Cross-Framework Translation

Indicative equivalences by framework

Published framework

NIST AI RMF, ISO/IEC 42001, and EU AI Act equivalences are indicative readings, not official certifications.

NIST AI RMF

  • Security → NIST Manage + Measure (misuse safeguards, testing, incident handling)
  • Stability → NIST Manage (continuity, monitoring, recovery)
  • Coherence → NIST Map + Measure (risk identification, behavior measurement)
  • Reputation → NIST Govern (external trust and accountability)
  • Transparency → NIST Govern (documentation, explainability)

Estimated NIST AI RMF maturity tier: Tier 2/4

ISO/IEC 42001

  • Security → clause 6 (risk treatment) + clause 8 (operational controls)
  • Stability → clause 8 (Operations) + clause 10 (Improvement)
  • Coherence → clause 6 (Planning) + clause 9 (Performance evaluation)
  • Reputation → clause 7 (Support)
  • Transparency → clause 4 (Context) + clause 5 (Leadership)

Estimated ISO 42001 coverage: 73%

EU AI Act

Articles 15, 16, 26, 50 mapped to Kanon dimensions.

Article 15 : Partial

Kanon mapping: Security + Stability

Article 16 : Aligned

Kanon mapping: Security + Stability + Coherence + Transparency

Article 26 : Partial

Kanon mapping: Security + Transparency

Article 50 : Partial

Kanon mapping: Transparency

Sources used

Evidence preserved for this rating

Review methodology

Homepage metadata

Homepage metadata review

Homepage metadata reviewed from the public site. Title observed: FlowMCP — Build AI Agents, Automations & MCPs. Meta description or visible summary: FlowMCP lets developers and teams create production-ready AI agents and MCP servers in minutes, not months.

Open source

Official site

Official site review

Homepage returned HTTP 200. Title observed: FlowMCP — Build AI Agents, Automations & MCPs. Public offer summary: FlowMCP lets developers and teams create production-ready AI agents and MCP servers in minutes, not months.

Open source

Operational evidence

Operational surface scan

Accessible public pages: /. Signals detected: service public reachable, pricing or demo CTA visible, technical or integration surface visible.

Open source

Public disclosure review

Disclosure and counter-argument review

Disclosure review found pricing/demo signal. Main contrary argument: Even though no privacy policy found, the public record still shows service public reachable.

Open source

Security review

Security v3.2 provisional review

Score Sécurité provisoire v3.2: 31/100 (S1 25, S2 20, S3 30, S4 50). score initial v3.2, susceptible de révision dans les 30 jours. Signaux publics observés: logs, receipts, or audit trail signal.

Open source

Security evidence

Security evidence surface scan

Pages publiques sécurité/données détectées: /. Raisons: S1 signaux faibles; S2 signaux faibles; S3 sorties ou contrôles structurés documentés; S4 logs, reçus ou audit trail visibles publiquement, schémas, manifests ou config versionnée observables.

Open source

Dispute

If new material evidence changes the public record, operators can request a review through the public challenge channel.

Dispute this score

FlowMCP is rated B. Get the one-page gap-to-next-tier report.

Get Gap Report — €19