9fin has achieved ISO 42001 (2023) certification, the international standard for AI management and governance.
The certification provides independent assurance that the systems and controls we use to govern AI meet an internationally recognized standard.
“Ultimately, good AI depends on good governance. That’s been part of how we’ve built 9fin from the start, from the way we develop products to how we handle customer data. Achieving ISO 42001 validates that approach, and gives clients confidence that they can trust us with increasingly important workflows.” Dave Brown, Director of IT & Information Security
Why AI governance matters in credit markets
Credit markets are part of the machinery of the global economy, helping to fund companies, governments and infrastructure. The banks, asset managers, law firms and advisors operating within them help determine where that capital goes and on what terms.
As AI becomes embedded in the work behind these decisions, the way it is governed matters too. Strong model performance is one thing, but increasingly, institutions need confidence in how their data is handled, who can access it, how AI features are assessed before they reach users and what oversight sits around them.
ISO 42001 provides an internationally recognized framework for managing those questions. It covers areas including AI risk management, accountability, data governance, human oversight and continuous improvement, and turns those principles into controls that can be reviewed and independently assessed.
What AI governance looks like at 9fin
AI Governance by design; ISO 42001 validates an approach that was already embedded in how 9fin operates. This broader system of controls has been designed to protect customer information and govern how AI is developed and used across 9fin.
Your data stays your data. We don't use customer data, prompts or responses to train AI models. All of our model providers are also contractually required to operate with Zero Data Retention and have Data Processing Agreements in place before customer data is processed.
AI features are rigorously reviewed before they launch. Every AI feature goes through a risk assessment covering security, privacy, bias and reliability before launch. Our AI Working Group acts as a launch-readiness gate for new AI features, with senior oversight from our AI Governance Council.
Answers are built to be checked. Speed isn't particularly useful in credit if you can't trust where the answer came from. 9fin AI is built on our proprietary debt-market data, with outputs linked back to their underlying sources so users can verify the answer for themselves.
The same enterprise controls still apply. AI sits within the same security environment as the rest of 9fin, including enterprise identity controls, role-based permissions and audit logs; encryption in transit and at rest; continuous intrusion detection; and regular independent penetration testing.
Our security controls and certifications are available through the 9fin Trust Centre.
The work continues
AI systems will keep changing, and so will the risks and expectations around them.
ISO 42001 gives us an independently assessed framework for managing that change, and for our customers, that also means working with a partner that is prepared for a fast-changing regulatory environment around AI.
9fin’s ambition is to be the platform debt-market institutions turn to as they rethink how work gets done with AI. To earn that role, we need to be trusted with increasingly important workflows, data and decisions. We’ll keep investing in the systems, oversight and safeguards needed to earn that trust as AI becomes a bigger part of how our customers work.
