Willkie announced on Apr. 14 that it has achieved ISO/IEC 42001:2023 certification, becoming one of the first global law firms to meet this international standard for Artificial Intelligence Management Systems. The firm said this milestone demonstrates its leadership in responsible AI governance and ongoing investment in advanced technology platforms for clients.
The ISO 42001 certification is significant because it establishes requirements for effective AI governance frameworks, which are increasingly important as law firms integrate artificial intelligence into their operations. Willkie’s approach involves managing AI across its global offices through a comprehensive program that includes third-party risk evaluation, firmwide policies, and continuous training.
John Elbasan, Chief Digital and Information Officer at Willkie, said: “Achieving ISO 42001 certification is a critical foundation for how we approach AI as a firm. It reflects a disciplined approach to applying AI, pairing advanced capabilities with a governance framework that is designed, tested and continuously improved across the AI lifecycle to meet the highest standards. As we partner with leading AI providers and build our own advanced capabilities, this certification reinforces that our use of AI is accountable, secure and independently validated, and focused on delivering measurable value for our clients and the firm.”
The firm’s certified governance program oversees every stage of the AI lifecycle from evaluation through deployment and monitoring. Willkie stated that this gives clients assurance these technologies are used responsibly and align with legal expectations.
Willkie’s investments include developing platforms such as Wendell Intelligence, the Class Action Claimant Platform, and the Asset Management Portal—tools designed to support litigation management and asset workflows across various practice groups. The firm also works with external partners like Harvey and LexisNexis Protégé within its unified framework.
Aaron Bean, Director of Risk Program at Willkie said: “Achieving ISO 42001 certification reflects a coordinated, firmwide effort across technical, legal and management teams. Building on our ISO 27001, 22301 and SOC 2 certifications, this milestone strengthens our ability to govern AI with the same rigor we apply to data protection, risk management and client confidentiality, providing clients with confidence that our use of AI meets the highest standards of security, accountability, transparency and oversight, governed with the same discipline as our most critical systems.”
According to Willkie’s announcement, achieving this new standard further supports its commitment to deploying technology in ways that provide value while maintaining high levels of accountability.
