Direct source

NIST states the AI RMF is intended for voluntary use

NIST’s AI RMF overview describes the framework as voluntary and designed to improve trustworthiness risk management.

Evidence explainer

What this establishes

Voluntary status means organisations may adopt the RMF without a federal mandate from the framework itself.

Why it matters: It separates standards-based risk management from statutory evaluation or licensing duties.

Limits and context: Other laws or contracts may still require RMF-aligned practices even though the framework text is voluntary.

Exact passage

NIST AI RMF overview page · Overview of the AI RMF

The NIST AI Risk Management Framework (AI RMF) is intended for voluntary use and to improve the ability to incorporate trustworthiness considerations into the design, development, use, and evaluation of AI products, services, and systems.

National Institute of Standards and Technology Original source

Policy questions

Frontier safety

Should frontier models face mandatory evaluations?

Evaluation language is widespread in policy texts. Thresholds, evaluators and legal consequences remain contested.

Policy asks

adopted

Use voluntary AI risk-management frameworks for organisational governance

Adopt voluntary frameworks such as the NIST AI RMF to manage trustworthiness risks without treating the framework text as a statute.

Policy vehicles

guidance · Published (voluntary)

NIST AI Risk Management Framework

US federal voluntary framework for managing AI trustworthiness risks across design, development, use and evaluation.

Policy events

2023-01-26 · publication

NIST releases AI Risk Management Framework 1.0

NIST published the voluntary AI Risk Management Framework.