Register 09 · Compliance controls

OMB M-25-21/22.

OMB M-25-21/22 is a binding federal directive — a thing an agency or contractor MUST do, on a clock. Planisphere produces the pre-deployment and ongoing-monitoring artifacts the directive demands, each pinned to the paragraph that compels it.

Open the Console See how a record is checked
register 09 · Compliance controls· Federal directive

Reviewed 2026-07-08

01 ·

Promise. compliance

The contract this mark binds — derived, not asserted.

OMB M-25-21/22 is a binding federal directive — a thing an agency or contractor MUST do, on a clock. Planisphere produces the pre-deployment and ongoing-monitoring artifacts the directive demands, each pinned to the paragraph that compels it.

Answers: What does OMB M-25-21/22 require, and what evidence can support review?

02 ·

What this is.

Seventy-two regulatory cite-anchors, organized for evidence lookup and review

Use. federal AI risk-management + acquisition.

Register. 09 · Compliance controls — one of the 17 registers of the PLANiSPHERE corpus library.

03 ·

See it work.

Evidence record you can check — not code you have to trust.

Planisphere measures your tool deployment against OMB M-25-21/22 and seals the result into a signed, Merkle-rooted evidence record. The grade recomputes on your own hardware; the model state never crosses the boundary.

Prepare evidence for program review →See how a record is checked
04 ·

Questions this answers.

1 high-intent question buyers search — each on its own page, each pinned to OMB M-25-21/22.
What's the difference between OMB M-25-21 and M-25-22? Read the answer →
05 ·

The artifact this directive asks for.

Related marks, and the surface this one funnels to.

OMB M-25-21/22 (federal AI risk-management + acquisition) asks for an evidence record: OMB M-25-21/22 is a binding federal directive — a thing an agency or contractor MUST do, on a clock. Read the related defense AI workflow product context at /defense.

High-Impact AI reg 09 · M-25-21 risk class · 7 minimum practices · the pre-deployment testing obligation OMB M-25-21 reg 09 · Federal AI use · Chief AI Officer · high-impact minimum practices (issued 2025-04-03) OMB M-25-22 reg 09 · Federal AI acquisition · anti-lock-in · performance/risk monitoring clauses EO 14179 reg 09 · Removing Barriers to American Leadership in AI (Jan 2025)
06 ·

Routes here from.

Where this mark is referenced in the Planisphere surface.
Defense Education Law Medicine About

Any internal link in the Planisphere site that names "OMB M-25-21/22" canonicalises here.

07 ·

Sibling marks. Compliance controls

Same register · same construction.
NIST AI RMF
NIST AI 100-1 · Govern · Map · Measure · Manage
DoW RAI S&IP
Responsible · Equitable · Traceable · Reliable · Governable
EO 14179
Removing Barriers to American Leadership in AI (Jan 2025)
ISO/IEC 42001
international AI management system standard
FIPS 140-3
crypto module validation · 4 security levels
SHA-256 / FIPS 180-4
hash algorithm · per-file pinning primitive
SLSA v1.0
supply-chain levels for software artifacts
SBOM
software bill of materials · NTIA + CISA
SCITT
supply-chain integrity, transparency, trust · IETF
C-SCRM
supply-chain risk · NIST SP 800-161r1
NIST SP 800-53 Rev. 5
controls baseline · 20 families · AI overlays
08 ·

For each vertical.

OMB M-25-21/22 framed for the four buyer surfaces.
For Defense

OMB M-25-21/22 for defense AI workflow

NIST AI RMF · DoW RAI · OMB M-25-21 Open the page
For Medicine

OMB M-25-21/22 for clinical AI workflow

HHS §1557 · HIPAA · FDA PCCP Open the page
For Law

OMB M-25-21/22 for legal AI workflow

FRE 702 · ABA Model Rules Open the page
For Education

OMB M-25-21/22 for tutor and grader workflow

Title VI · FERPA · §504 / IDEA Open the page

See the record OMB M-25-21/22 asks for.

The console shows the evidence; the docs show the endpoints; the briefing shows what the product does and does not claim.

Open the Console Read the Docs Read the capability briefing
API ·

When OMB M-25-21/22 asks for proof, hand over records — not assurances.

record the duty · seal the receipt · verify offline

Planisphere records each duty event — an output marked, a disclosure shown, a review made — and seals it into a receipt that verifies offline against our published keys. You send hashes, never content. A record is evidence a third party can check; it is not a certification and not a legal determination.

Open the Console Read the Docs Read the capability briefing

See how a record is checked