Framework alignment

Alignment, stated precisely

This page states our current position for each framework a regulated buyer asks about. Alignment means the architecture is designed around a framework's requirements. It never means certification, audit approval or regulatory endorsement.

Framework alignment positions
FrameworkCurrent positionEvidence availableStatus
EU AI Act Designed to support applicable governance requirements for high-risk AI use in enterprise operations Internal control mapping in preparation; available under NDA on request By design
NIST AI RMF Architecture designed around the Govern / Map / Measure / Manage functions Architecture-to-function mapping available on request By design
ISO/IEC 42001 (AI management) On the certification roadmap; no issued certification claimed Gap assessment planned Roadmap
ISO/IEC 27001 (information security) Security controls designed in alignment with Annex A control themes; on the certification roadmap Control alignment notes available under NDA Roadmap
SOC 2 On the certification roadmap; trust-service criteria inform the control design No audit performed yet Roadmap
GDPR / UK GDPR Privacy-by-design principles; on-premises deployment keeps personal data in the customer environment Privacy documentation; data-processing terms on request Alignment
Regional telecom & data regulation (e.g. CITRA, TRA, central-bank circulars) Regulatory mapping capability — packs can be mapped to applicable circulars per engagement Mapping produced per customer engagement By design

mAIb Tech does not claim an issued certification unless explicitly stated. Frameworks listed reflect design principles, alignment work and roadmap goals — not certifications, audit results or regulatory approvals.

How to read this table

By design means the architecture was built around the framework's requirements and a mapping can be produced or discussed. Alignment means design principles follow the framework and documentation exists. Roadmap means certification or formal assessment is planned but has not happened — and until it has, we will not use the word "certified".

Why we publish it this way

Badge walls imply audits that never happened. A precise status table lets your compliance function assess exactly where we stand, and gives both of us a shared reference as statuses change. When a status changes on this page, it is because the underlying evidence changed.

Deploy private AI without surrendering control.

A briefing takes one call. No obligation, NDA available on request, and technical or executive sessions to suit your team.