Who should use this checklist?

Boards, executives, risk teams, procurement teams, legal teams and technology leaders can use it before an AI supplier is approved, renewed or expanded.

What should happen after the checklist?

A higher-risk result should lead to contract review, data and security checks, human oversight rules, vendor monitoring and board or risk committee escalation where needed.

AI vendor governance

AI Vendor Risk Checklist

Check the main risk areas before approving, renewing or escalating an AI vendor or AI-enabled supplier.

AI Governance Tools Prima Forge

Checklist

Review the vendor before it becomes a board problem.

Vendor purpose, owner and business process are documented Data access, retention and model-training terms are clear Security, privacy and incident obligations are understood Human review is required for material decisions or external outputs Contract covers audit, subprocessors and regulatory cooperation Exit, deletion, portability and business continuity risks are assessed Board or risk committee escalation threshold is defined

0%Checklist coverage

ReviewStatus

Start with the vendor purpose, owner and business process.Next action

FAQ

What is an AI vendor risk checklist?

It is a practical review of the main supplier risks created by AI systems: data use, security, model influence, contract terms, monitoring, exit planning and board escalation.

When should this checklist be used?

Use it before approving a new AI vendor, renewing a contract, expanding an existing tool or allowing a supplier to process more sensitive data.

Is this enough for high-risk AI vendors?

No. The checklist is a fast first pass. Higher-risk vendors should also be scored, reviewed by legal or risk teams and reported through the right governance channel.

Related tools

Continue the vendor workflow.

AI Vendor Risk Scorecard · AI Vendor Contract Clause Checklist · AI Use Case Risk Classifier · AI Policy Generator

Prima Forge

Need this as a real approval workflow?

Prima Forge can turn this checklist into a branded vendor approval system, internal risk tracker, policy workflow or board reporting pack for your organisation.

Next step

Move from checklist to system.

Explore Prima Forge · Board Services · AI Governance Tools