AI Act Obligation Mapperevery EU AI Act obligation, mapped to the controls you run

How does the EU AI Act line up with the NIST AI RMF and ISO/IEC 42001?

The EU AI Act sets legal duties; the NIST AI Risk Management Framework and ISO/IEC 42001 set management and risk practice. They line up because a management system and a risk process are how a provider produces the technical documentation, the logging, the human oversight design and the post-market monitoring the Act requires.

In this directory, each obligation page shows the NIST AI RMF and ISO/IEC 42001 controls recorded as topical matches, with a confidence and a reason. A match is a reading, not a proof: it does not establish that meeting one requirement satisfies the other, and it is not certification.

How does the EU AI Act line up with the NIST AI RMF and ISO/IEC 42001: the source

Read the regulation on EUR-Lex and the European Commission AI Act Service Desk, both linked from every obligation page. Application dates are Article 113, as amended by Regulation (EU) 2026/1744.

Where to go next

The full 43-obligation directory, or the conformance kit for per-role checklists and the evidence register.