# AI Vendor Due-Diligence Questionnaire

- **Type**: Template (Checklist)
- **Page**: https://aipolicytracker.org/templates/ai-vendor-due-diligence-questionnaire
- **Formats**: XLSX and DOCX
- **Current version**: v4, built 2026-11-12

Questions to put to an AI vendor, grouped by governance, data, model, security, transparency, incidents, and insurance and indemnity, scored automatically.

## What is inside

- Questionnaire sheet: seven sections, response dropdowns, evidence requested, weighted score
- Insurance and indemnity section: cover, AI exclusions, IP indemnity, sub-processor flow-down, audit rights
- Duties sheet: the vendor-governance duties on record that the questions serve

## Laws and frameworks it is built from

- EU AI Act (European Union), Pending review · source-linked, checked 26 Sep 2026: https://aipolicytracker.org/policies/eu-ai-act

## Recorded duties it covers

- Provide contestability, supply-chain transparency and records (guardrails 7 to 9) (Australian Voluntary AI Safety Standard): https://aipolicytracker.org/obligations/australia-vaiss-contestability-supply-chain-records
- Verify conformity before importing or distributing high-risk AI (EU AI Act): https://aipolicytracker.org/obligations/eu-ai-act-importer-distributor-obligations
- Providers of high-risk AI must have written agreements with suppliers of components, tools and services (EU AI Act): https://aipolicytracker.org/obligations/eu-ai-act-art-25-4-written-agreements-with-component-suppliers

## Latest changes

Dataset 52bd836b1d6b → ef1018b7a6a2.

- **Retrieved**: 2026-11-12
- **Licence**: https://creativecommons.org/licenses/by/4.0/

> Built from structured summaries of official texts. Not legal advice. A record whose review status is not "verified" has not been confirmed against its official source by a named reviewer; open the official source before relying on any date or duty. How records are verified: https://aipolicytracker.org/verification.