Services / Packages
AI Vendor Risk Management Program
An ongoing program to vet, approve, and monitor the AI vendors and AI features your organization relies on.
From $7,5004–6 weeks
Public agencies receive quotes structured to fit their procurement rules.
You own everything we produce.
Who this is for
Organizations usually call us about this when:
Dozens of vendors now include AI features and no one tracks them.
Vendors are changing models and data terms after contracts are signed.
Auditors asked how you oversee AI vendors.
Overview
One-time vendor reviews miss what changes after the contract is signed: new AI features, model updates, and new data uses. We build a program that tiers your vendors by risk, sets the questions and evidence each tier must provide, and defines how often each vendor is reviewed and what triggers a fresh look.
What’s included
- Inventory of vendors using AI or receiving your data
- Risk tiers and review requirements for each
- Standard AI vendor questionnaire
- Contract terms for AI and data use
- Monitoring schedule and change triggers
- Program documentation and owner training
How it works
Inventory
We identify the vendors that use AI or receive your data.
Design
We set risk tiers, questionnaires, contract terms, and review schedules.
Launch
We train owners and run the first review cycle with your team.
How it works for your organization
The same service, tailored to the obligations and realities of each sector.
Private Sector
Companies use the program to keep up with AI features that vendors add after contracts are signed.
- AI features added to existing software
- Vendor training on company data
- Contract terms for AI use
- Evidence for audits and customers
Public Sector
Agencies use the program to oversee AI vendors consistently across departments, with one standard for review and approval.
- Consistent vendor review across departments
- Contract requirements for AI and data
- Monitoring of model and feature changes
- Documentation for audits
Nonprofits
Nonprofits use the program to keep track of the AI tools and platforms that touch client and donor data.
- Simple vendor tiers for small teams
- Review of free and donated tools
- Data protection terms
- Annual review schedule
Frequently asked questions
How much does AI Vendor Risk Management Program cost?
AI Vendor Risk Management Program starts at $7,500. The final price depends on scope, and we confirm it in writing before any work begins.
How long does it take?
Most engagements take 4–6 weeks, depending on scope and how quickly information is available.
What do we receive?
The engagement includes: inventory of vendors using AI or receiving your data; risk tiers and review requirements for each; standard AI vendor questionnaire; contract terms for AI and data use.
What if a deliverable doesn’t meet the agreed scope?
We revise it until it does, at no extra cost. And if we miss an agreed delivery date, we take 10% off that deliverable.
Who owns the deliverables?
You do. Everything we produce for you is yours to keep, use, and share.
Related Guides
- AI Vendor Assessment Checklist for Credit UnionsThe questions credit unions should ask AI vendors about member data, security, model fairness, and contract terms before signing.
- AI Incident Response Playbook for Credit UnionsWhat a credit union should do, hour by hour, when an AI tool exposes member data, makes wrong decisions, or misleads members.
- AI Tabletop Exercise Scenario for Credit UnionsA ready-to-run scenario where a member service chatbot exposes account details, with timed developments and questions for each phase of the response.
- AI Laws by StateWhere each state’s AI and privacy rules stand, with key dates and a page for every state.
Related services
AI Risk Review
An independent review of one AI tool, vendor, or use case before you adopt it or expand it.
AI Vendor Selection Advisory
Independent help choosing the right AI product or vendor, without a formal RFP, so you buy with confidence.
Fractional Security Officer (vCISO)
A part-time security leader who owns your security program, policies, and risk decisions, including AI systems.
Talk through your AI and privacy questions
Tell us what you're working on, and we'll reply within one business day.