Third-party AI governance certification is now a product you can pass or fail, not a guidance document you cite.

Hackensack Meridian Health, a New Jersey network of 18 hospitals and more than 500 care sites, became the first U.S. health system to earn The Joint Commission’s Responsible Use of AI in Healthcare certification, according to an HMH statement.

The Joint Commission, an independent accreditor of U.S. hospitals, evaluated HMH across six domains. Those cover AI governance and oversight, patient privacy and data safeguards, processes to identify and reduce AI risk and bias, ongoing monitoring of tool performance and safety, transparency so patients know when AI touches their care, and staff training on responsible use.

For compliance leaders, the takeaway is the certification model itself. An outside accreditor now issues a pass or fail against defined AI-governance criteria, which is a benchmark any regulated sector can map against instead of a self-attested policy.

The certification also sets a practical bar. It rewards demonstrable, continuous monitoring and documented bias and risk assessment, rather than a static written policy. Security and governance officers in financial services and federal contracting should expect similar third-party AI-audit regimes and start assembling the evidence now.