# Buyer guides

AIGovernanceTools has 8 guides on AI governance, risk and compliance software, grouped by country.

## General

- [AI Governance Glossary](https://aigovernancetools.fyi/guides/ai-governance-glossary.md): Plain definitions of the terms buyers meet in AI governance: EU AI Act roles and risk tiers, ISO/IEC 42001, NIST AI RMF, model risk, guardrails, red teaming, bias audits and LLM risks.
- [Build vs Buy: Open-Source AI Guardrails and Evaluation vs Commercial Platforms](https://aigovernancetools.fyi/guides/build-vs-buy-ai-guardrails-and-evaluation-tools.md): Open-source tools cover guardrails, red teaming, bias testing and LLM tracing well. Commercial platforms add inventory, workflow, evidence and support. Here is how to decide.
- [EU AI Act Deadlines: What Buyers Need to Know](https://aigovernancetools.fyi/guides/eu-ai-act-deadlines-what-buyers-need-to-know.md): The EU AI Act applies in stages from 2025 to 2030. The Digital Omnibus on AI moved the main high-risk dates to 2 December 2027 and 2 August 2028. Here are the dates, the risk tiers and the fines.
- [How AI Governance Software Is Priced](https://aigovernancetools.fyi/guides/how-ai-governance-software-is-priced.md): Most AI governance platforms do not publish prices. Some monitoring, guardrail and red-teaming tools do. Here are the pricing models and the public prices we could verify.
- [How to Choose an AI Governance Platform](https://aigovernancetools.fyi/guides/how-to-choose-an-ai-governance-platform.md): A practical way to pick AI governance software: know which layer you need, map it to your rules, then test inventory, risk workflow, evidence, integrations and security.
- [ISO 42001 vs NIST AI RMF vs EU AI Act (and US Rules)](https://aigovernancetools.fyi/guides/iso-42001-vs-nist-ai-rmf-vs-eu-ai-act.md): The EU AI Act is law. ISO/IEC 42001 is a management system standard. The NIST AI RMF is a voluntary framework. Here is how they differ, how they fit together, and what changed in US rules in 2026.
- [LLM Deployment Security and Compliance Checklist](https://aigovernancetools.fyi/guides/llm-deployment-security-and-compliance-checklist.md): A checklist for putting an LLM application into production, built on the OWASP Top 10 for LLM Applications 2025, the NIST AI RMF and ISO/IEC 42001, with EU AI Act transparency duties.
- [Questions to Ask AI Governance Vendors](https://aigovernancetools.fyi/guides/questions-to-ask-ai-governance-vendors.md): An RFP and security questionnaire for AI governance, guardrail, red-teaming and monitoring vendors. Each question says what a good answer looks like.