Compliance Agent [Beta]

Introduction

Compliance Agent [Beta] generates responses to compliance questions using your organization's documentation. By grounding answers in your own source materials, it reduces the time spent drafting, improves consistency across assessments, and helps teams move faster from evidence gathering to completed responses.

Compliance Agent [Beta] is enabled for all customers and vendors. It is being introduced in an initial beta and will be refined over time. For current scope and content requirements, see Limitations (Beta).

Preconditions

Use a new, eligible assessment. Work in a new NIST AI RMF Starter Pack v2 Compliance Framework created after the release date. Frameworks that already exist, whether in-progress or completed, are not eligible for Compliance Agent [Beta].
Source documents. Compliance Agent uses PDFs only. To be available to the feature, PDFs must be uploaded after the release date (historical documents aren't embedded in the first release). The quality and completeness of your uploaded documentation directly affect the quality of Compliance Agent responses.
PDF requirements. Upload unprotected PDFs. Compliance Agent reads text only; content that exists only in images, scans, or diagrams inside a PDF isn't used. Password-protected PDFs aren't embedded, even if they upload successfully.
Library limits. Existing Document Library file size limits (20MB) continue to apply.
Avoid duplicates. Don't include the same content under different filenames; duplicate content can limit results.

Entry Points

Compliance Agent [Beta] is available when working inside a NIST AI RMF Starter Pack v2 Compliance Framework. After you select your reference documents for the framework, two entry points become available:

Framework Level - Answer All Questions

Use Answer All Using Compliance Agent to generate responses across the entire framework.

Single Question - Answer One Question

Below a question's response field, use the Use Compliance Agent to Generate Response button to generate a response for that specific question.

These options appear after reference documents have been selected for the framework.

Quick Start

1. Upload Documents

Add at least two to three unprotected PDFs you want Compliance Agent [Beta] to reference. Only newly uploaded PDFs are eligible.

2. Create Framework

Add a new NIST AI RMF Starter Pack v2 Compliance Framework to your AI System.

3. Select Reference Documents

Open the framework and choose the PDFs you uploaded and finalize your selection.

4. Run Compliance Agent

Use “Answer All Using Compliance Agent” to generate responses across the framework, or “Use Compliance Agent to Generate Response” for individual questions.

5. Review Responses

Generated answers appear in the framework with citations to you selected documents.

Instructions

Select Reference Documents

1. Open a new NIST AI RMF Starter Pack v2 Compliance Framework in your AI System.

2. In the framework, open the Compliance Agent Documents dropdown.

3. Select the relevant documents you want Compliance Agent to use.

4. Click Finalize Selection and click Confirm and Continue to Form in the pop-up.

Answer All Using Compliance Agent

1. With your reference documents selected, click Answer All Using Compliance Agent at the bottom of the framework.

2. Compliance Agent will generate responses in 5-question batches across the entire framework.

3. Stay on the page until all responses are complete.

Answer Single Questions Using Compliance Agent

1. Navigate to the specific question you want to answer.

2. Below the input field, click Use Compliance Agent to Generate Response.

3. Compliance Agent will generate a response for that question only.

Limitations (Beta)

Document Embedding

Only newly uploaded documents are embedded; historical documents are not processed in this first release.
Only PDFs are supported. Compliance Agent reads text only; images, diagrams, or scanned content in PDFs are not used.
Password-protected PDFs are not embedded, even if they upload successfully.
Existing document library file size limits (20MB) still apply.

Compliance Agent [Beta]

Compliance Agent is not available for existing NIST AI RMF Starter Pack v2 frameworks that are already in progress or completed.
To use Compliance Agent, you must either delete your current NIST AI RMF Starter Pack v2 and then add a new NIST AI RMF Starter Pack v2 to start from scratch, or create a new AI System, add the NIST AI RMF Starter Pack v2, and open the framework from there.
You should avoid uploading duplicate documents (the same content with different filenames), because duplicates can limit results.
Compliance Agent takes approximately two minutes to generate each response, and running it across an entire framework will take longer.

These constraints apply during the beta release and will be refined over time.

Did this answer your question?