NIST SP 800-218A, published in July 2024, is an SSDF Community Profile for generative AI and dual-use foundation models. It adds AI-specific practices, tasks and considerations to the SSDF and "should be used in conjunction with" SP 800-218. It does not replace the SSDF, and it is guidance, not a certification.
Definitions
SSDF is NIST SP 800-218, the Secure Software Development Framework. Community Profile is a document that augments a base framework for one community of use. Dual-use foundation model is a term from the executive order that prompted the profile. The profile's own text defines it, so check there.
What the profile says about itself
According to NIST's page:
- It adds practices, tasks, recommendations, considerations, notes and informative references for AI model development across the lifecycle.
- It augments the practices and tasks in SSDF version 1.1.
- It supports Executive Order 14110, which asked NIST for a companion resource for generative AI and dual-use foundation models.
- It is meant to be useful to three groups: producers of AI models, producers of AI systems that use those models, and acquirers of those AI systems.
Which document do you read?
| Your situation | Start with |
|---|---|
| Ordinary application, no model you train | SP 800-218 |
| You train or fine-tune a generative model | SP 800-218 plus 800-218A |
| You build a product on someone else's model | SP 800-218, and read 800-218A for the producer and acquirer parts |
| You buy an AI-based product | 800-218A for the acquirer parts, and your agency or company policy |
How a government buyer may use it
After OMB M-26-05, agencies pick their own assurance requirements. A buyer of an AI system may borrow language from 800-218A in a questionnaire. Treat it as a source of questions about training data handling, model integrity and update practices, and answer from your actual process.
A caution on the executive order
The profile cites Executive Order 14110. I did not verify the current status of that order, so do not describe the profile as backed by a currently operative mandate. Describe it as NIST guidance.
Related documents
CISA's 2026 SBOM minimum elements say AI software systems may need additional elements and point to separate G7 guidance on SBOMs for AI. See do AI and SaaS products need extra SBOM elements.
Quick check
Is 800-218A a certification?
No. It is a NIST community profile, a guidance document.
Does it apply to a company that only calls a model API?
It targets model producers, system producers and acquirers. A company building on a model API is in the second group and can read it for relevant tasks.
Safeguard provides MCP Guardrail, agent identity and policies for governing how AI agents act, alongside SBOM and dependency scanning. Try the free scan at gold.safeguard.sh/scan.
Sources
Last reviewed: 19 October 2026.
