Cross-Framework Translation

Indicative equivalences by framework

Published framework

NIST AI RMF, ISO/IEC 42001, and EU AI Act equivalences are indicative readings, not official certifications.

NIST AI RMF

  • Security → NIST Manage + Measure (misuse safeguards, testing, incident handling)
  • Stability → NIST Manage (continuity, monitoring, recovery)
  • Coherence → NIST Map + Measure (risk identification, behavior measurement)
  • Reputation → NIST Govern (external trust and accountability)
  • Transparency → NIST Govern (documentation, explainability)

Estimated NIST AI RMF maturity tier: Tier 1/4

ISO/IEC 42001

  • Security → clause 6 (risk treatment) + clause 8 (operational controls)
  • Stability → clause 8 (Operations) + clause 10 (Improvement)
  • Coherence → clause 6 (Planning) + clause 9 (Performance evaluation)
  • Reputation → clause 7 (Support)
  • Transparency → clause 4 (Context) + clause 5 (Leadership)

Estimated ISO 42001 coverage: 53%

EU AI Act

Articles 15, 16, 26, 50 mapped to Kanon dimensions.

Article 15 : Partial

Kanon mapping: Security + Stability

Article 16 : Not aligned

Kanon mapping: Security + Stability + Coherence + Transparency

Article 26 : Not aligned

Kanon mapping: Security + Transparency

Article 50 : Not aligned

Kanon mapping: Transparency

Sources used

Evidence preserved for this rating

Review methodology

Official site

Official site review

PASS — site is live and functional. However, the product is operationally inseparable from the referral loop it promotes.

Open source

Evaluation notes

Scoring evidence summary

Stability: HTTP 200 on direct site check (2026-04-28) Coherence: Stated mission (earning referral credits via sign-ups) is reflected in site content

Open source

Public disclosure review

Disclosure and risk review

Presents platform-scale statistics ('6,684+ companies launched', '$193K ARR in 3 days') as its own social proof without clear attribution disclaimer — this is materially misleading. Product has no clear standalone value outside that referral loop.

Open source

Security review

Security v3.2 provisional review

Score Sécurité provisoire v3.2: 30/100 (S1 32, S2 30, S3 20, S4 38). score initial v3.2, susceptible de révision dans les 30 jours. Signaux publics observés: context or session isolation language, public versioning or changelog signal.

Open source

Security evidence

Security evidence surface scan

Pages publiques sécurité/données détectées: /, /blog. Raisons: S1 signalement d'incident ou posture de divulgation visible; S2 indices publics d'isolation de contexte ou de session; S3 signaux faibles; S4 versioning ou mise à jour publique accessible.

Open source

Dispute

If new material evidence changes the public record, operators can request a review through the public challenge channel.

Dispute this score

NanoRef is rated D. Get the one-page gap-to-next-tier report.

Get Gap Report — €19