC 42001 control in our words; the overlay names the public 27091 source it rests on; the planning date is an estimate, not an ISO promise.
38 control pages6 lifecycle pages7 reference pagesSources on every page
Start the free check Preview the kit
Free, no account. Not legal advice; does not certify. The draft cannot be certified against.
Scope and evidence check
Eight questions about the AI you run and the evidence you keep. The check returns whether the draft's privacy question reaches you, a readiness reading across the lifecycle, the publication estimate and the three actions to take first. It never sends your answers anywhere.
Scope and readiness, not conformity
It applies the public scope of the draft and the evidence you report. It does not audit your system, does not decide whether a certification body will accept your arrangements, and does not call anything conformant. The draft is guidance and is not certifiable.
What the public record actually shows
A final draft, not a standard
Stage 50.00 means the final text is registered for formal approval. The FDIS ballot and publication follow, and neither has a recorded date. Nothing can be certified against it.
Read the stage recordDevelopers and users alike
The abstract reaches organizations of every size and kind, including government and not-for-profit bodies that build AI systems or use them. Buying a model does not take you out of the question.
Scope and rolePrivacy risk across the lifecycle
The draft identifies privacy risk throughout the AI system lifecycle and evaluates and treats the consequences. Data, suppliers, monitoring and logs are where that lands in practice.
The lifecycleThe controls that apply today, and the privacy overlay
These are the Annex A controls of ISO/IEC 42001:2023. Each has its own page with the control in our words, the evidence an auditor asks for, the common failures and the preparation the draft's privacy direction points at. The privacy column is the public 27091 theme that touches the control; no 27091 clause number is claimed.
| Control | Control record | Privacy overlay | Basis |
|---|---|---|---|
| A.2.2 | AI policy | Scope, role and who answers | Public scope |
| A.2.3 | Alignment with other organizational policies | Scope, role and who answers | Reading |
| A.2.4 | Review of the AI policy | Evidence, review and the date | Reading |
| A.3.2 | AI roles and responsibilities | Scope, role and who answers | Public scope |
| A.3.3 | Reporting of concerns | Operating, monitoring and telling people | Reading |
| A.4.2 | Resource documentation | The lifecycle and where privacy risk enters | Public scope |
| A.4.3 | Data resources | The lifecycle and where privacy risk enters | Public scope |
| A.4.4 | Tooling resources | The lifecycle and where privacy risk enters | Reading |
| A.4.5 | System and computing resources | The lifecycle and where privacy risk enters | Reading |
| A.4.6 | Human resources | Scope, role and who answers | Reading |
| A.5.2 | AI system impact assessment process | Evaluating the consequences | Public scope |
| A.5.3 | Documentation of AI system impact assessments | Evaluating the consequences | Public scope |
Free to read. Pay for the work.
- All 38 control records
- All 6 lifecycle pages
- All 7 reference pages
- The public record and the sources
- The scope and evidence check, in your browser
- 38-control register
- The evidence and gap lists in one sheet
- A dated plan to the publication estimate
- The formatted PDF and XLSX register
- Single organization licence
- The kit files while the watch is active
- Email when the record or a source changes
- Email when a stage date or the publication window changes
- The diff, with the source that changed
- Cancel from the account page
Prices are charged in US dollars through Stripe. The kit is a one-off payment. The watch is a monthly subscription and includes the kit files while active. A kit buyer gets the regenerated files when the published text lands, at no extra charge. Nothing is metered and there is no per-seat charge. What each includes.
What buyers ask
Is ISO 27091 the same as ISO/IEC 42001?
No. ISO/IEC 42001:2023 is the AI management system standard a certificate is issued against. ISO/IEC FDIS 27091 is a first-edition draft on privacy protection in AI systems and machine learning models. It sits beside the management system and does not replace it. The control pages on this site read 42001 because those controls apply today.
What is ISO/IEC FDIS 27091?
ISO/IEC FDIS 27091 is the final draft of an international standard on privacy protection in artificial intelligence, prepared by ISO/IEC JTC 1/SC 27. It is 35 pages, Edition 1, and ISO records stage 50.00 on 13 July 2026. It is a draft, not a published standard, and no certificate can be issued against it. Read the public record.
Who does it apply to?
The abstract reaches organizations of every size and kind, naming private firms, public bodies, government and not-for-profit organizations among those that build AI systems or use them. The practical trigger is personal data anywhere in the life cycle: training data, prompts, retrieved records, outputs, logs or human review. Run the free check.
When will it be published?
ISO has not recorded a publication date. The stage record shows 50.00 on 13 July 2026, and the FDIS ballot and publication stages are listed without a date. This site uses 18 February 2027 as a planning date, labelled an estimate wherever it appears, and it is not an ISO commitment. The change watch reads the stage feed and emails when it moves.
Is this the ISO 27091 text?
No. The draft text is not public and is not reproduced. This is a reference and a checker. The control record is ISO/IEC 42001:2023, stated in our own words with the control cited. The privacy overlay is written from the public 27091 record and says which part rests on the abstract and which is our reading.
What do I get for USD 799?
The privacy readiness kit: a 38-control register, the evidence list, the common gaps and a dated plan to publication, as PDF, CSV and XLSX. The labelled sample shows five rows. The pricing page states the one-off price and what is free. The change watch is USD 49 a month and emails you when the record or its dates change.
The rules this is built from
Read from the real rules, not invented. The 38 control pages are the ISO/IEC 42001:2023 Annex A controls, read from the standards library: 101 evidence lines and 80 common failure lines, each cited to its control. The privacy layer is read from the public ISO/IEC FDIS 27091 record, the ISO abstract and the stage feed. The draft text is not public and is not reproduced.
ISO/IEC 42001:2023, Annex A
Each page states the control in our words, the evidence an auditor asks for, the common gaps and the privacy work the draft points at.
Open the control indexWhat the draft covers
Scope and role, the lifecycle, the evaluation of consequences, treatment, operation and evidence.
Read the public recordThe role and the four markets
Controller or processor, the lifecycle stages, and the instruments named for the US, EU, UK and Australia.
Open the referenceThe ISO/IEC FDIS 27091 text is not public and is not reproduced. The ISO/IEC 42001:2023 text is not reproduced either. Every source.
Where the record comes from
The control record is read from the published ISO/IEC 42001:2023 Annex A set at the standards library, checked on 22 October 2026. The privacy record is the ISO standard page 56582 and its stage feed, retrieved on 22 October 2026. The lifecycle stage names are from ISO/IEC 22989:2022. The draft text is not public and is not quoted. Read the sources and the method.