AIGovHub
AI Vendor Due Diligence

AI Vendor Risk Questionnaire Generator

Generate comprehensive, tailored vendor risk questionnaires for any AI system. Identify red flags, required artifacts, and map to SOC 2, ISO 27001, and more.

Free tool. No signup required.

What the Questionnaire Covers

AI Model Governance

  • Model cards & documentation
  • Version control
  • Testing & validation

Data Handling & Privacy

  • Training data provenance
  • PII processing
  • Data residency & retention

Security & Infrastructure

  • Encryption standards
  • Access controls
  • Penetration testing

Bias & Fairness

  • Bias testing methodology
  • Fairness metrics
  • Ongoing monitoring

Compliance Mapping

  • SOC 2 Trust Criteria
  • ISO 27001 Annex A
  • EU AI Act requirements

Red Flag Detection

  • Critical risk indicators
  • Missing documentation flags
  • Mitigation recommendations