← back to overview

NIST AI RMF 2.0 · regulation pack · preview

NIST AI Risk Management Framework 2.0

NIST AI 100-1 v2.0 — voluntary framework providing a flexible, rights-preserving approach to managing risks of AI systems. Builds on RMF 1.0 (Jan 2023) with expanded coverage for generative AI per the Generative AI Profile. De-facto baseline for US federal contractors and a common reference in state AI laws.

jurisdiction · US version · 2.0 effective · July 1, 2025 requirements · 5

requirements — preview

GOVERN · Function high-risk gate

GOVERN — culture of AI risk management

Cultivate and implement a culture of risk management. Includes policies, processes, accountabilities, and workforce diversity considerations.

artifact: ai_policyartifact: ai_committee_charter evidence: risk_policyevidence: accountability_matrix

MAP · Function high-risk gate

MAP — context and risk

Establish the context in which AI risks are framed; identify the intended use, deployment environment, stakeholders, and the AI system's capabilities.

artifact: ai_impact_assessment evidence: context_analysisevidence: use_case_inventory

MEASURE · Function high-risk gate

MEASURE — assess, analyse, track

Use quantitative and qualitative tools, techniques, and methodologies to analyse, assess, benchmark, and monitor AI risk, including testing, evaluation, validation, and verification (TEVV).

artifact: model_card evidence: eval_pass_rateevidence: red_team_reportevidence: bias_audit

remaining 2 requirements — locked

MANAGE · Function

MANAGE — prioritise and respond

Allocate resources to identified risks on a regular basis. Treatment, monitoring, and response — including incident response and decommissioning.

GAI-1 · Profile

GAI Profile — Generative AI considerations

The NIST Generative AI Profile (July 2024) augments the four functions with risks specific to GenAI: confabulation, data privacy leakage, harmful bias, environmental impacts, value-chain risk.

Unlock the full NIST AI RMF 2.0 pack

Get all 2 remaining requirements, generated reports, evidence-mapping templates, and the audit-chain export. Cancel anytime.

Unlock the pack → or full platform

Not ready to buy? Run the free EU AI Act gap report.

12-question intake mapped to Articles 9-15. Branded PDF in your inbox in minutes. No card required.

Free gap report →

Effective Date: 1 January 2026 | Last Updated: August 2026

IndustryAI ("we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights.

1. Information We Collect

Account Data: Name, email address, password (hashed), and organisation details provided during registration.
Usage Data: Pages visited, features used, AI job history, and session timestamps collected automatically.
Uploaded Content: Documents, images, or files you submit to our AI tools (e.g. electricity bills, house photos). These are processed to deliver results and not shared with third parties.
Payment Data: Billing name, card last 4 digits, and transaction IDs. Full card details are handled by PCI-DSS-compliant processors (Stripe, PayPal, M-Pesa) and never stored on our servers.
Device & Browser Data: IP address, browser type, operating system, and referral URLs collected via server logs and analytics.

2. How We Use Your Information

Deliver and improve our AI-powered services (house design, solar planning, business tools).
Process subscriptions, payments, and send service-related communications.
Personalise your experience and surface relevant features.
Detect fraud, enforce our Terms of Service, and maintain platform security.
Comply with applicable laws and respond to lawful requests.

3. Data Sharing

We do not sell your personal data. We share information only with:

Service Providers: Hosting, email, and analytics vendors under strict data-processing agreements.
AI Providers: Content you submit is sent to third-party AI APIs (e.g. Anthropic, OpenAI, Groq, Stability AI) solely to generate the output you requested. These providers process it as our sub-processors and do not use it to train their models.
Legal Authorities: When required by law or to protect rights and safety.

4. Data Retention

Account data is retained for the duration of your subscription. Uploaded files and AI outputs are retained for 12 months then purged unless you delete them earlier from your dashboard.

When you request deletion, we run a two-stage process so that an accidental or disputed request can still be undone:

Day 30 — deactivation. Your organisation is disabled and personal details (name, email, profile photo) are anonymised. Your content is retained but inaccessible.
Day 120 — erasure. Your database schema is dropped and all remaining data is permanently deleted. Recovery is no longer possible after this point.

You can cancel the request yourself before deactivation, and ask support to restore the account between deactivation and erasure.

5. Your Rights

Depending on your jurisdiction — including under the EU/UK GDPR and the Kenya Data Protection Act 2019 — you have the right to access, correct, delete, export, or restrict processing of your personal data, and to object to certain processing.

Export: Download a machine-readable copy of your personal data at any time from your Privacy & Data settings.
Deletion: Organisation owners can request erasure from the same page; the timeline is set out in §4. Other members should email the address below and we will remove their membership and personal data within 30 days. In both cases we retain records we are legally required to keep, such as tax records of completed payments.
Other rights: Contact privacy@industryai.africa. We respond within 30 days.

You also have the right to lodge a complaint with your local supervisory authority — in Kenya, the Office of the Data Protection Commissioner.

6. Security

We use TLS encryption in transit, encryption at rest for stored files, role-based access controls, tenant-level database isolation, and malware scanning of uploaded files. No system is perfectly secure; please use a strong, unique password and enable two-factor authentication.

7. International Transfers

Our infrastructure and some sub-processors (notably AI and email providers) are located outside Kenya, including in the United States and the European Union. Where personal data is transferred internationally, we rely on the sub-processor's standard contractual clauses or an equivalent safeguard.

8. Changes to This Policy

Material changes will be communicated by email and/or an in-app notice at least 14 days before taking effect. Continued use of the platform constitutes acceptance.

