Artificial Intelligence Policy Tracker
Contractual term Owner: Legal counsel Once per AI system

Contractual allocation of AI duties across the supply chain

Writes into supplier and customer agreements who does what on documentation, testing, notification, data rights and cooperation, so that legal duties do not fall into the gap between organisations.

Verified against the official source 26 Sep 2026 · reviewed by Bhaskar Bhatt (a factual check against the official source, not a legal review or legal advice)
What this label means
Verified
— a named reviewer opened the official source and confirmed the record; the date and the reviewer are shown.
Pending review
— linked to the official source and in the queue for a reviewer to confirm.
Source-linked
— linked to the official source, not yet confirmed by a reviewer.
Verification policy and current standing · a factual check, not legal advice.
Download: JSON · Markdown
On this page 6 sections
Duties satisfied
5
done properly, does the work
Duties supported
4
contributes; the duty needs more
Jurisdictions
4
Evidence items
3

In brief

Contractual allocation of AI duties across the supply chain is a contractual term, owned by the legal counsel and carried out for each AI system. 9 recorded duties in 4 jurisdictions rely on it, and it satisfies 5 of them outright. It produces 3 kinds of evidence an auditor can ask for.

How is it implemented?

Legal maintains a set of AI clauses for supplier, customer and partner agreements. Supplier terms cover the information and documentation to be provided, notice of material changes and incidents, cooperation with regulators, audit rights and restrictions on repurposing data. Customer and deployer terms cover permitted uses, the instructions to be followed, feedback channels and the logs and records each side keeps. Deal teams select clauses based on the system's risk tier and the counterparty's role, deviations are approved by legal, and signed clauses are indexed against the register entry for the system.

Which legal duties does it serve?

Satisfies means the control, operated properly, does the work the duty asks for. Supports means it contributes but the duty needs more. The official text decides; open it before relying on either.

Australia 1 duty

European Union 6 duties

South Korea 1 duty

Colorado (United States) 1 duty

What evidence shows it is operating?

Evidence this control produces
EvidenceTypeWhat it shows
AI supplier clause setContract clause or supplier termAgreed terms on documentation, change and incident notice, cooperation, audit and data use.
AI customer or deployer clause setContract clause or supplier term
Contract clause index against the AI registerRegister entry

Owner: Legal counsel. Frequency: once per ai system.

Which risks does it address?

Subdomains of the MIT AI Risk Repository, with the incidents the AI Incident Database has recorded under each. Counts are live; they say how often a risk has materialised, not how well this control prevents it.

Which standards clauses does it correspond to?

Clause numbers only. A reference means the standard asks for overlapping work, so evidence may be reusable; it never means the standard discharges a legal duty.

Framework references
FrameworkReferenceNoteConfidence
ISO/IEC 42001Annex A.10.2, A.10.3, A.10.4high
NIST AI RMFGOVERN 6.1; MANAGE 3.1medium

Cite this record

AIPolicyTracker (2026). “Contractual allocation of AI duties across the supply chain” [AIPT-CTL-0011, verified 26 September 2026 by Bhaskar Bhatt]. https://aipolicytracker.org/id/AIPT-CTL-0011 (accessed 8 November 2026). Data licensed CC BY 4.0.

Permanent id AIPT-CTL-0011: it never changes or gets reused, and its address keeps working if this page moves.

BibTeX
@misc{aipolicytracker2026_contractualallocationofa,
  author       = {{AIPolicyTracker}},
  title        = {{Contractual allocation of AI duties across the supply chain}},
  year         = {2026},
  howpublished = {\url{https://aipolicytracker.org/controls/contractual-allocation-of-ai-duties}},
  url          = {https://aipolicytracker.org/controls/contractual-allocation-of-ai-duties},
  urldate      = {2026-11-08},
  note         = {Data licensed CC BY 4.0. Accessed 8 November 2026}
}

Disclaimer: informational only, not legal advice. Verify every claim against the linked official sources and consult a qualified lawyer before acting.

Frequently asked questions

Which legal duties does "Contractual allocation of AI duties across the supply chain" satisfy?

It is recorded as satisfying 5 and supporting 4 duties across Australia, European Union, South Korea and Colorado (United States). A mapping means the control, operated properly, does the work the duty asks for; the official text decides whether it is enough.

What evidence shows this control is operating?

AI supplier clause set, AI customer or deployer clause set and Contract clause index against the AI register. Owner: Legal counsel. Frequency: once per ai system.