Resources / Reference
AI Vendor Questionnaire
The questions to send AI vendors before you buy, ready to download and send.
AI Vendor Questionnaire
Vendor name: ____________________ Product: ____________________ Date: __________
Data use
| Will our data be used to train or improve your models? | |
|---|---|
| Where is our data stored, and for how long? | |
| Which subprocessors can access our data? | |
| Can we require deletion of our data when the contract ends? |
Security
| Can you provide a current SOC 2 Type II report or equivalent? | |
|---|---|
| How is our data encrypted in transit and at rest? | |
| How quickly will you notify us of a security incident? |
Model performance
| How was the model tested for accuracy and fairness? | |
|---|---|
| Can the system explain its outputs or decisions? | |
| How will you notify us before model changes take effect? |
Contract terms
| Do we have audit rights? | |
|---|---|
| Who is liable for errors caused by the AI? | |
| Can we turn off AI features without losing the service? |
Free to use and adapt. Want it tailored to your organization? Our AI Risk Review service and AI Governance Starter bundle include a customized version.
This page is general information for planning purposes. Laws and guidance change, so confirm current requirements before acting. It is not legal advice. For legal advice about your organization, consult a licensed attorney.
Talk through your AI and privacy questions
Tell us what you're working on, and we'll reply within one business day.