# A.4.4 Tooling resources

Within resource identification, document information about the tooling resources the AI system uses. In practice the record is tooling inventory listing algorithm types and models, data conditioning tools, optimization and evaluation methods, provisioning tools, model development aids and design, development and deployment software and hardware. For tooling resources the evidence is an inventory, not a statement.

- Framework: ISO/IEC 42001:2023
- Cited to: ISO/IEC 42001:2023, Annex A control A.4.4
- Source: https://www.iso.org/standard/81230.html
- Last updated: 2026-10-20

## What it asks

Within resource identification, document information about the tooling resources the AI system uses.

## Where generative AI changes the answer

Tooling includes the evaluation harness, the guardrail configuration and the logging, and a system without them cannot produce the evidence an audit asks for.

## Who it binds

The AI system owner and the functions that supply data, tooling, computing and people.

## Evidence an auditor samples

- Tooling inventory listing algorithm types and models, data conditioning tools, optimization and evaluation methods, provisioning tools, model development aids and design, development and deployment software and hardware

## The test you can run

Ask for the data and tooling inventory for the use, and check that the evaluation set is in it.

## Common failures

- Open-source libraries and model hubs missing from the inventory

## Before the draft publishes

List the data, tooling, computing and people the use depends on, and mark which of them the organisation does not control.

## What this page does not say

It does not state the text of ISO/IEC DTS 25568, because ISO has not published the draft's clause text. It does not certify anything.

Not legal advice; does not certify.
