It sits beneath them. Those regimes tell you which outcomes you must achieve; F-ACT is one operational way to produce the evidence — a per-action record of who authorised what, within which scope, on which data, logged and revocable. The
framework crosswalk maps each of the five F-ACT dimensions to the most directly related provisions of the EU AI Act, the NIST AI Risk Management Framework, ISO/IEC 42001 and the OECD AI Principles. The mappings are informative, not a claim of legal equivalence or certification.