AI Vendor Due-Diligence Questionnaire and Scorecard

The questionnaire and the scorecard share the same question references, so vendor answers drop straight into the scoring.

• Sections on data use and training, hosting region, model testing, bias, transparency, human oversight, AI-specific security threats, regulation, incidents, change control, IP and exit
• A reviewer guide with what good looks like for every knock-out question
• Weighted section scores, a Low, Medium, High or Unacceptable rating and side-by-side comparison of up to three vendors
• A shorter scope for Low-risk use cases, re-weighted automatically

Also included in the Enterprise AI Governance & Risk Kit.

Licence: one purchaser downloads the files and may use, adapt, rebrand and share them inside their own company. No resale or redistribution. Full terms are in the AIG-LIC License Terms included with your download.

A template, not legal advice. References to the EU AI Act, GDPR, the UAE PDPL, the KSA PDPL, DIFC and ADGM rules, ISO/IEC 42001, ISO/IEC 27001 and the NIST AI RMF are for orientation only; have the final documents reviewed by qualified local counsel.