unified
UC-AI-14 — Manage responsible AI with suppliers and customers
Govern supplier relationships that provide AI systems, components, or data through a documented process that verifies supplier alignment with the organization's responsible-AI requirements. Ensure the organization's responsible development and use of AI considers customer needs and expectations, and provide customers with the information they need to use AI systems responsibly. Retain supplier evaluations and customer communications as evidence.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- domain
- AI Governance
- type
- preventive
- category
- administrative
Details
- unified_id
- UC-AI-14
- title
- Manage responsible AI with suppliers and customers
- statement
- Govern supplier relationships that provide AI systems, components, or data through a documented process that verifies supplier alignment with the organization's responsible-AI requirements. Ensure the organization's responsible development and use of AI considers customer needs and expectations, and provide customers with the information they need to use AI systems responsibly. Retain supplier evaluations and customer communications as evidence.
- domain
- AI Governance
- control_type
- preventive
- control_category
- administrative
- members
- framework
- iso-42001
- control_id
- A.10.3
- coverage
- full
- relationship
- superset_of
- framework
- iso-42001
- control_id
- A.10.4
- coverage
- full
- relationship
- superset_of
- framework
- aiuc-1
- control_id
- E006
- coverage
- partial
- delta
- assess foundation and upstream model providers against explicit data-handling, PII-control, security, and compliance criteria, and retain the due-diligence evidence
- relationship
- intersects_with
- guidance
Source
No record-specific source URL is provided.
Connections
- UC-AI-14 — Manage responsible AI with suppliers and customers mitigates Innovation shortfall and emerging-technology adoption risk
- strength
- related
- rationale
- Supplier-alignment governance mitigates the vendor lock-in and ethical-exposure the emerging-tech adoption risk names.
- UC-AI-14 — Manage responsible AI with suppliers and customers mitigates AI supply-chain compromise and provider concentration
- strength
- primary
- rationale
- Verifying supplier alignment and evaluating AI suppliers is the direct control against backdoored/compromised third-party models, data and provider concentration.
- AI Governance & Risk/Impact Assessment oversees UC-AI-14 — Manage responsible AI with suppliers and customers
- UC-AI-14 — Manage responsible AI with suppliers and customers maps_to A.10.4 — Customers
- framework
- iso-42001
- control_id
- A.10.4
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- 2023
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-AI-14 — Manage responsible AI with suppliers and customers maps_to A.10.3 — Suppliers
- framework
- iso-42001
- control_id
- A.10.3
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- 2023
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-AI-14 — Manage responsible AI with suppliers and customers mitigates Poor-quality, unrepresentative or mislabeled training data
- strength
- related
- rationale
- Governing supplier-provided data verifies its quality before it is used in models.
- AI Transparency & Value-Chain Communications operates UC-AI-14 — Manage responsible AI with suppliers and customers
- UC-AI-14 — Manage responsible AI with suppliers and customers mitigates Adversarial attacks, data poisoning and prompt injection
- strength
- related
- rationale
- Supplier vetting reduces backdoored or poisoned third-party models and components entering the pipeline.
- UC-AI-14 — Manage responsible AI with suppliers and customers maps_to E006 — Conduct vendor due diligence
- framework
- aiuc-1
- control_id
- E006
- coverage
- partial
- delta
- assess foundation and upstream model providers against explicit data-handling, PII-control, security, and compliance criteria, and retain the due-diligence evidence
- relationship
- intersects_with
- source_version
- July 15, 2026 release (quarterly update cadence)
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-AI-14 — Manage responsible AI with suppliers and customers mitigates AI accountability gaps and organizational liability
- strength
- related
- rationale
- Supplier evaluations and customer communications allocate and evidence responsibility across the relationship.
- ISO/IEC 42001 AI Management System Internal Audit tests UC-AI-14 — Manage responsible AI with suppliers and customers