Artificial Intelligence Policy Tracker
Search
Menu

AI governance glossary

AI bill of materials (AIBOM)

What is an AI bill of materials (AIBOM)?

An AI bill of materials (AIBOM) is a machine-readable inventory of the components of an AI system: models, datasets, software dependencies and services, with their versions, licences and provenance. It extends the software bill of materials (SBOM) to AI.

Why it matters

  • It turns AI supply-chain risk, an OWASP Top 10 entry (LLM03 Supply Chain), into something that can be checked and monitored.
  • It answers the first question in an incident: which of our systems use the affected model or dataset?
  • It feeds documentation duties, such as the technical documentation the EU AI Act requires for high-risk systems (Annex IV).

In detail

Formats include CycloneDX's machine learning bill of materials (ML-BOM) and the AI and dataset profiles introduced in SPDX 3.0. An AIBOM lets buyers and security teams see which third-party models and datasets a system depends on, check licences, and find affected systems when a component turns out to be vulnerable, poisoned or withdrawn.

A plain-language explanation for orientation, not the legal text; follow the source for the binding wording.

AI system inventory →Third-party AI due diligence control →

  • AI lineage (data and model provenance)AI lineage is the documented record of where an AI system's data and models came from and how they changed: so...
  • Data poisoningData poisoning is an attack that corrupts an AI model by inserting or altering its training or fine-tuning dat...
  • OWASP Top 10 for LLM ApplicationsThe OWASP Top 10 for LLM Applications is the Open Worldwide Application Security Project's list of the ten mos...
  • Red teaming (AI)AI red teaming is structured adversarial testing in which testers try to make an AI system fail, by producing...

All glossary terms · Think a definition is off? Tell us; corrections are logged on the corrections page.

Frequently asked questions

What is an AI bill of materials (AIBOM)?

An AI bill of materials (AIBOM) is a machine-readable inventory of the components of an AI system: models, datasets, software dependencies and services, with their versions, licences and provenance. It extends the software bill of materials (SBOM) to AI.