As global attention turns toward how Artificial Intelligence (AI) can be governed responsibly, a Calgary startup has achieved a milestone few have reached worldwide. Ultimarii, an AI company developing regulatory intelligence tools for energy, infrastructure, and public-sector clients, has become one of fewer than 50 organizations globally to achieve ISO 42001 certification, the world’s first international standard for AI governance. In doing so, Ultimarii now stands alongside Amazon Web Services, Google, Anthropic, and Microsoft.
At first glance, it may seem like a simple certification update. But the implications stretch much further. Ultimarii’s achievement marks a new era in which small, well-supported startups can meet, and even surpass, the compliance standards once reserved for the largest technology firms.
Redefining What’s Possible in Compliance
Traditionally, certifications such as ISO 27001, SOC 2, and GDPR compliance have been viewed as multi-year undertakings achievable only by mature enterprises. Ultimarii’s journey challenges that assumption.
In less than twelve months, the company completed three major frameworks: ISO 27001 at month four, SOC 2 Type 2 by month nine, and ISO 42001 by month eleven. This acceleration was made possible through a new model of integrated operations- one that merges finance, HR, and compliance into a single system.
That model was built in collaboration with EIM Services, another Calgary-based company helping early-stage ventures align their financial operations and governance infrastructure from day one. The partnership between Ultimarii and EIM reflects a broader truth emerging across Canada’s startup ecosystem: strong compliance isn’t a function of scale, it’s a function of structure.
Building Trust in the Age of AI
Published in December 2023, ISO 42001 defines how organizations manage AI responsibly throughout its lifecycle, everything from bias prevention and data protection to transparency and the governance of continuously learning systems.
The certification is more than symbolic. In an era when AI systems underpin decisions in law, energy, and government, the ability to demonstrate credible governance is now central to winning enterprise and public-sector trust.
For Ultimarii, that trust became tangible. ISO 27001 opened early enterprise conversations. SOC 2 Type 2 unlocked access to Fortune 500 buyers. ISO 42001, the final step, directly addressed AI risk and accountability, factors that most often exclude early-stage companies from large-scale procurement processes.
Calgary’s Broader Transition
Ultimarii’s certification story is also part of Calgary’s ongoing transformation from energy hub to centre for regulated innovation. Between 2021 and 2023, the city’s technology sector added $8.1 billion in value, an 83% increase, while expanding its workforce by 78%. It now ranks among the top 50 emerging global startup ecosystems, and fifth in Canada, according to StartupBlink’s Global Startup Ecosystem Index.
This shift aligns with the federal government’s decision to open the Major Projects Office in Calgary for businesses pitching major industrial projects, part of a broader national strategy to accelerate infrastructure and energy approvals. For companies like Ultimarii, it creates a fertile environment: one that pairs regulatory complexity with a growing base of technical expertise.
About Ultimarii
Founded in January 2024 by Doug Schweitzer (former Alberta Innovation Minister) and Josh Malate (co-founder of Calgary legaltech scaleup Athennian), Ultimarii develops AI-powered regulatory intelligence for sectors where compliance, accountability, and precision are paramount, including energy, law, and government.
The company now holds ISO 27001, SOC 2 Type 2, GDPR, and ISO 42001 certifications, placing it among a select group of organizations globally recognized for excellence in AI governance.
About EIM Services
EIM Services Inc., founded in Calgary in 2024, provides integrated Financial Operations, HR, and Certification & Compliance systems for startups from pre-seed through Series B. Its model allows emerging companies to align operational efficiency with governance and certification objectives, a foundation that enabled Ultimarii’s accelerated path to ISO 42001.
