AI Assurance Directory

AI assurance readiness self-check

Core yes / no / not-sure questions plus an optional industry selector. Each item cites an official page already used on this directory. This is a self-check, not a certification, audit or means of compliance.

1. Do you have a current inventory of AI systems under management?

NIST AI RMF Govern 1.6 expects mechanisms to inventory AI systems.

NIST AI RMF to ISO/IEC 42001 crosswalk · NIST AI RMF explainer

2. Do you operate an organizational AI management system, not only a product feature list?

ISO/IEC 42001 is an organizational AIMS standard. Certification is performed by independent certification bodies.

ISO explainer · ISO/IEC 42001 path

3. Will the system be placed on the EU market, or used in the Union, as a high-risk AI system?

EU AI Act Article 11 expects technical documentation drawn up before a high-risk system is placed on the market and kept up to date.

Regulation (EU) 2024/1689 (consolidated) · Selling AI into EU aerospace

4. Is this an airborne or aircraft function that will need FAA or EASA engagement?

The FAA roadmap says project-specific issue papers and special conditions document the criteria. It is not a means of compliance by itself.

FAA AI Safety Assurance Roadmap · Certifying ML in an aircraft system

5. Are training, validation and test sets separate and independent, against a defined operational design domain?

EASA bases learning assurance on three separate and independent data sets. A complete ODD is a prerequisite to data-set quality.

EASA Concept Paper Issue 02 · EASA AI Concept Paper explainer

6. Is this a weapon system under DoD Directive 3000.09, rather than an unarmed or non-weapon system?

3000.09 does not apply to unarmed platforms or autonomous systems that are not weapon systems. Do not treat every DoD AI buy as a 3000.09 review.

DoD Directive 3000.09 · DoD Directive 3000.09 explainer

7. Can operators disengage or deactivate the deployed system if it shows unintended behavior?

DoD's Governable principle: ability to disengage or deactivate deployed systems that demonstrate unintended behavior.

DoD AI ethical principles · DoD Responsible AI explainer

8. Does the toolchain process, store or transmit FCI or CUI (including prompts, fine-tunes, embeddings or logs)?

DFARS 252.204-7021 requires a current CMMC status at the level the contracting officer specifies for systems that process, store, or transmit FCI or CUI.

DFARS 252.204-7021 · DoD contractor AI + CUI path

9. If this is NASA software under NPR 7150.2, do you treat AI/ML as software to which all SWEs apply?

SWEHB 7.25 states AI is implemented in software and governed by software development processes, and all NPR 7150.2 SWEs are applicable to AI/ML software.

SWEHB 7.25 — Artificial Intelligence And Software Engineering · NASA SWEHB AI topics listing

10. Do you treat T&E products as documentation support rather than a certification or accreditation?

JATIC FAQ: use of the products will not currently provide any certification or accreditation. They may help document certain DoD processes such as Directive 3000.09.

JATIC Frequently Asked Questions · CDAO JATIC listing

Questions

Is this a certification or an audit?

No. It is a self-check. Each question cites an official page already used on this directory. It is not a means of compliance and not professional, engineering, certification or legal advice.

Do I have to give an email?

No. Results appear in the browser first. An email is optional if you want to save the result to a free account via a magic-link sign-in.

What stays free after I save?

The self-check, public summaries, tags and official links. Quoted evidence, coverage cells, kits and the briefing stay on Pro at $49 per month or $490 per year.