Risk Assessment & Vendor Due Diligence
Evaluate AI vendors with a structured scoring framework and comprehensive due diligence questionnaire to make informed procurement decisions.
Vendor Risk Scorecard
Rate each AI vendor across seven critical dimensions. Add up to three vendors and compare them side by side with colour-coded risk levels.
Due Diligence Questionnaire
Work through 25 essential questions organised by category. Each includes guidance on what constitutes a good versus concerning vendor response.
Key Insight: Ask About Training Data
The single most important due diligence question you can ask an AI vendor is: does your system train on our employee data? Many vendors use customer data to improve their models by default. If your employees' performance reviews, compensation details, or personal information are being fed back into a shared model, you face serious privacy, compliance, and competitive risks.
Always request a written guarantee that your data is isolated, not used for model training, and can be fully deleted upon contract termination. This should be a non-negotiable requirement in your vendor agreements.