As the European Artificial Intelligence Regulation (AAI) comes into effect, Ecija has become the first law firm in Spain to obtain ISO/IEC 42001:2023 certification—the international standard governing AI management systems—under an international accreditation scheme. The firm, recognized as European Firm of the Year 2025 by The Lawyer, thus positions itself at the forefront of the legal sector in AI governance.
The certificate was issued by SGS, a world leader in inspection, verification, testing, and certification, and is accredited by ANAB (ANSI National Accreditation Board), a leading international authority in management system accreditation. This dual guarantee, combining certification from a globally renowned body with accreditation from a highly demanding international organization, required the application of rigorous technical standards throughout the entire audit process.
This certification adds to those already held by Ecija in the areas of information security, quality and compliance, and consolidates the firm’s alignment with recognized best practices in corporate governance, both in Spain and in the international markets in which it operates.
“This milestone reinforces Ecija’s commitment to the safe, respectful, non-discriminatory and ethical use of artificial intelligence, providing our internal governance framework with a robust management system, aligned with the European AI Regulation and the highest international standards of risk management,” emphasized Alejandro Touriño, CEO of Ecija.
Beyond the technical recognition, this achievement represents for the firm a firm declaration of principles, guaranteeing that the development, deployment and application of AI solutions – both for internal use and in services provided to clients – is carried out under a framework of trust, transparency and responsibility.
The certified system covers the entire life cycle of AI tools within the audited scope and incorporates monitoring and control mechanisms over all processes in which AI has been implemented, with a risk-based approach aimed at minimizing as much as possible the critical aspects linked to these systems.
“In a sector like the legal field, where trust is the foundation of the client relationship, simply incorporating technology is not enough: it must be done with guarantees. The internationally accredited ISO 42001 standard allows us to demonstrate to our clients, regulators, and society that every AI system we use is subject to rigorous governance controls, human oversight, and accountability,” Touriño added.
For SGS, the accredited certification is part of the SGS Digital Trust strategy, a new approach to quality and governance that puts digital trust at the center of the process as a strategic priority, affecting the technologies that are created, the services offered and the organizations that support them.
The certification implemented by SGS allows this complexity to be addressed across the entire value chain. Whether it’s digital products or critical services, SGS support adapts to the level of digital maturity and is designed to turn trust into a competitive advantage.
SGS’s tailored solutions and services enable businesses to address gaps and meet industry-specific digital trust requirements, including security, cybersecurity, and fairness.
