Governance Template
AI Governance Policy Templates & Resources
AI Vendor Assessment Template
A structured assessment template for evaluating AI vendors across security, compliance, privacy, and contractual dimensions. Designed to support HIPAA BAA determination, vendor risk tiering, and governance documentation requirements in healthcare and enterprise environments.
Purpose
Evaluate AI vendors systematically across security, compliance, privacy, and operational dimensions.
When To Use
Use before deploying any new AI vendor relationship, during annual vendor reassessment, following material vendor changes, or as part of acquisition due diligence for organizations integrating new practice entities.
Template Contents
Vendor Profile
Vendor identity, services provided, AI capabilities, data accessed, and primary contact documentation.
Data Handling Assessment
Data retention policies, training data usage, data residency, sub-processor disclosure, and privacy rights support.
Security Assessment
Security certifications, access controls, encryption standards, incident response capability, and vulnerability management.
Compliance Assessment
HIPAA business associate determination, BAA availability and review, regulatory incident history, and compliance audit status.
Contractual Review
Data usage rights, liability allocation, termination obligations, breach notification terms, and change notification requirements.
Risk Rating
Composite vendor risk tier assignment based on assessment findings, with recommended oversight and reassessment schedule.
Download Template
Access the Full Template
Download the complete customizable template for immediate use in your governance program.