What does the ai bill of materials produce?
Maintain a component-level record of an AI system’s models, data services, prompts, tools, providers, versions, licenses and ownership.
Prepare and review the task-specific records in this browser. Inspect consistency findings and retain the complete backup before preparing the finalized pack. Accountable decisions require responsible review.
What do you need before you start?
- Define the named scope, accountable owner and your review basis.
- Retain the actual evidence separately. Recorded links and evidence references are declarations and are not fetched.
- Choose a valid review date. Resolve missing fields, contradictory declarations and date or status findings before relying on the review.
What information do you enter?
The browser workspace asks only for the structured fields listed below.
- AI system (required). Use the name in the organization’s inventory.
- Component (required). Name the exact model, dataset, prompt, library, service or tool.
- Component type (required). Classify the component for dependency review.
- Provider or maintainer (required). Name the supplier or internal maintaining team.
- Version or release (required). Use the most precise version identifier available.
- Purpose in the system (required). Describe the component’s bounded role and material outputs.
- License or terms reference (required). Record the license, contract or internal terms reference.
- Information dependency (required). Describe the information the component receives or relies on.
- Hosting or execution location (required). Record the confirmed environment or mark it unknown.
- Component owner (required). Name the person or role responsible for maintenance.
- Evidence reference (required). Use an internal architecture, procurement or release reference.
- Component status (required). Record the current operational state.
| Field | What to enter | Fictional example |
|---|---|---|
| AI systemRequired | Use the name in the organization’s inventory. | Example research assistant, fictional |
| ComponentRequired | Name the exact model, dataset, prompt, library, service or tool. | Example hosted language model |
| Component typeRequired | Classify the component for dependency review.Choose from Model, Dataset, Prompt, Library, Hosted service, Retrieval source, Agent tool, Infrastructure, Other. | Model |
| Provider or maintainerRequired | Name the supplier or internal maintaining team. | Example AI Services, fictional |
| Version or releaseRequired | Use the most precise version identifier available. | example-model-3 |
| Purpose in the systemRequired | Describe the component’s bounded role and material outputs. | Draft summaries from approved public sources. |
| License or terms referenceRequired | Record the license, contract or internal terms reference. | EXAMPLE-CONTRACT-018 |
| Information dependencyRequired | Describe the information the component receives or relies on. | Approved public web pages and user instructions. |
| Hosting or execution locationRequired | Record the confirmed environment or mark it unknown. | United States, customer-reported |
| Component ownerRequired | Name the person or role responsible for maintenance. | AI platform lead |
| Evidence referenceRequired | Use an internal architecture, procurement or release reference. | EXAMPLE-ARCH-009 |
| Component statusRequired | Record the current operational state.Choose from Proposed, Approved, In use, Restricted, Deprecated, Retired, Unknown. | Proposed |
What you can download
Every result must identify its supplied facts, assumptions and unresolved items.
| Free result | Included downloads |
|---|---|
Enter your information, inspect the on-screen result and keep a browser backup. Editing and direct copies of your entered information stay free. |
These supported outputs are free. No checkout is required. |
How does the ai bill of materials work?
- 1Prepare the named records
Use the task-specific fields above. Retain original evidence separately and record exact references and versions.
- 2Review internal consistency
Choose the review date. Inspect each scope identity, contradictory declaration, missing decision support and date or status finding.
- 3Keep recoverable work
Download a free backup before replacing or clearing work. Restore earlier record backups or the complete current snapshot, including unfinished drafts.
- 4Prepare the finalized pack
Prepare all nine files, then download them free. Review excerpts in PDF and DOCX against the complete Excel, CSV and JSON. Optional private cloud saving requires sign-in and separate consent.
Method and sources
Apply the steps above to the supported inputs. Use the listed source sections to review the rule basis, assumptions and limits.
- Artificial Intelligence Risk Management Framework 1.0A voluntary US baseline for AI risk records, responsibilities, evaluation and lifecycle decisions. Govern, Map, Measure and Manage.National Institute of Standards and Technology. Published 2023-01-26. Reviewed 2026-10-08.
- AI Risk Management Framework PlaybookImplementation ideas and documentation practices for the AI RMF. Suggested actions for Govern, Map, Measure and Manage.National Institute of Standards and Technology. Published 2023-03-30. Reviewed 2026-10-08.
Common questions
What information does the ai bill of materials need?
Enter AI system (required). Use the name in the organization’s inventory; component (required). Name the exact model, dataset, prompt, library, service or tool; component type (required). Classify the component for dependency review; provider or maintainer (required). Name the supplier or internal maintaining team; version or release (required). Use the most precise version identifier available. Define the named scope, accountable owner and your review basis.
What does the ai bill of materials produce?
Complete all-field record review and task-specific scope rows. Every unresolved finding stays visible. Free restorable browser backup including the unfinished draft, editing reference and review date. Nine-file finalized pack. Formal PDF, editable DOCX, complete Excel register and review sheets, records CSV, findings CSV, scope review CSV, complete JSON, file hashes and instructions. Review unresolved findings and limitations before use.
Who makes the final decision?
A responsible person reviews the result. Checks review customer declarations, recorded dates and internal consistency. They do not authenticate evidence, approve an AI use, determine legal applicability or establish conformity, safety or risk acceptance.
Is this tool free?
Yes. The on-screen result and listed downloads are free. No checkout is required. Keep local backups and review the stated method and limits.
Can I use the ai bill of materials for this task?
Record models, datasets, libraries, services and component versions. Checks review customer declarations, recorded dates and internal consistency. They do not authenticate evidence, approve an AI use, determine legal applicability or establish conformity, safety or risk acceptance.
What still needs review?
Checks review customer declarations, recorded dates and internal consistency. They do not authenticate evidence, approve an AI use, determine legal applicability or establish conformity, safety or risk acceptance.
Each workspace supports 1000 records, 20000 characters per field and a 30 MB complete workspace. Invalid and foreign backups preserve current browser work.
PDF and DOCX show the first 20 records, field excerpts through 2000 characters and the first 40 findings. Excel, CSV and JSON retain complete values and derived rows. Referenced files are not fetched or included.