Third-party AI system agreements
Description
Contracts with AI suppliers defining performance standards, security requirements, liability, audit rights, and responsible AI obligations.
Implementation Guidance
Contract Requirements
Include AI-specific clauses: performance SLAs (accuracy, latency, availability), fairness and bias commitments, data handling and privacy requirements, security controls and incident notification, intellectual property and model ownership, and right to audit.
Responsible AI Provisions
Require contractual commitments to: transparency about model changes, notification of training data modifications, bias testing results sharing, incident disclosure, and compliance with applicable AI regulations. Include remediation obligations for discovered bias or security vulnerabilities.
Exit and Transition
Include provisions for: data portability (extracting organizational data from supplier systems), model transition support, notice periods for service changes, and supplier's obligations during transition to alternative providers.
Evidence Requirements
- Contract templates with AI-specific clauses
- Executed agreements with AI suppliers
- SLA definitions and performance monitoring records
- Audit right exercise records