NIRAP, National Institute for Responsible AI Practice

Using AI isn’t what creates liability. Using it with nothing written down is.

NIRAP is an independent standards body for firms that use AI tools. We give your firm the standard, the tools and the independent verification to put an AI governance program in writing.

The AI governance bundleToolkit + Training + Verification

The Responsible AI Toolkit home screen, showing a firm partway through its sessions01ToolkitGuided sessions
AI Governance 101, course title frame02TrainingAI Governance 101
RAICB Responsible AI Verified Business trust badge03VerificationRAICB trust badge
  • Aligned with recognized frameworksNIST AI RMF, ISO/IEC 42001, and profession guidance such as NAR’s
  • From an independent standards bodyNIRAP verifies; it does not sell AI tools
  • Live for real estate brokeragesA law firm program is in development
Who NIRAP serves

Responsible AI standards for firms without a compliance team.

If your practice buys AI tools off the shelf and puts the output in front of clients, NIRAP was built for you. We do not serve model labs, and we do not assume you have a chief AI officer.

Built for firms whose people use tools like these every day

  • ChatGPT
  • Microsoft Copilot
  • Google Gemini
  • Claude
  • Grammarly
  • Canva
  • Perplexity
  • Zoom AI Companion
  • Otter.ai
  • Adobe Firefly
  • Notion AI
  • Jasper

Product names are trademarks of their respective owners. They are shown as examples only. NIRAP is not affiliated with, endorsed by, or sponsored by any of these companies.

One standard for licensees

V-AGE™ examines how your office uses AI. It does not audit the vendor’s model, and it does not assume you own the system.

Sized for a working practice

No compliance department is required. The controls are written in plain language, and a program can be written and ready to roll out in as little as one week.

A person reviews the file

A NIRAP assessor examines every submission. No credential is issued on assertion, and the fee does not change with the outcome.

Adoption and governance together

NIRAP is not here to talk your firm out of AI. The goal is a firm whose people can move faster with confidence, not slower while they wait for permission.

The AI governance bundle

Everything your firm needs, in three parts.

Every NIRAP program is the same bundle of three parts: a toolkit that writes your program, training for your people, and independent verification. Each profession gets its own edition, written against that profession’s own rules.

Part 1 of 3

The Responsible AI Toolkit

Self-guided. You answer plain-language questions. The toolkit builds the documents your firm needs.

  • A guided tool asks one question at a time, in plain language.
  • The AI assistant drafts anything your firm is missing.
  • Each session ends with finished documents and tools that make your rollout easier.

Your own staff run it. No consultants and no site visits.

Real estate brokeragesLive

Five working sessions, one finished document from each.

  • Approved AI Tool Register
  • Firm AI Policy
  • Work Review Standard
  • AI Records Retention Schedule
  • Rollout Plan
See the five sessions at brokers.nirap.org →

Law firmsIn development

Nine working sessions, written for law firms.

The law firm edition is in development. It covers the same ground in more depth, because the rules that govern lawyers ask more of a firm.

Part 2 of 3

AI Governance 101: one training video for your whole office.

Send the link. Everyone who uses AI watches it, and you get a named record for the file.

~1 hourof on-demand video, watched at each person’s own pace
Everyoneevery staff member who uses AI tools, not only the licensed professionals
1 recorda named acknowledgment each person sends to the firm

The real estate edition is available now. The legal edition is in production.

Part 3 of 3

Verification and the RAICB™ badge

The badge means someone checked.

  1. 1The firm uploads the documents its toolkit produced.
  2. 2A NIRAP reviewer, a person and not software, checks them against the V-AGE™ standard.
  3. 3The firm earns a two-year badge it can show to clients, on its website and in recruiting.

RAICB™ certification is a point-in-time attestation that the program is in place. It is not a guarantee of legal or regulatory compliance.

What gets reviewed

The documents from your toolkit sessions, plus each person’s training acknowledgment.

3 to 5 business days

A NIRAP reviewer reads everything you submit, usually within a week.

Gaps come back with a resolution

If something is missing, the reviewer tells you what it is and how to resolve it.

Anyone can check it

Clients and recruits can confirm your badge at verify.nirap.org.

Programs and pricing

See the program written for your profession.

Each profession has its own program site. That is where you will find its sessions, its fee calculator and its resources, because the fee depends on how firms in that profession are built.

In development

Law firms

The law firm program is being built for mid-size and smaller firms. It will cover nine toolkit sessions, AI Governance 101, and RAICB verification.

