Skip to content

ISO 42001 vs NIST AI RMF vs EU AI Act (and US Rules)

The EU AI Act is law. ISO/IEC 42001 is a management system standard. The NIST AI RMF is a voluntary framework. Here is how they differ, how they fit together, and what changed in US rules in 2026.

Updated

Buyers often hear three names together: the EU AI Act, ISO/IEC 42001 and the NIST AI RMF. They are different kinds of things. This guide compares them, then covers the US rules that changed in 2026.

This guide is general information. It is not legal advice.

keep reading

Unlock the rest of this guide and every other guide. We also add you to the newsletter.

All buyer guides

Published by . How we check each AI governance tool.

The AI governance newsletter

A short email now and again: a rule date that moved, a tool worth knowing, and one source note. No noise.

We only use your email to send this newsletter. Privacy policy.

ISO 42001 vs NIST AI RMF vs EU AI Act (and US Rules)