Loading…
Loading…
Connecticut CART Act first obligations begin · Oct 1, 2026 · See what changes
Dates and status re-checked against primary sources on . How we verify
A voluntary framework from the National Institute of Standards and Technology helping organizations manage AI risks. Organized around four functions: Govern, Map, Measure, and Manage. Widely used as a reference framework in the US, and written into state law as a benchmark: Texas TRAIGA gives an affirmative defense to organizations that substantially comply with the NIST AI RMF (including its Generative AI Profile) or another recognized framework.
The NIST AI RMF is voluntary — there is no legal penalty for not following it. But it provides the most practical, detailed guidance available for building an AI governance program from scratch. Its four-function structure (Govern, Map, Measure, Manage) maps well to the governance activities small teams can actually implement: documenting AI use, assessing risks, tracking incidents, and improving over time. Texas TRAIGA offers an affirmative defense to organizations that substantially comply with the NIST AI RMF or a similar recognized framework, so following it can also help you answer an enforcement action there.