AI vendor risk assessment
First-pass review questions, evidence, risk signals, controls, and documentation.
Read guideUse these guides to structure AI vendor reviews, due diligence, governance conversations, policy updates, staff readiness, procurement review, and board/risk committee documentation.
Vendor review
First-pass review questions, evidence, risk signals, controls, and documentation.
Read guideQuestions and evidence to capture before approving an AI vendor pilot or purchase.
Open checklistQuestions for AI vendors about data, security, model governance, oversight, and limitations.
View questionsGovernance and procurement
Review AI purchases and pilots before approval conditions are set.
Read guideOperational policy areas for permitted use, data boundaries, oversight, and escalation.
Open guideUse-case intake, vendor review, staff readiness, controls, and reporting.
Open guideReadiness and reporting
Role-based readiness signals for staff, managers, member-facing teams, and vendor-risk roles.
Explore readinessSummarize risk, evidence, controls, and recommendations for board/risk review.
Read guideTurn guides and checklists into a structured first-pass review packet.
See workspaceNext step
Use CAI’s Vendor Risk Workspace to structure intake, evidence gaps, risk scoring, follow-up questions, controls, and board/risk memo language.