About ComplyIndex

What this directory is

ComplyIndex is a structured, verified directory of the people and firms who help organisations comply with ISO/IEC 42001 and the EU AI Act: boutique consultancies, ISO 42001 lead implementers and lead auditors, AI-focused law firms, accredited certification bodies, fractional AI governance officers and training providers. Every listing is a typed record — framework coverage, services, jurisdictions, industries, credentials with named holders, firm size, price bands, engagement model, languages — so you can filter to the handful of practitioners who actually fit your situation, then compare them on the same attributes side by side.

The word that matters is verified. We look up each claimed credential in the register of the body that issued it, confirm the business exists, and spot-check framework claims against public work before a listing earns the badge. The full process, including what the badge does not cover, is on the verification methodology page.

What it is not

• Not a marketplace. We introduce buyers to practitioners; we do not handle contracts, payments or escrow. The engagement is between you and the provider.
• Not a content site. We do not publish explainers on what the AI Act is. The short question-and-answer blocks on category pages exist only to help you choose a practitioner and read the price data.
• Not a software review site. GRC platforms and AI governance tools are not listed here. If a software vendor appears on this site, it is as a clearly labelled sponsor of the pricing report, never as a practitioner listing.
• Not a global list of everyone who mentions AI governance. Breadth is easy; we would rather have fewer listings with checked credentials and disclosed price bands than a long, unverified list.

Who it is for

Buyers — typically the head of legal, compliance, security or operations at a company of fifty to a few thousand people — who have just been asked for ISO 42001 by an enterprise customer, discovered their product may be high-risk under the EU AI Act, or need to meet a US state law such as Colorado's AI Act or NYC Local Law 144. The job is the same in each case: find a credible practitioner who covers your jurisdiction, framework and industry, and learn what it should cost.

Practitioners — boutique consultancies, independent auditors, lawyers, fractional officers and trainers — who want to reach qualified buyers without an enterprise sales team, and who want their credentials distinguished from the unchecked claims that surround them. Certification bodies and larger firms are welcome on the same terms; their verified presence makes the directory more useful to everyone.

How the directory makes money

Listings are free and stay free. During the current pilot, intro requests are forwarded at no charge; every request is logged so that, later, providers can be asked to pay only per qualified lead against their own lead history. A featured tier will offer top-of-page placement, limited to 2 labelled slots per category page. Featured placement buys position, never the badge, and it never changes a verification outcome. The annual pricing report is offered for sponsorship to software vendors, who are advertisers rather than listings.

Inclusion is not endorsement

A listing means a practitioner exists, met our data requirements and, if badged, passed a point-in-time check of specific credentials against public registries. It is not a recommendation, a guarantee of quality, or a statement that the practitioner is right for your engagement. Do your own diligence; the disclosed attributes are there to make that diligence faster. We are not affiliated with ISO, the IAPP, PECB, or any EU or US authority.

Contact

Practitioners: submit a listing or claim your profile (both moderated within 48 hours). Corrections and takedown requests go through the same forms and are handled under our terms. Buyers should use the request-intro form on any profile; we do not publish provider email addresses.

For privacy requests, pricing-report sponsorship or anything else, reply to any email you have received from us; we respond within a few business days.