Regulatory Frameworks & Standards

NIST AI Risk Management Framework (AI RMF) — www.nist.gov/itl/ai-risk-management-framework

The foundational voluntary framework for managing AI risks throughout the system lifecycle. Organized around four core functions (Govern, Map, Measure, Manage), it provides flexible, use-case-agnostic guidance that organizations worldwide use as their baseline. Includes the Generative AI Profile (NIST AI 600-1) released in 2024 and an accompanying Playbook with practical implementation guidance.

EU AI Act Resource Hub — artificialintelligenceact.eu

The comprehensive legal framework governs the development and/or use of AI in the EU. This independent resource, maintained by the Future of Life Institute, provides the complete Act text, interactive explorer, implementation timelines, and regular updates on codes of practice and enforcement guidance. Essential for any organization operating in EU markets or serving customers in the region.

ForHumanity — forhumanity.center

The nonprofit provides more than 40 certification schemes and 7,000+ audit controls covering ethics, bias, privacy, trust, and cybersecurity. Offers the ForHumanity Certified Auditor (FHCA) designation, the gold standard for AI audit professionals, with specialized tracks for EU AI Act, GDPR, NYC AEDT bias audits, and emerging regulations. Works directly with governments and regulatory bodies to establish implementable, binary audit criteria that organizations can build into compliance-by-design.

ISO/IEC 42001 AI Management System Standard — www.iso.org/standard/42001

An international certifiable standard for AI management systems provides requirements for establishing, implementing, and continually improving AI governance within organizations. Follows the Plan-Do-Check-Act methodology and integrates with existing frameworks like ISO 27001. Organizations seeking third-party certification of their AI governance increasingly turn to this standard.

Policy & Research Intelligence

OECD.AI Policy Observatory — oecd.ai

The authoritative global hub for AI policy data, trends and analysis. Tracks over 1,000 AI initiatives across 70+ jurisdictions and provides the intergovernmental OECD AI Principles (updated in 2024) that form the basis for the G20 AI Principles. Includes national AI strategy comparisons, incident reporting frameworks, and emerging best practices.

Stanford Institute for Human-Centered AI (HAI) — hai.stanford.edu

Stanford’s interdisciplinary institute advancing AI research, education and policy. Publishes the annual AI Index Report, the most comprehensive global benchmark on AI capabilities, investment, and regulation. Offers policy bootcamps for regulators, research on AI’s societal impacts, and convenes policymakers with technologists.

World Economic Forum AI Governance Alliance — initiatives.weforum.org/ai-governance-alliance/home

A flagship multistakeholder initiative uniting 350+ members from industry, government, academia, and civil society. Organized around three workstreams: Safe Systems & Technologies, Responsible Applications & Transformation, and Resilient Governance & Regulation. Publishes practical briefing papers and hosts global events on AI governance.

Subscribe now

Industry News & Market Intelligence

MIT Technology Review’s The Algorithm — forms.technologyreview.com/newsletters/ai-demystified-the-algorithm/

Weekly newsletter from MIT Technology Review providing rigorous analysis of AI developments, cutting through hype with evidence-based reporting. Covers technical advances, policy implications, and industry trends. Recently partnered with the Financial Times for “The State of AI” series examining AI’s global impact on geopolitics, privacy, energy, and economics.

AI Governance Library — www.aigl.blog

A curated repository of policy briefs, research reports, and frameworks for AI governance professionals. Covers risk management, standards implementation, regulatory analysis, and incident taxonomies. Publishes regular newsletters highlighting essential new papers and practical resources.

VentureBeat — venturebeat.com

Leading source for enterprise AI news, with deep coverage of deployment trends, vendor developments, and executive perspectives. Focuses on the practical realities of AI in business, from agentic AI and LLM infrastructure to governance challenges and ROI measurement. Daily reporting with analysis tailored for technology and business decision-makers.

The Batch (DeepLearning.AI) — www.deeplearning.ai/the-batch

Weekly newsletter from Andrew Ng’s DeepLearning.AI featuring curated AI news, research summaries, and industry analysis. Each issue includes a personal letter from Ng offering authoritative commentary on trends and breakthroughs. Bridges the gap between cutting-edge research and practical business applications, accessible to both technical and non-technical readers.

This resource list is maintained as part of the Trusted AI publication. For updates or suggested additions, message me.

A

Adversarial Attack — A technique where malicious actors deliberately manipulate inputs to deceive an AI system into making incorrect predictions or decisions. These attacks exploit vulnerabilities in how models process data, potentially causing systems to misclassify images, bypass security controls, or produce harmful outputs.

AI Ethics Board — A cross-functional governance body responsible for establishing policies, reviewing high-risk AI applications, and providing guidance on ethical considerations. Organizations like IBM and Google have established these structures to centralize accountability and ensure consistent application of AI principles across the enterprise.

