AI Vendor Due Diligence
Assess every AI vendor for compliance risk before signing — and document your due diligence process.
The Problem
Enterprise customers now require documentation of how you vet your AI vendors. Most organisations add AI tools without any formal due diligence: no DPA review, no data handling assessment, no review of the vendor's privacy policy or AI governance. This creates regulatory and contractual liability.
How Aegis Firma Solves It
Aegis Firma's vendor risk module helps you assess each AI vendor: what data they process, where it's stored, their privacy policy quality, GDPR DPA availability, AI governance disclosures, and composite risk score.
How It Works
Add vendor to your registry
Add each AI vendor you use or are evaluating to your Aegis Firma vendor registry.
Complete due diligence assessment
Rate each vendor on data handling, privacy policy quality, DPA availability, and security certifications.
Generate vendor risk score
Aegis Firma produces a composite risk score and flags key risks for each vendor.
Document due diligence
Maintain dated, signed due diligence records for each AI vendor in your stack.
Key Features
Start your compliance programme today
No credit card · No sales call · Live in 30 minutes
Start freeFrom $79/month · 169 jurisdictions