Does NIST AI RMF require independent / third-party evaluation?

The AI RMF is voluntary and does not mandate a third-party evaluator, but MEASURE 1.3 calls for evaluation by parties independent of the development team where feasible, and many downstream regimes (e.g. NYC LL 144) do require independence. An external,…

register 09 · Compliance pins· NIST AI RMF · MEASURE
01 ·

Answer.

Risk-management framework · NIST AI RMF · MEASURE.

The AI RMF is voluntary and does not mandate a third-party evaluator, but MEASURE 1.3 calls for evaluation by parties independent of the development team where feasible, and many downstream regimes (e.g. NYC LL 144) do require independence. An external, reproducible audit is the strongest way to satisfy that framing. Planisphere runs as an independent instrument and emits a record anyone can recompute; it measures model behaviour and does not issue a certification.

Cite-anchor: NIST AI 100-1 (AI Risk Management Framework) · MEASURE function

02 ·

The mark behind the answer.

NIST AI RMF · MEASURE is a process framework, not a pass/fail line: it names functions, categories and controls an organ…

Measure function · TEVV · 19 subcategories · the audit-triad home.

→ Full reference for NIST AI RMF · MEASURE

Try NIST AI RMF · MEASURE with a free test key.

Start with the free sandbox. Planisphere measures model behaviour and emits a reproducible, sha-pinned record — it does not certify, file, or give legal advice.

API ·

When NIST AI RMF · MEASURE asks for proof, hand over records — not assurances.

record the duty · seal the receipt · verify offline

Planisphere records each duty event — an output marked, a disclosure shown, a review made — and seals it into a receipt that verifies offline against our published keys. You send hashes, never content. A record is evidence a third party can check; it is not a certification and not a legal determination.

See how a record is checked