EU AI Act and NIST AI RMF

Agent records an auditor can check without trusting you.

A tamper-proof receipt for every agent decision, approvals that wait for a person, and the NIST AI RMF controls each one supports. This maps tested behaviour to each control. It is not a certification, a conformance assessment or a compliance opinion.

All benchmarks Read the framework

Each risk, the control that answers it, and the test behind it.

EU AI Act Art. 12
Record-keeping
Evidence
Every agent decision leaves a tamper-proof receipt you keep
15 of 15 decision receipts check out offline, no account needed
EU AI Act Art. 14
Human oversight
Evidence
Actions that need approval wait for a person; no answer means no action
2 of 2: held until approved, never ran without one, late approval refused
NIST AI RMF GOVERN
GOVERN-1.1, 1.2, 1.4
Evidence
Rules set by the owner for each agent
AgentGovBench 48 of 48 on the scenarios tagged with these controls
NIST AI RMF MAP
MAP-2.1, 4.1
Evidence
Each agent tied to its owner and what it may do
AgentGovBench 48 of 48
NIST AI RMF MEASURE
MEASURE-2.3, 2.6, 2.7
Evidence
Public tests anyone can rerun, with verifiable results
AgentGovBench 48 of 48
NIST AI RMF MANAGE
MANAGE-2.1, 2.2, 4.1
Evidence
Revoke once, every copy stops
AgentGovBench 48 of 48; running job stopped 18 s after revoke
NIST NCCoE
AI agent identity and authorization (concept paper)
Partial
Agent identity, owner approval and an audit trail anyone can check
15 of 15 receipts check out offline

Control	What Proofable does	Tested result	Status
EU AI Act Art. 12Record-keeping	Every agent decision leaves a tamper-proof receipt you keep	15 of 15 decision receipts check out offline, no account needed	Evidence
EU AI Act Art. 14Human oversight	Actions that need approval wait for a person; no answer means no action	2 of 2: held until approved, never ran without one, late approval refused	Evidence
NIST AI RMF GOVERNGOVERN-1.1, 1.2, 1.4	Rules set by the owner for each agent	AgentGovBench 48 of 48 on the scenarios tagged with these controls	Evidence
NIST AI RMF MAPMAP-2.1, 4.1	Each agent tied to its owner and what it may do	AgentGovBench 48 of 48	Evidence
NIST AI RMF MEASUREMEASURE-2.3, 2.6, 2.7	Public tests anyone can rerun, with verifiable results	AgentGovBench 48 of 48	Evidence
NIST AI RMF MANAGEMANAGE-2.1, 2.2, 4.1	Revoke once, every copy stops	AgentGovBench 48 of 48; running job stopped 18 s after revoke	Evidence
NIST NCCoEAI agent identity and authorization (concept paper)	Agent identity, owner approval and an audit trail anyone can check	15 of 15 receipts check out offline	Partial

Questions

Does this make my agent EU AI Act compliant?

No single tool does. This maps tested behaviour to each control. It is not a certification, a conformance assessment or a compliance opinion. It gives you the records and approval evidence those articles ask for.

What makes the records audit-ready?

Each receipt ties together what the agent was asked, the rule it followed and what happened. An auditor can check it offline, without access to your systems or ours, and any change fails the check.

Where do the NIST mappings come from?

Each AgentGovBench scenario is tagged by its maintainers with the NIST AI RMF controls it tests. Proofable handled all 48.

Records an auditor can check.

Connect an agent. Every decision leaves a tamper-proof receipt you keep and anyone can check offline.

Start free