This page is an orientation guide, not a substitute for the official standard, legal text or professional advice.
ISO/IEC 42001
An AI management-system framework for establishing, implementing, maintaining and continually improving organisational controls.
ISO/IEC 23894
Guidance for integrating AI risk management into development, deployment and use.
ISO/IEC 42005
An AI system impact-assessment standard supporting structured evaluation of effects on people, organisations and society.
NIST AI Risk Management Framework
A lifecycle-oriented framework organised around governing, mapping, measuring and managing AI risk.
EU AI Act
A risk-based legal framework with obligations that vary according to system type and use.
The AuditAI extension
AuditAI focuses on the operational evidence needed to show that controls are present, used, reviewed and sufficient for a particular reliance decision.
Revision history
Version 1.0 — 26 July 2026: Initial publication.