Compliance frameworks

Enzai's frameworks cover the EU AI Act, ISO 42001, ISO 23894, NIST AI RMF and its profiles, GDPR for AI-specific scenarios, the major US state regimes including Colorado, California, and Texas, plus Treasury FS AI RMF and OWASP Agentic Top 10.

Evidence captured for one framework maps simultaneously to the requirements of others. One impact assessment in Enzai can satisfy EU AI Act Article 9, ISO 42001 clause 6.1.2, and NIST AI RMF Map-3.2 without parallel workflows or duplicated work.

Enzai maintains the Compliance Framework library centrally. When regulators publish new guidance or extend deadlines, the library absorbs the change once. Affected systems re-trigger assessment automatically, and your programme inherits the updated mapping without a per-customer rebuild.

Each AI system in your inventory carries a compliance score per applicable framework, updated continuously as systems and regulations change. You can see where each AI sits against each framework and drill into the specific obligations that are short of compliance.

Yes. The library includes the SEC's 2026 examination priorities for AI-related risks and Treasury's FS AI RMF, including GV-1.6 documentation requirements. Sectoral overlays sit alongside the cross-sector frameworks for financial services AI deployments.

Most teams have framework mapping active across their inventory within the first 60 days. The library is pre-built, so the work is connecting your AI systems and configuring the per-framework evidence capture, not building each regulatory mapping from scratch.