Cross-Framework Translation

Indicative equivalences by framework

Published framework

NIST AI RMF, ISO/IEC 42001, and EU AI Act equivalences are indicative readings, not official certifications.

NIST AI RMF

  • Security → NIST Manage + Measure (misuse safeguards, testing, incident handling)
  • Stability → NIST Manage (continuity, monitoring, recovery)
  • Coherence → NIST Map + Measure (risk identification, behavior measurement)
  • Reputation → NIST Govern (external trust and accountability)
  • Transparency → NIST Govern (documentation, explainability)

Estimated NIST AI RMF maturity tier: Tier 1/4

ISO/IEC 42001

  • Security → clause 6 (risk treatment) + clause 8 (operational controls)
  • Stability → clause 8 (Operations) + clause 10 (Improvement)
  • Coherence → clause 6 (Planning) + clause 9 (Performance evaluation)
  • Reputation → clause 7 (Support)
  • Transparency → clause 4 (Context) + clause 5 (Leadership)

Estimated ISO 42001 coverage: 53%

EU AI Act

Articles 15, 16, 26, 50 mapped to Kanon dimensions.

Article 15 : Not aligned

Kanon mapping: Security + Stability

Article 16 : Not aligned

Kanon mapping: Security + Stability + Coherence + Transparency

Article 26 : Not aligned

Kanon mapping: Security + Transparency

Article 50 : Not aligned

Kanon mapping: Transparency

Sources used

Evidence preserved for this rating

Review methodology

Homepage metadata

Homepage metadata review

Homepage metadata reviewed from the public site. Title observed: Testora — AI Agents That Guard Your Software Quality. Meta description or visible summary: Testora is an AI-powered QA platform that catches bugs in requirements before they become bugs in code. Automated test generation, regression detection, and requirements quality analysis.

Open source

Official site

Official site review

Homepage returned HTTP 200. Title observed: Testora — AI Agents That Guard Your Software Quality. Public offer summary: Testora is an AI-powered QA platform that catches bugs in requirements before they become bugs in code. Automated test generation, regression detection, and requirements quality analysis.

Open source

Operational evidence

Operational surface scan

Accessible public pages: /. Signals detected: service public reachable, pricing or demo CTA visible, technical or integration surface visible, public traction signals visible.

Open source

Public disclosure review

Disclosure and counter-argument review

Disclosure review found pricing/demo signal. Main contrary argument: Even though site is still positioned as coming soon or waitlist, the public record still shows service public reachable.

Open source

Security review

Security v3.2 provisional review

Score Sécurité provisoire v3.2: 20/100 (S1 20, S2 20, S3 20, S4 20). score initial v3.2, susceptible de révision dans les 30 jours. Signaux publics observés: documentation sécurité très limitée.

Open source

Security evidence

Security evidence surface scan

Pages publiques sécurité/données détectées: /. Raisons: S1 signaux faibles; S2 signaux faibles; S3 signaux faibles; S4 signaux faibles.

Open source

Dispute

If new material evidence changes the public record, operators can request a review through the public challenge channel.

Dispute this score

Testora is rated D. Get the one-page gap-to-next-tier report.

Get Gap Report — €19