AI Governance
Vendor & Model Due Diligence
Ask the right questions of AI suppliers before your data leaves the building.
01The problem
Most AI arrives through suppliers. Contracts and questionnaires rarely cover training data, retention or model risk.
02What you get
- 01AI supplier questionnaire
- 02Contract clause guidance
- 03Supplier risk assessments
- 04Ongoing supplier review process
03How we work
Our consultants embed with your people, on site and alongside your teams, until the change is business-as-usual. Pragmatic, sized to your organisation, and focused on getting the problem solved so you can sleep at night.
See our approach04Related standards
05More AI Governance
- 01AI Readiness AssessmentDiscover where AI is already used, what data it touches and where your biggest exposures are.
- 02AI Policy & Acceptable UseClear, practical policies your people will actually follow, not shelfware.
- 03AI Risk & Impact AssessmentsDPIAs and AI impact assessments that combine privacy law with ISO/IEC 23894 risk thinking.
- 04ISO/IEC 42001 ReadinessA structured route to an AI management system, built on the governance you already have.
Something keeping you awake at night?
Tell us what's worrying you. We'll give you an honest view of where you stand and what to do next, no jargon, no obligation.
Arrange a consultation