Answers — and a way to reach a human

Software that takes a mid-sized company from "where do we even start" to an audit-ready ISO 42001 document set and a defensible EU AI Act posture — for a subscription, not a five-figure consulting fee.

With Starter: the Document Builder (it generates your policy, RACI, risk register, impact assessment, data governance, Statement of Applicability, AI Act transparency kit, high-risk pack and operating procedures — from your inputs), the 15-Day Sprint, and your readiness cockpit. Pro adds Watch (ongoing updates) and the full AI Act packs. See pricing.

Yes. Govern42 is built specifically for non-developers at mid-sized companies. Everything is in plain language, and the tools do the structuring for you.

No — and we'll never pretend otherwise. We prepare you to be audit-ready. The certificate is issued only by an accredited certification body after an independent audit. Our Managed tier introduces you to one.

It helps you identify and meet your obligations and keep evidence, but legal compliance remains your responsibility. For binding interpretation in your case, work with counsel. Start with the free obligations finder.

It's a guided pace to an audit-ready document set (Stage 1 preparation) — not a promise of a certificate in 15 days. Go faster or slower; the path is the same.

Yes to both — month-to-month, cancel in one click with no lock-in, and a 14-day money-back guarantee on your first Pro payment. See the Refund Policy and how we earn your trust.

No. Checkout is handled by a licensed merchant of record (LemonSqueezy) that acts as seller of record and holds the card data. Govern42 never sees or stores your card details.

No. Prices are founding-member rates: the rate you join at is locked for as long as you stay subscribed. As we add value, prices rise only for new members.

Yes. The assessment, obligations finder and document builder run entirely in your browser — your answers are never sent to us. We store only the email you give us, to deliver what you asked for. See the Privacy Policy.

We trace every regulatory claim to a first-party source and date it; where we rely on analyst reporting (e.g. some SME-simplification figures) we label it an estimate. See the monthly brief.

2 December 2026 — EU AI Act Article 50 transparency (chatbot disclosure, synthetic-content marking, deepfake labelling). Check what applies with the obligations finder, then generate your transparency kit.

No — it's the spine, not the whole body. It coordinates law, ethics, privacy and strategy but doesn't replace them. See the coverage map.