Federal AI Compliance Plan — OMB M-25-21 / M-25-22 + CAIO Framework
Kriv AI · Cybersecurity & IT
Certification per AWS Marketplace.
Evidence tier Source Confirmed · 4 captures on record
What the publisher says
As described on AWS Marketplace.
OMB Memoranda M-25-21 and M-25-22 (signed April 3, 2025) replaced M-24-10 + M-24-18 and bind all CFO Act agencies to appoint Chief AI Officers, submit annual AI Use Case Inventories to OMB, classify AI as rights-impacting or safety-impacting, complete pre-deployment impact assessments, implement ongoing monitoring + human-in-the-loop + appeal / redress, and align acquisition to AI-specific standards. EO 14179 (January 23, 2025) rescinded EO 14110 but preserved CAIO + inventory + minimum-practices architecture. America's AI Action Plan (July 2025) extends deployment posture. Zero direct Marketplace competitors. Kriv is first at $65K–$275K — SAM.gov active (UEI DATARJAUUXQ2, CAGE 1AEF1), Anthropic CPN-certified, small-business eligible (NAICS 541511 / 541512 / 541715), with acquisition-vehicle flexibility (AWS Marketplace Private Offer + GSA MAS AI SIN 518210C + SEWP V + CIO-SP3+ + ITES-4H + Alliant 2 + NITAAC CIO-CS + 8(a) Sole Source).
CAIOs, CIOs, CDOs, CISOs, CROs, SAOPs, acquisition leaders, and federal primes across CFO Act agencies, DoD, IC (ICD 203), and contractors (Leidos, Booz Allen, Accenture Federal, SAIC, CACI, ManTech, Peraton, GDIT, Maximus, L3Harris, Lockheed, Raytheon, Northrop) face active M-25-21/M-25-22 deadlines, with FY2025 AI inventories submitted and FY2026 due. CAIOs are appointed but lack implementation frameworks while OGCs request compliance plans, IGs and GAO prepare audits, congressional oversight is active, and federal primes still lack operational AI programs and required subcontracting AI §(f) structures.
Show the rest of the publisher’s description (4 more lines)
Kriv positions 60–75% below Big Federal SI equivalents — credible small-business, not discount. SAM.gov active, CPN-certified, AWS Select Tier with 6 live Marketplace listings. Off-Marketplace alternatives: Booz Allen, Accenture Federal, Deloitte GPS, Leidos, SAIC, CACI, ManTech, Peraton, GDIT, Guidehouse ($400K–$1.5M, GSA MAS rates $385–$680/hr); Big 4 Advisory ($400K–$1.5M); FFRDCs (MITRE / Lincoln / RAND / Sandia); law firms ($800–$1,600/hr).
Engagement methodology (4–8 weeks). Week 1 scoping (define perimeter; collect FY 2024 + FY 2025 inventories + agency AI strategy + CAIO appointment; interviews CAIO / CIO / CDO / CISO / CRO / SAOP; review AI Governance Board charter + risk register + PIAs + SSPs). Week 2 high-impact determination per OMB M-25-21 + presumed-high-impact categories (law enforcement, immigration, housing, employment, credit, education, public benefits, healthcare, voting, judicial); preliminary impact assessments + CAIO waiver candidates. Week 3 (Foundation closes) CAIO reporting framework + Annual AI Strategy outline + AI Use Case Inventory in OMB template + minimum-practices compliance packet. Weeks 4–5 (Standard) M-25-22 acquisition overlay (AI PWS clauses; data-rights for training data + model weights + prompts; vendor AI DD; post-award monitoring; AI-failure termination); FedRAMP Rev 5 + NIST 800-53 Rev 5 AI Overlay; FAR Class Deviation 2024-O0010 flow-down; subcontracting AI § (f). Weeks 6–8 (Enterprise) DoD RAI Strategy + CDAO Toolkit + DoDD 3000.09 + Task Force Lima + RAIEG; IC ICD 203 + ODNI AIM; SAM.gov Capability Statement + past-performance + Secretarial briefing + congressional response + OIG/GAO audit-readiness binder.