AI Literacy — The organizational capability to understand AI systems’ potential, limitations, and risks at all levels of the enterprise. The EU AI Act explicitly mandates AI literacy requirements, recognizing that effective governance depends on employees being equipped to work with and oversee AI systems responsibly.

AI Risk Management Framework (AI RMF) — A voluntary framework published by NIST in January 2023 that provides structured guidance for managing AI risks throughout the system lifecycle. It organizes risk management activities into four core functions (Govern, Map, Measure, Manage) and offers a flexible foundation that many organizations use to anchor their governance programs.

Algorithmic Accountability — The principle that organizations must be able to identify who is responsible for AI system outcomes and how decisions were made. This extends beyond technical explanations to encompass clear ownership structures, defined escalation paths, and mechanisms for affected individuals to seek recourse.

B

Bias (in AI) — Systematic errors in AI outputs that produce unfair outcomes for particular groups, often reflecting historical inequities in training data or flawed model design. Bias can manifest in hiring algorithms that disadvantage certain demographics, credit models that discriminate by geography, or healthcare systems that underserve specific populations.

C

Concept Drift — A change in the underlying relationship between input data and the target variable that a model was trained to predict. Unlike data drift, concept drift means the fundamental patterns have shifted—for example, customer behavior changing after a major economic event—requiring model retraining rather than just data adjustments.

Continuous Monitoring — The practice of systematically tracking AI system performance, behavior, and outputs in production environments on an ongoing basis. This operational discipline enables organizations to detect degradation, bias emergence, and anomalies before they cause significant harm, closing the gap between what AI systems should do and what they actually do.

D

Data Drift — A shift in the statistical properties of production data compared to the data used to train an AI model. When input data distributions change—due to seasonality, market shifts, or evolving user behavior—model performance typically degrades, making drift detection a critical component of production AI management.

Data Poisoning — An attack vector where adversaries deliberately corrupt training data to compromise model behavior, either by injecting malicious samples or manipulating existing data. The effects may remain dormant until triggered by specific inputs, making data provenance and integrity controls essential safeguards.

E

Explainability — The degree to which humans can understand how an AI system reaches its outputs, decisions, or recommendations. Explainability exists on a spectrum—from global explanations of overall model behavior to local explanations of individual predictions—and is essential for building stakeholder trust, enabling oversight, and meeting regulatory requirements.

EU AI Act — The European Union’s comprehensive legal framework for artificial intelligence, which entered into force in August 2024. It establishes a risk-based classification system with corresponding obligations for transparency, human oversight, and technical documentation, setting the global benchmark for AI regulation that affects any organization operating in EU markets.

F

Fairness (in AI) — The principle that AI systems should produce equitable outcomes across different demographic groups and avoid perpetuating or amplifying discrimination. Fairness is context-dependent and often involves trade-offs among competing definitions, such as equal outcomes, equal error rates, or equal treatment, which require deliberate choices aligned with organizational values.

G

Governance Framework — The integrated system of policies, structures, roles, and processes that guide how an organization develops, deploys, and manages AI systems. Effective frameworks address the entire AI lifecycle, establish clear accountability, and integrate with existing enterprise risk management rather than operating as a parallel compliance function.

Guardrails — Technical and procedural controls that constrain AI system behavior within acceptable boundaries. These may include content filters, output validation rules, human-in-the-loop checkpoints, or hard limits on system actions, providing defense-in-depth protection against harmful or unintended outcomes.

H

Human-in-the-Loop (HITL) — A design pattern where human judgment is integrated into AI system workflows, typically for high-stakes decisions, edge cases, or quality assurance. HITL approaches balance automation efficiency with human oversight, though effectiveness depends on ensuring humans have sufficient context, time, and authority to meaningfully intervene.

Hallucination — An AI system output that is fluent and confident but factually incorrect, fabricated, or nonsensical. Particularly prevalent in large language models, hallucinations pose significant risks in enterprise contexts where users may not recognize false information—making output validation and grounding techniques essential safeguards.

I

ISO/IEC 42001 — The first international standard for AI management systems, specifying requirements for establishing, implementing, and continually improving AI governance within organizations. It provides a certifiable framework that integrates with other management system standards, offering organizations a structured approach to demonstrating governance maturity to stakeholders.

M

Model Card — A standardized documentation format that describes an AI model’s intended use, performance characteristics, limitations, and ethical considerations. Originally proposed by researchers at Google, model cards support transparency and informed decision-making by providing stakeholders with essential information to evaluate whether a model is appropriate for their context.

Model Drift — The degradation of AI model performance over time as the relationship between inputs and real-world outcomes changes. Model drift is inevitable in dynamic environments and manifests as declining accuracy, increasing errors, or shifting bias patterns—making ongoing monitoring and periodic retraining essential operational practices.

