NIST AI RMF Generative AI Profile — provisions explorer

A procurement officer evaluating a vendor against NIST AI RMF Generative AI Profile can use this page to walk the operative articles + paragraphs the instrument touches, anchored to the primary source. Each row groups every coverage cell that names that article so the reader sees WHICH governance topic each clause speaks to. Use it as a checklist scaffold, not as legal advice (see charter §7.4).

§3.1

1 cell

governs
Catastrophic & Existential Risk
NIST AI 600-1 §3.1 CBRN Information Uplift; §3.3 Dangerous, Violent, or Hateful Content
Verbatim text:
Verbatim text not yet transcribed — see primary source.
Open primary source: NIST AI 600-1 (Jul 2024)

§3.11

1 cell

governs
Deepfakes / Synthetic Content
NIST AI 600-1 §3.11 Confabulation + §3.10 Information Integrity (synthetic content)
Verbatim text:
Verbatim text not yet transcribed — see primary source.
Open primary source: NIST AI 600-1 (Jul 2024)

§3.4

1 cell

governs
Training-Data Rights
NIST AI 600-1 §3.4 Data Privacy + §3.7 Intellectual Property
Verbatim text:
Verbatim text not yet transcribed — see primary source.
Open primary source: NIST AI 600-1 (Jul 2024)

Unanchored citations

7 cells

governs
Foundation Models / GPAI
Entire NIST AI 600-1 scope is GPAI / GenAI
Verbatim text:
Verbatim text not yet transcribed — see primary source.
Open primary source: NIST AI 600-1 (Jul 2024)
governs
Transparency Obligations
Govern + Map cross-cutting documentation requirements applied to GenAI
Verbatim text:
Verbatim text not yet transcribed — see primary source.
Open primary source: NIST AI 600-1 (Jul 2024)
governs
Agentic AI Governance
NIST AI 600-1 names Value Chain + Component Integration as risk category covering agentic / tool-use deployments
Verbatim text:
Verbatim text not yet transcribed — see primary source.
Open primary source: NIST AI 600-1 (Jul 2024)
governs
Synthetic Content Provenance
NIST AI 600-1 — Information Integrity is one of 12 named GenAI risk categories; covers synthetic-content labelling + provenance
Verbatim text:
Verbatim text not yet transcribed — see primary source.
Open primary source: NIST AI 600-1 (Jul 2024)
Contract clause language candidates
Candidate language — not legal advice (see /wiki/charter §7.4)
- Vendor shall provide documentation demonstrating compliance with the transparency / disclosure obligations identified at NIST AI RMF Generative AI Profile, including (as applicable) machine-readable provenance markers, model cards, and end-user disclosure flows.
governs
Environmental Impact of AI Training
NIST AI 600-1 — Environmental Impacts is one of 12 named GenAI risk categories
Verbatim text:
Verbatim text not yet transcribed — see primary source.
Open primary source: NIST AI 600-1 (Jul 2024)
implicit
Individual Redress
Accountability characteristic from base RMF; not GenAI-specific text
Verbatim text:
Verbatim text not yet transcribed — see primary source.
Open primary source: NIST AI 600-1 (Jul 2024)
implicit
AI in Elections
Information Integrity is a named risk category; election-AI is the canonical example
Verbatim text:
Verbatim text not yet transcribed — see primary source.
Open primary source: NIST AI 600-1 (Jul 2024)

Unanchored citations

7 cells

governs
Foundation Models / GPAI
Entire NIST AI 600-1 scope is GPAI / GenAI
Verbatim text:
Verbatim text not yet transcribed — see primary source.
Open primary source: NIST AI 600-1 (Jul 2024)
governs
Transparency Obligations
Govern + Map cross-cutting documentation requirements applied to GenAI
Verbatim text:
Verbatim text not yet transcribed — see primary source.
Open primary source: NIST AI 600-1 (Jul 2024)
governs
Agentic AI Governance
NIST AI 600-1 names Value Chain + Component Integration as risk category covering agentic / tool-use deployments
Verbatim text:
Verbatim text not yet transcribed — see primary source.
Open primary source: NIST AI 600-1 (Jul 2024)
governs
Synthetic Content Provenance
NIST AI 600-1 — Information Integrity is one of 12 named GenAI risk categories; covers synthetic-content labelling + provenance
Verbatim text:
Verbatim text not yet transcribed — see primary source.
Open primary source: NIST AI 600-1 (Jul 2024)
Contract clause language candidates
Candidate language — not legal advice (see /wiki/charter §7.4)
- Vendor shall provide documentation demonstrating compliance with the transparency / disclosure obligations identified at NIST AI RMF Generative AI Profile, including (as applicable) machine-readable provenance markers, model cards, and end-user disclosure flows.
governs
Environmental Impact of AI Training
NIST AI 600-1 — Environmental Impacts is one of 12 named GenAI risk categories
Verbatim text:
Verbatim text not yet transcribed — see primary source.
Open primary source: NIST AI 600-1 (Jul 2024)
implicit
Individual Redress
Accountability characteristic from base RMF; not GenAI-specific text
Verbatim text:
Verbatim text not yet transcribed — see primary source.
Open primary source: NIST AI 600-1 (Jul 2024)
implicit
AI in Elections
Information Integrity is a named risk category; election-AI is the canonical example
Verbatim text:
Verbatim text not yet transcribed — see primary source.
Open primary source: NIST AI 600-1 (Jul 2024)