Three tiers. Foundation $65K (4 wks; single bureau / sub-agency / component OR 1 high-impact use case — sized for micro-purchase / simplified acquisition). Standard $145K (6 wks; whole agency OR prime full scope; Foundation + M-25-22 acquisition + FedRAMP + FISMA + NIST 800-53 Rev 5 AI Overlay + FAR flow-down). Enterprise $275K (8 wks; cabinet / top-10 prime; Standard + DoD RAIEG + RAI Strategy + CDAO + IC ICD 203 + ODNI AIM + SAM.gov Capability + past-performance + Secretarial briefing + Congressional + OIG/GAO binder). Additional bureau / component +$25K each. EDP-eligible — engagement fees ($65K–$275K) count toward your agency's AWS Enterprise Discount Program commitment (up to 25%). Available via AWS Marketplace Private Offer, GSA MAS AI SIN 518210C, SEWP V, CIO-SP3+, and other acquisition vehicles. Contact info@kriv.ai to structure a private offer against your EDP or interagency BPA.
Important disclosures. Kriv does NOT provide legal advice. Agency OGC + prime GC retain ALL compliance determinations, OMB filing decisions, FAR clause interpretation. Kriv is NOT a FedRAMP 3PAO; NOT a CMMC C3PAO; NOT a FISMA assessor; NOT an IG audit consultant. Does NOT make OMB / IG / GAO / congressional filings. No OMB / IG / GAO / Congressional / OSTP / OMB Federal CAIO / DoD CDAO / ODNI AIM / agency ATO outcome guarantee. NOT an expert witness; NOT a lobbyist. One-time plan delivery — ongoing → N41 / N2 / N42. US-citizen personnel confirmed at SOW for IC / DoD classified workloads. EO 14110 rescinded (EO 14179 framework). Acquisition pathway = Customer CO determination. Anthropic CPN-certified, not Anthropic-authorized reseller.
Highlights
Highlighted by the publisher on AWS Marketplace.
First OMB M-25-21 / M-25-22 federal AI compliance SKU on AWS Marketplace. Both memos signed Apr 3, 2025; EO 14179 (Jan 23, 2025) replaced EO 14110 (preserved CAIO + inventory + minimum practices). FY 2026 AI Use Case Inventories due; CAIOs named but most lack methodology. Kriv SAM.gov active — UEI DATARJAUUXQ2, CAGE 1AEF1; SB-eligible NAICS 541511/541512/541715; CPN; AWS Select. 6–12 month first-mover window before Big Federal SIs list Marketplace SKUs.
AI Use Case Inventory + high-impact determination (rights-impacting + safety-impacting + presumed-high-impact categories) + CAIO reporting framework + annual AI strategy + minimum-practices compliance packet + M-25-22 acquisition overlay (AI PWS clauses + data-rights + vendor DD + termination + subcontracting § (f)) + FedRAMP Rev 5 + FISMA + NIST 800-53 Rev 5 AI Overlay + FAR Class Deviation 2024-O0010 + DoD RAIEG + RAI Strategy + CDAO Toolkit + IC ICD 203 + ODNI AIM (Enterprise).
$65K Foundation (4 wks; 1 bureau / 1 use case — sized for micro-purchase / simplified acquisition) / $145K Standard (6 wks; whole agency or prime + M-25-22 acquisition + FedRAMP + FISMA + NIST 800-53 Rev 5 AI) / $275K Enterprise (8 wks; cabinet / top-10 prime + DoD/IC + SAM.gov Capability Statement + past-performance + Secretarial briefing + Congressional + OIG/GAO binder). +$25K per additional bureau / component / sub-prime. 60–75% below Booz Allen / Deloitte GPS / Accenture Federal.
Agent build and provenance
See the full provenance
The layer-by-layer build, the evidence behind each claim, the risk basis and the cross-marketplace links are open to any account. Some rows are disclosed, some the source leaves Unknown; a free account shows you which.
Compliance
- FedRAMPConfirmedNot listed90%, registry-checkedNo FedRAMP Marketplace entry matched this vendor's domain, checked 2026-08-27registry recordas observed 2026-08-27
Confirmed means matched to a public authoritative registry. Claimed means the vendor or its listing states it, not yet cross-checked. A framework not shown was not found in any source we hold, which is not evidence against it. Not listed means a scoped registry check found no match for this vendor's domain: a No is a scoped registry check, not a compliance judgment. Confidence bands: 95% domain-verified, 90% registry-checked, 80% self-attested, 70% weak signal. Self-attested items marked “vendor's site” are gathered from the vendor's own website and are not verified by us.
Vendor
External enrichment · as of 2026-08-29
Sources
Publisher resources
3 linksLinked repositories
Unknown means this listing does not publish a repository. It is not a statement that the code is closed, and a linked repository is not a claim that the publisher wrote it: the registry computes that relationship privately and does not publish it.
Evidence risk is the share of the build you cannot see before you deploy, not a security rating. Sign in to see the layer-by-layer basis for this band.