Business Compliance Tools
Find a tool

Review an AI supplier and retain the contract evidence

Assess one AI supplier, inspect contract wording locally and keep owned data, security, assurance, commercial and exit actions.

UKEUUSAI governance
Choose a guidance setChoose a guidance set belowAbout 20 minutes6 working filesStart this tool

Launch price verified. Checkout remains closed until the final payment and recovery tests pass. Entries and files stay in this browser. Sources reviewed 7 August 2026.

Inspect a real output

Built from fictional sample information using the same exporter as the tool.

UK AI supplier review sampleEU AI supplier review sampleUS AI supplier review sample

What’s included

Orient the reviewer

Explain how to inspect, update and approve the supplied vendor review files.

  • Start Here PDF

Review the supplier and contract

Use the report, editable register and review document to test each supplier statement and clause reference.

  • Vendor preflight report PDF
  • Evidence and action register XLSX
  • Due-diligence and contract review DOCX

Retain the evidence trail

Keep the structured assessment, input hash, source basis, assumptions and limitations.

  • Structured vendor record JSON
  • Sources and assumptions record
View every output and format
  • Start Here PDF
  • Vendor preflight report PDF
  • Evidence and action register XLSX
  • Due-diligence and contract review DOCX
  • Structured vendor record JSON
  • Sources and assumptions record

Who this tool is for

Procurement, operations, security, privacy, legal and AI governance teams assessing one supplier or renewal. Create a traceable supplier review that distinguishes contract wording found from questions still requiring human or specialist review.

Supported use

  • One AI supplier and service at shortlist, contract, renewal or material-change stage
  • A UK, EU or US organisational route using the voluntary NIST AI RMF baseline, with UK and EU materials clearly labelled as context only
  • One English text-based PDF, DOCX or TXT agreement for local candidate-wording extraction

Have ready

  • The supplier, service, intended use, organisational role and procurement stage
  • The contract version, hosting model, data access, criticality and internal owners
  • Optional text-based contract terms processed locally
  • A confirmed answer, evidence reference, owner and review date for each supplier subject

Needs separate review

  • Whether a detected clause is adequate, enforceable or commercially acceptable
  • Supplier approval, negotiation strategy and legal or security sign-off
  • Image-only scans or contract subjects outside the supported evidence set

How it works

  1. Set the procurement recordRecord the intended use, supplier, service, contract version, data access, criticality and owners.
  2. Inspect the agreementOptionally open one supported contract locally and copy candidate wording into the relevant review items.
  3. Confirm every itemA person reviews the wording, supplier answers and supporting evidence before selecting a status.
  4. Assign and exportAssign unresolved actions and export the controlled supplier evidence pack.

Where does this task apply?

Choose the guidance set this tool should use. The interface and outputs stay in English.

Choose one before you start.

Choose the jurisdiction above to open the correct tool.The fields, clock and source record change with the selected guidance set.

What this tool checks

The scope stays narrow so the result is clear and reproducible.

  • Records the service, intended use, organisational role, data access, criticality, owners and contract version.
  • Finds candidate wording in one local text-based PDF, DOCX or TXT without treating keyword matches as adequate clauses.
  • Checks sixteen supplier, contract, data, security, assurance, intellectual-property and exit evidence subjects.

From official material to a working record

Official material sets the basis

Official procurement and risk-management guidance describes the information and controls organisations should consider when buying or operating AI.

The tool prepares the operational record

The pack gives one supplier review a consistent structure, preserves exact contract references and makes every unresolved issue visible to its owner.

Official sources stay visible

Each supported check shows its jurisdiction, source title, source version and review date beside the result. Unsupported cases are rejected rather than estimated.

View this product's official sources

Questions before you use the tool

Scope, files, evidence and browser-local handling.

Does a detected contract section pass the review item?

No. The local scan only identifies candidate wording. A person must confirm whether it addresses the relevant facts and requirements.

Does choosing the UK or EU route determine local legal duties?

No. The evidence subjects use a voluntary NIST AI RMF baseline. UK and EU sources provide context only, and applicability must be assessed separately.

Can the tool approve the supplier?

No. Supplier approval and legal, security, privacy and procurement decisions remain with the organisation.

Is the contract uploaded?

No. Supported contract text is extracted and searched in this browser. The file hash is retained in the evidence record.

What does the pack contain?

It contains a Start Here guide, preflight report, evidence and action register, editable contract review, structured record and sources record.

Review the AI supplier

Set the procurement facts, inspect the agreement and confirm the evidence behind every supplier item.

Open the vendor review