Bonterra achieves ISO/IEC 42001:2023 certification, joining fewer than 400 organizations globally to earn the standard

AUSTIN, TX-September 23, 2026-As lawmakers at every level scramble to define what accountable AI looks like, Bonterra, the leading technology platform for social good organizations, has already met the test. Today, the company announced it has achieved ISO/IEC 42001:2023 certification, the first international standard specifically designed to verify how organizations govern AI.

Issued July 30, 2026, by independent certification body 360 Advanced Compass Rose, the certification places Bonterra among fewer than 400 organizations globally to have earned this distinction. Unlike regulatory frameworks that remain contested or unenforced, ISO 42001 requires an independent third-party audit to achieve it and annual surveillance reviews to maintain it. Bonterra's certificate, scope statement, and supporting documentation are available in the Bonterra Trust Center.

Built for trust

Bonterra's AI product, Bonterra Que, is built on a straightforward claim: it is the most trusted AI in social good. The ISO 42001 certification is the independent proof behind that claim.

"In social good, ethical AI means trusted, sector-informed, and proven. Not a pledge, not a framework, not a roadmap," said Ashley Vasilovski, Chief Information Officer at Bonterra. "Governance either lives in the foundation or it doesn't exist. This certification proves ours does."

Why it matters to customers

ISO/IEC 42001:2023 is not a self-assessment or industry pledge. It requires an independent third-party audit and is maintained through annual surveillance reviews and full recertification every three years - the same cycle as ISO 27001. For Bonterra's customers, this certification is proof, not a promise.

Bonterra's AIMS covers its full certified product portfolio-CyberGrants, Apricot/ETO, Network for Good Donor Management System, EveryAction, GiveGab, and Que-under the same certification boundary as its existing ISO/IEC 27001:2022 Information Security Management System.

The specific commitments governed under the AIMS include:

Data: Bonterra does not use customer data to train large language models. LLM providers are contractually prohibited from retaining customer data.

Human oversight: Every in-scope AI system has documented human oversight provisions, with entitlement controls restricting access to intended users.

Safety reviews: 100% of in-scope AI systems undergo documented impact assessments before release and on significant change.

Transparency: Customers have open access to Bonterra's AI Acceptable Use Policy, MSA AI Addendum, and model card references - ungated.

Incident reporting: Customers have a dedicated channel to report AI concerns, with defined triage and response SLAs.

Certificate CR20260730-01, the full scope statement, and the AI Management System summary are available today in the Bonterra Trust Center at [trust center URL]. The certification is valid through July 29, 2029.

About Bonterra

Bonterra is the only solutions network built to connect nonprofits and funders across the social good ecosystem. Supporting more than 216,000 organizations and facilitating over $22B in annual giving, Bonterra helps nonprofits, volunteers, funders, corporate partners, and public agencies turn data into action and amplify impact. As the technology leader advancing the effort to raise charitable giving to 3% of U.S. GDP by 2033, Bonterra combines trusted platforms, ethical AI, and continuous innovation to power the next era of good.

About Bonterra Que

Bonterra Que is the most trusted AI in social good - and the most sector-informed. Powered by the Bonterra Network's 216,000+ nonprofits, 46M supporters, and 1.16B+ transactions, Que knows your world because it was built from it. Human-led and ethical by design, Que earns trust by delivering: 44% more in donation totals, 144% better donor retention, 3.5x more services delivered. So your team can work faster, decide smarter, and trust every step toward unlocking impact.