Platform
Manage AI vendor risk across every company you buy AI from
Aicura's AI vendor risk management keeps each supplier's contracts, due diligence and review dates beside the AI systems that depend on them. When a provider deprecates a model three of your systems run on, you see which three, and each one records what it will do about it.
Included in Pro and Enterprise. Compare plans
Vendors
Every AI supplier, with the facts that matter
Most AI in an organisation comes from someone else. The model provider, the software product with AI inside it, the integrator who built the agent. Aicura keeps those relationships next to the systems that depend on them.
Status, what they supply and when the next review is due
Each vendor record carries its status, what it supplies, its due diligence state and assessment, a relationship owner and the date its next review is due.
- Status as Prospective, Active, Suspended or Exited.
- Supplies as model provider, reseller, consultancy, cloud provider, SaaS product, data provider, integrator or other.
- Company linked to Aicura's company register, so a business that publishes models under one name and serves them under another is one record.
- Accounts your organisation holds with the vendor, such as an organisation or project ID. When your proxy or firewall logs reach a collector, a call from one of these accounts counts as sanctioned and a call from any other account shows as unknown.
A deployment pipeline can also ask Aicura whether it may use a vendor before it does, answered from the rules you published, and each answer appears on the vendor's page.
Know which contract is in force and what you spend against it
A vendor opens onto its contracts, with one in force at any moment. Each AI system in your register (a register entry) declares its share of the contract in force, and that contracted figure sits beside billed and observed spend on the system's monitoring page.
The vendors you have not recorded yet
Each register entry already names the company behind it. The Not registered list shows every company named there that has no vendor record. It is the list your team works down, and it reads "Every company the register names has a vendor record" when the work is done.
Know when a vendor retires a model you rely on
Aicura keeps two views of every model your systems run on. Lifecycle is where your organisation has put the model, such as approved. Provider status is what the vendor says about it. The two can disagree, and Aicura shows both side by side.
When an advisory (a notice published about a model) is raised against a model, every entry that uses it can record a response. The responses are Acknowledged, Replacing the model, Accepting it or Not applicable, each with a note and filed against the version of the entry in force.
Questions
Is this the same as Aicura's own vendor due diligence pack?
No. This area records the vendors your organisation buys AI from. If you are assessing Aicura itself as a vendor, the security, data handling and sub-processor material is on the Trust pages, including the vendor due diligence pack.
Does Aicura assess our vendors for us?
No. Each vendor record carries its due diligence state and the assessment behind it, and the AI Vendor Due Diligence Checklist template drafts the questions to ask. Your team does the assessing and records the outcome. A generated checklist is a first draft to review.
How do we find the AI vendors we have not recorded yet?
Every AI system in your Aicura register names the company that provides it. The Not registered list shows every company named there that has no vendor record yet, so your team can work down it until it is empty.
What happens when an AI vendor deprecates or changes a model?
Aicura keeps what the provider says about a model apart from your own approval of it, so a model you approved can show as deprecated by its provider. A notice published against a model reaches every system in your register that uses it, and each one records its response. Guardian, Aicura's automatic response to problems, can open a vendor review when a condition you set is met.
See every AI supplier, and what they change
Vendors are part of Pro. Contact us about the suppliers behind your AI.