Hael
Sign inRequest a demo
NIST AI RMF

Run all four NIST functions from one place.

Govern, Map, Measure and Manage, run against the same systems you govern under the EU AI Act, ISO/IEC 42001 and the GDPR.

app.hael.ai / registry / UND-014
HAEL BANK · ISOLATED
NIST AI RMF · classified from the record
IN SCOPE
Underwriting Risk Model
Owner · Head of Risk · A. Berisha · System UND-014
HIGH RISK
Obligations
GOVERN  Roles, accountability, culture
MAPPED
MAP  Context, categorisation, impacts
MAPPED
MEASURE  Test, evaluate, monitor
HELD OPEN
MANAGE  Treat, prioritise, respond
MAPPED
GAI  Generative AI profile (NIST AI 600-1)
PENDING
Generated · AI RMF profile · v2SOURCED
What it demands

What the framework asks of an AI programme.

The NIST AI RMF is voluntary guidance. It organises trustworthy-AI practice into four functions — Govern, Map, Measure, Manage — and asks an organisation to keep them in play across the AI lifecycle.

It is the framework US regulators and federal agencies most often anchor on. Treating it as the working spine of the AI programme makes the agency audits, the EU AI Act and ISO/IEC 42001 land on the same evidence.

Obligations · 5 articles
MAPPED
GOVERN  Govern
A culture of risk management. Roles, accountability, policies and resourcing for AI across the organisation.
MAP  Map
Context established. AI systems categorised; intended use, impacts and stakeholders identified.
MEASURE  Measure
Identified risks analysed and assessed. Trustworthy-AI characteristics tested and monitored over time.
MANAGE  Manage
Risks prioritised, treated and tracked. Response and recovery plans for incidents and changes.
GAI  Generative AI profile
NIST AI 600-1 risks (confabulation, content provenance, data privacy, value-chain) mapped where in scope.
Closed vocabulary · sourced from the Act
What Hael does for it

Three things Hael does for the AI RMF.

01
Classifies
Each system is mapped under MAP — context, intended use, deployers, impact tier — in plain language, with the relevant trustworthy-AI characteristics surfaced.
02
Generates
The AI RMF profile, MAP/MEASURE/MANAGE artefacts, generative-AI 600-1 profile and incident reports — produced from the record and sourced line by line.
03
Keeps current
MEASURE cadence runs. Drift, staleness and incident triggers flow into MANAGE. The profile is live, not last quarter's PDF.
app.hael.ai / mapping / NIST AI RMF
ONE CONTROL SET
NIST AI RMF · obligation → control → record
MAPPED
GOVERN 1.2 · Accountable roles
Control · AI governance committee charter  ·  Programme
MAPPED
MAP 1.1 · Context established
Control · System context record  ·  UND-014
MAPPED
MAP 3.1 · Categorisation
Control · Impact tier assignment  ·  UND-014
MAPPED
MEASURE 2.3 · Performance
Control · Robustness test report  ·  UND-014
HELD OPEN
MEASURE 2.11 · Fairness
Control · Bias monitoring record  ·  UND-014
HELD OPEN
MANAGE 4.1 · Incident response
Control · Incident response plan  ·  UND-014
MAPPED
One record · many regimes
The record through-line

The four functions on the same record.

A system entered once is governed against the RMF and against every other regime that applies. The same controls show up under EU AI Act Annex IV, ISO/IEC 42001 Annex A and GDPR Art. 35.

Artefact proof

The AI RMF profile, generated from the record.

The profile is the framework rendered against this organisation, this system, this use case. Every cell cites the control or record behind it — gaps are open, not glossed.

app.hael.ai / documents / AI RMF profile
v2 · 18 Jun 2026
AI RMF profile · NIST AI RMF
SEALED
§G.1  Governance & accountability
Committee charter v2 · RACI · S. Iqbal
SOURCED
§M.1  Map · context & impacts
Context record · UND-014 · impact tier 'High'
SOURCED
§Ms.1  Measure · evaluation methods
Robustness test plan v3 · methods inventory
SOURCED
§Ms.2  Measure · ongoing monitoring
Open — no fairness threshold on file for the v3 retrain. The metric runs; the threshold is held until Risk approves it.
HELD OPEN
§Mn.1  Manage · prioritisation & treatment
Risk treatment register · UND-014 · current
SOURCED
§Mn.4  Manage · incident response
IR plan v2 · last drill 12 May 2026
SOURCED
Every section cites the record entry behind it
Related frameworks

Govern this alongside everything else.

One system, one record, governed against every framework at the same time. Map an obligation once; satisfy it everywhere it recurs.

Free check

See where you stand on NIST AI RMF, free.

Answer a few questions and get an indicative view of what NIST AI RMF expects of your AI systems and where you stand today — no sign-up to see your result.

Indicative, not legal advice.
NIST AI RMF · indicative readiness
HAEL FREE TOOLLIVE
Applicability
Applies to your AI use
MAPPED
What's expected
Risk classification · governance · documentation · oversight
4 PILLARS
Where you stand
Banded result · pointed to the gaps that matter most
SOURCED
Result
On-screen, free · optional PDF
FREE
Effort
Pre-scoped to NIST AI RMF
~ 5 MIN
INDICATIVE · NOT LEGAL ADVICE
See it on a real record

See Govern · Map · Measure · Manage on one system.