Skip to main content

> ML_STANDARDS_ATLAS_v1.0

AI Standards & Governance Frameworks

25 qualified AI governance standards and regulatory frameworks: ISO/IEC 42001, NIST AI RMF 1.0, EU AI Act, OWASP LLM Top 10, Model Cards, and Datasheets.

Showing 18 of 25 Governance Frameworks (Page 1 of 2)ISO / NIST / EU AI Act / OWASP
Standard / Framework
ACTIVESTANDARD

ISO/IEC 42001:2023 — Information Technology: Artificial Intelligence Management System (AIMS)

International Organization for Standardization (ISO) / International Electrotechnical Commission (IEC) · International (ISO / IEC JTC 1/SC 42) · The world's first certifiable international standard establishing requirements for establishing, implementing, maintaining, and continually improving an Artificial Intelligence Management System (AIMS).

International (ISO / IEC JTC 1/SC 42)
Standard / Framework
ACTIVEFRAMEWORK

NIST AI Risk Management Framework (NIST AI RMF 1.0)

National Institute of Standards and Technology (NIST) · United States & Global Voluntary Reference · Voluntary consensus-based framework structured into four core functions (GOVERN, MAP, MEASURE, MANAGE) to cultivate trustworthy AI and manage socio-technical risks.

United States & Global Voluntary Reference
Standard / Framework
ENACTEDREGULATION

EU Artificial Intelligence Act (Regulation 2024/1689) — High-Risk AI Requirements

European Parliament and Council of the European Union · European Union & Global Extraterritorial Effect · Binding regulation imposing mandatory CE-marking conformity requirements for AI systems used in high-risk domains: biometric identification, critical infrastructure, education, employment, and credit scoring.

European Union & Global Extraterritorial Effect
Standard / Framework
ENACTEDREGULATION

EU AI Act — General Purpose AI (GPAI) Model Obligations & Systemic Risk Rules

European Union AI Office · European Union & Global Model Providers · Sets binding transparency and copyright requirements for all GPAI models, with heightened systemic risk obligations for foundation models trained on cumulative compute > 10^25 FLOPs.

European Union & Global Model Providers
Standard / Framework
ACTIVEGUIDANCE

OWASP Top 10 for Large Language Model Applications (2025 Edition)

Open Web Application Security Project (OWASP Foundation) · Global Cyber Security Standard · Industry-standard vulnerability taxonomy detailing the top 10 security risks in deploying generative AI and LLMs in production systems.

Global Cyber Security Standard
Standard / Framework
ACTIVEDOCUMENTATION-PRACTICE

Model Cards for Model Reporting Standard (Mitchell et al. / ACM FAT*)

ACM FAT* / Google / Hugging Face Consortium · International Industry Best Practice · Standardized documentation framework accompanying trained machine learning models, detailing model details, intended use, factors, metrics, and quantitative evaluation.

International Industry Best Practice
Standard / Framework
ACTIVEDOCUMENTATION-PRACTICE

Datasheets for Datasets Standard (Gebru et al. / CACM)

Communications of the ACM (CACM) / Data Provenance Initiative · International Industry Best Practice · Comprehensive questionnaire standardizing dataset documentation: motivation, composition, collection process, preprocessing, uses, distribution, and maintenance.

International Industry Best Practice
Standard / Framework
ACTIVESPECIFICATION

SafeTensors Serialization Format Specification

Hugging Face / Rust Foundation · Open Source Consensus Standard · Zero-copy, memory-mapped neural network weight storage format designed to permanently eliminate arbitrary code execution vulnerabilities present in Python pickle files (.bin, .pt).

Open Source Consensus Standard
Standard / Framework
ACTIVESPECIFICATION

GGUF Binary File Format Specification (llama.cpp)

llama.cpp Project (Georgi Gerganov) · Open Source Community Standard · Single-file binary format encapsulating model metadata, tokenizer vocabulary, hyper-parameters, and quantized weight tensors (Q4_K, Q8_0, etc.) for cross-platform CPU/GPU inference.

Open Source Community Standard
Standard / Framework
ACTIVESPECIFICATION

ONNX (Open Neural Network Exchange) Intermediate Representation Specification

LF AI & Data Foundation (Linux Foundation) · International Open Source Standard · Open standard format for representing machine learning models, enabling model interoperability across frameworks (PyTorch, TensorFlow, Scikit-Learn) and execution runtimes.

International Open Source Standard
Standard / Framework
ACTIVESTANDARD

ISO/IEC 23894:2023 — Guidance on Risk Management for AI

ISO/IEC · International & Regional Jurisdictions · Qualified consensus specification establishing formal compliance requirements for ISO/IEC 23894:2023 — Guidance on Risk Management for AI.

International & Regional Jurisdictions
Standard / Framework
ACTIVESTANDARD

ISO/IEC TR 24029 — Assessment of Robustness of Neural Networks

ISO/IEC · International & Regional Jurisdictions · Qualified consensus specification establishing formal compliance requirements for ISO/IEC TR 24029 — Assessment of Robustness of Neural Networks.

International & Regional Jurisdictions
Standard / Framework
ACTIVESTANDARD

ISO/IEC 22989:2022 — AI Concepts and Terminology

ISO/IEC · International & Regional Jurisdictions · Qualified consensus specification establishing formal compliance requirements for ISO/IEC 22989:2022 — AI Concepts and Terminology.

International & Regional Jurisdictions
Standard / Framework
ACTIVESTANDARD

ISO/IEC 38507:2022 — Governance Implications of the Use of AI by Organizations

ISO/IEC · International & Regional Jurisdictions · Qualified consensus specification establishing formal compliance requirements for ISO/IEC 38507:2022 — Governance Implications of the Use of AI by Organizations.

International & Regional Jurisdictions
Standard / Framework
ACTIVESTANDARD

ISO/IEC 5338:2023 — AI System Life Cycle Processes

ISO/IEC · International & Regional Jurisdictions · Qualified consensus specification establishing formal compliance requirements for ISO/IEC 5338:2023 — AI System Life Cycle Processes.

International & Regional Jurisdictions
Standard / Framework
ACTIVESPECIFICATION

C2PA Technical Specification — Coalition for Content Provenance and Authenticity

C2PA Coalition · International & Regional Jurisdictions · Qualified consensus specification establishing formal compliance requirements for C2PA Technical Specification — Coalition for Content Provenance and Authenticity.

International & Regional Jurisdictions
Standard / Framework
ACTIVESTANDARD

IEEE 7000-2021 — Model Process for Addressing Ethical Concerns During System Design

IEEE Standards Association · International & Regional Jurisdictions · Qualified consensus specification establishing formal compliance requirements for IEEE 7000-2021 — Model Process for Addressing Ethical Concerns During System Design.

International & Regional Jurisdictions
Standard / Framework
ACTIVEGUIDANCE

IEEE 2801-2022 — Recommended Practice for the Quality Management of AI Datasets

IEEE Standards Association · International & Regional Jurisdictions · Qualified consensus specification establishing formal compliance requirements for IEEE 2801-2022 — Recommended Practice for the Quality Management of AI Datasets.

International & Regional Jurisdictions