Overview/Register/ Third-Party & Data Risk/TP-01
Third-Party / Vendor AI Risk Assessment
Makes criteria to examine vendors that use AI on your data. Assesses those vendors.
TP-01 What this service does
Makes criteria to examine vendors that use AI on your data. Assesses those vendors.
It is delivered inside the Third-Party & Data Risk practice area, which exists to examine the vendors and the data that AI systems touch, and control what leaves the organisation.
The engagement is scoped at the briefing; nothing here is priced on the page. What is fixed is the output: the artefacts below are what you hold at the end.
TP-01-D Deliverables
On handover- AI vendor questionnaire
- vendor risk ratings
- list of contract clauses
Where it sits Delivery context
- Practice area
- Third-Party & Data Risk (Tab E, reference TP)
- Service reference
- TP-01
- Indicative tier
- High. Tiers are indicative of the risk this service addresses and are not client data.
- Why the area exists
- Examine the vendors and the data that AI systems touch, and control what leaves the organisation.
- Evidence
- Practitioner credentials behind this work are listed once, in full, on the credentials page. We publish no client names.
Same tab Other services in Third-Party & Data Risk
-
TP-02
AI Data Security & DLP for AI
Finds sensitive data in AI prompts, uploads and responses. Sets controls to block, hide or label it.
-
TP-03
AI Privacy & Data Protection Advisory
Maps personal data in AI systems. Sets privacy controls, consent and consumer rights for automated decisions.
We are not accepting new clients at present, so no briefing is running on TP-01. What this service produces is set out above.
Read the availability note