Cross-Framework Translation

Indicative equivalences by framework

Published framework

NIST AI RMF, ISO/IEC 42001, and EU AI Act equivalences are indicative readings, not official certifications.

NIST AI RMF

  • Security → NIST Manage + Measure (misuse safeguards, testing, incident handling)
  • Stability → NIST Manage (continuity, monitoring, recovery)
  • Coherence → NIST Map + Measure (risk identification, behavior measurement)
  • Reputation → NIST Govern (external trust and accountability)
  • Transparency → NIST Govern (documentation, explainability)

Estimated NIST AI RMF maturity tier: Tier 1/4

ISO/IEC 42001

  • Security → clause 6 (risk treatment) + clause 8 (operational controls)
  • Stability → clause 8 (Operations) + clause 10 (Improvement)
  • Coherence → clause 6 (Planning) + clause 9 (Performance evaluation)
  • Reputation → clause 7 (Support)
  • Transparency → clause 4 (Context) + clause 5 (Leadership)

Estimated ISO 42001 coverage: 58%

EU AI Act

Articles 15, 16, 26, 50 mapped to Kanon dimensions.

Article 15 : Partial

Kanon mapping: Security + Stability

Article 16 : Partial

Kanon mapping: Security + Stability + Coherence + Transparency

Article 26 : Not aligned

Kanon mapping: Security + Transparency

Article 50 : Not aligned

Kanon mapping: Transparency

Sources used

Evidence preserved for this rating

Review methodology

Official site

Official site review

PASS — site is live, free tool is described as operational, blog content is present.

Open source

Evaluation notes

Scoring evidence summary

Stability: HTTP 200 on direct site check (2026-04-28) Coherence: Clear problem-solution framing: AI replacing search, Shopify stores not AI-ready

Open source

Public disclosure review

Disclosure and risk review

Unverified market statistics cited without sources ('94% of Shopify stores not recommended by AI') — cannot be independently validated.

Open source

Security review

Security v3.2 provisional review

Score Sécurité provisoire v3.2: 27/100 (S1 25, S2 20, S3 30, S4 32). score initial v3.2, susceptible de révision dans les 30 jours. Signaux publics observés: documentation sécurité très limitée.

Open source

Security evidence

Security evidence surface scan

Pages publiques sécurité/données détectées: /. Raisons: S1 signaux faibles; S2 signaux faibles; S3 sorties ou contrôles structurés documentés; S4 schémas, manifests ou config versionnée observables.

Open source

Dispute

If new material evidence changes the public record, operators can request a review through the public challenge channel.

Dispute this score

Aevio is rated C. Get the one-page gap-to-next-tier report.

Get Gap Report — €19