Obligations

Frameworks & obligations

Frameworks set the expectations. In AIGovernr you work through each one as a self-assessment, and approving it creates the tasks, controls and risks for the gaps.

In the app: Project → Understand & Assure → Framework Assessments; workspace sidebar → Framework Library

Included frameworks

EU AI Act, GDPR, ePrivacy, ISO/IEC 42001, NIST AI RMF and OWASP Top 10 for LLM Applications, written as AIGovernr guidance.
CRI Financial Services AI RMF, marked as publisher content.

ISO/IEC 42001 is a licensed standard. AIGovernr includes reference metadata and guidance, not the standard's text.

Run a framework assessment

1Open Framework Assessments and choose Add framework if it is not already in scope.
2Choose Start self-assessment and answer each requirement. Apply all instead skips the questions and creates tasks and controls for every requirement.
3Submit for review. The assessment shows In progress, Awaiting review, Approved or Superseded.
4A reviewer approves it. Approval creates tasks, controls and risks for the gaps it found.
5Use Reassess later to run a new version. The previous one becomes Superseded.

Shared controls across frameworks

Many requirements map to the same practical control. AIGovernr includes a set of shared controls (AIG-xx) that each cover several frameworks, marked Shared · N frameworks. Testing and evidencing a shared control once supports every framework it maps to. Filter with Shared controls only.

A requirement counts as met only when its control passes a test.

Last reviewed 2 October 2026

Next stepRequirements & tasksRequirements describe what a framework expects. Tasks are the assigned work that meets them.