Skip to main content
Colorado ADMT: 1 Jan 2027 · EU high-risk: 2 Dec 2027 (Annex III); 2 Aug 2028 (Annex I)
Vendor risk

AI Vendor Due Diligence Pack

Download edition: Free download refreshed 12 October 2026. Use the editable starter with the scope and limitations stated in the file.

A practical intake and screening pack for SMEs evaluating AI tools, copilots, agents, and embedded AI vendors before approval.

ZIP · XLSX + DOCX + PDFNo login requiredNot legal advice

Download the free implementation artifact

This free file illustrates the Move78 implementation evidence model. Use it to start useful evidence records and identify your team's requirements.

Download Vendor Pack

What is inside

The package is intentionally narrow. It gives you a concrete artifact, not a generic whitepaper.

Included artifacts

  • AI vendor intake form
  • AI capability and use-case classification
  • Data-handling due diligence questions
  • Model, provider, and transparency questions
  • Security and privacy due diligence checklist
  • Approval recommendation worksheet

Useful for

  • Procurement teams evaluating AI vendors
  • CISOs and risk leads documenting third-party AI exposure
  • SMEs that need a repeatable vendor-screening process

Where it fits

Use this free pack to identify vendor evidence gaps. ACT includes supplier and subprocessor review records and proposed contract wording for local legal and procurement review. Your team verifies the evidence and resolves open issues.

Use it with the relevant Move78 diagnostic path

Run the related free tool first if you want a diagnosis before using the artifact.

Considering an ACT evidence pack?

Tell us about your organisation, the AI use cases you are addressing and the governance evidence you need. Move78 will discuss scope, deliverables and commercial terms with you.

Frequently Asked Questions (FAQs)

Is this legal advice?

No. This free artifact is implementation support only. It is not legal, tax, regulatory, or certification advice and does not provide compliance assurance or safe-harbor outcomes.

Do I need to log in or submit an email?

No. This free artifact is a direct download with no login, email capture or paid prerequisite.

How does this relate to ACT?

Use this free pack to identify vendor evidence gaps. ACT includes supplier and subprocessor review records and proposed contract wording for local legal and procurement review. Your team verifies the evidence and resolves open issues.

Source review dates are stated in the relevant guides. It provides operational implementation guidance and product information only; it is not legal advice, tax advice, audit assurance, certification assurance, conformity-assessment advice, buyer-approval assurance, or security assurance. Validate legal, regulatory, contractual, tax, audit, and security decisions with qualified professionals.