Procedure
Third-Party AI Due Diligence Procedure
This procedure defines the AI-specific due diligence steps required before engaging any third-party AI service provider, AI model supplier, AI agent platform, or AI-enabled software-as-a-service application.
- Type
- Procedure
- Version
- 1.0.28
- Date
- 2026-10-27
- Owner
- AI Governance Approver
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- Supply Chain Governance | Third-Party Risk
- Review frequency
- 6 to 12 months and upon material supplier, regulatory, or framework change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- 1. Purpose
- 2. Scope
- 3. Governance
- 4. AI supplier classification
- 5. Pre-engagement AI due diligence checklist
- 6. Contractual AI requirements
- 7. Ongoing monitoring
- 8. Exit and knowledge transfer
- 9. Related documents
- 10. References
Related documents
- Supplier and Cloud Governance Frameworksupply-chain
- Third-Party and Supply Chain Risk Standardrisk
- Supplier Due Diligence Proceduresupply-chain
- Supplier Audit Proceduresupply-chain
- AI Governance and Risk Frameworkai
- Privacy Impact and Cross-Border Transfer Procedureprivacy
- Corrective and Preventive Action (CAPA) Procedurecompliance
Next
All Documents