Email us about the law firm program
In development

Other professions

HR and staffing, financial services, consulting and others are next. Demand decides the order we build them in.

Email us
The standard behind the credential

V-AGE™ examines how you use AI, not the technology itself.

V-AGE™, the Versatile Adaptive Governance Engine, is NIRAP’s standard. It does not audit the model your vendor built. Instead, it examines each way your office actually uses AI.

Enterprise AI frameworks assume you have an engineering team. A professional services firm usually has licensed professionals and support staff. So we took the recognized frameworks and right-sized them for a firm like yours.

Drawn from
NIST AI RMF 1.0
AI Risk Management Framework
ISO/IEC 42001:2023
AI management systems
Profession guidance
Such as NAR’s AI Policy Template for Brokers
The V-AGE™ standard Versatile Adaptive Governance Engine More than 100 control practices, each rewritten for a firm that deploys AI tools. Your assessment selects only the controls that apply to your firm’s actual uses of AI.
Your firm gets A program sized to your office. Not a 200-page enterprise binder.
1

Inputs

What information goes in. This covers approved data sources, personal information removed before it is typed into a tool, and users trained before they get access.

2

Outputs

What comes out and where it goes. This covers checks for invented facts, a person reading the work before a client sees it, and limits on what can be produced.

3

Controls

Who is accountable. This covers a named owner for every use, a person in the loop on high-risk decisions, and a log you can produce later.

4

Constraints

The hard limits. This covers spending caps, prohibited subjects, regulatory boundaries, and permissions that decide who can use which feature.

How V-AGE™ lines up with NIST, ISO and the professions.

The mappings below are NIRAP’s own, offered as a guide. They are not published or endorsed by NIST, ISO, NAR or the ABA.

NIST · United States · January 2023

NIST AI Risk Management Framework 1.0

A voluntary federal framework for managing AI risk. It is organized into four functions: Govern, Map, Measure and Manage.

Where each function shows up in your program

  • GovernA written firm AI policy, a named owner, and training for everyone who uses AI.
  • MapAn AI tool register that records each tool, what it is used for and what data it touches.
  • MeasureA work review standard that says how AI output is checked, plus the free gap assessment.
  • ManageIncident reporting, records retention and scheduled check-ins after rollout.
ISO and IEC · International · December 2023

ISO/IEC 42001:2023

The international standard for an AI management system. It sets out what an organization needs in place to use AI responsibly and to keep improving.

Where its requirements show up in your program

  • LeadershipThe firm AI policy and the roles that own it (clause 5).
  • SupportStaff competence and awareness through AI Governance 101, and documented records through the retention schedule (clause 7).
  • OperationThe tool register and the work review standard (clause 8).
  • EvaluationCheck-ins, assessor review and reverification every two years (clauses 9 and 10).
Professional associations

The guidance your profession already follows

Associations publish what their members should do about AI. V-AGE™ writes a module for each profession against that guidance.

Modules by profession

  • Real estateThe brokerage module is written against NAR’s AI Policy Template for Brokers (March 2026).
  • Law firmsThe law firm module, now in development, is being written against ABA Formal Opinion 512 on generative AI (July 2024).
  • NextEach new profession gets its own module before its program opens.

A brokerage and a law firm work through different practices, because their rules differ. Both are reviewed against the same V-AGE™ standard.

What alignment means, and what it does not.

We want you to know exactly what a NIRAP credential says, because a credential is only worth what it claims honestly.

What RAICB verification confirms

  • The firm has a written AI policy.
  • Every program piece the frameworks call for is in place.
  • A NIRAP assessor, a person, reviewed the evidence.

What it does not claim

  • It is not ISO/IEC 42001 certification, which only an accredited certification body can issue.
  • NIST does not certify firms against the AI RMF, and neither does NIRAP on NIST’s behalf.
  • It cannot confirm that the policy is followed every day.
Who wrote the standard

V-AGE™ was not drafted by academics or by an AI vendor. It was built by people who have carried this risk inside regulated businesses: cybersecurity practitioners, governance and privacy specialists, and business operators who have run firms under scrutiny.

On the jargon

A control practice is one specific thing your office does and can prove, such as naming the person who approves a new AI tool. A regulatory module is the set of practices a profession’s rules require.

Why programs look different

Assessments draw from more than 100 practices and more than 10 modules. That is why what a law firm completes looks nothing like what a brokerage completes.

How firm verification works

Two paths to the same firm verification.

