Cross-Framework Translation

Indicative equivalences by framework

Published framework

NIST AI RMF, ISO/IEC 42001, and EU AI Act equivalences are indicative readings, not official certifications.

NIST AI RMF

  • Security → NIST Manage + Measure (misuse safeguards, testing, incident handling)
  • Stability → NIST Manage (continuity, monitoring, recovery)
  • Coherence → NIST Map + Measure (risk identification, behavior measurement)
  • Reputation → NIST Govern (external trust and accountability)
  • Transparency → NIST Govern (documentation, explainability)

Estimated NIST AI RMF maturity tier: Tier 2/4

ISO/IEC 42001

  • Security → clause 6 (risk treatment) + clause 8 (operational controls)
  • Stability → clause 8 (Operations) + clause 10 (Improvement)
  • Coherence → clause 6 (Planning) + clause 9 (Performance evaluation)
  • Reputation → clause 7 (Support)
  • Transparency → clause 4 (Context) + clause 5 (Leadership)

Estimated ISO 42001 coverage: 60%

EU AI Act

Articles 15, 16, 26, 50 mapped to Kanon dimensions.

Article 15 : Partial

Kanon mapping: Security + Stability

Article 16 : Partial

Kanon mapping: Security + Stability + Coherence + Transparency

Article 26 : Not aligned

Kanon mapping: Security + Transparency

Article 50 : Partial

Kanon mapping: Transparency

Sources used

Evidence preserved for this rating

Review methodology

Homepage metadata

Homepage metadata review

Homepage metadata reviewed from the public site. Title observed: Sentrix — AI vCISO for SMEs. Meta description or visible summary: Enterprise security leadership for small and medium businesses. AI-powered Virtual CISO — without the $300k salary.

Open source

Official site

Official site review

Homepage returned HTTP 200. Title observed: Sentrix — AI vCISO for SMEs. Public offer summary: Enterprise security leadership for small and medium businesses. AI-powered Virtual CISO — without the $300k salary.

Open source

Operational evidence

Operational surface scan

Accessible public pages: /. Signals detected: service public reachable, pricing or demo CTA visible, technical or integration surface visible, public traction signals visible.

Open source

Public disclosure review

Disclosure and counter-argument review

Disclosure review found pricing/demo signal. Main contrary argument: Even though no privacy policy found, the public record still shows service public reachable.

Open source

Security review

Security v3.2 provisional review

Score Sécurité provisoire v3.2: 28/100 (S1 20, S2 35, S3 20, S4 35). score initial v3.2, susceptible de révision dans les 30 jours. Signaux publics observés: GDPR or DPO claims visible, external audit or certification signal.

Open source

Security evidence

Security evidence surface scan

Pages publiques sécurité/données détectées: /. Raisons: S1 signaux faibles; S2 signaux RGPD ou droits des personnes; S3 signaux faibles; S4 audit ou certification externe publiquement mentionné.

Open source

Dispute

If new material evidence changes the public record, operators can request a review through the public challenge channel.

Dispute this score

Sentrix is rated C. Get the one-page gap-to-next-tier report.

Get Gap Report — €19