O

Observability (AI) — The technical capability to understand the internal state and behavior of AI systems based on their external outputs, logs, and metrics. In production AI contexts, observability platforms provide visibility into model performance, data quality, prediction distributions, and failure modes, enabling teams to diagnose issues and maintain system health.

R

Red Teaming (AI) — A structured practice where dedicated teams attempt to find vulnerabilities, failure modes, and harmful behaviors in AI systems before deployment. Borrowed from cybersecurity, AI red teaming involves systematic adversarial testing, including prompt injection, jailbreaking attempts, and edge case exploration, to identify risks that conventional testing may miss.

Responsible AI — An umbrella term for the practices, principles, and organizational commitments that ensure AI systems are developed and deployed in ways that are ethical, fair, transparent, and aligned with human values. While related to trusted AI, responsible AI often emphasizes the ethical dimensions, whereas trusted AI encompasses the full governance and operational infrastructure.

T

Transparency — The practice of openly communicating how AI systems work, what data they use, and how they influence decisions affecting individuals. Transparency operates at multiple levels, from public disclosure of AI use to technical documentation for auditors, and is increasingly mandated by regulations like the EU AI Act for high-risk applications.

Trust Layer — An architectural component that provides governance controls, safety mechanisms, and compliance safeguards for AI systems. Salesforce’s Einstein Trust Layer exemplifies this approach, embedding capabilities like data masking, toxicity detection, and audit logging directly into the platform to protect enterprise AI deployments.

This glossary will expand as Trusted AI evolves. Have a term you’d like defined? Message me.

Governance & Assurance Platforms

IBM watsonx.governance — Enterprise-grade platform for directing, managing, and monitoring AI activities across the organization. Provides automated workflows for model lifecycle management, regulatory compliance tracking, and risk assessment, integrating with IBM’s broader AI ethics framework and supporting requirements like the EU AI Act. ibm.com/products/watsonx-governance

OneTrust AI Governance — Extends OneTrust’s established privacy and risk management platform to AI-specific governance needs. Offers AI inventory management, risk assessments, policy enforcement, and regulatory mapping and is particularly strong for organizations already using OneTrust for privacy compliance seeking unified governance. onetrust.com/solutions/ai-governance

Credo AI — Purpose-built AI governance platform focused on translating policy into measurable technical controls. Provides policy packs aligned with frameworks like NIST AI RMF and EU AI Act, automated compliance evidence generation, and governance workflows that connect executive oversight with technical implementation. credo.ai

Holistic AI — Combines AI governance software with advisory services for end-to-end responsible AI implementation. Platform capabilities include bias auditing, risk assessment, and compliance management and are supported by consulting expertise for organizations building governance programs from the ground up. holisticai.com

ModelOp — Enterprise AI governance platform designed to operationalize model risk management at scale. Focuses on model inventory, lifecycle governance, and regulatory compliance for financial services and other heavily regulated industries where model risk management is a regulatory requirement. modelop.com

Subscribe now

Observability & Evaluation Platforms

Arize AI — Leading ML observability platform providing real-time monitoring, troubleshooting, and evaluation for production AI systems. Offers drift detection, performance tracking, and root cause analysis across model types and is used by companies like Uber, Chime, and Etsy to maintain visibility into deployed models. arize.com

Fiddler AI — Enterprise AI observability platform emphasizing explainability alongside monitoring. Provides model performance tracking, fairness analysis, and natural language explanations of model behavior, enabling both technical teams and business stakeholders to understand why models produce specific outputs. fiddler.ai

Evidently AI — Open-source ML monitoring and observability platform with enterprise offerings. Provides data drift detection, model performance analysis, and test suites for ML pipelines, offering flexibility for teams that want to integrate monitoring into existing infrastructure without full platform lock-in. evidentlyai.com

Weights & Biases — MLOps platform combining experiment tracking, model registry, and production monitoring capabilities. While originally focused on the development lifecycle, expanded offerings now support production observability and evaluation, providing continuity from experimentation through deployment. wandb.ai

Arthur AI — Model monitoring platform with integrated capabilities for performance tracking, bias detection, and explainability. Offers both real-time alerting and historical analysis, with firewall features that can intercept and validate model inputs and outputs before they reach end users. arthur.ai

Specialized Testing & Evaluation

Giskard — Open-source testing framework for ML models with enterprise platform offerings. Specializes in automated test generation, vulnerability detection, and quality assurance for LLMs and traditional ML, helping teams identify hallucinations, bias, and edge case failures before production deployment. giskard.ai

Lakera — AI security platform focused specifically on protecting LLM applications from prompt injection, jailbreaks, and data leakage. Provides real-time guardrails that can be deployed as API middleware, addressing the unique security challenges of generative AI in enterprise environments. lakera.ai

This directory will expand as Trusted AI evolves. Have a tool you think belongs here? Message me.