Firstup earns ISO AI governance cert

Firstup is trying to make two claims at once: that its employee-communications platform can plug into the AI tools workers already use, and that those AI features sit inside a formal governance system rather than an ad hoc product rollout. On Sept. 2, the company said it had achieved ISO/IEC 42001:2023 certification for its Artificial Intelligence Management System after an independent audit, while also announcing new AI search, Microsoft Copilot and ChatGPT integrations. (prnewswire.com) The certification matters because ISO/IEC 42001 is the international standard for establishing, implementing and continually improving an AI management system. ISO says the standard is meant to give organizations a structured way to manage AI risks and opportunities, including issues such as transparency, traceability and responsible use. Firstup said its certification covered governance practices including risk assessment, accountability, operational controls and ongoing monitoring. (iso.org) That does not certify that every output from an AI feature is correct. It certifies that the company says it has management processes around how AI is developed, deployed and overseen. Firstup CTO Vinod Malhotra said the audit validated the company’s approach to human oversight, privacy and data protection, transparency, accountability and continuous improvement. (prnewswire.com) The product side of the announcement is about distribution. Firstup said employees will be able to search their organization’s communications, topics and people from inside Microsoft Copilot and ChatGPT, instead of switching back into a separate internal-communications tool. The company framed that as a way to surface workplace content in the assistants employees already use during the workday. (prnewswire.com) The technical mechanism is Model Context Protocol, or MCP. MCP is an open standard for connecting AI applications to external systems, data sources and tools, according to the official MCP documentation and Anthropic, which introduced the protocol in 2024. Microsoft documentation says Copilot Studio can connect agents to tools from an MCP server, while OpenAI’s documentation says ChatGPT and the OpenAI API can use remote MCP servers and connectors to access outside capabilities. (modelcontextprotocol.io) In practice, that means Firstup is positioning its platform less as a destination app and more as a content layer that can feed answers into broader AI interfaces. The example in the company’s release was a worker asking whether the employer had announced anything about open enrollment, with the answer drawn from Firstup content. That is the clearest indication of what the company wants MCP to do: pull internal communications into conversational search. (prnewswire.com) The timing also shows how enterprise software vendors are packaging AI features with compliance language. Firstup CEO Bill Schuh said the company had delivered 60% more capability in the first half of 2026 than a year earlier and tied that pace to “enterprise-grade quality, availability, and security.” The release said many of the new features came from its customer Idea Portal, suggesting the company is pitching the update as both a product expansion and a trust signal for large employers. (prnewswire.com) What to watch next is whether Firstup names customers, auditors or deployment details around the MCP integrations. On Sept. 2, the company disclosed the certification, the Copilot and ChatGPT integrations, and the use of MCP, but the announcement did not spell out which certifying body performed the audit or how widely the new integrations are already in production. (prnewswire.com)