# What do NIST AI RMF, ISO/IEC 42001 and the EU AI Act each require of a company our size?

> None of the three sets a headcount threshold.

Source: https://meshin.co/faq/what-do-nist-ai-rmf-iso-iec-42001-and-the-eu-ai-act-require
Updated: 2026-09-12

---

None of the three sets a headcount threshold. NIST's AI RMF is voluntary guidance built around four functions: govern, map, measure and manage. ISO/IEC 42001 is a certifiable standard for running an AI management system. The EU AI Act is binding law: what you owe depends on being a provider (building AI into what you sell) or a deployer (only using it inside the business), plus the system's risk tier, not your size.