AI vendors aligned with the NIST AI Risk Management Framework

AI vendors that publicly align their AI risk management practices with NIST AI 100-1, the U.S. voluntary framework for AI risk across the system lifecycle.

NIST AI RMF (AI 100-1, January 2023) is voluntary but increasingly cited in U.S. federal procurement, executive orders, and bank regulator guidance. Vendors aligned with the framework typically publish how their AI systems map to the four core functions (Govern, Map, Measure, Manage) and the Generative AI Profile (NIST AI 600-1) for generative-AI-specific risks. Alignment is self-declared rather than certified. The vendors below explicitly reference NIST AI RMF in their public posture.

Vendors with NIST AI RMF

Buyer checklist

• Ask for the vendor's public NIST AI RMF Profile or its equivalent internal documentation.
• For generative AI use cases, verify alignment with the Generative AI Profile (AI 600-1).
• Cross-reference RMF's Govern function with the vendor's AI ethics board, oversight policies, and incident reporting.
• For Measure function, request red-team results and evaluation metrics across demographic and use-case slices.
• Where possible, prefer vendors that combine NIST AI RMF alignment with ISO 42001 certification for an external attestation.