9. Contact

IndustryAI — Privacy Team
Email: privacy@industryai.africa
Registered in Kenya.

Effective Date: 1 January 2026 | Last Updated: August 2026

These Terms of Service ("Terms") govern your access to and use of the IndustryAI platform and services. By creating an account or using any feature, you agree to these Terms.

1. Eligibility

You must be at least 18 years old and capable of entering a binding contract. By using IndustryAI on behalf of an organisation, you represent that you are authorised to bind that organisation to these Terms.

2. Permitted Use

Use the platform only for lawful purposes and in accordance with these Terms.
Do not share your credentials, resell access, or create multiple free accounts.
Do not attempt to reverse-engineer, scrape, or disrupt the platform or its AI systems.
Do not upload content that is illegal, harmful, deceptive, or infringes third-party rights.

3. AI-Generated Content

AI outputs (floor plans, solar designs, business plans, etc.) are provided for informational and planning purposes only. They do not constitute professional architectural, engineering, legal, or financial advice. You are responsible for verifying designs with qualified professionals before construction or investment.

AI systems can produce inaccurate or incomplete output. Cost estimates, structural dimensions, financial projections, and regulatory references must be independently verified before you rely on them.

4. Subscription & Payment

Subscriptions are billed in advance on a monthly or annual basis.
You may cancel at any time; cancellation takes effect at the end of the current billing period.
We reserve the right to change pricing with 30 days' notice. Existing subscribers retain their price until their next renewal after the notice period.
Refunds are governed by our Refund Policy.

5. Usage Limits

Each plan includes a stated allowance of AI generations and exports. We may throttle or pause generation once an allowance is exhausted, and may apply fair-use limits to prevent abuse that degrades service for other customers. Current allowances are shown on the pricing page and in your account.

6. Intellectual Property

Platform: IndustryAI and all underlying technology, trademarks, and brand elements are our property.
Your Content: You retain ownership of data and files you upload. You grant us a limited licence to process your content solely to deliver the requested service.
AI Outputs: Subject to applicable law, AI-generated outputs produced from your inputs are assigned to you for personal and commercial use.

7. Limitation of Liability

To the fullest extent permitted by law, IndustryAI's total liability for any claim arising from use of the platform is limited to the fees you paid in the 3 months preceding the claim. We are not liable for indirect, consequential, or incidental damages, including loss of profit or data. Nothing in these Terms excludes liability that cannot lawfully be excluded.

8. Termination

We may suspend or terminate your account immediately for material breach of these Terms, fraudulent activity, or non-payment. You may close your account at any time from your Privacy & Data settings. Upon termination, your data will be handled per our Privacy Policy.

9. Governing Law

These Terms are governed by the laws of Kenya. Disputes shall first be addressed through good-faith negotiation; unresolved disputes will be submitted to binding arbitration in Nairobi.

10. Changes to These Terms

We will provide 14 days' advance notice of material changes. Continued use after the effective date constitutes acceptance.

11. Contact

IndustryAI — Legal Team
Email: legal@industryai.africa

Effective Date: 1 January 2026 | Last Updated: August 2026

This Refund Policy explains when you can get your money back, how to ask, and how long it takes. It applies to all IndustryAI subscriptions and one-off purchases.

1. 14-Day Money-Back Guarantee (New Subscriptions)

If you are a new subscriber, you may request a full refund within 14 days of your first payment for any reason. We will refund the full amount to your original payment method.

This guarantee applies once per customer and covers your first paid subscription only.

2. Renewals

Renewal payments are not automatically refundable, because you are notified before each renewal and can cancel at any time. However:

If you were charged for a renewal you had already cancelled, we refund it in full.
If you contact us within 7 days of an unintended renewal and have not used your allowance in that period, we will refund it.

3. One-Off Purchases (Report Unlocks, Add-Ons, Credit Packs)

Before delivery: fully refundable.
After delivery: a one-off purchase that has been generated and delivered (for example a PDF export or an unlocked report) is generally not refundable, because the AI cost has already been incurred and the output cannot be returned.
Exception: if the output failed, was not delivered, or was materially defective, we refund it in full or regenerate it at your choice. See §4.

4. Service Failures — Always Refundable

Regardless of any time limit above, you are entitled to a refund where:

A generation you paid for failed and could not be completed.
You were charged more than once for the same purchase.
You were charged after cancelling.
The platform was unavailable for a substantial part of your billing period.

5. What Is Not Refundable

Dissatisfaction with the content of an AI output that was generated and delivered as described. AI output is a planning aid, not professional advice — see Terms §3.
Accounts terminated for breach of our Terms of Service, including fraud or abuse.
Allowance that went unused during a billing period.

6. How to Request a Refund

Email billing@industryai.africa from the address on your account, including your account email and the approximate date and amount of the charge. You do not need to give a reason for a §1 request.

We acknowledge every request within 2 business days and decide within 5 business days.

7. How Long Refunds Take

Card (Stripe): 5–10 business days to appear on your statement after we approve it.
PayPal: typically 3–5 business days.
M-Pesa: typically 1–3 business days.

Refunds are always returned to the original payment method. We cannot refund to a different account.

8. Chargebacks

If you believe you have been charged in error, please contact us first — we can almost always resolve it faster than a chargeback. Raising a chargeback without contacting us may result in your account being suspended while the dispute is investigated.

9. Statutory Rights

This policy is in addition to, and does not limit, any refund or cancellation rights you have under applicable consumer law, including the Kenya Consumer Protection Act and, for EU/UK consumers, statutory withdrawal rights.

10. Contact

IndustryAI — Billing
Email: billing@industryai.africa