Every law, standard, scheme, and player. Mapped and dated.
Regulators, assurance providers, insurers, vendors, institutes, and credentials too, with status, key dates, who they apply to, and how they map to each other.
Or start from the world map: click a country for what applies there and what is changing
RAI Institute
Membership nonprofit; RAISE Pathways maps 1,100+ controls to 17 standards with verification badges in beta.
FLI
Publishes the AI Safety Index, which graded nine frontier labs in its Summer 2026 edition; the only company-level governance ranking in the field, and only for develop...
Schellman
ISO 42001 certification body with the most publicly disclosed certificates (53 as of October 25, 2026, per iso42k.com); first accredited auditor for AIUC-1.
Armilla
Lloyd's coverholder writing AI liability cover up to $25M per organization, underwritten from a governance questionnaire and a technical assessment.
SynthID
Invisible watermark for Google-generated media. The detector, open to everyone since October 7, 2026, also reads OpenAI, Nvidia, and Kakao watermarks and is not a gene...
C2PA
Provenance manifests for media, version 2.3 (February 2026), with a conformance program and trust list for production signing. Adopted by Adobe, Google Pixel, Sony, Le...
AIGP
The purpose-built AI governance credential, launched April 2024. Exam fee $649 for members and $799 for non-members (confirm current).
AIUC-1
51 requirements and 130 controls across six pillars, quarterly testing, 12-month certificates, Schellman as first accredited auditor; tied to AI liability insurance.
CSA STAR for AI
247 controls in 18 domains mapped to ISO 42001, ISO 27001, NIST AI RMF, the EU AI Act, BSI AIC4, and AIUC-1; a free matrix; a 320-question self-assessment; Level 1 sel...
HAIP 2.0
Free, public, voluntary transparency reports with separate paths for model developers, application developers, and deployers, and a simpler path for SMEs. More than 50...
NIST AI 600-1
Generative-AI-specific risks and actions mapped to the AI RMF.
NIST AI RMF
Four functions: Govern, Map, Measure, Manage. The Texas TRAIGA safe harbor references substantial compliance with it. A revision was directed by the 2025 AI Action Pla...
ISO/IEC 42005
Guidance on AI system impact assessments; NIST published a crosswalk in August 2025.
ISO/IEC 42006
Makes accredited ISO 42001 certification possible; UKAS and RvA accreditations under way.
ISO/IEC 42001
The certifiable AI management system standard. 229 publicly announced certifications across 30 countries as of October 25, 2026 (19 in 2024, 89 in 2025, 120 in 2026 so...
TAKE IT DOWN Act
Criminalizes non-consensual intimate imagery including AI-generated images; platforms must remove reported content within 48 hours; FTC enforcement.
NYC Local Law 144
Annual independent bias audit and candidate notice for automated employment decision tools.
Illinois HB 3773
Prohibits discriminatory AI use in employment decisions and requires notice to employees and applicants.
CPPA ADMT rules
Notices, opt-outs, and risk assessments for automated decision-making in significant decisions, under the CCPA. Phased compliance dates (confirm).
California chatbot laws
Disclosure, safety, and child-protection duties for companion chatbot operators.
California SB 53
Safety framework publication and incident reporting for frontier developers above $500M in revenue.
California auditor framework
First US framework regulating who may audit AI. Designation criteria for independent verification organizations by January 1, 2028; a public AI Auditor Registry by Jan...
California AI Transparency Act
Every provider of a publicly accessible generative AI system in California must offer a free disclosure verification tool and embed latent disclosures in generated med...
Colorado SB 26-189
Disclosure-based regime for high-risk AI decisions without impact-assessment or risk-program mandates. Penalties up to $20,000 per violation (confirm). The FTC's July ...
TRAIGA (HB 149)
Applies to anyone who develops or deploys AI in Texas. Prohibited uses, government disclosure duties, attorney general enforcement with a 60-day cure period, penalties...
OMB M-25-22
Contract terms and documentation duties for AI procured by federal agencies; no certification requirement.
US federal AI posture
Federal posture favoring preemption of state AI laws. No preemption statute enacted as of October 2026; a DOJ AI Litigation Task Force exists.
UK assurance roadmap
Government plan to grow the AI assurance market, including UKAS accreditation of ISO 42001 certifiers and auditor competencies, with an innovation fund in 2026.
UK DUAA ADM rules
Reframed rules on solely automated decisions with safeguards; an ICO AI code is mandated but not yet drafted.
ASEAN guides
Regional voluntary guidance (February 2024) with an expanded guide on generative AI (January 2025).
AI Verify / AI TAP
Singapore's testing toolkit, a standing assurance sandbox, and a programme that accredits AI testing providers.
Singapore Model Framework
IMDA and AI Verify Foundation guidance in traditional, generative, and agentic editions, crosswalked to NIST AI RMF.
ETDA guidelines
Soft-law guidance for executives and for generative AI in organizations, plus a government clinic that advises organizations on governance.
Thai draft AI Act
ETDA's draft: three tiers (prohibited, high-risk by royal decree, designated systems), explicit deployer duties (risk management, oversight staff, six-month logs, inci...
India synthetic media rules
Visible labels, embedded provenance metadata, user declarations, and short takedown windows for synthetic media.
China labeling measures
Explicit and implicit (metadata) labels on AI-generated content, app-store review of labeling, and user self-declaration, with a mandatory national standard.
AI Promotion Act
Promotion-oriented framework law without penalties; the first AI Basic Plan followed in December 2025.
AI Basic Act
Framework law with ten high-impact domains, transparency and labelling duties for generative AI, safety duties for very large models, and local-representative threshol...
EN 18286
The first harmonised standard under the AI Act (Article 17 quality management). Its Annex D maps to ISO/IEC 42001 Annex A.
GPAI Code
Voluntary code for general-purpose AI model providers with transparency, copyright, and safety chapters. Roughly two dozen signatories including Amazon, Anthropic, Goo...
EU transparency Code
Practical steps for Article 50 duties: machine-readable marking, visible labels using the Commission's icon set, deepfake labelling, and labelling of AI-generated publ...
Regulation (EU) 2026/1744
Amends the AI Act: moves the high-risk dates, creates a small mid-cap category (under 750 staff and turnover of 150M euro or less, or balance sheet of 129M euro or les...
EU AI Act
The EU's risk-based AI law, Regulation (EU) 2024/1689. Obligations arrive in phases; the dates below reflect the 2026 Digital Omnibus amendments.
43 of 43 entries shown. 19 verified against their primary source by the editor; the rest are marked.