NIST AI RMF, function by function.

No. Using the framework is voluntary, and NIST does not certify organisations against it. Teams use it as a shared vocabulary for AI risk, and global buyers increasingly ask suppliers to describe their AI controls in its terms. A clear mapping can shorten security questionnaires and procurement reviews.

No. The framework's Govern function is an organisational practice: it builds a culture of risk management with policies, accountability and roles, and informs Map, Measure and Manage. elan1 Govern is a product that decides individual agent actions before they run. The product can supply evidence for the function; it does not replace it.

Agents that act close the gap between an output and a consequence, so three areas get harder. Govern needs a named person who can answer for each class of action. Measure is most useful as the pattern of approvals, refusals and expiries over time. Manage needs a way to supersede, disengage or deactivate agents, such as an emergency stop that works across all of them.

In India by default: AWS Mumbai, three availability zones, no US region. elan1 Run also runs in your data centre or on an appliance. Personal fields are masked before any model call.

No. Mappings are drafts for your counsel and auditors. They are not certification, legal advice or regulator approval. Each row names the clause or duty, what it asks, the elan1 control that answers it and, where one is assigned, the claim ID behind it, so your counsel and auditors can test each mapping against the receipts.