NIST AI RMF vendors for Retail & E-commerce
Vendors that support NIST AI Risk Management Framework and explicitly serve retail & e-commerce customers. Each vendor’s last-checked date is shown in the table.
| Vendor | HQ | Founded | Size | Pricing | Last checked |
|---|---|---|---|---|---|
| Collibra AI Governance | New York, United States | 2008 | 1000+ | Enterprise subscription; contact sales for custom quote based on users, assets, modules. | Sep 21, 2026 |
| OneTrust AI Governance | Atlanta, United States | 2016 | 1000+ | Enterprise platform; contact sales for quote, no public pricing listed | Sep 21, 2026 |
| ModelOp | Chicago, United States | 2018 | 11-50 | No public pricing listed; contact sales for enterprise quotes. | Sep 21, 2026 |
| 2021.AI | Copenhagen, Denmark | 2016 | 51-200 | Pricing is custom and tailored to use case, organization size, deployment model (on-prem or cloud), and selected modules. Contact sales required per their pricing page. | Sep 21, 2026 |
| Noma Security | New York, United States | 2023 | — | No prices on noma.security. AWS Marketplace lists the Noma Security Platform at $200,000 for a 12-month contract but doesn't say how many units that covers. | Oct 15, 2026 |
| WitnessAI | Mountain View, United States | 2023 | — | No prices on witness.ai. Its AWS Marketplace listing gives 12-month prices: WitnessAI for Enterprise at $180 per user (minimum 1,000 users, $180,000), WitnessAI Agentic Visibility at $24 per agent (minimum 2,500 agents, $60,000) and WitnessProtect model protection guardrail at $300,000. | Oct 15, 2026 |
About NIST AI RMF
The NIST AI Risk Management Framework (AI RMF 1.0) was published by the U.S. National Institute of Standards and Technology in January 2023, with a Generative AI Profile (NIST-AI-600-1) added in July 2024. It is a voluntary, sector-agnostic framework that organises AI risk management around four functions: Govern, Map, Measure, and Manage. Although adoption is voluntary, the AI RMF is referenced by the U.S. Executive Order on AI, several federal agency directives, and is increasingly cited by procurement teams and insurance carriers as a baseline expectation. NIST also publishes a companion AI RMF Playbook with concrete implementation suggestions and a Crosswalk that maps AI RMF actions to ISO/IEC 42001, ISO/IEC 23894, OECD AI Principles, and EU AI Act provisions.
Read framework guide →About Retail & E-commerce
Recommendation systems, pricing, and fraud models. Touched by FTC UDAP, CCPA/CPRA, and EU AI Act transparency rules.
See all retail & e-commerce vendors →