Most firms take the express path, which comes with the AI governance bundle. Organizations with several business lines or complex AI use take the enterprise path on V-AGE Assess™. Both paths end in a submission reviewed against the V-AGE™ standard, and verified firms earn the Responsible AI Certified Business credential.

Express path · Included in the bundle

Responsible AI Toolkit

This path is for firms that need a working governance program fast.

  • Guided work sessions, run by your own staff
  • Every document your program needs, written for your firm
  • Written and ready to roll out in as little as one week
  • Ends in a submission for firm verification
Enterprise path · V-AGE Assess™

Enterprise governance program

This path is for organizations whose AI use is too complex for a single firm-level program.

  • A dashboard configured to your business lines and use cases
  • Built over two to four weeks at your own pace
  • Scoped on a discovery call
  • Reviewed by a NIRAP assessor before the credential is issued

The enterprise path in five steps.

Most organizations finish the baseline in two to four weeks.

  1. Step 1

    Discovery call

    Thirty minutes to understand how your firm uses AI. Your assessment is configured from this conversation.

  2. Step 2

    A tailored dashboard

    You see only the controls that apply to your firm and your use cases.

  3. Step 3

    Work at your own pace

    The platform explains each item in plain language and drafts missing documents for you to review and adopt.

  4. Step 4

    A NIRAP assessor reviews

    A person examines what you submitted against the V-AGE™ standard.

  5. Step 5

    Your credential is issued

    You receive a trust badge, an assessment report and a public verification page, good for two years.

Why it matters now

“We are careful” is not a defensible answer.

A client, a regulator or a carrier may ask what governance you have for the AI tools your people use every day. Recollection is not evidence. The exposure looks different in each profession, but it arrives through the same three doors.

Door 1

Employment and hiring

AI used to screen, rank or evaluate people sits under Title VII and the ADEA. The EEOC has been direct that automating a decision does not move responsibility off the employer.

Door 2

Professional duty of care

When AI-assisted advice, filings or documents harm a client, the claim falls on the practice that delivered them. Your licensing board will ask what your firm did, and whether it was written down.

Door 3

Client data and confidentiality

Client information typed into a personal AI account leaves your control. Most vendor contracts disclaim responsibility for harm their tools cause, and prompt histories are discoverable.

Real estate, as a worked example

These are the Fair Housing Act civil penalties per violation, before actual damages, attorney fees and injunctive relief (24 CFR §180.671). Every profession has its own equivalent schedule.

$26,262No prior violation
$65,653One prior within five years
$131,308Two or more within seven years

State AI statutes are already on the books in Colorado, Illinois and Texas, and licensing boards are drafting guidance. A firm that builds its record now has one ready when it is asked.

Why it holds up

A credential is worth exactly what the independence behind it is worth.

NIRAP, the National Institute for Responsible AI Practice, is a standards and certification body. We are not a consultancy, and we have no stake in any AI tool.

What NIRAP is
  • An independent standards body with no stake in any AI tool
  • The author of V-AGE™, more than 100 control practices
  • Assessors who review every submission
  • A licensed TREC continuing education provider (11365-CEP)
  • An exam blueprint written to NCCA standards
What NIRAP is not
  • Not an AI vendor, and not paid to pass you
  • Not a self-assessment or an automated score
  • Not a brake on adoption
  • Not legal advice, insurance or a warranty

Guardrails. Not brakes.™

Most AI policies are written to say no. Ours are written so your people can say yes safely. Adoption and governance should run side by side. You should not have to stop using AI to get it under control, and you should not have to accept unmanaged risk to keep using it.

BrakesGuardrails
Ban the tools.Approve the right tools.
A policy nobody reads.A standard people use every day.
AI used in secret.AI used in the open.
Slow down.Move with confidence.
Get started

Book your discovery call.

This is a 30-minute call with NIRAP. We scope your firm, confirm your program fee, and answer your questions before you commit.

  • 01Toolkit. The Responsible AI Toolkit, guided work sessions for each policy your firm needs.
  • 02Training. AI Governance 101, about an hour of video, for every staff member who uses AI tools.
  • 03Verification. RAICB verification for the firm, reviewed by a NIRAP assessor.
+$1,500

Add a NIRAP coach. The coach joins a working call at each session and reviews your documents before they go to the assessor.

Currently open only to real estate brokerages and Realtor teams. To see your fee before the call, use the calculator at brokers.nirap.org. The law firm program is in development. In another profession? Write to info@nirap.org, and tell us what your firm does.

Book your discovery call

Nothing is charged today. The button sends us your details and opens the calendar, where you pick a time for your 30-minute discovery call.