Template
AI Vendor Security Questionnaire Template
This questionnaire extends the general supplier security questionnaire with AI-specific items. Use this template for any supplier providing a foundation model, AI platform, AI service, or AI-enabled product that materially shapes the organization's AI behaviour or processes the organization's data through AI.
- Type
- Template
- Version
- 1.0.11
- Date
- 2026-10-27
- Owner
- AI Security Maintainer
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- AI Governance
- Review frequency
- Annual and upon material AI provider, threat-pattern, or regulatory change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- Purpose
- Scope
- Section 1: AI provider profile
- Section 2: training-data provenance and governance
- Section 3: customer data handling
- Section 4: model security
- Section 5: tool and agent capabilities
- Section 6: evaluation and assurance
- Section 7: compliance and transparency
- Section 8: incident response
- Section 9: continuity and exit
- Operating expectations
- Framework alignment
- Limitations
Frameworks it maps to
- ISO/IEC 42001:2023
- EU AI Act
- NIST AI RMF 1.0
- OWASP LLM Top 10
- ISO/IEC 27036
- GDPR / UK GDPR
- DORA
- CSA AICM v1.1.0
- ETSI EN 304 223 V2.1.1
- NIST SP 800-218A
- NIST AI 100-4
Related documents
- Supplier Security Questionnairesupply-chain
- Third-Party AI Due Diligence Proceduresupply-chain
- Supplier Security and Privacy Assurance Standardsupply-chain
- Foundation Model Lifecycle Procedureai
- AI Security and Risk Standardai
- Model Registryai
Next
All Documents