For the risk, vendor or technology owner with an AI change to decide.
One vendor AI feature. One decision to review.
A vendor adds AI or changes data access. We assess the agreed records and recommend whether to proceed within limits, obtain evidence or defer.
Request a 20-minute scope callThe decision this review addresses
Can the institution allow, narrow or defer the changed feature on the evidence available?
A renewal, feature update or expanded data flow creates the trigger. The institution keeps its approval authority.
What the institution receives
- A one-page practitioner assessment, recommendation, reasons and conditions
- Source and version register with exact observation locators
- Changed claims, conflicting terms and unanswered questions
- Candidate links to earlier questions and decision conditions
- Evidence requests, accountable roles and review milestones
- One-page briefing and the complete portable supporting file
What to bring, and what we examine
Bring one feature, its earlier and current disclosure, relevant terms, the intended use and available control evidence. Include the decision and accountable reviewer.
We read the agreed records, assess conflicts and gaps, and recommend the next step with reasons and conditions. Your institution retains approval.
Keep confidential records out of the initial inquiry. The source-handling route must be agreed before delivery.
Follow a source change
A new disclosure adds free-text notes and default activation. The earlier disclosure remains in the file. The data-reach and shutdown questions return to review.
Try the local change workpaper. Read the full expert-review example.
Fee and timing
The written quote sets the review fee and any session charges. Timing follows the agreed document set and reviewer availability.
The scope names the reviewer, sources, customer preparation, sessions, correction allowance, acceptance terms and delivery milestones before work begins.
Questions about a vendor decision
What does a vendor-change review compare?
An earlier and current feature disclosure, the relevant terms, the use and data flow, and the earlier decision conditions.
Does the review test the vendor platform?
The document review identifies evidence needs. Any system access, configuration inspection or control test requires a separate authorized scope.
What happens when a vendor answer is incomplete?
The unanswered term stays visible. We assign the next evidence request and retain the condition that prevents a premature decision.
Keep the evidence current
After a baseline, an agreed supplied-change or quarterly review returns the affected queue and updated briefing. Earlier versions and unresolved conditions stay in the record.
Read the continuity scope. No automatic monitoring is included.